Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/e79d38-a8ea-47c2-95dc-d194a7b05dda/1/TM6YuMJCaF3bYPTiEJwr01GmQn8.mft
File: TM6YuMJCaF3bYPTiEJwr01GmQn8.mft (raw, json)
Hash identifier: ESplsfNc57oJyvbNFWGQeFn85utvmG1jNascr6uKxws=
Subject key identifier: 42:62:D5:79:27:70:93:BF:E1:B1:37:40:13:E7:EF:AE:C0:55:55:38
Authority key identifier: 4C:CE:98:B8:C2:42:68:5D:DB:60:F4:E2:10:9C:2B:D3:51:A6:42:7F
Certificate issuer: /CN=4cce98b8c242685ddb60f4e2109c2bd351a6427f
Certificate serial: 01987D8B2350DA28A3655198185EF9D78188
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TM6YuMJCaF3bYPTiEJwr01GmQn8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/e79d38-a8ea-47c2-95dc-d194a7b05dda/1/TM6YuMJCaF3bYPTiEJwr01GmQn8.mft
Manifest number: 161A
Signing time: Wed 06 Aug 2025 04:02:07 +0000
Manifest this update: Wed 06 Aug 2025 04:02:07 +0000
Manifest next update: Thu 07 Aug 2025 04:02:07 +0000
Files and hashes: 1: TM6YuMJCaF3bYPTiEJwr01GmQn8.crl (hash: P/c987Zu55aK+aGsXz4APoS7a7EmaxXW/VQjAtwqODc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/e79d38-a8ea-47c2-95dc-d194a7b05dda/1/TM6YuMJCaF3bYPTiEJwr01GmQn8.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/e79d38-a8ea-47c2-95dc-d194a7b05dda/1/TM6YuMJCaF3bYPTiEJwr01GmQn8.mft
rsync://rpki.ripe.net/repository/DEFAULT/TM6YuMJCaF3bYPTiEJwr01GmQn8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 04:02:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7d:8b:23:50:da:28:a3:65:51:98:18:5e:f9:d7:81:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4cce98b8c242685ddb60f4e2109c2bd351a6427f
Validity
Not Before: Aug 6 04:02:07 2025 GMT
Not After : Aug 7 04:02:07 2025 GMT
Subject: CN=4262d579277093bfe1b1374013e7efaec0555538
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:71:58:07:39:01:58:8c:42:35:39:33:79:c7:
36:69:ab:69:84:57:66:e1:4b:97:e4:38:e0:16:3e:
41:a7:1e:b5:e4:64:51:36:c5:4b:2a:96:3c:0a:1f:
cc:c8:be:1a:70:6d:2d:f7:7a:29:72:fe:b4:da:8c:
c0:cd:75:f4:1f:57:86:53:bf:5f:4b:ac:28:9b:ed:
2a:0a:7c:d1:63:82:f1:a7:46:14:e6:cb:48:66:9c:
56:d9:6a:f3:8e:5a:2d:3c:3a:ca:cb:54:35:bc:23:
b0:ec:75:37:f2:e3:70:f9:8f:43:58:7d:20:b9:72:
2c:da:a9:a6:12:da:b3:50:0d:0f:6a:87:db:85:e0:
4b:8c:f6:88:ef:1f:8d:95:9b:ae:f9:a7:d8:1e:e3:
8e:f1:0b:b9:be:90:02:41:17:34:ab:a0:5a:18:af:
82:c1:5e:ed:e0:38:16:d6:00:10:6c:d3:a5:63:68:
87:75:f6:35:9f:13:df:f3:85:a3:9a:bb:08:a4:1f:
e5:56:90:ab:6d:84:a3:cd:06:7b:92:bb:8e:58:82:
0e:31:79:ed:18:17:5b:b5:17:a3:a4:56:cc:0e:b1:
d8:12:5b:51:17:90:65:e2:89:40:6f:cd:ba:9f:c6:
54:f9:4e:d9:f0:1f:2a:9f:70:12:20:5f:9c:8c:76:
02:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:62:D5:79:27:70:93:BF:E1:B1:37:40:13:E7:EF:AE:C0:55:55:38
X509v3 Authority Key Identifier:
keyid:4C:CE:98:B8:C2:42:68:5D:DB:60:F4:E2:10:9C:2B:D3:51:A6:42:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TM6YuMJCaF3bYPTiEJwr01GmQn8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/e79d38-a8ea-47c2-95dc-d194a7b05dda/1/TM6YuMJCaF3bYPTiEJwr01GmQn8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/e79d38-a8ea-47c2-95dc-d194a7b05dda/1/TM6YuMJCaF3bYPTiEJwr01GmQn8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:28:a9:45:ff:57:de:01:cb:68:b7:39:28:4f:77:b9:f7:ce:
59:95:a2:ac:e3:95:f7:df:96:de:63:d2:30:71:4e:34:3a:b3:
cd:a0:b2:23:90:b1:ba:66:df:55:f0:ed:b0:05:e1:29:f8:82:
e3:bb:7d:b6:0c:ef:8a:3f:0e:82:97:1a:93:94:9e:8c:c1:9f:
3c:8f:d7:0a:39:3d:b2:52:3a:5f:de:b7:ec:4d:fb:b4:1c:44:
db:87:c3:12:cb:59:4f:0b:72:83:f6:9d:20:6e:96:b0:11:0d:
9c:50:2a:37:5e:0d:03:5f:da:78:5f:4d:45:fb:a4:16:71:54:
6a:8f:6c:35:9d:5e:85:0d:9f:58:4c:dd:e3:e6:c0:56:4e:b7:
e2:25:c3:fa:e8:c0:a2:03:87:4e:16:ea:7d:69:0a:e4:55:10:
ce:1c:95:3a:39:34:5e:f6:2f:65:47:f2:0e:26:27:a0:44:94:
da:42:0e:21:fd:d8:1e:a6:ff:14:1b:72:99:6f:88:d6:d0:37:
a1:61:ed:3c:53:46:41:23:00:51:b0:7f:e8:cd:05:6c:4a:92:
8c:85:26:9f:8b:0e:0d:f8:04:62:94:69:b6:2d:7e:b5:e7:4c:
ff:c5:a1:d6:c9:df:98:7f:c0:30:9f:6c:c4:12:3d:01:6a:c1:
fd:c5:5c:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 13:16:18 2025 by rpki-client