Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/69e7fe-40c0-45c2-b2b1-b72d7adbfb96/1/Tle6dst9bSrsBSA89BuOZxbufqA.mft
File: Tle6dst9bSrsBSA89BuOZxbufqA.mft (raw, json)
Hash identifier: KaC3GSap4YQE/RPNTukSm2DajsZXPyEF4YZ8P9ItSUQ=
Subject key identifier: 6E:2A:09:E7:DF:90:8C:9A:01:01:54:98:A1:DC:90:16:80:E5:B4:B0
Authority key identifier: 4E:57:BA:76:CB:7D:6D:2A:EC:05:20:3C:F4:1B:8E:67:16:EE:7E:A0
Certificate issuer: /CN=4e57ba76cb7d6d2aec05203cf41b8e6716ee7ea0
Certificate serial: 019883555E2771098345ECBC5EC29D6865DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tle6dst9bSrsBSA89BuOZxbufqA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/69e7fe-40c0-45c2-b2b1-b72d7adbfb96/1/Tle6dst9bSrsBSA89BuOZxbufqA.mft
Manifest number: 0F44
Signing time: Thu 07 Aug 2025 07:01:06 +0000
Manifest this update: Thu 07 Aug 2025 07:01:06 +0000
Manifest next update: Fri 08 Aug 2025 07:01:06 +0000
Files and hashes: 1: Tle6dst9bSrsBSA89BuOZxbufqA.crl (hash: YcO1UUzbQvE8RHNLTERcdLg8Q0+LiGPVWqquwNNRv+Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/69e7fe-40c0-45c2-b2b1-b72d7adbfb96/1/Tle6dst9bSrsBSA89BuOZxbufqA.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/69e7fe-40c0-45c2-b2b1-b72d7adbfb96/1/Tle6dst9bSrsBSA89BuOZxbufqA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Tle6dst9bSrsBSA89BuOZxbufqA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 08 Aug 2025 07:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:83:55:5e:27:71:09:83:45:ec:bc:5e:c2:9d:68:65:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e57ba76cb7d6d2aec05203cf41b8e6716ee7ea0
Validity
Not Before: Aug 7 07:01:06 2025 GMT
Not After : Aug 8 07:01:06 2025 GMT
Subject: CN=6e2a09e7df908c9a01015498a1dc901680e5b4b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:82:2d:00:8b:e0:c7:ab:b7:62:b3:59:86:34:
40:c4:a3:42:e4:15:93:39:a1:2d:e8:45:ee:4a:f7:
48:f3:8b:ee:a4:0d:dc:cc:88:6d:60:9f:3f:02:ee:
96:a8:83:8a:b9:e4:8f:14:08:2d:0f:dd:35:ea:93:
7c:f5:84:28:44:62:3c:ee:9f:6d:96:83:95:3c:8e:
1f:e8:66:b5:7a:f4:bb:60:a0:37:f2:76:0b:c0:4a:
ce:fd:86:4e:9a:01:5c:15:9f:eb:0f:e2:a3:dc:c6:
80:a1:a5:8d:7e:42:32:1d:fa:05:1f:ae:17:a2:14:
32:41:92:f9:52:6c:66:00:f5:f2:e6:98:98:68:25:
c6:1d:45:2d:cd:07:54:0d:f5:91:02:ee:65:ce:69:
1c:91:12:bf:80:b0:97:b2:90:54:68:6b:36:92:b5:
9c:a4:50:13:02:a2:9c:73:68:24:52:e9:19:6d:a5:
c3:95:82:32:a0:34:fe:33:6e:af:71:e6:df:e0:19:
fa:cc:8f:53:cd:cd:e7:43:7b:b0:ca:d6:32:f5:ab:
93:81:3f:47:38:76:58:5b:3f:a3:4a:de:b9:69:c0:
ba:de:2e:78:1a:76:42:64:b3:59:c8:7b:f8:19:9c:
50:fa:cf:34:a4:ce:17:64:85:02:ab:71:73:02:df:
46:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:2A:09:E7:DF:90:8C:9A:01:01:54:98:A1:DC:90:16:80:E5:B4:B0
X509v3 Authority Key Identifier:
keyid:4E:57:BA:76:CB:7D:6D:2A:EC:05:20:3C:F4:1B:8E:67:16:EE:7E:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tle6dst9bSrsBSA89BuOZxbufqA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/69e7fe-40c0-45c2-b2b1-b72d7adbfb96/1/Tle6dst9bSrsBSA89BuOZxbufqA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/69e7fe-40c0-45c2-b2b1-b72d7adbfb96/1/Tle6dst9bSrsBSA89BuOZxbufqA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:f0:ee:53:9d:73:fd:7b:87:6a:90:29:94:4e:19:76:d0:5b:
c9:5c:a4:62:6b:29:7e:9c:0b:cf:19:35:46:ca:53:ed:4b:47:
57:95:86:e3:01:94:16:39:32:69:43:e3:c8:8f:84:7e:65:40:
03:e0:64:99:d3:a6:3d:81:78:ab:89:a2:22:3c:70:11:49:89:
51:08:73:eb:9b:f0:e4:8f:16:99:ba:42:5d:8e:4e:18:c9:d5:
c6:1a:bf:74:75:18:a4:3c:e7:ec:1d:d9:1e:ff:e0:c2:ee:fe:
87:19:ee:8d:e3:d3:ec:58:e2:a3:37:95:f6:e3:a4:66:b0:43:
db:96:d3:c6:aa:04:6b:b5:1a:18:20:fe:4c:92:32:39:f6:70:
39:05:0e:54:21:a8:62:fe:42:2b:51:69:b0:1e:f1:4c:8f:99:
9b:49:2b:45:b5:da:c4:0a:a8:fa:7a:3d:ee:d3:1d:93:46:5a:
c6:6b:7d:79:3c:cd:ef:70:6d:94:c7:a7:9f:7f:7a:dc:d6:d3:
98:97:8b:30:1f:34:fc:a4:9a:80:1b:12:f7:80:33:7f:c3:82:
46:67:8e:b5:ff:32:a4:8a:62:ed:61:a4:fe:16:b1:c9:bc:8f:
ca:5c:d8:2f:62:6f:95:6a:61:4c:c5:ac:02:db:6b:69:e7:27:
29:72:b2:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 14:33:26 2025 by rpki-client