Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/e703c8-465f-47a5-952c-495e188701b6/1/tTmDGDXIfHUB9sN8tI5gp5WjlLs.mft
File: tTmDGDXIfHUB9sN8tI5gp5WjlLs.mft (raw, json)
Hash identifier: lTdhR/Ul1/JbsVUoHGiT6QavC/svpcYwNHDL3MseJTo=
Subject key identifier: 66:DC:17:EE:E0:4C:A0:4A:9B:6F:22:A7:20:37:4B:CE:40:7F:C7:36
Authority key identifier: B5:39:83:18:35:C8:7C:75:01:F6:C3:7C:B4:8E:60:A7:95:A3:94:BB
Certificate issuer: /CN=b539831835c87c7501f6c37cb48e60a795a394bb
Certificate serial: 01988167AD11493542101C484B171C6D65E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tTmDGDXIfHUB9sN8tI5gp5WjlLs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/e703c8-465f-47a5-952c-495e188701b6/1/tTmDGDXIfHUB9sN8tI5gp5WjlLs.mft
Manifest number: 161D
Signing time: Wed 06 Aug 2025 22:01:51 +0000
Manifest this update: Wed 06 Aug 2025 22:01:51 +0000
Manifest next update: Thu 07 Aug 2025 22:01:51 +0000
Files and hashes: 1: tTmDGDXIfHUB9sN8tI5gp5WjlLs.crl (hash: NwWhnMHQ0uSnybWHuTeld2A1aLrIQpgKXJpVimNq/bI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/e703c8-465f-47a5-952c-495e188701b6/1/tTmDGDXIfHUB9sN8tI5gp5WjlLs.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/e703c8-465f-47a5-952c-495e188701b6/1/tTmDGDXIfHUB9sN8tI5gp5WjlLs.mft
rsync://rpki.ripe.net/repository/DEFAULT/tTmDGDXIfHUB9sN8tI5gp5WjlLs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 22:01:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:81:67:ad:11:49:35:42:10:1c:48:4b:17:1c:6d:65:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b539831835c87c7501f6c37cb48e60a795a394bb
Validity
Not Before: Aug 6 22:01:51 2025 GMT
Not After : Aug 7 22:01:51 2025 GMT
Subject: CN=66dc17eee04ca04a9b6f22a720374bce407fc736
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:c4:45:9e:6b:e0:e1:12:d0:c5:e0:83:ca:4d:
fa:94:ae:5c:37:09:3d:ce:cb:06:1e:4b:a4:a1:d3:
69:3a:ee:04:fa:e5:1d:db:6b:be:19:d8:bd:b0:fa:
ac:58:6d:c4:45:93:33:74:4c:b7:13:91:40:7a:b3:
5d:1a:6f:13:8d:30:52:d4:78:86:6e:8d:e7:29:26:
bf:2f:4a:41:08:44:29:b4:b1:26:d0:1c:a6:c4:f6:
05:dd:da:2b:12:b4:a0:b7:ec:7e:73:d4:3e:f7:6f:
0a:6d:2c:23:9a:e8:5f:37:b0:a4:da:c2:a3:67:f3:
b2:26:a4:08:ea:51:a1:25:ca:d7:75:81:ef:42:18:
3e:53:11:8b:b1:4e:41:5b:34:e9:ad:d8:45:32:9b:
23:da:8e:dc:7d:09:70:1a:00:82:f8:ec:42:9f:04:
51:e3:6c:07:82:46:4c:fe:54:a1:20:1d:d9:f5:b6:
53:7a:d3:cc:a7:1a:0e:5e:5e:59:72:84:6d:8f:5b:
b9:e8:8a:0f:82:7b:67:51:c3:b6:f2:ed:21:fb:f8:
e6:70:8f:82:e0:ff:08:83:6f:17:6e:e4:6b:30:c1:
ef:10:a0:7e:4b:c4:d6:21:97:57:41:07:d5:e8:d0:
c3:bd:34:b0:9e:a1:f2:8b:53:a6:d7:02:d2:1e:4c:
0d:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:DC:17:EE:E0:4C:A0:4A:9B:6F:22:A7:20:37:4B:CE:40:7F:C7:36
X509v3 Authority Key Identifier:
keyid:B5:39:83:18:35:C8:7C:75:01:F6:C3:7C:B4:8E:60:A7:95:A3:94:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tTmDGDXIfHUB9sN8tI5gp5WjlLs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/e703c8-465f-47a5-952c-495e188701b6/1/tTmDGDXIfHUB9sN8tI5gp5WjlLs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/e703c8-465f-47a5-952c-495e188701b6/1/tTmDGDXIfHUB9sN8tI5gp5WjlLs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:12:e7:ee:39:6d:51:da:c4:69:64:6f:b9:01:e8:c6:c7:09:
93:a2:58:bf:35:33:55:54:1d:3e:a2:9a:09:8d:d7:a9:4c:96:
e7:4b:92:96:06:54:ad:80:9c:22:08:1c:a6:a9:73:15:81:34:
d8:5c:3d:00:35:06:bc:de:d5:45:79:90:f7:6d:b0:d1:30:d0:
02:14:55:00:d9:92:04:ed:73:29:1f:a3:74:86:cf:16:91:cc:
c6:43:06:bf:90:bd:f6:22:a6:4f:3b:6f:11:37:ba:ab:25:9f:
59:ae:56:1a:54:3a:ca:fc:1e:07:cf:5a:de:a4:ca:92:74:95:
f6:32:9d:16:9e:be:20:ea:eb:cd:c6:22:c1:2b:84:6c:59:7d:
63:72:5a:d9:49:f0:f9:68:fc:ad:f2:31:39:cc:a9:81:42:32:
41:81:ce:d6:21:98:0d:f9:4a:1c:4b:e6:f0:f6:36:d6:6c:5e:
e4:8f:6e:d6:c4:ef:b6:08:db:d2:5e:23:d6:7c:7a:0f:20:49:
7f:80:d5:41:dd:72:89:c7:f3:7f:2d:f0:03:5c:63:85:0c:4b:
17:e8:00:2e:5d:e2:27:b7:a6:49:14:a7:6a:96:f7:55:b9:c5:
13:ff:70:f1:2d:a8:31:e0:cb:ee:f4:ce:c7:3c:3a:6d:ff:bf:
a2:7f:fe:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 07:17:21 2025 by rpki-client