Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/e71c9c-f589-476c-b080-c01db9d53479/1/TJ2SOjtDQWlZV2vLQAQWylz2Bg0.mft
File: TJ2SOjtDQWlZV2vLQAQWylz2Bg0.mft (raw, json)
Hash identifier: ykW8JsD5kmzEcsRe+ZLwRGiceTmNT++h7+8uGQc87NQ=
Subject key identifier: 8E:66:71:03:E7:0F:D4:4A:4B:6C:6F:15:8A:E6:5D:A7:FF:F9:06:77
Authority key identifier: 4C:9D:92:3A:3B:43:41:69:59:57:6B:CB:40:04:16:CA:5C:F6:06:0D
Certificate issuer: /CN=4c9d923a3b43416959576bcb400416ca5cf6060d
Certificate serial: 019873E20FCF6429190B1B2651FF0ABFCF1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TJ2SOjtDQWlZV2vLQAQWylz2Bg0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/e71c9c-f589-476c-b080-c01db9d53479/1/TJ2SOjtDQWlZV2vLQAQWylz2Bg0.mft
Manifest number: 0787
Signing time: Mon 04 Aug 2025 07:00:51 +0000
Manifest this update: Mon 04 Aug 2025 07:00:51 +0000
Manifest next update: Tue 05 Aug 2025 07:00:51 +0000
Files and hashes: 1: TJ2SOjtDQWlZV2vLQAQWylz2Bg0.crl (hash: PBbGu0vCrWbTsAo95DSI7RL1mIT3IUtxFg3vAZA9F/0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/e71c9c-f589-476c-b080-c01db9d53479/1/TJ2SOjtDQWlZV2vLQAQWylz2Bg0.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/e71c9c-f589-476c-b080-c01db9d53479/1/TJ2SOjtDQWlZV2vLQAQWylz2Bg0.mft
rsync://rpki.ripe.net/repository/DEFAULT/TJ2SOjtDQWlZV2vLQAQWylz2Bg0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e2:0f:cf:64:29:19:0b:1b:26:51:ff:0a:bf:cf:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c9d923a3b43416959576bcb400416ca5cf6060d
Validity
Not Before: Aug 4 07:00:51 2025 GMT
Not After : Aug 5 07:00:51 2025 GMT
Subject: CN=8e667103e70fd44a4b6c6f158ae65da7fff90677
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:da:82:7b:86:b5:34:95:c1:b8:bb:e2:48:4d:
d0:f9:6c:c7:de:e8:68:c7:22:f4:31:fe:fb:ad:ad:
aa:1a:a2:90:b4:a1:45:cd:f5:4c:f5:69:73:1f:33:
3f:78:a1:b9:29:6b:3d:b9:b3:e7:fb:b4:71:65:3d:
16:01:13:d7:e0:f0:ad:35:14:22:9e:4e:10:49:21:
4a:e3:5d:f0:41:7d:28:34:e0:8a:61:4c:ab:ef:a4:
8a:3d:f7:d8:41:ab:c3:cf:68:f9:94:cf:94:59:10:
1f:27:eb:83:60:e6:f6:8a:bc:a4:15:02:a5:2b:3e:
b6:cd:ca:1c:d3:91:c9:34:db:ed:77:41:f7:55:64:
41:37:e1:93:05:d8:0f:e7:ce:c5:72:74:c8:e6:6f:
19:ee:78:9b:e0:eb:82:02:c7:f7:34:18:2e:25:71:
10:84:27:a9:55:23:ae:18:ec:e8:da:af:7e:d6:3e:
9a:00:da:c9:2c:77:f3:2e:2b:23:bc:ce:1b:f0:c0:
c2:6f:47:2a:b7:56:44:8a:96:60:80:fa:92:75:bc:
95:7b:d8:35:54:08:35:3f:3d:dd:be:09:d8:07:34:
90:63:3b:47:dc:02:32:25:17:dc:ce:14:57:c2:5c:
fd:05:90:f1:e8:d3:74:4b:db:61:70:55:26:d2:a8:
90:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:66:71:03:E7:0F:D4:4A:4B:6C:6F:15:8A:E6:5D:A7:FF:F9:06:77
X509v3 Authority Key Identifier:
keyid:4C:9D:92:3A:3B:43:41:69:59:57:6B:CB:40:04:16:CA:5C:F6:06:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TJ2SOjtDQWlZV2vLQAQWylz2Bg0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/e71c9c-f589-476c-b080-c01db9d53479/1/TJ2SOjtDQWlZV2vLQAQWylz2Bg0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/e71c9c-f589-476c-b080-c01db9d53479/1/TJ2SOjtDQWlZV2vLQAQWylz2Bg0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:39:1c:0b:72:23:b1:1c:88:aa:33:ce:d5:70:9b:46:3a:df:
c8:d7:0c:23:63:2a:cd:4d:23:17:c4:9f:6b:f4:12:da:53:65:
a4:f3:98:71:90:fe:a7:01:4a:de:af:01:f9:df:de:18:02:85:
ab:8a:ef:e1:24:a8:d9:10:1a:db:ec:ad:4f:1e:5f:69:6c:d9:
53:70:c1:4a:4f:02:c3:6f:b5:30:95:98:51:ca:25:3c:3c:ac:
6e:c9:d7:1c:eb:c9:01:2f:af:69:8e:10:47:3b:a9:54:e6:f1:
7b:cf:cf:34:fb:d3:9d:37:c2:88:5d:fe:ef:92:7f:74:03:ef:
26:31:9c:3d:04:8d:36:1d:35:f7:a3:5e:a3:44:70:35:a7:c5:
79:8c:97:a6:66:62:33:39:46:e6:3f:31:1b:ed:de:37:9d:af:
82:b8:66:a2:47:d0:36:e6:f6:d1:77:c8:08:c2:ae:d1:35:5c:
2a:53:d6:c3:20:30:45:ad:73:4f:76:81:b2:8e:d8:52:dd:87:
25:54:2f:61:33:02:9a:ba:71:4c:16:c4:9b:bd:e6:b1:f4:25:
29:06:f2:fe:d2:f7:75:51:31:f3:1f:f6:41:75:22:d6:69:ca:
05:be:e2:16:4a:c6:e8:44:0c:59:54:97:fb:7e:16:cd:fa:03:
45:ac:89:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:17:08 2025 by rpki-client