Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/a36a67-542b-4f8e-81f0-6e2da60e2834/1/tRFbXBJF3DDhIwQHnslKNe1SfGY.mft
File: tRFbXBJF3DDhIwQHnslKNe1SfGY.mft (raw, json)
Hash identifier: KfPOISbIgn+wk7deMx0Vu5fppLhkRYYKI+QH/zqOfWk=
Subject key identifier: 50:CE:D2:50:55:D3:76:D7:D7:86:7A:F5:E6:A5:84:A7:06:17:AF:20
Authority key identifier: B5:11:5B:5C:12:45:DC:30:E1:23:04:07:9E:C9:4A:35:ED:52:7C:66
Certificate issuer: /CN=b5115b5c1245dc30e12304079ec94a35ed527c66
Certificate serial: 0198D5F1BA17A5B565F81EE87D28F724FDD9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tRFbXBJF3DDhIwQHnslKNe1SfGY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/a36a67-542b-4f8e-81f0-6e2da60e2834/1/tRFbXBJF3DDhIwQHnslKNe1SfGY.mft
Manifest number: 0B
Signing time: Sat 23 Aug 2025 08:00:45 +0000
Manifest this update: Sat 23 Aug 2025 08:00:45 +0000
Manifest next update: Sun 24 Aug 2025 08:00:45 +0000
Files and hashes: 1: tRFbXBJF3DDhIwQHnslKNe1SfGY.crl (hash: KHTbmKn79Eyt895xCPmaxK0P2sHRz4n9NVU9P5yXL5o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/a36a67-542b-4f8e-81f0-6e2da60e2834/1/tRFbXBJF3DDhIwQHnslKNe1SfGY.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/a36a67-542b-4f8e-81f0-6e2da60e2834/1/tRFbXBJF3DDhIwQHnslKNe1SfGY.mft
rsync://rpki.ripe.net/repository/DEFAULT/tRFbXBJF3DDhIwQHnslKNe1SfGY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:f1:ba:17:a5:b5:65:f8:1e:e8:7d:28:f7:24:fd:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5115b5c1245dc30e12304079ec94a35ed527c66
Validity
Not Before: Aug 23 08:00:45 2025 GMT
Not After : Aug 24 08:00:45 2025 GMT
Subject: CN=50ced25055d376d7d7867af5e6a584a70617af20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:3a:65:74:7b:0a:79:9e:ba:b3:94:8a:ca:bc:
ad:f8:e2:f7:c6:14:16:a8:e6:e3:80:0b:ba:b7:35:
dd:13:8a:3d:1f:0e:cc:12:11:93:d0:80:52:40:cf:
f1:a5:43:66:79:d2:51:a1:15:24:fc:c5:02:a2:2c:
22:0f:bc:d5:55:ee:85:56:ea:20:0b:64:d1:76:b6:
2f:c6:bc:fb:14:7a:ea:00:15:56:6a:4e:6b:8b:4d:
f4:7b:88:45:ef:42:ff:d4:79:7d:e3:41:14:55:02:
18:cb:a0:6b:04:8b:ef:f9:c6:45:e4:87:d9:24:3c:
11:0a:14:7e:ab:63:7d:69:b8:34:0e:84:2e:e8:70:
fe:a6:fc:83:c8:a2:bc:05:61:c4:82:af:9f:3d:52:
2d:f2:30:84:3a:67:35:e3:a8:52:c8:65:24:e6:b6:
81:74:8f:c5:ba:ff:07:cd:96:cb:3b:36:f6:25:3d:
57:c2:a4:30:7b:37:37:e8:0a:c6:38:12:83:c0:e2:
33:1f:f1:23:f9:c0:04:0f:b7:86:47:ee:d2:23:ff:
92:1c:63:09:be:cd:18:50:d7:92:84:bc:40:fb:c2:
4b:cc:88:67:b8:57:80:f7:14:b0:df:d3:d8:c8:eb:
1b:bd:25:82:44:d1:7a:98:72:2c:5c:f9:d2:6e:f3:
f5:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:CE:D2:50:55:D3:76:D7:D7:86:7A:F5:E6:A5:84:A7:06:17:AF:20
X509v3 Authority Key Identifier:
keyid:B5:11:5B:5C:12:45:DC:30:E1:23:04:07:9E:C9:4A:35:ED:52:7C:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tRFbXBJF3DDhIwQHnslKNe1SfGY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/a36a67-542b-4f8e-81f0-6e2da60e2834/1/tRFbXBJF3DDhIwQHnslKNe1SfGY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/a36a67-542b-4f8e-81f0-6e2da60e2834/1/tRFbXBJF3DDhIwQHnslKNe1SfGY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:5d:3f:09:60:4b:a2:c6:f8:0c:35:f7:ba:58:3a:41:b7:08:
10:11:06:19:49:c9:31:ac:95:55:a9:01:b2:29:60:77:a8:e5:
51:6b:f5:65:43:96:65:8c:97:17:c5:ad:27:d3:44:10:87:bf:
d8:94:0c:80:4e:ed:53:c3:79:a1:71:0a:0f:a8:e9:58:9f:a2:
89:21:40:f1:da:d7:9a:4c:5f:47:af:27:3f:1c:4b:2b:0a:0e:
96:87:f7:d6:e6:04:57:af:94:27:55:5f:b1:05:d6:2f:2f:29:
fe:55:98:49:74:79:cc:d4:d9:5b:e8:9c:70:ae:3e:32:eb:b2:
d2:5e:92:cd:2c:6d:18:c3:a9:b9:a6:10:6b:95:38:b0:fe:af:
1d:b8:08:12:96:46:0e:b9:0b:c3:fa:5e:9f:e3:8b:a3:41:28:
8c:9f:d7:ad:19:94:f3:1f:3f:42:9d:63:41:68:06:95:c0:8a:
f6:ae:24:b1:59:49:a3:b3:74:93:07:6b:83:ec:fa:7a:05:9d:
8a:71:59:3a:cf:ac:84:7f:1c:97:ce:ce:1b:c5:4a:e9:7f:9f:
a5:7f:f9:52:81:dd:80:09:d1:8b:c8:0a:54:f3:d4:d7:d4:70:
dc:1d:3e:0b:90:c2:d8:83:ca:51:30:be:76:19:d4:d4:8c:70:
98:a4:6b:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:32:05 2025 by rpki-client