
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/bf8b0e-beda-4a56-baf0-82ad11626eed/1/TEz85gybDy1Hs2KGTY_rsiW7UkQ.mft
File: TEz85gybDy1Hs2KGTY_rsiW7UkQ.mft (raw, json)
Hash identifier: PhtMhb2ZMPjKKUPvmDB+gzRMuCzwQfmpr0Gd2K4pMQA=
Subject key identifier: 2A:BB:8D:EF:18:AD:71:54:38:EA:84:81:1D:30:18:7B:F6:A4:1C:5E
Authority key identifier: 4C:4C:FC:E6:0C:9B:0F:2D:47:B3:62:86:4D:8F:EB:B2:25:BB:52:44
Certificate issuer: /CN=4c4cfce60c9b0f2d47b362864d8febb225bb5244
Certificate serial: 01988B7D46EA9B29D62FD56C273CD0C7DAFA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TEz85gybDy1Hs2KGTY_rsiW7UkQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/bf8b0e-beda-4a56-baf0-82ad11626eed/1/TEz85gybDy1Hs2KGTY_rsiW7UkQ.mft
Manifest number: 1620
Signing time: Fri 08 Aug 2025 21:01:39 +0000
Manifest this update: Fri 08 Aug 2025 21:01:39 +0000
Manifest next update: Sat 09 Aug 2025 21:01:39 +0000
Files and hashes: 1: TEz85gybDy1Hs2KGTY_rsiW7UkQ.crl (hash: 4gUoe83Z6qAErng2IZ1XSd+bkLuIqQnKbUTAeSDoRY8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/bf8b0e-beda-4a56-baf0-82ad11626eed/1/TEz85gybDy1Hs2KGTY_rsiW7UkQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/bf8b0e-beda-4a56-baf0-82ad11626eed/1/TEz85gybDy1Hs2KGTY_rsiW7UkQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/TEz85gybDy1Hs2KGTY_rsiW7UkQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 20:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8b:7d:46:ea:9b:29:d6:2f:d5:6c:27:3c:d0:c7:da:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c4cfce60c9b0f2d47b362864d8febb225bb5244
Validity
Not Before: Aug 8 21:01:39 2025 GMT
Not After : Aug 9 21:01:39 2025 GMT
Subject: CN=2abb8def18ad715438ea84811d30187bf6a41c5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:d4:82:83:55:23:85:ae:b7:09:84:55:d7:4d:
59:3b:67:34:24:aa:06:37:3c:a8:db:b1:5f:eb:89:
cb:b2:96:d8:17:39:58:1f:92:63:42:8f:70:3c:33:
94:ea:28:ad:49:1c:20:f3:6e:2d:19:ae:90:6e:f1:
a4:44:ee:95:3d:44:62:4c:91:dc:51:c9:38:59:8f:
d9:42:92:cc:5c:31:73:09:b4:b2:0d:ed:69:d6:52:
f6:f5:2f:3a:e8:17:12:45:85:a6:f0:5f:26:70:c5:
4a:3b:15:58:51:82:d6:95:01:7b:e9:5a:ea:76:16:
63:8c:ed:68:92:4f:df:22:9f:fe:74:9c:93:62:da:
69:34:7e:0d:00:2d:0e:7f:1d:3d:3b:17:f1:04:cc:
fa:a6:4b:6b:6f:4a:16:1b:32:2a:9f:8d:ca:93:42:
e7:f9:46:49:c9:5f:3d:53:b5:fa:c3:ec:95:59:05:
9d:e1:c6:71:8f:45:80:b6:cb:3e:6f:54:bb:6d:ad:
78:a2:88:51:ce:a2:5b:b1:7e:7a:41:13:db:53:17:
e1:be:7a:1f:ac:4f:64:d1:11:80:b7:05:0a:67:10:
dd:81:6a:c1:0b:02:8b:47:ee:c0:15:fc:28:16:89:
72:50:ce:1c:88:94:23:2a:a8:56:19:78:38:e2:34:
fc:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:BB:8D:EF:18:AD:71:54:38:EA:84:81:1D:30:18:7B:F6:A4:1C:5E
X509v3 Authority Key Identifier:
keyid:4C:4C:FC:E6:0C:9B:0F:2D:47:B3:62:86:4D:8F:EB:B2:25:BB:52:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TEz85gybDy1Hs2KGTY_rsiW7UkQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/bf8b0e-beda-4a56-baf0-82ad11626eed/1/TEz85gybDy1Hs2KGTY_rsiW7UkQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/bf8b0e-beda-4a56-baf0-82ad11626eed/1/TEz85gybDy1Hs2KGTY_rsiW7UkQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:81:4c:98:fc:f1:5e:e2:ed:22:b2:bc:5f:93:f1:88:7d:e4:
b5:6a:74:c5:f6:cf:39:66:cb:90:3e:43:77:2d:4c:72:a2:62:
cd:c2:8f:91:0b:0b:85:d2:2e:b5:51:09:26:2b:7b:c0:4c:95:
ad:24:e8:6e:64:0b:4a:2b:87:51:ff:b5:f0:cb:c3:70:bc:1c:
a0:71:4f:41:e2:d8:49:2c:f6:44:96:f1:cc:cc:6d:13:61:a9:
96:63:14:45:e6:98:28:f1:67:d3:18:e9:68:70:fe:4f:45:f5:
38:95:1e:72:8c:d5:68:a5:69:92:d3:ce:e0:37:cd:7f:0e:cb:
18:77:c3:46:ac:7c:b0:02:5f:96:8b:1e:ee:86:dc:a5:b4:cb:
9c:d3:24:1e:38:54:02:8a:e7:14:e9:1e:3d:12:b2:60:83:85:
76:e7:1a:58:2d:fd:a6:a1:9c:39:54:78:8e:9e:07:58:bb:68:
ed:04:d8:1f:aa:de:9e:1b:8c:74:33:59:d1:6d:3a:e7:f1:72:
b9:71:df:2f:14:ae:60:c8:4f:c9:11:c1:75:e1:5d:5a:44:f2:
f3:24:a4:59:4b:8d:b5:b9:bd:99:ce:86:72:30:49:b0:f0:cf:
eb:26:6c:2d:89:ea:9a:e9:f2:8d:6a:10:eb:6c:c6:8b:f4:5c:
89:aa:86:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 03:00:02 2025 by rpki-client