Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/544f32-7c38-4a7e-9d7a-860ef33c504f/1/tkGyiLTUE-lV_qRGCzK_LMGCrwM.mft
File: tkGyiLTUE-lV_qRGCzK_LMGCrwM.mft (raw, json)
Hash identifier: DU1ZBWZcBW5KUm/5PBK8V/xmP2xNrpGa54ll5P/OBvY=
Subject key identifier: 2D:59:B9:13:6C:F9:08:AD:D8:1A:08:0A:7D:73:1C:8C:6D:4B:02:D2
Authority key identifier: B6:41:B2:88:B4:D4:13:E9:55:FE:A4:46:0B:32:BF:2C:C1:82:AF:03
Certificate issuer: /CN=b641b288b4d413e955fea4460b32bf2cc182af03
Certificate serial: 0198D5BB981C4D9261DC76F61BE609CE1990
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tkGyiLTUE-lV_qRGCzK_LMGCrwM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/544f32-7c38-4a7e-9d7a-860ef33c504f/1/tkGyiLTUE-lV_qRGCzK_LMGCrwM.mft
Manifest number: 1646
Signing time: Sat 23 Aug 2025 07:01:37 +0000
Manifest this update: Sat 23 Aug 2025 07:01:37 +0000
Manifest next update: Sun 24 Aug 2025 07:01:37 +0000
Files and hashes: 1: tkGyiLTUE-lV_qRGCzK_LMGCrwM.crl (hash: G+u7cuM1xdJYtWbGwky+D2vQoS/DtexrHQCh3BhCVfs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/544f32-7c38-4a7e-9d7a-860ef33c504f/1/tkGyiLTUE-lV_qRGCzK_LMGCrwM.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/544f32-7c38-4a7e-9d7a-860ef33c504f/1/tkGyiLTUE-lV_qRGCzK_LMGCrwM.mft
rsync://rpki.ripe.net/repository/DEFAULT/tkGyiLTUE-lV_qRGCzK_LMGCrwM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bb:98:1c:4d:92:61:dc:76:f6:1b:e6:09:ce:19:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b641b288b4d413e955fea4460b32bf2cc182af03
Validity
Not Before: Aug 23 07:01:37 2025 GMT
Not After : Aug 24 07:01:37 2025 GMT
Subject: CN=2d59b9136cf908add81a080a7d731c8c6d4b02d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:8f:e9:c7:06:6f:89:f8:1a:08:46:42:11:70:
be:17:55:58:61:a4:d6:27:59:2e:d2:90:f6:5e:f7:
bd:4c:5d:8b:71:1b:85:e8:a2:b8:32:f4:e5:f0:3d:
19:96:fe:8a:94:c6:50:91:25:1e:33:c2:79:b7:83:
31:54:74:ea:30:2d:11:b3:ca:8f:e1:62:df:ba:ee:
d8:40:bf:f0:76:4c:13:da:24:66:69:10:9e:7f:9b:
35:1b:37:06:db:08:a0:6b:ff:22:7e:3e:c5:2b:30:
b9:1d:21:0a:90:d0:8c:f3:dd:dd:eb:b4:a2:29:b8:
4c:47:5f:1a:c6:93:85:69:bc:5e:52:92:cd:b4:e8:
18:e6:97:5c:a4:15:f5:37:a1:1e:af:60:9f:86:6f:
52:26:60:2d:e9:d6:0f:94:6f:12:4e:d9:3e:7a:d5:
00:58:22:ee:32:a8:50:54:1e:5a:93:3c:6d:73:f3:
d9:f5:f7:ab:45:9a:13:7e:9d:75:85:41:46:98:bf:
6d:0e:25:db:42:8d:79:37:41:c7:df:74:32:10:4b:
66:0b:cd:36:b9:00:d4:60:03:f0:ba:fc:35:86:19:
9b:37:2a:a2:5f:71:4b:f9:39:1f:6c:16:e7:2c:cc:
5f:17:0c:c5:a1:a7:b8:9c:3c:b2:8a:dd:65:d8:ee:
2b:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:59:B9:13:6C:F9:08:AD:D8:1A:08:0A:7D:73:1C:8C:6D:4B:02:D2
X509v3 Authority Key Identifier:
keyid:B6:41:B2:88:B4:D4:13:E9:55:FE:A4:46:0B:32:BF:2C:C1:82:AF:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tkGyiLTUE-lV_qRGCzK_LMGCrwM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/544f32-7c38-4a7e-9d7a-860ef33c504f/1/tkGyiLTUE-lV_qRGCzK_LMGCrwM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/544f32-7c38-4a7e-9d7a-860ef33c504f/1/tkGyiLTUE-lV_qRGCzK_LMGCrwM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:1a:68:d6:39:ce:79:10:9e:55:ee:0a:18:ea:9a:47:ff:60:
e2:a1:7e:6a:6a:a0:a9:84:e7:bb:c4:3e:d9:e8:51:09:12:0d:
78:15:f9:6b:3b:27:00:dc:b0:fd:3d:f9:85:b7:8d:7b:d2:d3:
24:88:ba:29:c4:dd:6a:4f:67:d2:14:8b:34:6e:84:8f:21:a2:
51:7a:14:66:08:64:44:6c:64:14:c7:c1:c2:6e:dd:a1:95:bb:
92:5d:e7:58:7f:48:66:29:c1:ea:94:a7:5d:b3:6c:54:5f:13:
12:8f:8e:64:b5:03:d7:c4:48:ec:02:80:9d:81:3e:97:1e:0e:
b0:41:57:57:46:87:f0:c6:b4:ed:d5:bf:c3:14:55:8d:2b:9d:
54:84:9a:e1:5b:c9:c2:1a:fb:c3:b7:f5:63:3f:df:e5:09:c5:
b8:3d:9c:de:72:85:07:41:df:1e:2b:f5:c7:af:16:b8:98:39:
5c:a7:1b:09:d8:a6:fd:2f:79:17:76:c4:da:b0:56:25:f3:02:
a7:8b:e9:30:31:ac:b9:f2:c2:f5:16:b9:82:4e:80:32:d4:e6:
34:e1:24:de:bc:cf:07:74:8e:94:ae:30:3b:e0:16:f1:5a:59:
a4:10:10:da:89:6f:3d:ff:7f:7c:15:9a:e7:5f:9e:4b:c8:20:
34:79:be:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:25:58 2025 by rpki-client