Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/e94ce1-0d7b-431b-9143-fc3f5ec14a5b/1/TsRiBLT4hZI6pKl4btWsr7HACd4.mft
File: TsRiBLT4hZI6pKl4btWsr7HACd4.mft (raw, json)
Hash identifier: YU5VALj0bxSCvPvKEO5dOFi+Szl5muWMJgdQMAHwBIo=
Subject key identifier: C7:49:D4:65:C4:C1:5C:0F:50:AC:52:99:95:9D:E2:64:0F:7C:86:0E
Authority key identifier: 4E:C4:62:04:B4:F8:85:92:3A:A4:A9:78:6E:D5:AC:AF:B1:C0:09:DE
Certificate issuer: /CN=4ec46204b4f885923aa4a9786ed5acafb1c009de
Certificate serial: 0198D5BBD060101AC9086747F3C1EE75FE1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TsRiBLT4hZI6pKl4btWsr7HACd4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/e94ce1-0d7b-431b-9143-fc3f5ec14a5b/1/TsRiBLT4hZI6pKl4btWsr7HACd4.mft
Manifest number: 0B19
Signing time: Sat 23 Aug 2025 07:01:52 +0000
Manifest this update: Sat 23 Aug 2025 07:01:52 +0000
Manifest next update: Sun 24 Aug 2025 07:01:52 +0000
Files and hashes: 1: TsRiBLT4hZI6pKl4btWsr7HACd4.crl (hash: N0R9EqeLiOsBX0MCpjnuM55lHdkzjM2VW+/c1jN72Zo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/e94ce1-0d7b-431b-9143-fc3f5ec14a5b/1/TsRiBLT4hZI6pKl4btWsr7HACd4.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/e94ce1-0d7b-431b-9143-fc3f5ec14a5b/1/TsRiBLT4hZI6pKl4btWsr7HACd4.mft
rsync://rpki.ripe.net/repository/DEFAULT/TsRiBLT4hZI6pKl4btWsr7HACd4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bb:d0:60:10:1a:c9:08:67:47:f3:c1:ee:75:fe:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ec46204b4f885923aa4a9786ed5acafb1c009de
Validity
Not Before: Aug 23 07:01:52 2025 GMT
Not After : Aug 24 07:01:52 2025 GMT
Subject: CN=c749d465c4c15c0f50ac5299959de2640f7c860e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:32:6b:92:d4:12:11:1f:58:10:df:9d:4c:7f:
5d:ff:a9:fd:81:e6:22:80:0c:e7:f3:41:69:b3:9c:
67:6d:c6:77:54:ba:88:76:57:c3:f1:70:3d:cd:dc:
38:dd:df:6c:9f:db:21:67:c8:90:09:8d:38:a3:b3:
6d:a1:ad:d8:61:e7:92:09:2f:0e:6d:89:a3:dd:ff:
f8:96:32:88:ab:72:41:08:02:56:16:ec:3c:47:83:
a8:4a:c0:ec:2d:78:ce:82:8f:36:c0:25:d3:2d:f6:
b3:1d:33:eb:e5:d0:dd:f2:4c:c1:a4:b6:25:3d:3a:
8b:94:1f:7c:05:3b:f7:c8:d4:57:ff:31:43:a2:b7:
37:cb:9a:62:e7:aa:0c:72:cc:2c:f5:a8:9a:90:30:
71:12:a0:7f:07:15:11:45:e1:79:6a:71:0a:f9:4d:
40:3d:b5:84:f1:a4:11:20:bb:28:6c:ac:4e:06:dc:
32:a2:3d:b7:ce:c2:df:c3:40:7d:c7:72:5b:6d:c3:
3c:25:6e:a3:4e:14:1c:c0:2d:e3:59:ad:72:99:28:
9c:95:43:38:bc:74:68:30:c8:69:97:ce:77:4f:89:
8d:75:73:d0:fb:4c:6c:67:53:83:9c:c9:c2:d9:55:
20:c1:0b:7c:63:e7:8d:a3:1a:e2:b7:b5:6e:3c:58:
f9:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:49:D4:65:C4:C1:5C:0F:50:AC:52:99:95:9D:E2:64:0F:7C:86:0E
X509v3 Authority Key Identifier:
keyid:4E:C4:62:04:B4:F8:85:92:3A:A4:A9:78:6E:D5:AC:AF:B1:C0:09:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TsRiBLT4hZI6pKl4btWsr7HACd4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/e94ce1-0d7b-431b-9143-fc3f5ec14a5b/1/TsRiBLT4hZI6pKl4btWsr7HACd4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/e94ce1-0d7b-431b-9143-fc3f5ec14a5b/1/TsRiBLT4hZI6pKl4btWsr7HACd4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:a1:69:fa:53:cc:35:4a:bb:3e:7c:e0:36:8f:08:01:62:a0:
e0:07:77:8d:7d:6e:ec:36:77:f9:65:5c:24:f9:c4:15:30:b0:
44:10:5b:7a:ca:a3:8d:16:49:09:a7:30:bf:5c:50:d5:c2:5e:
c6:59:20:a8:1d:27:33:3c:a1:db:9c:21:09:3a:7a:b7:ce:a5:
17:48:34:5a:a5:79:21:1e:fe:98:80:c3:8d:40:a0:a7:d0:42:
c4:d1:25:12:a1:e4:fe:c0:4a:11:cb:cb:fa:2e:9c:22:bf:ec:
ae:7e:17:cf:e5:6a:af:51:d0:b3:c8:5c:d9:9b:26:a5:53:96:
59:db:70:09:db:9e:82:0b:06:bf:4f:e2:09:9d:78:b0:fb:9d:
33:43:de:e8:85:ac:be:75:1f:3c:fe:99:fc:09:7a:3b:88:99:
2c:5f:b2:13:81:77:dd:19:f5:b0:45:36:39:ce:a9:21:5b:0d:
25:67:c7:ed:88:96:98:54:7f:a7:92:75:3c:54:a1:83:c3:bb:
fb:09:bf:8e:16:89:67:76:3a:1f:27:98:29:fc:c7:45:ac:77:
3e:29:f7:cc:fc:eb:a5:be:50:1c:e4:f8:4f:99:31:ef:12:45:
d5:a7:26:aa:0e:e6:63:02:c1:24:be:79:e6:4d:8a:6f:09:d7:
9e:ee:43:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:19:29 2025 by rpki-client