Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/9b2fc1-ba58-4957-8540-eb1ed0b487b1/1/TSE3TacxMU8KBRddJbDYmnb24IE.mft
File: TSE3TacxMU8KBRddJbDYmnb24IE.mft (raw, json)
Hash identifier: 5br/2dVo/jdWXYg6OGGv1hTXgf1lOQ29+xwHzDPtlPM=
Subject key identifier: 04:34:4E:EB:3E:A9:C1:64:E3:07:B6:B4:22:EC:23:70:23:A7:AF:52
Authority key identifier: 4D:21:37:4D:A7:31:31:4F:0A:05:17:5D:25:B0:D8:9A:76:F6:E0:81
Certificate issuer: /CN=4d21374da731314f0a05175d25b0d89a76f6e081
Certificate serial: 0198D515F03BDFE281D50996136A970A24D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TSE3TacxMU8KBRddJbDYmnb24IE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/9b2fc1-ba58-4957-8540-eb1ed0b487b1/1/TSE3TacxMU8KBRddJbDYmnb24IE.mft
Manifest number: 05B8
Signing time: Sat 23 Aug 2025 04:00:41 +0000
Manifest this update: Sat 23 Aug 2025 04:00:41 +0000
Manifest next update: Sun 24 Aug 2025 04:00:41 +0000
Files and hashes: 1: TSE3TacxMU8KBRddJbDYmnb24IE.crl (hash: uhHiRkaJCbZw2ys5RiCgC7PDfmYejb+Mu+AWOWHnKiU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/9b2fc1-ba58-4957-8540-eb1ed0b487b1/1/TSE3TacxMU8KBRddJbDYmnb24IE.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/9b2fc1-ba58-4957-8540-eb1ed0b487b1/1/TSE3TacxMU8KBRddJbDYmnb24IE.mft
rsync://rpki.ripe.net/repository/DEFAULT/TSE3TacxMU8KBRddJbDYmnb24IE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 04:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:15:f0:3b:df:e2:81:d5:09:96:13:6a:97:0a:24:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d21374da731314f0a05175d25b0d89a76f6e081
Validity
Not Before: Aug 23 04:00:41 2025 GMT
Not After : Aug 24 04:00:41 2025 GMT
Subject: CN=04344eeb3ea9c164e307b6b422ec237023a7af52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:64:4f:8b:78:0c:ce:f2:3b:37:b6:39:03:05:
e9:f2:6f:2c:ed:01:89:8d:b5:53:8f:64:57:b3:fb:
0d:2f:53:f3:c1:93:ae:e7:79:5b:f3:8f:7f:b7:a8:
32:d9:ba:12:4e:53:d7:5f:3b:a4:85:6b:4c:0f:d9:
17:84:75:cc:e1:55:cb:8d:0e:4f:b6:f7:18:a8:32:
19:99:a1:26:25:85:b5:c7:d4:06:bd:09:a9:14:2c:
6c:17:94:e7:f7:28:e2:8d:a6:82:d5:b0:13:55:42:
9a:82:57:2c:7b:ec:93:50:65:d1:66:61:87:1c:51:
9e:6a:11:72:55:9b:e1:00:d3:01:1a:d6:43:fd:eb:
c2:5e:27:61:70:21:86:f3:c4:0c:d9:b8:2b:83:5d:
20:ad:23:3a:2d:b1:1a:92:8e:3e:11:f1:72:26:45:
86:f7:d1:4d:f1:2f:ac:d8:83:66:04:79:84:9c:8f:
ad:ea:51:f2:bc:20:24:a2:55:ff:4b:f3:ed:47:fe:
db:13:58:a6:17:8f:c0:cd:b8:bb:d1:ca:04:cb:4b:
54:b4:18:b8:28:04:54:3a:47:5c:10:5d:b4:4d:de:
40:b7:19:ab:9f:94:11:ae:bb:19:f4:da:7c:19:45:
36:af:8e:d9:dc:d1:99:9a:e8:bc:5d:f9:9f:73:77:
04:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:34:4E:EB:3E:A9:C1:64:E3:07:B6:B4:22:EC:23:70:23:A7:AF:52
X509v3 Authority Key Identifier:
keyid:4D:21:37:4D:A7:31:31:4F:0A:05:17:5D:25:B0:D8:9A:76:F6:E0:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TSE3TacxMU8KBRddJbDYmnb24IE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/9b2fc1-ba58-4957-8540-eb1ed0b487b1/1/TSE3TacxMU8KBRddJbDYmnb24IE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/9b2fc1-ba58-4957-8540-eb1ed0b487b1/1/TSE3TacxMU8KBRddJbDYmnb24IE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:1a:e2:56:12:59:9f:88:31:15:c4:ee:21:31:cd:4a:57:5d:
5d:22:cb:24:04:21:8d:65:22:ee:25:dd:da:05:5c:31:ba:32:
82:9a:00:aa:f5:d6:0d:0e:59:a4:6f:8b:a2:2b:44:ff:a7:46:
a9:63:e1:b9:7f:1c:a7:9b:f0:ec:be:00:5c:53:91:b1:f6:f5:
ae:dc:3b:7a:79:04:50:83:7c:fa:aa:f1:53:1d:37:b1:02:07:
8c:94:b9:92:9c:f7:20:fc:9b:1c:0b:da:6b:2a:4c:5d:6d:ec:
2b:fa:14:30:9b:25:e6:38:5c:8b:ea:9d:8f:94:6d:cf:cd:ce:
ca:73:d3:c8:c3:8f:6e:a7:71:03:44:53:f4:a8:b9:5c:1f:cc:
4a:24:60:77:cf:17:41:f1:00:1c:46:d9:df:b3:5a:72:5f:88:
96:68:0b:fb:ef:bf:04:4e:29:15:2a:98:d7:c4:ca:04:a8:23:
9b:66:73:56:26:5c:25:9f:5d:7a:d7:9a:6a:d0:3e:dd:ec:96:
2b:81:6e:0f:ec:22:fb:13:b8:cd:12:e5:33:ea:18:f1:19:d2:
63:d4:85:70:eb:ce:cd:f5:b4:07:5d:50:a1:ff:18:dc:73:08:
14:00:e1:ee:a8:bb:70:67:d9:72:d8:06:7c:c9:30:35:9e:28:
da:21:85:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:42:16 2025 by rpki-client