Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/16e2aa-ddbd-4ee1-ae60-08bc640aed67/1/tWqJV8zDCqTsLUeOU_OHJsmVWjE.mft
File: tWqJV8zDCqTsLUeOU_OHJsmVWjE.mft (raw, json)
Hash identifier: gS8xDT3zVGytYlAzacKZ30b7wyLGpLq9V/CqAbESNgM=
Subject key identifier: B1:DC:69:CF:DA:E8:E4:7D:F9:5A:1B:4F:E5:59:1B:B2:CB:53:16:94
Authority key identifier: B5:6A:89:57:CC:C3:0A:A4:EC:2D:47:8E:53:F3:87:26:C9:95:5A:31
Certificate issuer: /CN=b56a8957ccc30aa4ec2d478e53f38726c9955a31
Certificate serial: 0198D47290085B66A13FBDF46BF5A68E501C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tWqJV8zDCqTsLUeOU_OHJsmVWjE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/16e2aa-ddbd-4ee1-ae60-08bc640aed67/1/tWqJV8zDCqTsLUeOU_OHJsmVWjE.mft
Manifest number: 1643
Signing time: Sat 23 Aug 2025 01:02:14 +0000
Manifest this update: Sat 23 Aug 2025 01:02:14 +0000
Manifest next update: Sun 24 Aug 2025 01:02:14 +0000
Files and hashes: 1: tWqJV8zDCqTsLUeOU_OHJsmVWjE.crl (hash: jnJwIjTgbLXV/iykRpn1wa6XV3Q1OXo9tsVPkc/NnwM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/16e2aa-ddbd-4ee1-ae60-08bc640aed67/1/tWqJV8zDCqTsLUeOU_OHJsmVWjE.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/16e2aa-ddbd-4ee1-ae60-08bc640aed67/1/tWqJV8zDCqTsLUeOU_OHJsmVWjE.mft
rsync://rpki.ripe.net/repository/DEFAULT/tWqJV8zDCqTsLUeOU_OHJsmVWjE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:72:90:08:5b:66:a1:3f:bd:f4:6b:f5:a6:8e:50:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b56a8957ccc30aa4ec2d478e53f38726c9955a31
Validity
Not Before: Aug 23 01:02:14 2025 GMT
Not After : Aug 24 01:02:14 2025 GMT
Subject: CN=b1dc69cfdae8e47df95a1b4fe5591bb2cb531694
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:65:4e:d5:e3:bb:f3:5d:ed:58:9f:4a:7f:98:
40:5b:17:67:f5:57:06:5c:8b:28:a6:cf:15:52:95:
8c:58:03:54:71:d4:a3:5d:5d:54:2b:4d:87:5c:8d:
ff:9d:ef:41:7b:aa:b0:18:75:17:a1:e2:c5:36:15:
20:3c:ad:b9:0e:67:f9:a6:14:a7:9d:af:bd:3d:22:
7b:05:8e:7e:64:fc:42:d8:03:21:2f:13:9a:d5:8b:
08:b3:73:9f:95:9b:de:fb:bb:5a:ad:c9:8e:aa:d8:
35:22:c9:45:73:8b:ee:fc:23:4f:32:6c:57:4d:b0:
83:e1:97:69:62:ac:69:be:0f:12:89:c3:88:ef:10:
f3:2a:c7:b4:5b:a9:04:2d:da:ca:df:7e:ce:76:1a:
86:c4:ac:a4:b7:07:da:0a:2a:d4:e1:c3:9a:7c:36:
b4:29:59:22:31:85:4a:91:aa:4c:45:de:bb:66:5c:
9d:46:5b:1f:be:35:c7:55:d1:31:a3:d2:3a:97:20:
3b:61:1b:9b:19:ca:94:32:dc:3a:9b:6f:b2:db:03:
3c:02:8b:82:39:da:21:08:95:c2:2f:10:a1:ed:c3:
ab:94:70:51:a7:32:db:1d:2b:9f:6e:7a:b8:9f:a9:
0b:5c:4f:21:ee:a0:62:90:2b:23:90:26:e1:5f:f1:
78:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:DC:69:CF:DA:E8:E4:7D:F9:5A:1B:4F:E5:59:1B:B2:CB:53:16:94
X509v3 Authority Key Identifier:
keyid:B5:6A:89:57:CC:C3:0A:A4:EC:2D:47:8E:53:F3:87:26:C9:95:5A:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tWqJV8zDCqTsLUeOU_OHJsmVWjE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/16e2aa-ddbd-4ee1-ae60-08bc640aed67/1/tWqJV8zDCqTsLUeOU_OHJsmVWjE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/16e2aa-ddbd-4ee1-ae60-08bc640aed67/1/tWqJV8zDCqTsLUeOU_OHJsmVWjE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:11:8b:36:02:64:95:68:fa:76:79:ae:96:ac:6a:a7:b8:a1:
04:c3:65:c5:81:60:1c:f0:25:85:06:6b:33:08:59:12:9a:58:
7b:79:26:2f:12:6d:fa:bd:08:b7:b2:6b:aa:be:86:37:91:77:
28:65:67:54:c2:79:2e:78:bd:f1:e4:60:fd:30:90:72:ed:a6:
83:ef:af:a9:22:b7:91:c6:4d:80:44:3e:4d:74:d9:ab:93:e2:
ad:49:76:a6:10:1f:91:b2:e9:7f:6c:96:3d:dd:e8:a6:6f:6f:
4a:4a:62:fd:e8:56:ba:3c:3b:30:37:c9:8a:a3:7c:f7:4b:a0:
35:bb:f9:7f:f1:cc:25:11:55:66:79:b5:6d:cb:47:4e:1b:f1:
a5:07:56:d4:25:9d:f1:86:39:28:43:46:1c:bf:03:8f:66:70:
ea:37:cb:c2:01:ab:b9:81:fd:a5:1e:4a:b6:29:32:13:1b:09:
fc:fa:b0:b5:2d:8c:b4:0a:db:3f:2a:67:36:10:71:9d:05:f8:
59:b3:1f:bc:f3:f7:36:a8:cf:2b:d7:9b:93:be:75:2b:71:a3:
e0:43:69:8c:81:17:87:1d:83:b6:04:21:98:fd:c8:28:81:e1:
9f:0b:25:50:78:14:ff:17:2c:7f:66:59:0c:57:c2:aa:39:b7:
34:1a:29:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 09:37:44 2025 by rpki-client