Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/7a011b-31a4-499f-a391-0329c78a4cfa/1/TvJo4UPX5E0UNk0dKOhtw-VQqrc.mft
File: TvJo4UPX5E0UNk0dKOhtw-VQqrc.mft (raw, json)
Hash identifier: cRAGSWThZnI7HkKiraDGFAEALX3eDHaVc8BZHxNuIIc=
Subject key identifier: A9:09:81:10:04:2E:91:AB:21:9F:8D:59:7D:59:68:72:C4:AF:34:6E
Authority key identifier: 4E:F2:68:E1:43:D7:E4:4D:14:36:4D:1D:28:E8:6D:C3:E5:50:AA:B7
Certificate issuer: /CN=4ef268e143d7e44d14364d1d28e86dc3e550aab7
Certificate serial: 0198D660DDE7926C2D6AF79AD3DFD33B144C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TvJo4UPX5E0UNk0dKOhtw-VQqrc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/7a011b-31a4-499f-a391-0329c78a4cfa/1/TvJo4UPX5E0UNk0dKOhtw-VQqrc.mft
Manifest number: 1646
Signing time: Sat 23 Aug 2025 10:02:09 +0000
Manifest this update: Sat 23 Aug 2025 10:02:09 +0000
Manifest next update: Sun 24 Aug 2025 10:02:09 +0000
Files and hashes: 1: TvJo4UPX5E0UNk0dKOhtw-VQqrc.crl (hash: ML2FgKR9GIfPG5pZ7u6F6Ev1D86jMuJuJ+A+kWfwi+0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/7a011b-31a4-499f-a391-0329c78a4cfa/1/TvJo4UPX5E0UNk0dKOhtw-VQqrc.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/7a011b-31a4-499f-a391-0329c78a4cfa/1/TvJo4UPX5E0UNk0dKOhtw-VQqrc.mft
rsync://rpki.ripe.net/repository/DEFAULT/TvJo4UPX5E0UNk0dKOhtw-VQqrc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 10:02:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:dd:e7:92:6c:2d:6a:f7:9a:d3:df:d3:3b:14:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ef268e143d7e44d14364d1d28e86dc3e550aab7
Validity
Not Before: Aug 23 10:02:09 2025 GMT
Not After : Aug 24 10:02:09 2025 GMT
Subject: CN=a9098110042e91ab219f8d597d596872c4af346e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:b1:d2:df:5f:4e:6d:89:a3:1d:12:81:3f:dc:
78:58:a0:39:29:a3:66:44:68:66:df:55:71:4a:10:
71:68:6e:77:ac:36:57:5b:99:5f:84:cd:5a:3a:88:
e8:f0:3e:c7:a9:b9:a3:f6:3f:a7:79:74:94:7e:28:
a8:d1:d1:ba:cf:56:6e:2b:74:c2:ee:ce:26:8f:ff:
53:1b:0d:e1:67:4b:ba:5b:f6:e9:bc:5a:67:fa:d1:
73:4a:26:93:3a:7b:5e:51:ee:a2:aa:33:fe:89:e0:
a6:11:f6:52:ba:02:23:45:9d:9b:54:67:90:e1:83:
ad:3a:87:37:e6:61:a7:7c:62:2f:ab:d9:8a:0c:8d:
fb:e1:2a:b5:bf:f6:39:00:74:95:ba:da:10:2f:b1:
ae:00:3e:15:36:8d:36:5e:03:b4:89:c2:74:29:d7:
07:a0:01:45:6c:14:af:57:0b:ba:a9:91:7a:4c:e6:
08:f8:38:ac:4e:15:ac:32:0d:04:f6:d4:94:1d:51:
e0:74:51:d6:c2:ab:6c:e8:fa:02:44:42:f6:35:82:
19:35:fb:d3:a2:f5:d3:a1:ab:e1:4c:f3:bf:ba:d6:
56:c2:1f:ec:5e:68:8d:e3:af:ee:ae:d4:e0:c4:67:
70:cb:dc:3b:6d:7a:a8:88:b9:61:0b:da:bd:df:ce:
e3:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:09:81:10:04:2E:91:AB:21:9F:8D:59:7D:59:68:72:C4:AF:34:6E
X509v3 Authority Key Identifier:
keyid:4E:F2:68:E1:43:D7:E4:4D:14:36:4D:1D:28:E8:6D:C3:E5:50:AA:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TvJo4UPX5E0UNk0dKOhtw-VQqrc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/7a011b-31a4-499f-a391-0329c78a4cfa/1/TvJo4UPX5E0UNk0dKOhtw-VQqrc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/7a011b-31a4-499f-a391-0329c78a4cfa/1/TvJo4UPX5E0UNk0dKOhtw-VQqrc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:9f:7e:aa:0e:6e:ba:69:51:e8:d3:c3:59:20:23:64:85:a6:
05:27:09:f0:ae:18:c7:5a:09:9e:56:91:1d:5e:a9:b2:a0:45:
93:43:1d:1a:1c:98:19:13:92:4c:47:fa:bd:55:b7:67:f1:42:
5d:3e:59:63:b6:61:e3:d4:28:34:b7:79:b1:7e:92:cc:9f:52:
43:42:d2:bd:db:b7:2b:77:0a:e5:f7:d3:c8:fe:fd:cd:77:ba:
da:b9:b0:92:ff:63:5f:02:b2:1d:44:f6:7d:e8:14:e1:24:4b:
6b:fd:4d:f8:47:06:64:aa:d4:6d:f9:d5:b8:2a:a8:32:74:b5:
4e:5f:5b:8f:d0:7a:cb:e3:c1:6e:ff:5c:73:19:86:f8:27:9a:
3b:fa:3c:0f:68:9d:c8:61:51:2a:10:45:30:96:bb:1c:03:5d:
99:d5:6c:4f:73:e4:ec:5e:f7:97:57:c3:67:c0:6a:1a:08:91:
d0:80:77:72:69:a0:11:2f:be:d2:a2:ad:89:be:e7:4c:a2:f8:
d9:c2:75:7e:7c:d8:3b:71:60:80:21:15:7f:e6:cb:b8:12:1c:
00:56:94:54:79:a9:a9:72:3a:a2:dd:6e:94:54:c9:9d:ea:c1:
d2:c0:21:f8:f6:b1:44:9b:07:21:74:2d:ce:7e:24:92:72:8a:
95:03:9a:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:11:20 2025 by rpki-client