Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/51e8b5-7e2c-4008-bf83-b12eb1ceaa14/1/TNN3vorxFHipq-Jx-L3i3j0zNAg.mft
File: TNN3vorxFHipq-Jx-L3i3j0zNAg.mft (raw, json)
Hash identifier: wfwXjzLNKk8tIjhZs0PpCPFVPpc98n48Drg9NlMr9WI=
Subject key identifier: AC:9F:86:C0:5E:74:74:24:6C:23:0B:7A:15:28:D1:0F:38:96:1B:8E
Authority key identifier: 4C:D3:77:BE:8A:F1:14:78:A9:AB:E2:71:F8:BD:E2:DE:3D:33:34:08
Certificate issuer: /CN=4cd377be8af11478a9abe271f8bde2de3d333408
Certificate serial: 0198D4E08706CEE44A26FD9154697D3D6112
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TNN3vorxFHipq-Jx-L3i3j0zNAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/51e8b5-7e2c-4008-bf83-b12eb1ceaa14/1/TNN3vorxFHipq-Jx-L3i3j0zNAg.mft
Manifest number: 0899
Signing time: Sat 23 Aug 2025 03:02:20 +0000
Manifest this update: Sat 23 Aug 2025 03:02:20 +0000
Manifest next update: Sun 24 Aug 2025 03:02:20 +0000
Files and hashes: 1: TNN3vorxFHipq-Jx-L3i3j0zNAg.crl (hash: KWGuScbg7ougIq6tABIqBl0/XEI2G7NnjzAdKfUpfyE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/51e8b5-7e2c-4008-bf83-b12eb1ceaa14/1/TNN3vorxFHipq-Jx-L3i3j0zNAg.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/51e8b5-7e2c-4008-bf83-b12eb1ceaa14/1/TNN3vorxFHipq-Jx-L3i3j0zNAg.mft
rsync://rpki.ripe.net/repository/DEFAULT/TNN3vorxFHipq-Jx-L3i3j0zNAg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:02:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:87:06:ce:e4:4a:26:fd:91:54:69:7d:3d:61:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4cd377be8af11478a9abe271f8bde2de3d333408
Validity
Not Before: Aug 23 03:02:20 2025 GMT
Not After : Aug 24 03:02:20 2025 GMT
Subject: CN=ac9f86c05e7474246c230b7a1528d10f38961b8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:60:cd:d6:13:18:15:3b:7c:0f:5e:b6:3b:60:
a2:a7:4a:13:d2:2e:5b:ab:63:21:55:f5:f5:16:83:
df:8a:b0:0f:a9:08:29:fd:6b:e0:c0:51:7d:1c:48:
4f:a4:25:2a:7b:74:37:98:28:65:82:0b:b9:34:36:
1a:93:3a:cb:24:4e:84:c2:1f:ef:38:ed:42:02:9e:
74:3b:4b:ed:0e:d9:8d:ad:0f:6d:e8:df:d1:d2:be:
ed:db:60:05:b7:2c:50:4d:74:ba:1e:1c:f1:15:d3:
7a:6a:a7:e7:ff:a5:14:3e:98:60:d3:d3:39:64:9c:
f9:59:ca:05:b5:6e:e7:f4:8b:0d:70:97:59:db:c2:
9c:c4:40:8b:a9:c2:dc:8b:c8:16:53:9f:82:82:57:
29:8d:42:12:6a:44:26:d7:4d:5c:20:cc:d7:c9:69:
14:01:e1:92:5a:66:61:35:87:75:fa:66:8f:28:84:
f0:55:f1:eb:ec:e6:3d:4e:61:d4:a5:de:32:50:e3:
f9:12:7c:2a:ea:3c:fd:95:ad:70:34:dd:f3:ff:11:
c7:c3:67:15:d9:f0:58:1a:5c:87:e5:da:52:04:9d:
91:87:dd:9b:dd:40:fe:6a:55:26:71:8c:4a:fa:55:
38:07:b2:d2:b6:9a:f6:3d:52:7b:d3:b0:8e:58:51:
88:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:9F:86:C0:5E:74:74:24:6C:23:0B:7A:15:28:D1:0F:38:96:1B:8E
X509v3 Authority Key Identifier:
keyid:4C:D3:77:BE:8A:F1:14:78:A9:AB:E2:71:F8:BD:E2:DE:3D:33:34:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TNN3vorxFHipq-Jx-L3i3j0zNAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/51e8b5-7e2c-4008-bf83-b12eb1ceaa14/1/TNN3vorxFHipq-Jx-L3i3j0zNAg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/51e8b5-7e2c-4008-bf83-b12eb1ceaa14/1/TNN3vorxFHipq-Jx-L3i3j0zNAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:6f:35:d9:2a:df:44:18:ce:c0:9e:41:3a:5c:8d:94:e3:89:
0a:92:17:6a:b9:f5:21:53:2d:f7:c2:25:db:31:5c:b5:c1:c3:
91:8c:2e:a1:85:de:a4:62:5e:58:98:7d:08:02:c2:77:a7:30:
61:da:95:2a:cb:87:a7:20:84:09:e6:23:bc:93:16:c7:2c:18:
5b:49:30:51:8b:16:d5:b3:dc:4c:20:e3:7c:c1:b2:9e:c7:94:
3f:82:78:a4:ea:a2:8b:36:ec:ac:8a:8a:da:fb:2b:ae:7c:6a:
c2:ba:0e:42:06:b8:5b:d9:41:58:9a:04:93:01:3e:1b:81:8f:
35:d3:08:9c:d0:6c:19:98:7e:c8:54:63:36:73:f9:3c:6a:e3:
ae:61:10:1d:81:08:f6:0c:55:11:64:49:8a:56:19:c9:d5:48:
2d:0d:28:7f:88:4f:04:2b:3b:de:65:15:8e:06:10:7b:e5:f1:
4f:1f:1f:80:3c:9b:a4:6d:b1:1d:7a:de:15:db:45:1d:8d:d8:
e1:cf:01:22:9d:9e:33:11:52:a4:c7:fa:c8:5a:11:00:a0:a4:
f6:c8:a2:cc:1c:ff:a0:43:c0:08:7b:c9:3f:14:52:6f:33:f8:
32:4e:2f:a3:b5:1a:1c:65:b1:0d:1d:94:f3:60:c0:1b:54:c0:
28:ae:9b:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:12:24 2025 by rpki-client