Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/6a4b86-32b4-405f-bd65-68083709a4b5/1/TUknoUH7JbdYJMa-rvBnnTT8Sb0.mft
File: TUknoUH7JbdYJMa-rvBnnTT8Sb0.mft (raw, json)
Hash identifier: cCFmQp5fKh+wYrwQ5S3Uw4sFxTVxGfsuzAUXQFy9puk=
Subject key identifier: 19:65:58:3A:24:13:5F:04:79:C8:BE:04:9D:67:70:94:1D:9B:5B:53
Authority key identifier: 4D:49:27:A1:41:FB:25:B7:58:24:C6:BE:AE:F0:67:9D:34:FC:49:BD
Certificate issuer: /CN=4d4927a141fb25b75824c6beaef0679d34fc49bd
Certificate serial: 019872CF6C13F8F2C21F8C69744C5D1AA8F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TUknoUH7JbdYJMa-rvBnnTT8Sb0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/6a4b86-32b4-405f-bd65-68083709a4b5/1/TUknoUH7JbdYJMa-rvBnnTT8Sb0.mft
Manifest number: 030B
Signing time: Mon 04 Aug 2025 02:00:52 +0000
Manifest this update: Mon 04 Aug 2025 02:00:52 +0000
Manifest next update: Tue 05 Aug 2025 02:00:52 +0000
Files and hashes: 1: TUknoUH7JbdYJMa-rvBnnTT8Sb0.crl (hash: TBSXvT3+0ugJZnaXvXdEw9rr7FspB2RInwX6ZECyzcY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/6a4b86-32b4-405f-bd65-68083709a4b5/1/TUknoUH7JbdYJMa-rvBnnTT8Sb0.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/6a4b86-32b4-405f-bd65-68083709a4b5/1/TUknoUH7JbdYJMa-rvBnnTT8Sb0.mft
rsync://rpki.ripe.net/repository/DEFAULT/TUknoUH7JbdYJMa-rvBnnTT8Sb0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 02:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:72:cf:6c:13:f8:f2:c2:1f:8c:69:74:4c:5d:1a:a8:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d4927a141fb25b75824c6beaef0679d34fc49bd
Validity
Not Before: Aug 4 02:00:52 2025 GMT
Not After : Aug 5 02:00:52 2025 GMT
Subject: CN=1965583a24135f0479c8be049d6770941d9b5b53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:9a:1b:da:82:5c:d2:33:7a:45:e6:a7:05:ca:
cc:e0:0e:c2:ac:63:ec:87:9c:a0:76:9d:10:eb:de:
9b:87:fb:67:92:00:6e:2e:16:9b:1b:e3:b0:a3:b4:
54:01:2a:fe:ba:6c:99:00:0d:b8:e8:9a:e7:fe:fd:
df:a7:42:41:6b:7b:32:0d:28:2d:be:e0:f1:a8:58:
4c:83:3e:7f:fc:99:f2:de:91:02:f7:ae:a2:f4:f2:
e6:42:a7:3d:dd:25:2f:7c:74:a1:2b:62:ea:05:ba:
28:5e:25:88:29:55:ff:82:fc:c5:a0:c2:69:48:99:
4a:80:bc:bc:ad:58:44:20:05:5f:94:7d:f7:6c:e7:
f5:82:42:a5:1a:5f:5c:20:52:27:f1:71:70:63:31:
4a:a7:08:1c:55:0f:01:aa:53:5a:f3:d8:e9:73:aa:
1f:03:9c:26:40:67:cf:95:cb:c2:39:d1:28:06:92:
be:04:35:eb:ec:41:20:42:07:be:ea:91:6b:93:7e:
d8:68:64:56:23:7e:09:d3:52:be:43:5a:46:3a:38:
2e:4a:af:45:1a:ee:3a:b4:bf:16:88:9e:da:f0:e3:
0d:f7:cc:cc:32:a9:fc:ed:43:2e:11:db:d8:a9:c4:
99:58:44:e5:56:9c:46:cd:4d:7d:8e:ff:5a:53:35:
1c:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:65:58:3A:24:13:5F:04:79:C8:BE:04:9D:67:70:94:1D:9B:5B:53
X509v3 Authority Key Identifier:
keyid:4D:49:27:A1:41:FB:25:B7:58:24:C6:BE:AE:F0:67:9D:34:FC:49:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TUknoUH7JbdYJMa-rvBnnTT8Sb0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/6a4b86-32b4-405f-bd65-68083709a4b5/1/TUknoUH7JbdYJMa-rvBnnTT8Sb0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/6a4b86-32b4-405f-bd65-68083709a4b5/1/TUknoUH7JbdYJMa-rvBnnTT8Sb0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:8f:22:db:06:8b:42:9a:86:f3:cc:98:fe:6d:57:b9:89:7e:
c1:81:06:92:f4:5b:69:5f:4e:a5:f6:07:1a:a1:bd:30:a5:49:
43:61:73:ba:c6:cb:68:03:e0:63:5b:bf:c5:50:88:79:de:30:
cb:f1:46:ff:d2:76:48:77:b2:06:18:e1:59:2c:f6:0a:72:5c:
91:9e:f2:23:a9:4c:09:12:58:59:12:46:f6:0d:f6:9f:6d:5d:
2f:bc:5d:44:7e:5e:f4:6f:fb:49:42:b9:f1:29:34:e0:0a:80:
e4:f1:a7:65:eb:a8:17:4e:c6:63:c1:ed:83:dc:d7:73:81:e2:
c2:5d:9d:dc:d9:29:db:b5:a9:99:53:34:a6:c1:e1:34:10:5a:
77:72:b5:5e:54:ea:24:b7:af:fd:21:b8:c9:a2:81:0b:cc:ac:
fd:c9:f1:04:bd:6b:67:29:b9:50:ad:22:7b:d3:4d:ea:5d:68:
4b:da:1a:91:ca:10:49:7e:22:94:a1:b7:9e:a2:23:12:3b:7d:
78:57:34:55:be:0a:7a:59:7c:1d:fa:04:ac:cb:cc:d2:5f:ab:
97:ed:48:8e:c6:76:e9:21:2f:d9:9e:34:d4:f5:d2:b9:cf:89:
f4:6c:8c:97:f9:74:ee:10:98:0e:08:61:e5:fb:05:a4:73:7d:
95:0b:09:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:11:11 2025 by rpki-client