Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/4c876e-765a-44ff-ac98-bee4d6c0b01e/1/tx6uq1CDkaFflcQpE_oAWhbCPA8.mft
File: tx6uq1CDkaFflcQpE_oAWhbCPA8.mft (raw, json)
Hash identifier: q29AJ0zhgkZDjh/3xZn6vbpZnZLzGMrA8/9CNOkpjt8=
Subject key identifier: A9:94:53:F0:EC:EB:48:0C:22:A1:FB:E8:0C:EA:7A:47:35:21:34:0A
Authority key identifier: B7:1E:AE:AB:50:83:91:A1:5F:95:C4:29:13:FA:00:5A:16:C2:3C:0F
Certificate issuer: /CN=b71eaeab508391a15f95c42913fa005a16c23c0f
Certificate serial: 0198A04D7313AB0487B4AD3CB3DBFC060455
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tx6uq1CDkaFflcQpE_oAWhbCPA8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/4c876e-765a-44ff-ac98-bee4d6c0b01e/1/tx6uq1CDkaFflcQpE_oAWhbCPA8.mft
Manifest number: 0E31
Signing time: Tue 12 Aug 2025 22:01:26 +0000
Manifest this update: Tue 12 Aug 2025 22:01:26 +0000
Manifest next update: Wed 13 Aug 2025 22:01:26 +0000
Files and hashes: 1: tx6uq1CDkaFflcQpE_oAWhbCPA8.crl (hash: mSlJXQUvIp8nRjTDSvcjGh7C5adriG5eHpXP/pA4oyo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/4c876e-765a-44ff-ac98-bee4d6c0b01e/1/tx6uq1CDkaFflcQpE_oAWhbCPA8.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/4c876e-765a-44ff-ac98-bee4d6c0b01e/1/tx6uq1CDkaFflcQpE_oAWhbCPA8.mft
rsync://rpki.ripe.net/repository/DEFAULT/tx6uq1CDkaFflcQpE_oAWhbCPA8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 22:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:a0:4d:73:13:ab:04:87:b4:ad:3c:b3:db:fc:06:04:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b71eaeab508391a15f95c42913fa005a16c23c0f
Validity
Not Before: Aug 12 22:01:26 2025 GMT
Not After : Aug 13 22:01:26 2025 GMT
Subject: CN=a99453f0eceb480c22a1fbe80cea7a473521340a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:59:34:32:1f:57:fa:57:56:06:ef:28:84:6d:
d9:3b:5d:a7:ad:c0:68:67:9a:dc:32:63:ba:94:d1:
db:27:c1:9d:7e:b3:14:40:d9:7f:73:1c:4b:5f:77:
b1:75:ad:6b:28:2b:36:d9:89:b2:0a:8d:76:d0:58:
47:b3:b1:fd:fc:e8:0d:91:be:f6:bd:e2:25:c4:ff:
2c:18:94:92:29:74:08:e6:cf:30:71:9f:7b:fb:3c:
51:7d:9f:71:17:c2:b4:3f:92:82:44:60:cc:c3:02:
4f:6f:72:eb:7e:ff:0d:76:39:03:48:d0:b8:76:41:
d9:9d:8c:c0:f6:f4:c0:84:e9:3c:42:d3:4e:4e:ec:
d4:d4:f4:18:27:e9:cb:f8:e0:54:3b:ba:c6:67:f4:
2f:65:c1:3b:5a:30:2d:70:ef:11:72:bd:0f:2a:04:
7e:9a:bf:7b:d6:08:d3:44:75:e7:0a:45:6b:55:79:
94:ba:41:64:fe:1a:f5:9f:7d:5f:2c:76:cf:56:f4:
23:f0:1a:1d:bd:5a:b7:ca:38:07:1d:92:4f:53:15:
de:4a:a4:79:b5:69:52:27:fe:78:20:4c:26:8b:95:
99:41:1a:a8:89:91:c7:57:e2:40:5b:b4:b7:5c:27:
c5:0d:c4:98:c9:e5:ff:28:ee:f3:c5:8f:10:2e:35:
42:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:94:53:F0:EC:EB:48:0C:22:A1:FB:E8:0C:EA:7A:47:35:21:34:0A
X509v3 Authority Key Identifier:
keyid:B7:1E:AE:AB:50:83:91:A1:5F:95:C4:29:13:FA:00:5A:16:C2:3C:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tx6uq1CDkaFflcQpE_oAWhbCPA8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/4c876e-765a-44ff-ac98-bee4d6c0b01e/1/tx6uq1CDkaFflcQpE_oAWhbCPA8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/4c876e-765a-44ff-ac98-bee4d6c0b01e/1/tx6uq1CDkaFflcQpE_oAWhbCPA8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:29:1f:51:51:f0:2f:c0:9d:80:be:77:e9:88:62:1a:34:4a:
3c:78:6e:67:8c:3c:86:c9:4f:70:c2:fe:c4:23:e7:81:0f:46:
4c:ec:59:62:dc:26:eb:bb:de:65:9d:6c:c9:50:47:94:ea:2c:
e6:b3:d4:8c:e9:9a:74:80:6b:19:d2:2b:9b:62:31:46:03:47:
7e:fb:84:7c:39:81:3e:71:b8:ca:89:5b:ad:d4:5c:f4:11:cf:
b1:50:3d:d3:b9:58:98:76:24:4e:70:d1:38:6d:18:07:ce:0e:
36:c8:af:a5:cf:5c:1d:b7:8e:c5:34:7b:e4:b7:6d:72:e6:7b:
64:ba:9f:c2:c1:6a:1f:bf:05:ec:fb:b5:57:92:8a:8c:81:5f:
c4:c8:63:a1:b7:db:c4:d8:c3:58:e2:49:31:0b:eb:cb:2f:d1:
bf:c6:39:ed:e3:80:31:73:fd:db:14:1d:42:e0:49:ca:3b:b9:
49:c5:24:70:3c:10:e5:af:41:75:03:f2:ae:00:81:89:89:a5:
e4:83:82:a2:4a:bd:c3:50:52:23:b8:aa:29:ff:23:e8:f5:99:
47:63:06:6b:7e:37:0c:e6:ce:53:80:77:fa:95:24:49:cc:2c:
fd:ed:5a:54:65:40:b4:8d:ef:db:24:21:1a:ad:cb:37:8f:23:
6d:6f:76:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 05:53:20 2025 by rpki-client