Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/e85903-7574-4ab3-b441-5267d716e4ce/1/TI3qBN5uN7GQNV4DzSYAxHIS4Y4.mft
File: TI3qBN5uN7GQNV4DzSYAxHIS4Y4.mft (raw, json)
Hash identifier: e1P6ArHnLVNAGeaio3NIpLInUP0wcKS7UnavUTpAl34=
Subject key identifier: 72:63:BB:93:50:C2:C2:F1:4E:82:50:02:9C:4C:9E:C2:B5:5D:A3:04
Authority key identifier: 4C:8D:EA:04:DE:6E:37:B1:90:35:5E:03:CD:26:00:C4:72:12:E1:8E
Certificate issuer: /CN=4c8dea04de6e37b190355e03cd2600c47212e18e
Certificate serial: 019874869C5D5D5DF33EFA82727A532B9C46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TI3qBN5uN7GQNV4DzSYAxHIS4Y4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/e85903-7574-4ab3-b441-5267d716e4ce/1/TI3qBN5uN7GQNV4DzSYAxHIS4Y4.mft
Manifest number: 0708
Signing time: Mon 04 Aug 2025 10:00:35 +0000
Manifest this update: Mon 04 Aug 2025 10:00:35 +0000
Manifest next update: Tue 05 Aug 2025 10:00:35 +0000
Files and hashes: 1: TI3qBN5uN7GQNV4DzSYAxHIS4Y4.crl (hash: QsgIAg/UBF2QZc03dCuSvuKJcfXTV/ybGI6JCJuAuYI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/e85903-7574-4ab3-b441-5267d716e4ce/1/TI3qBN5uN7GQNV4DzSYAxHIS4Y4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/e85903-7574-4ab3-b441-5267d716e4ce/1/TI3qBN5uN7GQNV4DzSYAxHIS4Y4.mft
rsync://rpki.ripe.net/repository/DEFAULT/TI3qBN5uN7GQNV4DzSYAxHIS4Y4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 10:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:86:9c:5d:5d:5d:f3:3e:fa:82:72:7a:53:2b:9c:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c8dea04de6e37b190355e03cd2600c47212e18e
Validity
Not Before: Aug 4 10:00:35 2025 GMT
Not After : Aug 5 10:00:35 2025 GMT
Subject: CN=7263bb9350c2c2f14e8250029c4c9ec2b55da304
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:00:92:b6:40:40:dc:3c:41:2b:3d:a0:34:13:
2b:88:1e:5b:3d:b9:78:60:1a:ca:eb:ef:57:44:48:
e5:bc:fe:17:ed:e2:ed:f9:81:fe:1c:1a:5e:59:ef:
90:e0:db:ed:bb:1b:cf:4e:23:a4:47:ac:da:fe:30:
9c:46:50:69:ea:2d:85:46:7d:40:3c:53:48:63:60:
8e:51:4c:72:7b:c0:2e:60:5e:5c:98:c6:91:a5:63:
e8:dc:55:d3:3b:e4:4f:69:ad:aa:4e:03:75:78:b3:
0d:f6:a2:a9:46:3a:96:0a:f8:5a:7e:f3:41:e5:6c:
f8:92:72:f0:fd:17:8a:76:fd:f6:fa:f1:c1:08:ed:
b1:4b:54:0d:2e:14:09:58:97:3f:8b:f6:95:cd:6e:
c1:66:ca:75:c6:f1:6d:f8:d1:72:e7:7d:aa:73:7b:
44:94:08:ea:c3:d8:e3:b2:06:d4:ee:0a:98:2c:97:
3d:05:12:41:97:db:93:16:a4:79:96:95:d8:48:bc:
98:02:67:6e:c6:a5:c8:12:49:91:cc:2e:c1:1c:64:
4f:12:ae:70:93:49:31:eb:ca:bd:b8:a0:ce:5e:e1:
9d:60:25:bd:5b:75:33:ba:99:3e:cb:db:89:68:fa:
39:1a:76:4b:69:7f:aa:39:31:34:40:7d:d0:fe:e3:
ec:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:63:BB:93:50:C2:C2:F1:4E:82:50:02:9C:4C:9E:C2:B5:5D:A3:04
X509v3 Authority Key Identifier:
keyid:4C:8D:EA:04:DE:6E:37:B1:90:35:5E:03:CD:26:00:C4:72:12:E1:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TI3qBN5uN7GQNV4DzSYAxHIS4Y4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/e85903-7574-4ab3-b441-5267d716e4ce/1/TI3qBN5uN7GQNV4DzSYAxHIS4Y4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/e85903-7574-4ab3-b441-5267d716e4ce/1/TI3qBN5uN7GQNV4DzSYAxHIS4Y4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:23:86:51:cc:ae:4d:15:40:b9:0b:34:d5:91:2b:6c:3e:17:
a1:eb:0e:61:e8:02:b4:c6:15:2b:29:78:ab:f2:d7:32:ba:25:
ef:c0:9f:26:c8:a3:d4:d3:c0:32:d2:51:7b:de:78:91:c1:34:
3c:d9:1c:5e:da:6c:fc:35:ff:a5:1e:f0:99:82:4f:a3:6d:33:
d4:4f:34:44:58:3e:87:57:54:59:98:29:c4:54:8e:e0:44:13:
d8:a1:c9:a0:4f:77:3f:cb:b9:18:64:21:b1:9a:41:72:d9:17:
03:ef:e1:ac:49:d1:2d:b9:af:06:48:91:38:f0:f2:9f:5b:70:
14:ef:c8:d6:b7:3a:8f:ae:97:d0:be:f0:3a:8c:30:ab:79:bd:
ef:21:8a:00:48:a5:f4:09:d7:89:66:e1:3f:28:41:41:46:07:
93:5f:dc:4e:12:51:b8:db:93:cf:52:5e:b0:7e:27:36:5c:5f:
5b:69:e1:05:5c:13:74:98:50:a2:d4:c1:7e:39:18:4c:87:22:
1f:76:0f:c9:9f:e8:01:9f:ad:08:05:0a:06:34:d9:26:2d:0b:
d2:88:dd:87:34:bd:10:53:0a:06:aa:eb:0b:3d:e2:fa:d1:97:
f5:56:9d:12:0a:1f:04:e2:6f:13:03:99:0b:6a:9b:f3:8f:86:
3f:5f:a7:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 16:03:34 2025 by rpki-client