Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/02b7d6-269b-4bb2-b455-391768573496/1/TjS6bj4mlMezjkZRr-4GGwsh3q4.mft
File: TjS6bj4mlMezjkZRr-4GGwsh3q4.mft (raw, json)
Hash identifier: oCweXILb0MMp/Vw0SXlxVfW3yMNq4GjD1a1UqrYj2yQ=
Subject key identifier: 44:08:FD:7B:6F:BE:84:D1:B8:94:8A:08:92:A4:AE:46:0C:13:3E:4F
Authority key identifier: 4E:34:BA:6E:3E:26:94:C7:B3:8E:46:51:AF:EE:06:1B:0B:21:DE:AE
Certificate issuer: /CN=4e34ba6e3e2694c7b38e4651afee061b0b21deae
Certificate serial: 0198D473A600C10ADFFCEBB79435ECC6256D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TjS6bj4mlMezjkZRr-4GGwsh3q4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/02b7d6-269b-4bb2-b455-391768573496/1/TjS6bj4mlMezjkZRr-4GGwsh3q4.mft
Manifest number: 016A
Signing time: Sat 23 Aug 2025 01:03:25 +0000
Manifest this update: Sat 23 Aug 2025 01:03:25 +0000
Manifest next update: Sun 24 Aug 2025 01:03:25 +0000
Files and hashes: 1: TjS6bj4mlMezjkZRr-4GGwsh3q4.crl (hash: JFqN9C5BnVHB8WYE/M+MuwGws7cGmii9MgOb3zgG198=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/02b7d6-269b-4bb2-b455-391768573496/1/TjS6bj4mlMezjkZRr-4GGwsh3q4.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/02b7d6-269b-4bb2-b455-391768573496/1/TjS6bj4mlMezjkZRr-4GGwsh3q4.mft
rsync://rpki.ripe.net/repository/DEFAULT/TjS6bj4mlMezjkZRr-4GGwsh3q4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 01:03:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:73:a6:00:c1:0a:df:fc:eb:b7:94:35:ec:c6:25:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e34ba6e3e2694c7b38e4651afee061b0b21deae
Validity
Not Before: Aug 23 01:03:25 2025 GMT
Not After : Aug 24 01:03:25 2025 GMT
Subject: CN=4408fd7b6fbe84d1b8948a0892a4ae460c133e4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:e8:cf:c2:9c:be:18:ba:33:c3:8a:b4:a1:4e:
a2:75:57:f4:cb:b8:f5:a4:55:67:f0:cd:ad:a0:db:
bb:b6:db:47:68:69:b8:08:83:50:ea:8d:90:ce:04:
31:7c:b5:9a:b1:23:d6:53:02:c4:93:22:d4:bf:ef:
80:a8:64:00:30:f4:3e:78:e3:e2:1e:6a:d8:94:24:
1f:81:e9:ad:59:7a:64:8d:40:c1:f3:98:60:8d:e2:
05:d9:10:fa:cd:4f:6a:9a:43:e4:c2:04:c5:de:01:
e0:1c:c7:7c:a0:62:fb:8a:f4:fd:21:53:ce:ce:0d:
cc:df:8b:a1:ba:d2:3a:d3:60:68:4a:51:2b:38:13:
27:bd:28:1e:c8:eb:4a:b2:bb:c6:05:9e:54:f1:be:
cb:6f:83:cb:75:ff:cd:1b:ca:10:be:23:2b:0b:85:
54:cd:91:09:b0:c9:57:8f:3e:4a:bb:11:99:f1:9d:
15:06:d7:73:de:35:96:c0:ce:98:12:ce:48:a2:34:
03:a4:65:0e:5c:68:37:37:71:e7:81:1d:ad:55:8a:
15:ab:f1:fd:66:ca:73:66:89:01:c6:49:09:8a:5f:
6b:2a:3c:a2:b8:37:44:fa:15:07:f4:5e:06:82:a4:
97:92:7e:fc:e1:19:fe:3e:15:e3:1c:f8:9a:60:bf:
e9:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:08:FD:7B:6F:BE:84:D1:B8:94:8A:08:92:A4:AE:46:0C:13:3E:4F
X509v3 Authority Key Identifier:
keyid:4E:34:BA:6E:3E:26:94:C7:B3:8E:46:51:AF:EE:06:1B:0B:21:DE:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TjS6bj4mlMezjkZRr-4GGwsh3q4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/02b7d6-269b-4bb2-b455-391768573496/1/TjS6bj4mlMezjkZRr-4GGwsh3q4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/02b7d6-269b-4bb2-b455-391768573496/1/TjS6bj4mlMezjkZRr-4GGwsh3q4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:d1:3b:6c:c6:20:a8:ef:35:d5:c2:0a:46:fd:65:a3:fa:b6:
75:fd:66:0a:b1:b9:c0:a7:d7:47:e4:58:7c:7b:7b:30:ae:ac:
c6:fb:48:a0:55:1d:28:f2:92:31:d5:64:4a:a2:29:d2:55:1e:
8d:01:56:84:91:a2:a2:c1:e6:99:ae:bf:52:5f:fd:85:05:32:
20:d6:10:84:43:bc:83:42:2a:c6:96:83:ec:6b:24:46:98:e3:
c1:21:d1:56:28:a3:6e:4e:5d:0c:ba:10:d1:7e:15:aa:d1:17:
0b:d1:b8:84:e8:2a:42:27:21:b5:6a:62:9e:7c:e4:2d:18:79:
c0:88:4b:a2:b8:8b:8b:7b:b7:8a:56:68:89:89:ff:d1:66:b2:
c8:c2:18:63:ea:dd:d2:e4:68:29:8d:c9:f0:2d:ef:e4:23:9c:
13:27:8b:db:f0:d7:a6:1e:ad:f3:2b:d0:ba:8c:05:81:53:bc:
ff:08:12:79:38:44:3f:ae:52:70:1b:79:96:1e:5a:f5:b9:2d:
4c:ef:e8:c1:cf:23:42:26:36:f8:03:dd:a1:62:ab:cc:08:dc:
62:41:34:7c:48:42:34:c6:04:4c:66:43:79:eb:6f:3c:44:f5:
87:1c:91:65:2a:73:91:60:79:33:e5:b5:4e:3a:e6:62:ed:67:
80:53:bd:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:10:54 2025 by rpki-client