Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/844405-7a8f-4232-95b8-65c928c7b0bf/1/tVz-dxzyhP7o0MJ7vPEd4YeczEE.mft
File: tVz-dxzyhP7o0MJ7vPEd4YeczEE.mft (raw, json)
Hash identifier: sVCUyRqqEiVElDvxyRZQR2iP5QRzYjLfkpie7Z7/FXA=
Subject key identifier: 36:49:36:CA:4A:4D:F6:E0:BE:9A:6D:65:A4:7A:CE:F3:11:44:61:88
Authority key identifier: B5:5C:FE:77:1C:F2:84:FE:E8:D0:C2:7B:BC:F1:1D:E1:87:9C:CC:41
Certificate issuer: /CN=b55cfe771cf284fee8d0c27bbcf11de1879ccc41
Certificate serial: 0199FBEA887BB40974E1D4F0DB8B2A88BF9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tVz-dxzyhP7o0MJ7vPEd4YeczEE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/844405-7a8f-4232-95b8-65c928c7b0bf/1/tVz-dxzyhP7o0MJ7vPEd4YeczEE.mft
Manifest number: 0ECA
Signing time: Sun 19 Oct 2025 10:01:15 +0000
Manifest this update: Sun 19 Oct 2025 10:01:15 +0000
Manifest next update: Mon 20 Oct 2025 10:01:15 +0000
Files and hashes: 1: tVz-dxzyhP7o0MJ7vPEd4YeczEE.crl (hash: 4zUIQ0hj/AjWfWHlIw+NwUkUDXrnbkFtIynqFYIKK04=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/844405-7a8f-4232-95b8-65c928c7b0bf/1/tVz-dxzyhP7o0MJ7vPEd4YeczEE.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/844405-7a8f-4232-95b8-65c928c7b0bf/1/tVz-dxzyhP7o0MJ7vPEd4YeczEE.mft
rsync://rpki.ripe.net/repository/DEFAULT/tVz-dxzyhP7o0MJ7vPEd4YeczEE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ea:88:7b:b4:09:74:e1:d4:f0:db:8b:2a:88:bf:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b55cfe771cf284fee8d0c27bbcf11de1879ccc41
Validity
Not Before: Oct 19 10:01:15 2025 GMT
Not After : Oct 20 10:01:15 2025 GMT
Subject: CN=364936ca4a4df6e0be9a6d65a47acef311446188
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:34:58:ed:da:0d:84:25:90:50:7e:54:67:ab:
3d:b8:14:23:dd:0e:25:30:5c:d4:ee:19:a6:77:de:
b7:40:0b:b3:13:b0:4b:2f:9b:96:44:95:2a:e7:a2:
61:db:4f:2e:c6:2f:c7:9a:84:c8:fc:ca:50:3f:48:
34:dd:ca:92:29:f8:07:dd:24:9a:ac:7e:1e:4d:eb:
4e:f9:42:e1:47:94:b3:93:6e:ce:a9:ac:19:83:28:
76:2e:84:2d:7d:dc:5f:b2:c8:21:8d:03:08:89:ab:
57:1f:c3:61:d8:4a:be:8e:8a:2f:36:20:5b:9b:7c:
3c:e5:3c:58:17:4c:80:be:d8:48:00:78:a1:b8:20:
5c:e2:67:2d:a4:b0:4a:70:7e:b9:91:94:31:af:5c:
6c:a1:5b:1b:f0:96:38:28:62:db:09:6d:0e:48:55:
7f:9e:8a:da:7d:a8:ee:c8:c5:d1:7a:e8:1f:e5:ae:
89:62:71:4d:0e:98:c3:e7:99:5f:6c:85:44:ee:07:
27:51:23:45:96:70:cf:40:09:ce:fd:64:f2:29:03:
a1:bf:90:94:58:c8:60:d9:b2:35:83:aa:8a:8d:f1:
71:2d:48:4b:74:da:99:a6:2a:34:8c:c6:5f:ac:e0:
97:92:e0:1f:7d:ef:b3:fd:a2:73:2c:07:b1:de:af:
20:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:49:36:CA:4A:4D:F6:E0:BE:9A:6D:65:A4:7A:CE:F3:11:44:61:88
X509v3 Authority Key Identifier:
keyid:B5:5C:FE:77:1C:F2:84:FE:E8:D0:C2:7B:BC:F1:1D:E1:87:9C:CC:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tVz-dxzyhP7o0MJ7vPEd4YeczEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/844405-7a8f-4232-95b8-65c928c7b0bf/1/tVz-dxzyhP7o0MJ7vPEd4YeczEE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/844405-7a8f-4232-95b8-65c928c7b0bf/1/tVz-dxzyhP7o0MJ7vPEd4YeczEE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:d5:e5:91:f7:a9:dc:39:e2:7c:2a:41:3a:2d:34:e7:33:a2:
3b:c1:98:a2:7a:3e:a5:7f:7b:37:2a:ec:01:64:72:80:3d:ca:
a6:fd:f4:a4:69:97:7f:1a:4d:26:97:5f:a6:38:f9:2f:4f:09:
90:18:ed:fb:ed:d2:a0:19:8a:fa:7c:e9:9b:e9:c3:29:c0:40:
4a:26:40:43:76:00:24:84:3b:89:b7:d9:63:0d:45:1f:19:73:
6b:6e:e5:56:f7:a0:84:a8:63:c7:17:0c:ac:b7:ad:0e:5e:19:
ea:c7:64:e5:44:45:19:a9:9a:62:1b:0f:96:a7:9f:aa:c6:6d:
84:00:5d:ae:16:46:fc:d5:6b:d5:f6:16:25:96:d8:7f:4e:ba:
6b:c4:2e:0d:63:b1:24:1d:0e:45:36:e4:38:3b:a1:5c:fc:72:
fc:41:3c:88:09:3d:e6:2d:ea:d7:c2:0d:23:cc:ae:54:78:52:
42:91:d1:67:0f:42:6c:3d:3f:82:58:67:1e:c1:53:75:0b:7b:
d0:bc:08:cb:95:0f:32:1c:bf:bc:c1:d4:6f:1d:93:9c:4b:7f:
12:82:e3:32:f6:52:ee:a6:37:ea:6b:2e:ea:0e:19:d5:c7:3a:
ee:12:3d:97:57:9c:45:9f:e7:4e:75:60:0d:5b:8c:e6:d6:37:
98:7f:b3:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:23:42 2025 by rpki-client