Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/3bc865-386b-4bea-aba0-66c98c01dfd7/1/tj8U3_NUhamVlBKGMDe4XfqfE9g.mft
File: tj8U3_NUhamVlBKGMDe4XfqfE9g.mft (raw, json)
Hash identifier: fTJ1WsmweA4ci529/kVOrup1eVBUxptvFXDS8kGRGp8=
Subject key identifier: 3F:44:C6:5C:A4:FB:41:AD:36:30:CB:22:D6:21:77:CD:1F:DA:8D:45
Authority key identifier: B6:3F:14:DF:F3:54:85:A9:95:94:12:86:30:37:B8:5D:FA:9F:13:D8
Certificate issuer: /CN=b63f14dff35485a9959412863037b85dfa9f13d8
Certificate serial: 0198D5BC2388FF9D8BEA08DBEE6ADC9145DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tj8U3_NUhamVlBKGMDe4XfqfE9g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/3bc865-386b-4bea-aba0-66c98c01dfd7/1/tj8U3_NUhamVlBKGMDe4XfqfE9g.mft
Manifest number: 057F
Signing time: Sat 23 Aug 2025 07:02:13 +0000
Manifest this update: Sat 23 Aug 2025 07:02:13 +0000
Manifest next update: Sun 24 Aug 2025 07:02:13 +0000
Files and hashes: 1: tj8U3_NUhamVlBKGMDe4XfqfE9g.crl (hash: +R2P0FfExQ6ACFGCOn+F1OzPzct1pvRWTIAqRtHEJ2E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/3bc865-386b-4bea-aba0-66c98c01dfd7/1/tj8U3_NUhamVlBKGMDe4XfqfE9g.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/3bc865-386b-4bea-aba0-66c98c01dfd7/1/tj8U3_NUhamVlBKGMDe4XfqfE9g.mft
rsync://rpki.ripe.net/repository/DEFAULT/tj8U3_NUhamVlBKGMDe4XfqfE9g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bc:23:88:ff:9d:8b:ea:08:db:ee:6a:dc:91:45:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b63f14dff35485a9959412863037b85dfa9f13d8
Validity
Not Before: Aug 23 07:02:13 2025 GMT
Not After : Aug 24 07:02:13 2025 GMT
Subject: CN=3f44c65ca4fb41ad3630cb22d62177cd1fda8d45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:9b:90:74:b6:fc:e1:0e:dd:2d:ed:73:61:e2:
82:aa:0f:8f:21:2b:ae:c9:21:e7:83:2d:18:39:97:
f7:7c:dd:89:ac:e6:ad:ea:7e:79:20:82:ad:7b:3f:
5d:0d:41:57:c9:bd:ed:de:cd:dc:ea:58:16:d2:22:
09:e5:18:df:0a:cc:53:0d:d0:d8:b8:35:d7:5e:c7:
93:f0:8b:3e:76:23:29:15:0e:e7:0f:50:02:16:e8:
d6:da:22:e5:f2:b9:db:2f:57:c1:9d:e9:0c:47:f7:
cb:e9:67:33:f1:3b:e6:4d:9e:d4:14:04:2a:53:c5:
81:77:39:05:7c:c0:d5:7a:ed:13:13:54:57:ac:da:
12:d8:fa:74:29:50:1a:e2:b4:c7:02:a9:59:56:e9:
67:be:fd:3c:0c:3c:86:42:31:c6:81:b0:b8:34:55:
a9:cf:1c:dd:87:d5:c5:0b:08:4f:76:78:7e:d6:f6:
40:93:1b:7a:0f:56:7d:47:44:06:be:2b:90:dc:09:
11:55:a1:93:b4:59:14:6a:b8:ef:f5:32:44:0c:06:
62:44:84:e8:ab:01:39:ee:eb:9c:88:f2:e0:29:71:
0d:87:30:21:92:f8:65:19:97:5a:dc:4b:d0:ee:68:
fa:76:60:86:23:fc:17:50:5f:3e:a6:52:bc:36:26:
cb:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:44:C6:5C:A4:FB:41:AD:36:30:CB:22:D6:21:77:CD:1F:DA:8D:45
X509v3 Authority Key Identifier:
keyid:B6:3F:14:DF:F3:54:85:A9:95:94:12:86:30:37:B8:5D:FA:9F:13:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tj8U3_NUhamVlBKGMDe4XfqfE9g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/3bc865-386b-4bea-aba0-66c98c01dfd7/1/tj8U3_NUhamVlBKGMDe4XfqfE9g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/3bc865-386b-4bea-aba0-66c98c01dfd7/1/tj8U3_NUhamVlBKGMDe4XfqfE9g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:11:ca:76:28:45:82:cc:47:d8:2f:16:d0:03:10:ef:b5:db:
59:5f:18:af:b3:2f:94:9b:ca:40:02:c1:b2:eb:5d:4c:03:d0:
d8:61:4c:65:7a:3c:13:3d:b4:ef:99:44:bb:13:19:cd:c2:a9:
e9:48:4a:5e:26:06:a1:b6:09:c1:ee:8e:9f:ee:3e:f3:c0:da:
cc:54:25:9b:a2:ed:c6:65:b4:54:13:1a:af:3a:da:94:ce:84:
7c:e2:14:00:0c:1c:89:b5:d5:3e:d0:8a:8b:92:0b:0a:94:bb:
61:0f:d7:10:30:5f:91:0e:8e:0d:9f:0d:c2:a8:07:47:61:27:
ed:05:c7:77:c6:ff:7a:37:c4:8b:b4:0a:49:da:dc:fd:3e:17:
86:6a:fc:62:f4:cd:b5:4f:d0:cc:e0:0d:2f:f8:07:0e:fb:e0:
c7:8b:25:c0:ed:f6:6b:14:41:78:49:47:1d:ce:7b:7d:cb:1d:
5b:bc:a0:4e:01:b6:98:b7:6b:40:33:fd:2a:8b:eb:31:a6:00:
9e:28:96:16:da:b1:b9:eb:6f:85:ff:d7:2f:99:47:91:f7:13:
67:21:ef:d7:92:34:05:ec:fd:9f:6c:9c:7b:a0:bf:22:b5:c6:
57:f8:de:12:df:ce:4e:21:1c:c9:23:f0:e8:f5:b0:08:1f:7d:
98:d6:5e:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:23:07 2025 by rpki-client