Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/677106-4099-4aef-8cc6-e960a50cdc81/1/tPo4W-BSv6QF36zSnyarbwAeYEc.mft
File: tPo4W-BSv6QF36zSnyarbwAeYEc.mft (raw, json)
Hash identifier: sp2zZsnopeJdGQFnqB+eq2T1qDa5gyPUuxELAAL7Deg=
Subject key identifier: 32:AB:09:D3:82:16:8D:28:B1:B8:B7:B5:E6:88:12:C0:70:20:5E:D6
Authority key identifier: B4:FA:38:5B:E0:52:BF:A4:05:DF:AC:D2:9F:26:AB:6F:00:1E:60:47
Certificate issuer: /CN=b4fa385be052bfa405dfacd29f26ab6f001e6047
Certificate serial: 0198D583E676DA19D05A2A0244003C575962
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tPo4W-BSv6QF36zSnyarbwAeYEc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/677106-4099-4aef-8cc6-e960a50cdc81/1/tPo4W-BSv6QF36zSnyarbwAeYEc.mft
Manifest number: 04C3
Signing time: Sat 23 Aug 2025 06:00:47 +0000
Manifest this update: Sat 23 Aug 2025 06:00:47 +0000
Manifest next update: Sun 24 Aug 2025 06:00:47 +0000
Files and hashes: 1: tPo4W-BSv6QF36zSnyarbwAeYEc.crl (hash: RjHGx80p/UztVP5+BzqBRmCS2M+d12DxBhGozJ5BeUA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/677106-4099-4aef-8cc6-e960a50cdc81/1/tPo4W-BSv6QF36zSnyarbwAeYEc.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/677106-4099-4aef-8cc6-e960a50cdc81/1/tPo4W-BSv6QF36zSnyarbwAeYEc.mft
rsync://rpki.ripe.net/repository/DEFAULT/tPo4W-BSv6QF36zSnyarbwAeYEc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:e6:76:da:19:d0:5a:2a:02:44:00:3c:57:59:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4fa385be052bfa405dfacd29f26ab6f001e6047
Validity
Not Before: Aug 23 06:00:47 2025 GMT
Not After : Aug 24 06:00:47 2025 GMT
Subject: CN=32ab09d382168d28b1b8b7b5e68812c070205ed6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:77:5d:46:e7:7b:03:11:ad:03:66:76:d9:ae:
ca:2a:e8:18:5a:a0:01:81:ca:77:c6:91:86:00:60:
aa:7f:b6:62:db:30:40:9b:78:7b:45:be:06:59:85:
cd:70:d5:17:e5:f5:f8:f4:18:36:89:b9:da:32:64:
e5:72:89:38:7d:57:5e:ee:47:a7:9f:10:ec:29:af:
18:9d:b5:72:4d:a9:66:f8:97:db:de:fe:bd:af:73:
ed:72:db:e7:9a:4e:6b:4d:5e:f7:c4:06:e7:97:cb:
7f:7d:d6:64:ef:bb:bc:f1:5d:aa:59:e6:85:bf:d2:
a5:72:e5:a9:f7:75:0e:48:23:be:3f:6e:f3:31:38:
59:33:ca:83:6a:ec:a1:2f:1c:92:fb:ee:1b:4e:f8:
03:a8:5c:91:05:30:1c:2f:07:b7:85:2a:7c:91:cb:
88:c6:65:76:07:b7:e6:9e:d5:32:44:1d:88:95:50:
d2:3d:2b:d6:be:d0:81:9c:e7:e0:f2:a2:a8:c3:d0:
13:78:87:5b:b2:0f:fd:88:04:54:e8:04:9d:55:fe:
5f:ac:54:fd:6b:a0:d5:16:7c:c5:30:39:b3:27:ba:
3a:f7:64:13:78:87:09:11:9c:94:0b:4c:34:ad:e5:
0d:54:e3:c6:03:bf:e3:4c:46:35:a0:96:84:7d:24:
2b:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:AB:09:D3:82:16:8D:28:B1:B8:B7:B5:E6:88:12:C0:70:20:5E:D6
X509v3 Authority Key Identifier:
keyid:B4:FA:38:5B:E0:52:BF:A4:05:DF:AC:D2:9F:26:AB:6F:00:1E:60:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tPo4W-BSv6QF36zSnyarbwAeYEc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/677106-4099-4aef-8cc6-e960a50cdc81/1/tPo4W-BSv6QF36zSnyarbwAeYEc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/677106-4099-4aef-8cc6-e960a50cdc81/1/tPo4W-BSv6QF36zSnyarbwAeYEc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:1d:c2:15:4a:54:6c:0e:88:13:f0:37:dd:3a:61:04:fc:87:
19:60:bc:92:69:a4:89:11:ef:f6:8c:b9:b4:28:9c:60:72:d8:
c4:dc:1e:4b:1a:77:14:8a:5f:e7:96:2a:e4:3a:ec:06:c5:a7:
9f:03:32:de:41:f0:68:ba:28:ac:0e:52:14:13:a1:ed:bf:09:
8a:68:7a:14:42:37:01:68:57:d1:1e:b6:be:28:ac:e3:cc:dd:
11:41:dc:31:f8:ba:c7:bf:bc:21:b2:25:e0:e8:b8:5e:94:7a:
66:4c:d9:56:1d:2e:5c:aa:c9:8c:ea:0e:dd:a2:5f:a7:3b:64:
24:2a:7a:00:4b:df:fb:8c:40:a1:65:01:37:a2:09:06:75:54:
c0:96:58:e9:d5:32:0a:ca:78:df:f6:e4:51:3d:8b:2d:89:e2:
24:44:ba:d1:62:1b:39:56:15:9b:4b:ee:d4:8b:f6:87:c9:d1:
95:e9:2d:5e:86:b9:03:18:7e:5c:10:e9:98:74:19:7e:52:c0:
0f:10:5e:76:ea:cd:a6:a7:92:e7:b5:38:b1:e8:43:ba:0e:be:
7d:df:41:12:c8:c8:ed:59:c1:33:01:c2:f6:e4:bb:63:b6:5b:
bd:8f:ca:92:bb:61:67:79:31:8a:cb:36:16:37:7e:6f:c2:b5:
2f:20:e9:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:38:40 2025 by rpki-client