Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/e79d38-a8ea-47c2-95dc-d194a7b05dda/1/TM6YuMJCaF3bYPTiEJwr01GmQn8.mft
File: TM6YuMJCaF3bYPTiEJwr01GmQn8.mft (raw, json)
Hash identifier: 9mYiJAOaVGlxBcB86PATJGnP1L2+yB7Sgxju6f3esHg=
Subject key identifier: C3:45:1D:2A:26:50:C1:43:E1:6B:A2:B5:09:85:7F:F6:4D:22:B8:4B
Authority key identifier: 4C:CE:98:B8:C2:42:68:5D:DB:60:F4:E2:10:9C:2B:D3:51:A6:42:7F
Certificate issuer: /CN=4cce98b8c242685ddb60f4e2109c2bd351a6427f
Certificate serial: 0198D472F7E600494D1EF695DCB72118E781
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TM6YuMJCaF3bYPTiEJwr01GmQn8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/e79d38-a8ea-47c2-95dc-d194a7b05dda/1/TM6YuMJCaF3bYPTiEJwr01GmQn8.mft
Manifest number: 1647
Signing time: Sat 23 Aug 2025 01:02:40 +0000
Manifest this update: Sat 23 Aug 2025 01:02:40 +0000
Manifest next update: Sun 24 Aug 2025 01:02:40 +0000
Files and hashes: 1: TM6YuMJCaF3bYPTiEJwr01GmQn8.crl (hash: 4y/M6uF3M1ilzER2obGfv/ytjeyUrxfKsXk8GpSmFv8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/e79d38-a8ea-47c2-95dc-d194a7b05dda/1/TM6YuMJCaF3bYPTiEJwr01GmQn8.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/e79d38-a8ea-47c2-95dc-d194a7b05dda/1/TM6YuMJCaF3bYPTiEJwr01GmQn8.mft
rsync://rpki.ripe.net/repository/DEFAULT/TM6YuMJCaF3bYPTiEJwr01GmQn8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:72:f7:e6:00:49:4d:1e:f6:95:dc:b7:21:18:e7:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4cce98b8c242685ddb60f4e2109c2bd351a6427f
Validity
Not Before: Aug 23 01:02:40 2025 GMT
Not After : Aug 24 01:02:40 2025 GMT
Subject: CN=c3451d2a2650c143e16ba2b509857ff64d22b84b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:a2:37:b5:20:96:b4:7a:f9:98:f6:1d:d8:89:
8b:ba:31:0a:ca:9c:4f:4a:ea:05:9d:9a:4f:ea:86:
7b:b1:02:d9:26:0d:b4:8b:77:ab:c7:10:e8:17:b4:
0d:10:7f:67:b0:19:b4:8b:a0:ec:46:1b:4d:04:37:
62:a7:86:dd:19:07:32:be:d8:e8:d7:e8:7d:f2:d1:
20:1a:b0:5c:c6:84:e8:9c:ca:0a:87:0a:23:a3:ba:
57:50:82:da:d7:42:39:b1:58:d3:77:b7:8b:8a:78:
8a:ab:7d:73:c6:4e:13:2c:bf:58:81:f1:36:3c:af:
ac:1a:e2:6f:5f:30:e2:01:29:dc:18:09:ae:16:ed:
99:b8:a0:88:64:38:6a:8b:23:e6:f9:35:e3:00:d2:
da:87:e2:43:3f:79:81:64:bf:93:7f:e6:fd:cd:83:
ef:3f:67:dd:6d:9d:17:ba:33:47:7e:32:4c:bc:d5:
34:70:9b:12:bf:f1:91:cf:bb:94:7a:91:ba:18:2d:
30:9a:2b:5d:85:45:24:c5:7e:ac:4b:3d:e5:9b:91:
14:70:60:cf:80:bd:d5:61:ed:12:61:29:69:e0:49:
3c:64:3c:bf:38:6a:66:86:98:dd:b5:97:58:51:dd:
fc:fb:10:8d:4c:fc:0b:43:c7:a4:f4:ec:0a:f2:d1:
b6:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:45:1D:2A:26:50:C1:43:E1:6B:A2:B5:09:85:7F:F6:4D:22:B8:4B
X509v3 Authority Key Identifier:
keyid:4C:CE:98:B8:C2:42:68:5D:DB:60:F4:E2:10:9C:2B:D3:51:A6:42:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TM6YuMJCaF3bYPTiEJwr01GmQn8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/e79d38-a8ea-47c2-95dc-d194a7b05dda/1/TM6YuMJCaF3bYPTiEJwr01GmQn8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/e79d38-a8ea-47c2-95dc-d194a7b05dda/1/TM6YuMJCaF3bYPTiEJwr01GmQn8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:2b:3f:43:2c:30:b7:26:53:87:58:8e:c3:14:5b:54:4a:be:
57:94:92:2c:90:94:7a:33:92:09:1e:50:7b:67:40:c5:2f:5d:
ce:f5:58:f4:c0:9f:8d:82:1a:52:bc:a4:74:0b:bb:33:3f:cb:
d0:e3:67:56:eb:c7:20:98:b4:fe:4e:5d:60:eb:65:57:2c:fe:
44:de:b7:4d:af:5e:bb:71:89:98:ad:2f:19:2f:75:06:11:81:
9e:7c:06:c8:28:d6:db:3e:ab:d6:47:fe:56:dd:95:d4:f0:4f:
9e:73:64:67:45:46:c8:d1:3c:0b:d3:7a:79:31:46:d9:93:36:
2a:bb:b1:dc:ad:a8:2a:b2:9f:ec:b1:f8:f7:1c:33:86:bb:ce:
5a:b0:e7:89:0c:14:0d:ad:26:c3:e6:09:66:0b:9d:a9:7e:ee:
70:eb:49:da:a0:02:9a:3c:c7:a7:36:7d:d3:57:54:89:cd:7b:
d7:49:aa:0b:b9:12:cf:92:a8:a4:6b:64:53:18:47:4a:90:5f:
f9:85:4a:d8:3f:26:2c:48:ee:50:46:44:96:95:17:00:76:23:
6b:19:62:0b:24:c5:3a:fd:00:fe:18:5e:aa:be:fb:22:77:69:
60:72:16:de:9c:9b:e5:c8:88:c4:92:70:4e:02:75:bc:03:eb:
7e:9b:48:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:25:42 2025 by rpki-client