Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/887501-4d8e-4beb-9590-65079b75868a/1/TTpxp39MqbpTb5hhKpxW1AwMO50.mft
File: TTpxp39MqbpTb5hhKpxW1AwMO50.mft (raw, json)
Hash identifier: KIqShJ/7X5lud3O4xC1Yl++m9su1eabVwT7wuZ1BdGY=
Subject key identifier: 86:B9:FA:AF:F3:6F:54:C6:5E:A2:35:44:63:E2:90:8B:E9:81:70:72
Authority key identifier: 4D:3A:71:A7:7F:4C:A9:BA:53:6F:98:61:2A:9C:56:D4:0C:0C:3B:9D
Certificate issuer: /CN=4d3a71a77f4ca9ba536f98612a9c56d40c0c3b9d
Certificate serial: 0198D660EE295CA9260F5D0590D802C45E30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TTpxp39MqbpTb5hhKpxW1AwMO50.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/887501-4d8e-4beb-9590-65079b75868a/1/TTpxp39MqbpTb5hhKpxW1AwMO50.mft
Manifest number: 1647
Signing time: Sat 23 Aug 2025 10:02:13 +0000
Manifest this update: Sat 23 Aug 2025 10:02:13 +0000
Manifest next update: Sun 24 Aug 2025 10:02:13 +0000
Files and hashes: 1: TTpxp39MqbpTb5hhKpxW1AwMO50.crl (hash: i3C8kiVWj5GMfRN+BYmBlQ9FAx1WO4DKUo95KmWfaeE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/887501-4d8e-4beb-9590-65079b75868a/1/TTpxp39MqbpTb5hhKpxW1AwMO50.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/887501-4d8e-4beb-9590-65079b75868a/1/TTpxp39MqbpTb5hhKpxW1AwMO50.mft
rsync://rpki.ripe.net/repository/DEFAULT/TTpxp39MqbpTb5hhKpxW1AwMO50.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:ee:29:5c:a9:26:0f:5d:05:90:d8:02:c4:5e:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d3a71a77f4ca9ba536f98612a9c56d40c0c3b9d
Validity
Not Before: Aug 23 10:02:13 2025 GMT
Not After : Aug 24 10:02:13 2025 GMT
Subject: CN=86b9faaff36f54c65ea2354463e2908be9817072
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:31:68:cb:da:65:97:8b:4b:02:e8:2a:56:9d:
bb:c1:44:37:e8:a5:d3:03:1a:dc:9e:d8:f1:15:eb:
a8:44:e1:24:44:97:b7:83:34:03:57:1a:7c:0c:a6:
3b:75:39:a6:8d:b7:c2:05:7d:95:eb:9f:24:63:f3:
db:08:8b:c8:51:c5:7b:30:54:2c:ce:a3:1c:9c:25:
f1:e4:8b:ea:26:f3:6a:a9:23:4d:be:25:0b:b0:6e:
7c:81:70:ab:ae:81:c4:b0:5b:26:42:d8:e0:19:2f:
6b:4a:61:22:85:11:9b:93:8d:0a:be:ca:d0:b4:ae:
86:d0:40:3e:33:da:a8:94:7d:b6:19:e0:0c:25:64:
ad:b5:44:ee:28:6d:71:b5:66:59:3e:51:0e:2b:2f:
c2:cf:35:4c:59:7a:eb:a6:a3:91:b9:70:53:8a:f5:
37:e9:f6:ba:3f:61:83:0e:0f:22:6b:e6:b7:9b:6c:
9d:ee:ec:6c:89:64:33:7f:52:35:2c:44:73:21:a9:
44:8f:6e:1d:0f:c8:af:49:35:de:3c:6c:76:36:79:
81:8b:31:46:5a:35:fd:3f:63:6b:ef:d9:45:f4:f3:
f1:a2:92:17:b3:c3:f3:39:52:5e:79:cb:c8:da:13:
49:79:f5:15:c1:dc:12:ac:b9:a4:69:ea:b9:4f:75:
39:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:B9:FA:AF:F3:6F:54:C6:5E:A2:35:44:63:E2:90:8B:E9:81:70:72
X509v3 Authority Key Identifier:
keyid:4D:3A:71:A7:7F:4C:A9:BA:53:6F:98:61:2A:9C:56:D4:0C:0C:3B:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TTpxp39MqbpTb5hhKpxW1AwMO50.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/887501-4d8e-4beb-9590-65079b75868a/1/TTpxp39MqbpTb5hhKpxW1AwMO50.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/887501-4d8e-4beb-9590-65079b75868a/1/TTpxp39MqbpTb5hhKpxW1AwMO50.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:90:9e:cb:f0:df:b4:b5:79:85:41:e3:de:bd:29:c8:57:b1:
d1:b5:2d:0a:ba:8b:50:73:a6:51:97:03:35:a4:19:0b:9d:06:
82:dd:70:94:f2:fc:40:0a:6d:52:95:5a:2a:13:d8:37:92:4a:
1c:92:16:fa:d4:b6:2f:d6:36:6f:fe:3f:3a:e9:27:8f:74:5f:
01:d8:02:57:27:7f:b0:84:2a:af:4c:96:ed:d1:75:89:09:f9:
da:da:53:02:08:e8:e0:30:86:a6:69:58:3b:74:ce:23:d7:38:
4d:0f:e8:1e:66:10:8f:08:03:4c:6a:23:0b:57:70:75:5c:29:
2c:f3:5d:61:93:14:b6:a7:09:b9:4b:f4:cd:b0:ec:4a:6a:89:
a8:7b:20:a5:d2:24:9a:0a:d6:09:eb:b4:f2:a7:7f:cd:38:f4:
80:ff:d2:06:42:a8:7d:74:97:55:ac:f3:df:78:38:6b:02:50:
6e:72:06:07:01:78:79:b1:1c:c2:6d:2c:fa:aa:43:b4:02:05:
2e:cf:cb:1a:62:2a:e6:ea:b4:f4:f7:77:d1:56:db:08:0a:7f:
67:11:88:af:36:33:0d:eb:f9:83:51:4c:d1:1f:06:c4:fb:a9:
98:b7:5d:b2:53:97:f7:a7:77:b7:42:3a:12:48:c5:2f:26:54:
7b:2d:a6:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:42:07 2025 by rpki-client