Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/37d3ee-640f-471f-a9b7-ac5a297f9ba4/1/Tb6Htwra566IC0Zwv6B46QmE1mA.mft
File: Tb6Htwra566IC0Zwv6B46QmE1mA.mft (raw, json)
Hash identifier: FHDzNHo5I03fqd6JiTgzk3L8g1uW9MWB6kZNvTCLWl0=
Subject key identifier: 2B:32:5A:08:A3:6D:FE:82:6D:2C:11:91:16:D6:D6:07:E1:2C:5B:52
Authority key identifier: 4D:BE:87:B7:0A:DA:E7:AE:88:0B:46:70:BF:A0:78:E9:09:84:D6:60
Certificate issuer: /CN=4dbe87b70adae7ae880b4670bfa078e90984d660
Certificate serial: 0198D705FCC1301A659456A9EB475B07DD65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tb6Htwra566IC0Zwv6B46QmE1mA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/37d3ee-640f-471f-a9b7-ac5a297f9ba4/1/Tb6Htwra566IC0Zwv6B46QmE1mA.mft
Manifest number: 1071
Signing time: Sat 23 Aug 2025 13:02:30 +0000
Manifest this update: Sat 23 Aug 2025 13:02:30 +0000
Manifest next update: Sun 24 Aug 2025 13:02:30 +0000
Files and hashes: 1: Tb6Htwra566IC0Zwv6B46QmE1mA.crl (hash: dgUq9R/pO8/X3YSwL5fNNjSZriiPFiVkZjBRpIZBWAg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/37d3ee-640f-471f-a9b7-ac5a297f9ba4/1/Tb6Htwra566IC0Zwv6B46QmE1mA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/37d3ee-640f-471f-a9b7-ac5a297f9ba4/1/Tb6Htwra566IC0Zwv6B46QmE1mA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Tb6Htwra566IC0Zwv6B46QmE1mA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:50:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:05:fc:c1:30:1a:65:94:56:a9:eb:47:5b:07:dd:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4dbe87b70adae7ae880b4670bfa078e90984d660
Validity
Not Before: Aug 23 13:02:30 2025 GMT
Not After : Aug 24 13:02:30 2025 GMT
Subject: CN=2b325a08a36dfe826d2c119116d6d607e12c5b52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:9f:87:dc:77:e1:70:23:5f:87:17:cd:3d:84:
0c:d7:31:27:73:20:41:d1:bb:dc:e8:6b:46:9a:3b:
c6:07:cc:b2:a8:b8:7a:fa:e7:87:cd:89:83:1f:f7:
2e:1d:63:bd:c9:22:56:56:4e:a0:fc:32:7b:e4:20:
45:8f:e5:04:1a:aa:0c:fb:37:3c:58:68:78:3a:0f:
22:da:9e:85:94:6a:2e:02:26:bf:f7:6a:81:5c:39:
7b:f7:be:c5:49:de:7f:b7:c5:9d:63:d1:3a:fc:8e:
3f:f5:34:59:8a:34:80:44:83:dc:f3:fc:7e:f8:17:
af:28:5c:31:7e:21:8e:3d:c5:c1:47:ea:5d:b1:75:
74:a6:c0:41:b5:d9:2b:9a:f7:25:81:e7:66:cf:32:
47:b8:c3:87:cc:b0:c1:6b:c5:49:3a:48:41:f1:98:
43:11:8b:0d:42:46:13:23:44:d0:b9:49:5c:02:00:
fe:d3:7b:a3:01:aa:b8:04:0f:fb:ef:c8:96:98:3c:
b3:63:ae:93:05:54:f2:d9:be:5b:19:29:20:4e:a0:
23:99:6b:fd:2e:7a:5a:ac:13:5e:49:b3:ed:2b:0d:
97:02:cc:5c:8f:6f:54:2e:84:99:84:d0:87:dc:ba:
19:b8:d6:32:c8:14:6c:9d:62:69:6c:d5:36:dd:dc:
12:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:32:5A:08:A3:6D:FE:82:6D:2C:11:91:16:D6:D6:07:E1:2C:5B:52
X509v3 Authority Key Identifier:
keyid:4D:BE:87:B7:0A:DA:E7:AE:88:0B:46:70:BF:A0:78:E9:09:84:D6:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tb6Htwra566IC0Zwv6B46QmE1mA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/37d3ee-640f-471f-a9b7-ac5a297f9ba4/1/Tb6Htwra566IC0Zwv6B46QmE1mA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/37d3ee-640f-471f-a9b7-ac5a297f9ba4/1/Tb6Htwra566IC0Zwv6B46QmE1mA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:5d:86:d3:af:1b:c7:87:a3:80:e6:c9:b1:38:3e:02:f4:cf:
4f:7c:f8:93:9d:de:d0:b2:c3:98:a0:2d:e3:fd:c8:9f:c6:16:
92:fc:8d:8a:5f:18:92:60:2e:78:d9:97:56:79:1d:ce:38:5f:
bf:32:71:60:52:98:7e:99:50:92:14:b3:dc:16:c6:73:44:ec:
5a:5f:e0:ca:84:a6:6a:bf:cc:d6:53:87:82:c7:02:e0:07:40:
62:c6:3d:af:6a:bd:6a:5a:e4:98:f4:b2:35:d5:e1:f5:be:17:
cb:c3:58:59:54:71:79:8d:dd:b3:11:b7:79:c1:87:cf:6e:0e:
79:ae:10:c5:7c:d2:4b:74:f7:16:82:f6:9e:57:6f:a8:d5:f5:
8f:61:dd:1b:ed:9e:3a:96:7a:33:25:c9:f7:f3:84:65:94:2b:
55:d5:3a:d5:6b:40:ba:af:b8:66:b2:fb:0d:73:4a:db:92:9f:
04:8e:8e:c2:01:9b:56:ca:40:c9:b8:b8:17:71:8a:12:73:35:
cc:19:0b:cf:79:2f:5e:e2:22:ff:24:82:b1:4e:b5:91:5a:a6:
e9:69:c8:8a:2c:3e:62:1d:f9:c5:6b:58:a6:54:e8:a5:25:db:
dd:60:f5:a8:38:40:de:76:a6:9c:a1:b2:a7:f6:16:cd:be:4a:
cd:c1:14:d7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjXBfzBMBpllFap60dbB91lMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRkYmU4N2I3MGFkYWU3YWU4ODBiNDY3MGJmYTA3OGU5MDk4
NGQ2NjAwHhcNMjUwODIzMTMwMjMwWhcNMjUwODI0MTMwMjMwWjAzMTEwLwYDVQQD
EygyYjMyNWEwOGEzNmRmZTgyNmQyYzExOTExNmQ2ZDYwN2UxMmM1YjUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnp+H3HfhcCNfhxfNPYQM1zEncyBB
0bvc6GtGmjvGB8yyqLh6+ueHzYmDH/cuHWO9ySJWVk6g/DJ75CBFj+UEGqoM+zc8
WGh4Og8i2p6FlGouAia/92qBXDl7977FSd5/t8WdY9E6/I4/9TRZijSARIPc8/x+
+BevKFwxfiGOPcXBR+pdsXV0psBBtdkrmvclgedmzzJHuMOHzLDBa8VJOkhB8ZhD
EYsNQkYTI0TQuUlcAgD+03ujAaq4BA/778iWmDyzY66TBVTy2b5bGSkgTqAjmWv9
LnparBNeSbPtKw2XAsxcj29ULoSZhNCH3LoZuNYyyBRsnWJpbNU23dwSFQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCsyWgijbf6CbSwRkRbW1gfhLFtSMB8GA1UdIwQY
MBaAFE2+h7cK2ueuiAtGcL+geOkJhNZgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVGI2SHR3cmE1NjZJQzBad3Y2QjQ2UW1FMW1BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC8zN2QzZWUtNjQwZi00NzFmLWE5Yjct
YWM1YTI5N2Y5YmE0LzEvVGI2SHR3cmE1NjZJQzBad3Y2QjQ2UW1FMW1BLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNC8zN2QzZWUtNjQwZi00NzFmLWE5YjctYWM1YTI5N2Y5YmE0
LzEvVGI2SHR3cmE1NjZJQzBad3Y2QjQ2UW1FMW1BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIF2G068b
x4ejgObJsTg+AvTPT3z4k53e0LLDmKAt4/3In8YWkvyNil8YkmAueNmXVnkdzjhf
vzJxYFKYfplQkhSz3BbGc0TsWl/gyoSmar/M1lOHgscC4AdAYsY9r2q9alrkmPSy
NdXh9b4Xy8NYWVRxeY3dsxG3ecGHz24Oea4QxXzSS3T3FoL2nldvqNX1j2HdG+2e
OpZ6MyXJ9/OEZZQrVdU61WtAuq+4ZrL7DXNK25KfBI6OwgGbVspAybi4F3GKEnM1
zBkLz3kvXuIi/ySCsU61kVqm6WnIiiw+Yh35xWtYplTopSXb3WD1qDhA3namnKGy
p/YWzb5KzcEU1w==
-----END CERTIFICATE-----
Generated at Sat Aug 23 17:49:58 2025 by rpki-client