Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/e49afe-15ae-485a-af76-66516ffce750/1/tpQiR24a5eoNWOT4_fkfBfEC_vs.mft
File: tpQiR24a5eoNWOT4_fkfBfEC_vs.mft (raw, json)
Hash identifier: Kh7qa3iAo/LU1C5X493KM4MUe+XhfHKC4nxEwqOA2w4=
Subject key identifier: 84:09:0A:1D:3D:AB:82:A9:D4:1A:F8:1B:A8:D4:11:AA:18:4F:5D:5F
Authority key identifier: B6:94:22:47:6E:1A:E5:EA:0D:58:E4:F8:FD:F9:1F:05:F1:02:FE:FB
Certificate issuer: /CN=b69422476e1ae5ea0d58e4f8fdf91f05f102fefb
Certificate serial: 0198D54E995D7342E5490B458925A87E26C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tpQiR24a5eoNWOT4_fkfBfEC_vs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/e49afe-15ae-485a-af76-66516ffce750/1/tpQiR24a5eoNWOT4_fkfBfEC_vs.mft
Manifest number: 1646
Signing time: Sat 23 Aug 2025 05:02:34 +0000
Manifest this update: Sat 23 Aug 2025 05:02:34 +0000
Manifest next update: Sun 24 Aug 2025 05:02:34 +0000
Files and hashes: 1: tpQiR24a5eoNWOT4_fkfBfEC_vs.crl (hash: CZbVf8YlEeoI1ZzPfcFyXjiYAJAvuh9fDTPNH50+ZAE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/e49afe-15ae-485a-af76-66516ffce750/1/tpQiR24a5eoNWOT4_fkfBfEC_vs.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/e49afe-15ae-485a-af76-66516ffce750/1/tpQiR24a5eoNWOT4_fkfBfEC_vs.mft
rsync://rpki.ripe.net/repository/DEFAULT/tpQiR24a5eoNWOT4_fkfBfEC_vs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:99:5d:73:42:e5:49:0b:45:89:25:a8:7e:26:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b69422476e1ae5ea0d58e4f8fdf91f05f102fefb
Validity
Not Before: Aug 23 05:02:34 2025 GMT
Not After : Aug 24 05:02:34 2025 GMT
Subject: CN=84090a1d3dab82a9d41af81ba8d411aa184f5d5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:72:8b:af:db:2a:8c:88:9d:12:b5:0f:93:07:
73:71:d5:84:0d:25:93:9b:e2:f2:1c:68:95:60:a5:
61:16:59:df:00:d8:49:cf:79:97:cc:1e:4b:1a:15:
3d:d8:0f:3c:93:9d:8c:29:7d:3f:ff:c4:5e:68:15:
0e:ee:f9:1f:97:c5:be:c0:46:8e:fe:4c:11:1b:17:
f5:0a:47:ff:25:59:ac:ee:94:b4:e5:59:d6:b4:3a:
7f:c1:5e:76:b4:d1:96:60:57:e9:a6:8b:31:bc:0f:
79:81:22:d5:35:09:dd:0b:7b:06:20:a5:29:2a:3e:
a9:e4:87:08:5e:16:0a:5b:a8:8d:22:35:81:63:d3:
4b:35:e8:ea:f1:51:64:a9:fd:11:1d:11:fd:39:71:
40:39:3c:92:8a:ee:c0:84:46:35:85:b3:44:64:84:
a0:d9:5e:96:86:fa:57:24:ed:e7:5c:74:d9:9b:f3:
db:4a:a3:ed:01:79:55:05:e4:08:29:db:41:83:22:
ac:93:7d:35:06:4d:75:fe:7a:1a:04:0d:f4:73:9f:
40:73:fb:3f:4d:c5:18:cb:0c:4e:a3:1f:af:03:e7:
bb:af:3b:f7:9d:65:d9:9f:a2:23:82:c3:35:13:54:
85:28:f9:d3:5e:e0:48:31:3e:b2:25:47:ac:dd:d7:
79:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:09:0A:1D:3D:AB:82:A9:D4:1A:F8:1B:A8:D4:11:AA:18:4F:5D:5F
X509v3 Authority Key Identifier:
keyid:B6:94:22:47:6E:1A:E5:EA:0D:58:E4:F8:FD:F9:1F:05:F1:02:FE:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tpQiR24a5eoNWOT4_fkfBfEC_vs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/e49afe-15ae-485a-af76-66516ffce750/1/tpQiR24a5eoNWOT4_fkfBfEC_vs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/e49afe-15ae-485a-af76-66516ffce750/1/tpQiR24a5eoNWOT4_fkfBfEC_vs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:68:d7:be:4e:58:bb:c2:73:16:74:9e:42:10:09:60:99:c8:
6f:ce:ba:94:00:60:a5:7a:36:9f:ff:3f:aa:72:e1:2e:76:b2:
27:86:50:30:f3:5a:24:05:63:a3:4e:08:90:85:72:90:a2:47:
e0:ad:de:ab:c4:e8:66:f8:8e:85:1b:46:7a:f3:1c:27:e9:94:
14:ac:4c:72:c7:47:ee:58:bc:20:c3:ac:41:bb:4c:c1:93:cc:
4a:57:1f:d7:af:96:32:c8:66:ed:6d:6c:bc:6b:03:40:fb:39:
56:38:1c:d5:45:a1:fb:e7:9f:c1:4a:f9:09:cc:89:ed:80:8b:
0b:af:2d:7c:c1:e1:e0:f4:97:79:d9:67:44:fb:3c:a2:4d:b0:
59:47:da:31:23:8b:cc:b8:2d:fc:c0:34:95:a2:d8:13:7c:bd:
69:93:9d:1b:0c:79:75:76:66:d7:30:45:37:ea:fc:f5:a9:6e:
72:24:82:fd:fb:ce:c8:85:83:1c:9c:4d:a9:ed:a1:08:f8:23:
ae:c4:1a:46:ae:7a:76:24:62:6d:88:78:71:2a:2f:7d:3b:0e:
f8:15:33:0a:7e:d9:21:ea:fd:11:dc:b6:b0:a0:eb:dc:9c:fc:
64:bc:68:a5:ec:65:8e:07:e1:c2:b5:e8:cd:9f:38:12:1d:e2:
5b:54:51:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:50:14 2025 by rpki-client