Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/f89fbd-5142-4bcc-bab1-994ef87db3a3/1/tIO8CnGlLQzzmJUiNnV1lZ69zvU.mft
File: tIO8CnGlLQzzmJUiNnV1lZ69zvU.mft (raw, json)
Hash identifier: yoaigPTblbrAqYcNh/75BwWNWw/h4+UAKr/83ypEiKI=
Subject key identifier: 52:20:FF:CF:06:15:E6:2E:70:02:F0:0D:49:3A:20:AC:DF:6D:47:5E
Authority key identifier: B4:83:BC:0A:71:A5:2D:0C:F3:98:95:22:36:75:75:95:9E:BD:CE:F5
Certificate issuer: /CN=b483bc0a71a52d0cf3989522367575959ebdcef5
Certificate serial: 0199FE4712208C6823E94944E02A2D406E57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tIO8CnGlLQzzmJUiNnV1lZ69zvU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/f89fbd-5142-4bcc-bab1-994ef87db3a3/1/tIO8CnGlLQzzmJUiNnV1lZ69zvU.mft
Manifest number: 1671
Signing time: Sun 19 Oct 2025 21:01:34 +0000
Manifest this update: Sun 19 Oct 2025 21:01:34 +0000
Manifest next update: Mon 20 Oct 2025 21:01:34 +0000
Files and hashes: 1: tIO8CnGlLQzzmJUiNnV1lZ69zvU.crl (hash: 1N704Yok3Y83d6dtYwCwus9zxXhK1LveipocSFcX/aE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/f89fbd-5142-4bcc-bab1-994ef87db3a3/1/tIO8CnGlLQzzmJUiNnV1lZ69zvU.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/f89fbd-5142-4bcc-bab1-994ef87db3a3/1/tIO8CnGlLQzzmJUiNnV1lZ69zvU.mft
rsync://rpki.ripe.net/repository/DEFAULT/tIO8CnGlLQzzmJUiNnV1lZ69zvU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:47:12:20:8c:68:23:e9:49:44:e0:2a:2d:40:6e:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b483bc0a71a52d0cf3989522367575959ebdcef5
Validity
Not Before: Oct 19 21:01:34 2025 GMT
Not After : Oct 20 21:01:34 2025 GMT
Subject: CN=5220ffcf0615e62e7002f00d493a20acdf6d475e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:c9:f0:63:e5:78:74:c7:43:fc:1c:23:fa:3b:
8c:21:97:d5:e8:54:2a:39:66:ae:e5:14:5c:f1:9d:
2e:cc:68:65:72:10:fe:eb:58:3a:b2:a1:10:ec:e6:
18:0b:80:08:a1:b4:98:06:f4:ac:c4:2e:7a:c7:75:
70:29:60:b1:12:ab:a4:a3:21:d5:0d:9a:0b:64:d7:
93:9e:43:c2:5d:83:bd:67:b6:15:53:a4:3f:a3:cf:
79:73:50:72:af:24:53:39:f7:29:91:a5:fa:22:4d:
8f:60:db:17:31:bf:73:7f:d7:1c:be:6e:b9:98:14:
ba:83:99:27:48:b1:13:87:ab:98:1e:49:11:5d:2c:
dd:65:ec:af:29:e0:d7:ee:69:54:73:79:28:61:cf:
b2:3d:88:4d:21:30:a7:14:8d:6a:f4:dd:4e:62:c2:
4d:e0:ac:b2:ff:45:9d:13:e7:29:cf:d5:90:46:ab:
ba:1f:b2:ac:2f:0a:3a:ae:b3:62:00:48:96:db:3b:
51:e1:ee:96:37:f4:9e:c7:de:f3:15:12:43:28:12:
83:d9:ae:ef:f6:75:52:32:10:cc:6c:8e:8b:07:07:
6c:c5:17:32:8d:fa:b4:67:e3:5a:89:60:5a:5e:7e:
73:2a:92:56:32:72:c3:41:c0:d9:76:87:97:d8:1c:
3f:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:20:FF:CF:06:15:E6:2E:70:02:F0:0D:49:3A:20:AC:DF:6D:47:5E
X509v3 Authority Key Identifier:
keyid:B4:83:BC:0A:71:A5:2D:0C:F3:98:95:22:36:75:75:95:9E:BD:CE:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tIO8CnGlLQzzmJUiNnV1lZ69zvU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/f89fbd-5142-4bcc-bab1-994ef87db3a3/1/tIO8CnGlLQzzmJUiNnV1lZ69zvU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/f89fbd-5142-4bcc-bab1-994ef87db3a3/1/tIO8CnGlLQzzmJUiNnV1lZ69zvU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:a3:32:f7:f7:d3:5b:33:0a:f7:ec:1a:40:a6:2d:6b:cb:f7:
af:91:fd:ee:79:1b:a2:8b:64:61:27:ce:51:7a:cf:ec:6b:f1:
17:6a:29:cf:52:a8:4e:54:c7:09:f7:12:7d:0b:7b:a2:30:44:
4b:f4:af:66:d6:7b:4b:c6:c5:9f:63:7e:9e:e9:91:7a:be:88:
6c:ea:32:ba:0c:d8:d3:68:fb:e5:df:92:a2:66:33:d3:e2:41:
70:c0:47:7c:ce:8d:0f:ec:1a:9c:81:0c:6d:ee:08:a5:00:e3:
4d:0f:e4:55:8e:4e:65:87:69:17:8c:a3:2a:ee:9c:c4:c7:a0:
15:93:7f:39:2b:ee:e3:49:74:71:00:33:be:b8:f1:37:fe:e0:
ba:aa:60:86:d8:2f:d0:6b:8c:1d:08:40:e3:e7:94:44:9f:43:
4c:db:38:ac:5c:56:f0:db:22:c7:59:cf:63:c1:6e:70:e8:20:
d1:36:f9:25:dd:66:b9:01:a6:3f:42:ac:97:ca:a7:c7:cd:dc:
cf:70:45:29:52:cf:04:e1:b4:13:02:c5:ba:71:43:3e:18:cb:
3b:d8:ed:f6:9e:79:f4:2b:4e:7c:da:a5:b8:e3:2e:68:7e:df:
26:f0:cc:8f:78:c3:89:24:f9:6a:ab:5d:4f:0f:1d:90:3e:f3:
48:65:e3:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 00:02:53 2025 by rpki-client