Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/54f602-c712-4d72-a46a-208565bb2d63/1/TF_Sw94QWTTPD_SdJtnciFjOXdE.mft
File: TF_Sw94QWTTPD_SdJtnciFjOXdE.mft (raw, json)
Hash identifier: OHsJqL6D5pMghF93LUKOO8rckllRjQemTNJKueUJb+E=
Subject key identifier: AE:33:78:3A:4B:CF:45:CE:AF:02:62:04:3D:43:5C:02:4F:67:41:E4
Authority key identifier: 4C:5F:D2:C3:DE:10:59:34:CF:0F:F4:9D:26:D9:DC:88:58:CE:5D:D1
Certificate issuer: /CN=4c5fd2c3de105934cf0ff49d26d9dc8858ce5dd1
Certificate serial: 0198D65F68CBA68D22E8BBC41DB301B06AC6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TF_Sw94QWTTPD_SdJtnciFjOXdE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/54f602-c712-4d72-a46a-208565bb2d63/1/TF_Sw94QWTTPD_SdJtnciFjOXdE.mft
Manifest number: 1007
Signing time: Sat 23 Aug 2025 10:00:33 +0000
Manifest this update: Sat 23 Aug 2025 10:00:33 +0000
Manifest next update: Sun 24 Aug 2025 10:00:33 +0000
Files and hashes: 1: TF_Sw94QWTTPD_SdJtnciFjOXdE.crl (hash: bdR6cgXIpYGWEisrHKcJ2eARm0V1I15eABo4YbLWejg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/54f602-c712-4d72-a46a-208565bb2d63/1/TF_Sw94QWTTPD_SdJtnciFjOXdE.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/54f602-c712-4d72-a46a-208565bb2d63/1/TF_Sw94QWTTPD_SdJtnciFjOXdE.mft
rsync://rpki.ripe.net/repository/DEFAULT/TF_Sw94QWTTPD_SdJtnciFjOXdE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 10:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:68:cb:a6:8d:22:e8:bb:c4:1d:b3:01:b0:6a:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c5fd2c3de105934cf0ff49d26d9dc8858ce5dd1
Validity
Not Before: Aug 23 10:00:33 2025 GMT
Not After : Aug 24 10:00:33 2025 GMT
Subject: CN=ae33783a4bcf45ceaf0262043d435c024f6741e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:c6:0f:25:e2:eb:da:3f:91:a7:c8:5a:89:4a:
52:aa:df:87:71:8d:ba:d3:ff:75:92:97:aa:db:cd:
97:c8:d1:cb:c5:3b:d4:75:f7:ac:a9:f3:1a:0d:e7:
3b:f4:59:c2:36:68:c7:de:69:ab:49:e3:02:ca:37:
c1:cf:f9:41:82:01:b9:8e:c8:2c:08:94:65:46:3c:
87:3a:9f:2e:5d:45:c3:53:a6:9c:b7:4c:fa:05:46:
b6:ce:c3:4f:73:f7:44:70:52:b3:1a:d9:3c:e5:a3:
e6:cc:80:68:b6:3e:75:ae:12:f9:8d:88:05:71:87:
4b:30:2f:1f:fa:db:44:17:ab:fb:0e:89:93:10:2e:
9a:09:a1:96:c0:ed:23:45:64:87:16:87:f4:07:c7:
17:7b:9c:5a:01:4e:96:e4:5f:22:a5:a7:83:08:75:
d0:d2:df:c0:32:4d:3a:70:dc:2e:75:35:d2:c9:ed:
10:d0:26:f3:2d:26:97:32:6b:b8:0a:fe:ba:f3:3a:
2c:3c:bf:fc:8b:fa:94:ef:65:55:a2:a5:ea:09:67:
0a:e3:94:84:03:66:40:8c:3d:2d:ec:98:b5:d9:49:
48:72:fc:00:a6:df:91:24:7b:4a:14:6e:d2:2e:e8:
92:b2:cc:f7:d6:07:ec:4c:3a:19:6a:2c:c9:cf:96:
7d:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:33:78:3A:4B:CF:45:CE:AF:02:62:04:3D:43:5C:02:4F:67:41:E4
X509v3 Authority Key Identifier:
keyid:4C:5F:D2:C3:DE:10:59:34:CF:0F:F4:9D:26:D9:DC:88:58:CE:5D:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TF_Sw94QWTTPD_SdJtnciFjOXdE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/54f602-c712-4d72-a46a-208565bb2d63/1/TF_Sw94QWTTPD_SdJtnciFjOXdE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/54f602-c712-4d72-a46a-208565bb2d63/1/TF_Sw94QWTTPD_SdJtnciFjOXdE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cc:22:85:72:c3:a4:a4:e5:68:5d:0a:3d:53:f3:f2:70:38:c5:
ce:e8:dc:0d:2e:58:b1:c9:6b:74:43:ba:d0:34:01:ea:b2:88:
cf:a2:a2:2c:71:8f:96:38:dd:2f:15:4b:fe:a0:11:f0:ad:e5:
d4:ad:ef:ba:e2:b1:b0:7a:69:27:ca:ea:2c:ae:0a:a4:0f:1c:
9f:4b:0d:06:5f:11:7d:9a:42:24:7b:a3:2f:c1:64:ea:02:ea:
52:5e:8a:39:ac:99:64:81:d2:f6:9a:ff:27:2c:c8:9b:cc:a9:
09:99:7e:5f:56:77:8b:98:ce:c1:61:04:ec:77:84:ee:51:53:
a9:dd:36:20:2b:03:ba:e8:db:ed:42:da:4b:8d:77:a6:00:3c:
8d:1b:41:f5:37:87:e5:e3:6a:36:85:78:88:59:41:af:7b:4f:
cb:74:2b:9d:a0:05:44:fc:07:a5:11:1c:bc:b7:0e:db:d5:3b:
65:89:e7:b2:48:bd:b8:69:97:f3:09:d9:2d:23:91:c2:c3:b7:
55:5f:5c:91:e3:22:b0:31:19:ea:52:f0:2f:e4:9f:f5:d1:6a:
0f:e8:46:9f:a8:44:44:23:e2:8f:b9:b4:f0:31:8e:9c:f5:c6:
ef:5d:dc:29:38:32:98:dc:74:7e:8b:95:41:c1:cb:1f:29:76:
f5:8c:65:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:05:09 2025 by rpki-client