Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/tFmZiZ920uLkzN_IF_mHnPrAa74.mft
File: tFmZiZ920uLkzN_IF_mHnPrAa74.mft (raw, json)
Hash identifier: iq+ZZHcbMaNTTreP+qJsHn/5c0uq3Hg0PvNA43G+0To=
Subject key identifier: FA:78:83:23:64:85:86:4B:0D:2C:B8:46:20:2D:8B:2B:EC:7B:B7:81
Authority key identifier: B4:59:99:89:9F:76:D2:E2:E4:CC:DF:C8:17:F9:87:9C:FA:C0:6B:BE
Certificate issuer: /CN=b45999899f76d2e2e4ccdfc817f9879cfac06bbe
Certificate serial: 0198D65F0806D84B08B6C68AEBE8EBFEFFAE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tFmZiZ920uLkzN_IF_mHnPrAa74.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/tFmZiZ920uLkzN_IF_mHnPrAa74.mft
Manifest number: 0F05
Signing time: Sat 23 Aug 2025 10:00:08 +0000
Manifest this update: Sat 23 Aug 2025 10:00:08 +0000
Manifest next update: Sun 24 Aug 2025 10:00:08 +0000
Files and hashes: 1: tFmZiZ920uLkzN_IF_mHnPrAa74.crl (hash: rfE54Q8jsX7ivpBq0jaOAaPwowQQQsCNaKbkYNBPJy4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/tFmZiZ920uLkzN_IF_mHnPrAa74.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/tFmZiZ920uLkzN_IF_mHnPrAa74.mft
rsync://rpki.ripe.net/repository/DEFAULT/tFmZiZ920uLkzN_IF_mHnPrAa74.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:08:06:d8:4b:08:b6:c6:8a:eb:e8:eb:fe:ff:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b45999899f76d2e2e4ccdfc817f9879cfac06bbe
Validity
Not Before: Aug 23 10:00:08 2025 GMT
Not After : Aug 24 10:00:08 2025 GMT
Subject: CN=fa7883236485864b0d2cb846202d8b2bec7bb781
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:49:88:ff:fa:48:d0:8b:b2:56:81:4e:1a:bb:
d8:a6:21:b7:67:3c:fb:6e:5b:40:7b:10:43:57:17:
7b:65:76:ae:36:0e:cd:83:25:e2:2e:8f:b7:25:59:
74:5d:81:66:77:48:2d:ab:af:41:6e:21:20:e9:6d:
4b:29:9c:e6:88:ef:12:f5:51:e2:42:2e:d0:03:2f:
81:ab:0d:25:cc:a1:b2:70:f8:b3:6f:98:f0:8a:09:
7a:15:cd:41:0f:95:76:f0:83:eb:14:fe:5c:64:5f:
26:09:16:64:ee:38:cc:a0:12:55:4f:c9:46:ed:fa:
2a:1b:8a:f3:fd:93:1a:bb:e8:35:d6:49:ea:ec:3e:
9a:e3:9c:9d:d0:17:12:84:fb:fb:ca:b9:1c:e7:3f:
09:57:07:3e:78:1d:02:ac:54:f3:03:38:14:2f:41:
2c:b3:16:9c:e4:a3:1e:47:3c:13:27:82:88:8c:d5:
f3:30:97:e0:1c:80:a8:03:3b:d2:a1:a7:ed:fd:fa:
51:ec:ef:31:94:4f:bf:e8:b5:0a:7d:26:9f:cb:39:
c8:50:46:7a:9e:50:b0:c0:93:0e:46:f8:07:3b:d5:
32:e2:42:ce:b1:78:d8:e2:75:bc:0c:0e:09:92:27:
25:83:0b:2f:a7:36:32:db:84:13:30:88:bb:07:f3:
d2:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:78:83:23:64:85:86:4B:0D:2C:B8:46:20:2D:8B:2B:EC:7B:B7:81
X509v3 Authority Key Identifier:
keyid:B4:59:99:89:9F:76:D2:E2:E4:CC:DF:C8:17:F9:87:9C:FA:C0:6B:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tFmZiZ920uLkzN_IF_mHnPrAa74.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/tFmZiZ920uLkzN_IF_mHnPrAa74.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/tFmZiZ920uLkzN_IF_mHnPrAa74.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:0f:2d:a9:a3:c3:68:4e:94:88:02:60:ec:b1:fa:d8:79:3a:
0c:7c:91:0e:d8:04:97:63:a6:e3:b1:c0:2e:ae:a2:5b:05:9d:
5d:77:5e:51:89:17:f4:82:10:c0:03:3e:df:e2:44:99:6f:d3:
87:15:3e:a9:2c:8c:51:40:6a:9d:29:fd:cd:9e:78:38:6a:18:
9a:47:83:45:5d:9b:c7:85:d6:6c:c5:65:44:1e:7d:d9:ba:64:
8e:a8:e7:06:68:6e:cf:fe:fa:82:3e:b0:fb:8e:c9:38:c8:53:
44:d4:4d:8e:72:2d:28:2a:23:b5:07:06:6f:12:31:1a:04:4b:
4b:e2:03:b0:b6:cf:97:b6:ad:5c:c1:dd:f8:35:7c:26:45:d2:
a9:ab:e6:a7:bb:60:30:39:79:77:6b:6f:75:79:00:c5:70:6b:
4e:59:f5:94:b5:39:81:81:0d:da:d6:e3:28:2c:ea:66:3f:77:
cd:de:fe:ed:a8:dd:f6:f5:38:2d:67:eb:18:25:3b:d0:28:54:
76:27:57:49:8c:36:3b:22:ac:29:d8:ac:e3:15:a0:8d:58:91:
23:ce:18:3c:0a:5b:17:38:75:3a:ae:85:60:32:82:1e:31:c9:
46:24:6f:3d:1d:74:04:7b:26:7f:e5:5c:93:83:72:3b:00:0e:
0c:88:8a:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:06:13 2025 by rpki-client