
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/343892-780c-432a-882f-1e0d7c42da76/1/TLkyvGDp_RGG-Ppr1xPCBymuc-4.mft
File: TLkyvGDp_RGG-Ppr1xPCBymuc-4.mft (raw, json)
Hash identifier: V5OLLYix9bHu4EFHeGPF1eCK5+urZ9v1CPAZcdyv+nc=
Subject key identifier: E0:20:ED:63:0D:B3:35:D9:61:AF:81:30:FB:B8:88:ED:24:DD:A3:62
Authority key identifier: 4C:B9:32:BC:60:E9:FD:11:86:F8:FA:6B:D7:13:C2:07:29:AE:73:EE
Certificate issuer: /CN=4cb932bc60e9fd1186f8fa6bd713c20729ae73ee
Certificate serial: 019874BE6363AF5D66F643FB4F2CEEFBF812
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TLkyvGDp_RGG-Ppr1xPCBymuc-4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/343892-780c-432a-882f-1e0d7c42da76/1/TLkyvGDp_RGG-Ppr1xPCBymuc-4.mft
Manifest number: 11CC
Signing time: Mon 04 Aug 2025 11:01:30 +0000
Manifest this update: Mon 04 Aug 2025 11:01:30 +0000
Manifest next update: Tue 05 Aug 2025 11:01:30 +0000
Files and hashes: 1: TLkyvGDp_RGG-Ppr1xPCBymuc-4.crl (hash: yIGhz7OeIGqXge38YdLv9Ln3QOPbRuw6uoj8dY+YwcQ=)
2: j-betU5F3fuYYNREFl5I-_t74ng.roa (hash: ThVTYZ7pBXxFoxAK1y8K2Bay/CDdSEmxPkT01D83Maw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/343892-780c-432a-882f-1e0d7c42da76/1/TLkyvGDp_RGG-Ppr1xPCBymuc-4.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/343892-780c-432a-882f-1e0d7c42da76/1/TLkyvGDp_RGG-Ppr1xPCBymuc-4.mft
rsync://rpki.ripe.net/repository/DEFAULT/TLkyvGDp_RGG-Ppr1xPCBymuc-4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 11:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:be:63:63:af:5d:66:f6:43:fb:4f:2c:ee:fb:f8:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4cb932bc60e9fd1186f8fa6bd713c20729ae73ee
Validity
Not Before: Aug 4 11:01:30 2025 GMT
Not After : Aug 5 11:01:30 2025 GMT
Subject: CN=e020ed630db335d961af8130fbb888ed24dda362
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:1b:eb:52:cb:ed:18:42:84:23:21:cf:6f:b4:
af:85:26:83:ab:2e:55:98:47:50:09:03:b1:cf:68:
3e:4d:c7:d0:6f:8e:53:b9:f5:95:c9:45:e8:7b:f1:
95:29:cc:68:4f:c2:4a:90:b5:82:0c:e7:50:57:f6:
51:1f:29:3e:24:c2:65:2a:98:d6:e5:55:b9:7c:02:
bc:59:3e:16:53:a2:16:64:73:49:92:d1:d1:cb:28:
61:b6:fb:6e:ce:52:19:6e:2d:43:9c:b4:85:b5:0c:
77:a5:22:bd:ba:fd:85:ba:bf:13:39:88:d0:ef:f7:
85:64:5c:71:fb:fd:0a:59:68:e7:23:af:f2:85:45:
d8:32:19:ee:28:9a:b3:4d:11:4d:03:4f:3d:b8:0c:
b9:87:41:9d:a1:79:b1:50:86:a6:4c:7e:44:ba:02:
eb:7d:77:06:c1:b5:f6:b7:4f:ef:c2:a8:62:3d:f1:
73:38:7f:99:b9:03:5b:b4:64:34:89:7e:c9:73:5d:
6b:cf:58:a1:96:0f:ab:49:61:b7:9c:9d:18:c0:ad:
25:7e:72:dc:16:99:24:86:b4:0d:49:0a:13:8c:25:
26:a6:6e:64:8e:bb:bb:08:27:ba:b4:1b:c1:63:8a:
18:01:63:d2:2e:dc:09:01:5f:aa:a7:ec:e9:cc:82:
c8:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:20:ED:63:0D:B3:35:D9:61:AF:81:30:FB:B8:88:ED:24:DD:A3:62
X509v3 Authority Key Identifier:
keyid:4C:B9:32:BC:60:E9:FD:11:86:F8:FA:6B:D7:13:C2:07:29:AE:73:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TLkyvGDp_RGG-Ppr1xPCBymuc-4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/343892-780c-432a-882f-1e0d7c42da76/1/TLkyvGDp_RGG-Ppr1xPCBymuc-4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/343892-780c-432a-882f-1e0d7c42da76/1/TLkyvGDp_RGG-Ppr1xPCBymuc-4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:bd:8f:af:3a:3b:7b:5c:c8:09:35:52:9b:7c:a5:6e:0f:5f:
d7:ae:fa:5d:95:d8:94:75:79:43:03:d2:89:78:74:38:0e:de:
f3:7d:07:30:92:f7:c1:c9:20:e6:bd:78:39:84:ca:c0:cf:6b:
d6:83:9b:af:a4:e2:57:d8:56:50:e4:b1:8b:08:2e:5a:04:57:
dd:4f:2c:bd:d4:7c:d0:2c:24:e4:42:f1:7e:ca:49:8c:3c:54:
63:a6:6e:54:93:1a:06:ff:a7:8c:48:f7:65:7e:a2:b8:42:c3:
36:40:f6:e2:71:91:db:4e:73:13:65:08:2c:da:8f:d3:23:4f:
63:32:6b:d6:f6:fe:53:19:c0:51:cf:25:37:59:a9:2d:88:9c:
31:6f:88:75:ba:1f:aa:9d:7f:fa:f5:eb:45:b1:4f:0f:17:46:
9b:93:5c:fd:de:8c:ad:6f:ad:76:76:e1:81:e0:e8:78:04:a2:
25:0d:6b:48:40:9e:8c:67:17:24:01:94:46:ae:f7:95:05:71:
4b:ba:74:53:e8:5f:de:d6:98:ae:65:f7:d3:85:6e:72:03:83:
53:1c:57:37:ab:66:31:45:d5:79:1c:5d:01:e2:fd:3a:b9:9c:
34:0b:4f:a7:a7:a2:b2:22:d5:c6:3c:ed:eb:11:fc:eb:35:39:
b9:9d:6e:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 15:26:51 2025 by rpki-client