Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/76d6f1-7ffb-4301-9310-160cde88ed3f/1/TO1MeGdCnuAvXNwa--qlunEzYAg.mft
File: TO1MeGdCnuAvXNwa--qlunEzYAg.mft (raw, json)
Hash identifier: qnShuO4CHp6NBqM9dstdkEoU4B5uYot7M3WRJpC4TO4=
Subject key identifier: 1C:FA:FB:9F:4D:C2:AA:36:44:6A:9F:D5:23:BF:2B:65:94:1D:F0:03
Authority key identifier: 4C:ED:4C:78:67:42:9E:E0:2F:5C:DC:1A:FB:EA:A5:BA:71:33:60:08
Certificate issuer: /CN=4ced4c7867429ee02f5cdc1afbeaa5ba71336008
Certificate serial: 01987B9D805FA3F64D6DAF0458B0F64A4CD1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TO1MeGdCnuAvXNwa--qlunEzYAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/76d6f1-7ffb-4301-9310-160cde88ed3f/1/TO1MeGdCnuAvXNwa--qlunEzYAg.mft
Manifest number: 1617
Signing time: Tue 05 Aug 2025 19:02:56 +0000
Manifest this update: Tue 05 Aug 2025 19:02:56 +0000
Manifest next update: Wed 06 Aug 2025 19:02:56 +0000
Files and hashes: 1: TO1MeGdCnuAvXNwa--qlunEzYAg.crl (hash: 2X5v1aC/KF1xNu1xIAr2FYm0vwoVgGVUZaZLOm5g6ps=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/76d6f1-7ffb-4301-9310-160cde88ed3f/1/TO1MeGdCnuAvXNwa--qlunEzYAg.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/76d6f1-7ffb-4301-9310-160cde88ed3f/1/TO1MeGdCnuAvXNwa--qlunEzYAg.mft
rsync://rpki.ripe.net/repository/DEFAULT/TO1MeGdCnuAvXNwa--qlunEzYAg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 19:02:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7b:9d:80:5f:a3:f6:4d:6d:af:04:58:b0:f6:4a:4c:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ced4c7867429ee02f5cdc1afbeaa5ba71336008
Validity
Not Before: Aug 5 19:02:56 2025 GMT
Not After : Aug 6 19:02:56 2025 GMT
Subject: CN=1cfafb9f4dc2aa36446a9fd523bf2b65941df003
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:6b:b4:08:89:f5:81:51:36:51:90:0e:38:e6:
64:1d:a2:04:05:9c:6c:19:24:38:3f:f3:03:3b:42:
54:49:09:fd:5b:06:9a:f2:3f:a5:c5:03:ea:3f:e1:
b7:b1:79:92:5e:6b:a6:5d:00:0e:b4:19:4d:21:9c:
1c:a3:41:55:a3:43:ca:69:a5:f4:a7:ca:6a:8b:26:
11:b9:99:b4:8b:66:00:30:51:2f:b8:2c:57:bd:75:
ea:42:fa:ca:5c:ad:71:51:c2:4c:72:d2:df:74:f6:
21:52:3d:ed:c8:89:fc:e9:89:88:bd:af:00:db:e4:
c7:a9:79:38:e8:61:bd:fb:13:96:ec:a4:bf:37:c3:
9f:d7:e3:1f:6e:97:e4:83:93:d3:64:0f:0c:6b:1a:
b4:0c:c2:8d:dc:b5:ca:c2:41:b1:01:5d:95:44:a6:
bd:ba:ca:4d:a4:be:56:42:83:d6:44:b6:17:80:c4:
89:d3:1c:3f:13:7c:70:61:ed:c8:04:66:bd:a1:85:
3e:dc:b3:c0:35:96:c4:0e:30:f0:ef:76:d4:71:b5:
52:03:9f:dc:e7:5a:27:f5:79:e0:64:36:b0:58:8d:
da:d6:06:eb:f0:ef:91:db:74:4a:ce:a0:b9:9e:c8:
4d:0a:c3:6b:a4:44:cb:7c:52:c6:cb:5f:60:50:03:
5e:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:FA:FB:9F:4D:C2:AA:36:44:6A:9F:D5:23:BF:2B:65:94:1D:F0:03
X509v3 Authority Key Identifier:
keyid:4C:ED:4C:78:67:42:9E:E0:2F:5C:DC:1A:FB:EA:A5:BA:71:33:60:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TO1MeGdCnuAvXNwa--qlunEzYAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/76d6f1-7ffb-4301-9310-160cde88ed3f/1/TO1MeGdCnuAvXNwa--qlunEzYAg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/76d6f1-7ffb-4301-9310-160cde88ed3f/1/TO1MeGdCnuAvXNwa--qlunEzYAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:36:f8:ba:6f:22:aa:81:ce:c5:8c:37:7b:62:1a:15:95:fb:
62:2e:cb:44:af:71:ca:ca:ea:e9:1e:8c:cf:1d:af:5e:87:a8:
ae:68:bc:72:95:62:a0:cf:4b:e9:6a:9e:0f:22:8a:2c:bd:45:
9b:99:6f:68:eb:fc:9c:63:57:8d:ab:a6:1c:95:d8:e5:19:08:
90:61:7d:fa:09:ab:92:bd:ca:a4:ae:1d:dd:20:c1:fa:36:90:
54:e8:35:67:2e:28:a2:9b:c3:80:10:54:db:a5:44:20:04:56:
60:1c:ac:71:15:4c:49:f0:bc:54:ce:de:0f:86:cc:d1:28:6d:
f8:40:ee:52:6b:64:8a:05:d7:53:13:de:ef:af:d5:43:82:90:
f6:b2:cb:1f:1d:6f:46:a5:19:41:0f:83:5a:7c:40:81:79:eb:
09:95:f8:1d:d1:c3:f4:b5:19:ec:e8:62:95:37:16:14:bc:ea:
40:d9:9d:9d:4d:f2:d9:20:46:29:51:c8:88:f9:42:fe:65:6b:
d3:1f:52:62:a6:29:64:e8:54:7f:e9:a4:9b:7c:95:70:0c:e1:
47:f2:67:27:ff:08:c3:96:af:4a:66:e1:9d:16:6d:03:1c:df:
29:ba:ad:55:00:a1:56:37:69:23:42:5b:37:4f:c3:f2:62:ec:
05:f4:f2:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 05:57:43 2025 by rpki-client