Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/ca4c34-2704-4f82-bff8-a7ccd0098477/1/TmIrxVBoe20O9geIzq2w_IIKOB8.mft
File: TmIrxVBoe20O9geIzq2w_IIKOB8.mft (raw, json)
Hash identifier: Zoe6PdezxyxmXr4id+Jdq0FrBWki0RbD7Sh8lmMElE4=
Subject key identifier: 23:B7:BE:9C:73:18:AB:B7:51:C2:5E:9F:92:5F:51:86:56:2B:D6:D2
Authority key identifier: 4E:62:2B:C5:50:68:7B:6D:0E:F6:07:88:CE:AD:B0:FC:82:0A:38:1F
Certificate issuer: /CN=4e622bc550687b6d0ef60788ceadb0fc820a381f
Certificate serial: 019889FC993884C4FD2B29E1477F65083BC3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TmIrxVBoe20O9geIzq2w_IIKOB8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/ca4c34-2704-4f82-bff8-a7ccd0098477/1/TmIrxVBoe20O9geIzq2w_IIKOB8.mft
Manifest number: 0968
Signing time: Fri 08 Aug 2025 14:01:29 +0000
Manifest this update: Fri 08 Aug 2025 14:01:29 +0000
Manifest next update: Sat 09 Aug 2025 14:01:29 +0000
Files and hashes: 1: TmIrxVBoe20O9geIzq2w_IIKOB8.crl (hash: 2se6JEwa6UCYvXy6UG9l8zJeNXYVc/1Sa5KBudUuhek=)
2: t4aglK9u5BBs2nCD-lvEdZGnyNE.roa (hash: poJOpqUdh9mquobj4xZre8xkqBntoXYzhaUhNLYqXsg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/ca4c34-2704-4f82-bff8-a7ccd0098477/1/TmIrxVBoe20O9geIzq2w_IIKOB8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/ca4c34-2704-4f82-bff8-a7ccd0098477/1/TmIrxVBoe20O9geIzq2w_IIKOB8.mft
rsync://rpki.ripe.net/repository/DEFAULT/TmIrxVBoe20O9geIzq2w_IIKOB8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 11:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:89:fc:99:38:84:c4:fd:2b:29:e1:47:7f:65:08:3b:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e622bc550687b6d0ef60788ceadb0fc820a381f
Validity
Not Before: Aug 8 14:01:29 2025 GMT
Not After : Aug 9 14:01:29 2025 GMT
Subject: CN=23b7be9c7318abb751c25e9f925f5186562bd6d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:84:b8:3e:b4:8f:1d:77:c0:30:8f:1e:6d:ad:
16:05:e4:a8:a8:cc:ab:db:32:aa:43:38:c2:96:4a:
a6:02:9f:3a:47:af:18:91:22:5b:d0:54:a2:50:3b:
08:0c:23:bd:6e:7d:5f:cc:96:9a:2c:16:24:4e:e4:
c5:08:73:8f:1a:64:dc:7d:b0:de:0d:72:a5:4e:d5:
ed:d3:85:d4:21:93:aa:de:12:af:d2:f1:8b:3c:03:
2c:45:22:a6:c8:27:5e:dc:b8:b9:db:96:70:4e:7b:
40:4c:00:56:05:79:af:f2:52:ce:1f:18:42:39:c1:
e6:91:ec:e7:4e:ef:e4:29:cc:1c:45:68:3c:d2:c2:
e7:e2:a4:11:9f:8a:c9:c4:c4:3b:24:44:6e:ca:e6:
f7:38:d6:e5:e1:d9:d4:5f:d8:83:4b:53:a2:e9:23:
1c:62:26:c9:de:b5:b1:0c:6c:07:4c:51:ee:e5:69:
eb:b9:bb:ef:e7:29:d8:e8:03:34:6c:42:f8:ca:86:
ea:63:bd:aa:93:12:79:d3:1f:72:8f:66:cb:4d:94:
34:68:d8:e0:af:f4:f1:1f:03:d3:99:68:88:a3:b5:
d1:cf:14:99:92:ce:ed:4b:58:fb:68:6e:cc:66:19:
f1:77:a5:a1:dd:e9:22:fb:ee:a5:de:04:05:7e:ce:
8a:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:B7:BE:9C:73:18:AB:B7:51:C2:5E:9F:92:5F:51:86:56:2B:D6:D2
X509v3 Authority Key Identifier:
keyid:4E:62:2B:C5:50:68:7B:6D:0E:F6:07:88:CE:AD:B0:FC:82:0A:38:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TmIrxVBoe20O9geIzq2w_IIKOB8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/ca4c34-2704-4f82-bff8-a7ccd0098477/1/TmIrxVBoe20O9geIzq2w_IIKOB8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/ca4c34-2704-4f82-bff8-a7ccd0098477/1/TmIrxVBoe20O9geIzq2w_IIKOB8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:94:8f:7b:df:1b:a4:45:e9:bb:5c:81:6a:b9:30:4a:4f:a9:
bf:13:6b:e6:d7:0e:ec:b2:3c:65:a1:d7:52:ed:1b:4b:44:19:
aa:d3:46:37:ac:d0:06:1e:1f:25:db:c1:bf:18:37:e0:76:58:
34:37:0c:1b:03:59:e4:f9:c9:b1:ab:bb:a0:c5:0b:7c:fd:b2:
15:3c:d2:1e:a1:fb:43:fb:80:44:ef:6d:f2:fa:c5:16:e7:0b:
d9:b3:c6:75:cc:44:00:99:d0:4e:02:12:cd:03:55:8f:68:85:
9b:c7:52:66:96:59:ec:db:a5:2f:78:16:2b:e4:22:62:7d:32:
f2:49:0e:84:42:a7:14:ba:bf:02:31:7c:92:40:97:b2:6f:98:
35:1e:68:bc:35:23:96:32:45:f2:2f:3e:13:30:e3:59:0b:91:
10:f9:37:36:c3:34:6f:a5:e8:8e:36:d5:af:bd:50:9f:01:38:
04:e0:d0:32:05:3e:c6:e0:07:37:04:5d:9e:6d:84:0c:7d:18:
a2:0e:eb:52:eb:02:00:a8:2a:b0:cf:1e:8c:82:1c:a5:60:24:
fa:12:92:e3:2b:45:af:ad:66:ff:23:31:b1:49:91:65:73:92:
44:72:cb:d6:a1:7e:fa:b3:0d:72:6f:01:12:d5:1e:50:84:60:
61:8b:35:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 19:21:26 2025 by rpki-client