
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/7104d4-7414-49d2-9b84-8b1a093c8c5c/1/TVP4paBndE6P43yXwcxLiH7axyA.mft
File: TVP4paBndE6P43yXwcxLiH7axyA.mft (raw, json)
Hash identifier: EPrQtIVhjwlDtPSWAJHHjZR1OTnDhdeI17WNK9oFdsU=
Subject key identifier: 52:31:3E:40:DF:BA:46:83:62:2F:31:CD:EC:D2:20:83:25:95:B7:72
Authority key identifier: 4D:53:F8:A5:A0:67:74:4E:8F:E3:7C:97:C1:CC:4B:88:7E:DA:C7:20
Certificate issuer: /CN=4d53f8a5a067744e8fe37c97c1cc4b887edac720
Certificate serial: 0198D4E030F2672D9425EDB27B9855B6959C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TVP4paBndE6P43yXwcxLiH7axyA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/7104d4-7414-49d2-9b84-8b1a093c8c5c/1/TVP4paBndE6P43yXwcxLiH7axyA.mft
Manifest number: 1589
Signing time: Sat 23 Aug 2025 03:01:58 +0000
Manifest this update: Sat 23 Aug 2025 03:01:58 +0000
Manifest next update: Sun 24 Aug 2025 03:01:58 +0000
Files and hashes: 1: TVP4paBndE6P43yXwcxLiH7axyA.crl (hash: zcF0oJhyvTs0i9PvNuN+tv/ITCtaNj8Sw/u6jb2yAX8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/7104d4-7414-49d2-9b84-8b1a093c8c5c/1/TVP4paBndE6P43yXwcxLiH7axyA.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/7104d4-7414-49d2-9b84-8b1a093c8c5c/1/TVP4paBndE6P43yXwcxLiH7axyA.mft
rsync://rpki.ripe.net/repository/DEFAULT/TVP4paBndE6P43yXwcxLiH7axyA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:01:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:30:f2:67:2d:94:25:ed:b2:7b:98:55:b6:95:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d53f8a5a067744e8fe37c97c1cc4b887edac720
Validity
Not Before: Aug 23 03:01:58 2025 GMT
Not After : Aug 24 03:01:58 2025 GMT
Subject: CN=52313e40dfba4683622f31cdecd220832595b772
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:a8:9c:59:04:a5:cb:62:b0:4e:22:0f:6b:1b:
dc:b3:28:d2:96:f5:c2:96:f7:f1:01:45:ff:fc:c1:
f7:c3:e3:d2:c1:a8:ea:03:68:47:02:fd:44:37:c1:
be:fe:fd:c8:80:99:31:59:a6:e2:60:e2:25:a2:1c:
46:22:99:58:15:c2:04:e1:bb:cc:a8:3f:a9:6e:3c:
65:be:e9:a7:e0:7f:8d:9e:fd:52:fe:ac:53:df:87:
2d:c6:19:16:b2:0f:d0:06:26:4d:b7:d6:91:9a:39:
d4:70:de:ae:c2:c7:ca:dc:6b:2c:f1:67:2c:a9:7d:
aa:d8:d1:09:96:c3:ce:d0:12:d1:41:0f:eb:ca:28:
93:99:f8:62:f9:33:2e:14:3c:ab:16:82:f4:7b:8d:
15:cb:13:c2:df:49:b4:96:8e:ac:1e:58:e4:0a:b2:
2f:fc:6d:f2:64:d4:d0:8e:f2:12:a8:e4:11:3a:6a:
65:4b:0e:f3:84:ad:20:aa:1a:10:0f:9b:5d:ff:5b:
c3:c4:d6:70:ce:fe:23:46:eb:dc:b5:e4:4c:d5:09:
5b:60:e8:4a:1f:53:9a:14:9b:5a:c6:cb:54:a3:b8:
24:68:be:75:c9:10:34:73:10:74:a1:21:8e:c9:7e:
e0:01:d3:45:95:22:c3:4f:dc:af:08:87:2d:e5:09:
c0:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:31:3E:40:DF:BA:46:83:62:2F:31:CD:EC:D2:20:83:25:95:B7:72
X509v3 Authority Key Identifier:
keyid:4D:53:F8:A5:A0:67:74:4E:8F:E3:7C:97:C1:CC:4B:88:7E:DA:C7:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TVP4paBndE6P43yXwcxLiH7axyA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/7104d4-7414-49d2-9b84-8b1a093c8c5c/1/TVP4paBndE6P43yXwcxLiH7axyA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/7104d4-7414-49d2-9b84-8b1a093c8c5c/1/TVP4paBndE6P43yXwcxLiH7axyA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:ac:34:73:b8:3b:6f:a6:12:fd:5e:90:66:44:b0:e6:4c:b9:
de:cd:e0:ea:7a:44:25:e4:df:15:2e:cd:94:ff:f0:6f:9f:e5:
ec:48:74:1b:4d:80:9c:6c:cf:b8:a3:a1:a9:e1:fe:9b:08:7d:
76:9f:78:f9:1b:46:76:3c:d7:89:3f:07:ff:e8:c8:d4:3d:fc:
0e:76:cf:e7:13:83:8c:db:29:0c:07:c4:39:46:00:28:4c:01:
a5:fe:da:3d:cb:9c:f5:2b:51:7c:75:6b:24:3b:69:06:c2:ce:
ea:87:17:17:5e:b7:a1:95:58:f5:f5:52:d6:81:ee:6d:90:d3:
1d:8a:f9:a4:3a:52:94:9e:20:9c:1e:49:88:01:77:d0:be:c2:
e5:f4:9f:99:37:47:c7:cd:86:c3:0e:9f:af:e2:b9:07:6c:51:
7a:88:07:0e:9f:99:20:e1:37:86:64:1c:8d:37:cb:a4:af:46:
11:67:10:39:d6:45:ae:c9:89:35:92:49:b4:43:0c:37:dd:4e:
76:ac:69:93:18:c1:51:d1:9b:72:8c:5a:24:d2:e1:54:ac:df:
a6:3b:ae:77:b1:b6:44:5c:c6:96:4e:cf:73:73:f6:ed:2f:bc:
f6:06:91:ab:ed:00:23:22:38:48:ac:0e:58:ab:12:90:b9:ab:
0f:1b:84:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:03:40 2025 by rpki-client