Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/bf8b0e-beda-4a56-baf0-82ad11626eed/1/TEz85gybDy1Hs2KGTY_rsiW7UkQ.mft
File: TEz85gybDy1Hs2KGTY_rsiW7UkQ.mft (raw, json)
Hash identifier: te0WkKEJiza//faVp0O44RVGdSA1gvqe5/LaCjp5vCk=
Subject key identifier: 5A:9D:35:65:10:D1:EE:D1:22:16:31:CB:F5:55:20:A7:F4:52:3F:F8
Authority key identifier: 4C:4C:FC:E6:0C:9B:0F:2D:47:B3:62:86:4D:8F:EB:B2:25:BB:52:44
Certificate issuer: /CN=4c4cfce60c9b0f2d47b362864d8febb225bb5244
Certificate serial: 0198D4E08939EDF09E802D99D49325B30264
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TEz85gybDy1Hs2KGTY_rsiW7UkQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/bf8b0e-beda-4a56-baf0-82ad11626eed/1/TEz85gybDy1Hs2KGTY_rsiW7UkQ.mft
Manifest number: 1646
Signing time: Sat 23 Aug 2025 03:02:21 +0000
Manifest this update: Sat 23 Aug 2025 03:02:21 +0000
Manifest next update: Sun 24 Aug 2025 03:02:21 +0000
Files and hashes: 1: TEz85gybDy1Hs2KGTY_rsiW7UkQ.crl (hash: bvHYXuYZZZgwHMIK1teOv/APTtCSgpGMMe3dZ6JWW0E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/bf8b0e-beda-4a56-baf0-82ad11626eed/1/TEz85gybDy1Hs2KGTY_rsiW7UkQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/bf8b0e-beda-4a56-baf0-82ad11626eed/1/TEz85gybDy1Hs2KGTY_rsiW7UkQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/TEz85gybDy1Hs2KGTY_rsiW7UkQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:02:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:89:39:ed:f0:9e:80:2d:99:d4:93:25:b3:02:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c4cfce60c9b0f2d47b362864d8febb225bb5244
Validity
Not Before: Aug 23 03:02:21 2025 GMT
Not After : Aug 24 03:02:21 2025 GMT
Subject: CN=5a9d356510d1eed1221631cbf55520a7f4523ff8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:be:2b:ea:75:19:8b:3e:62:1e:2c:61:eb:0a:
98:85:47:d3:3a:9e:28:81:cf:55:91:30:40:99:9e:
7b:26:b2:80:47:88:f1:52:16:45:e3:b6:08:db:0f:
44:11:5d:4b:4b:96:13:6f:1a:2e:0b:60:a4:5e:0b:
7b:e7:b0:f5:6e:b5:40:38:f7:82:c9:e8:34:e5:9a:
9a:4c:a8:6d:d4:4c:9e:35:ca:49:23:78:5b:63:30:
a5:b6:2f:92:ec:6e:53:92:6d:16:f8:6e:dc:42:23:
dd:28:35:c3:b1:2e:c6:52:13:16:b7:b6:9f:ca:7d:
ab:aa:a5:90:83:f2:10:39:fb:56:79:04:80:ad:30:
32:de:f1:13:df:18:d5:f2:8e:6b:4b:d5:ff:ef:78:
cb:32:6d:7f:28:68:34:19:c8:7e:99:2e:65:6d:da:
a9:ea:b1:86:d5:8f:16:78:23:f9:e5:44:9e:16:e8:
73:37:b8:4f:e6:ef:ac:15:f9:b8:2e:a4:b7:e2:5e:
86:72:5a:da:e9:a1:16:a8:ae:86:25:8e:6a:ec:ef:
d3:94:ab:a5:20:5e:cd:7a:c8:2b:92:f6:04:f9:2f:
4e:11:26:e3:72:dd:75:9c:3b:f1:d0:32:3d:96:a2:
4c:5a:44:dc:f6:e3:26:ea:b4:f0:76:ab:34:26:24:
cf:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:9D:35:65:10:D1:EE:D1:22:16:31:CB:F5:55:20:A7:F4:52:3F:F8
X509v3 Authority Key Identifier:
keyid:4C:4C:FC:E6:0C:9B:0F:2D:47:B3:62:86:4D:8F:EB:B2:25:BB:52:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TEz85gybDy1Hs2KGTY_rsiW7UkQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/bf8b0e-beda-4a56-baf0-82ad11626eed/1/TEz85gybDy1Hs2KGTY_rsiW7UkQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/bf8b0e-beda-4a56-baf0-82ad11626eed/1/TEz85gybDy1Hs2KGTY_rsiW7UkQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:c2:14:f7:62:0e:3d:b2:9f:d3:65:1a:de:5b:b5:4a:82:50:
1e:e6:b3:06:56:20:6e:49:ea:43:d1:14:59:2b:68:40:64:96:
d3:2a:ba:f9:c5:f7:8c:a3:45:e9:61:ec:b7:52:19:ba:ea:49:
4c:c1:42:7d:3b:33:94:18:80:21:64:d8:e5:77:52:99:3d:5f:
9f:a6:b7:c1:0d:27:68:9a:ba:5a:02:12:bf:c6:e3:99:90:fe:
9c:2b:41:1d:86:09:a1:f3:17:7b:d8:2c:1a:4e:54:11:bc:eb:
a5:18:25:42:5f:13:b5:d9:53:13:7c:4a:75:fe:ca:88:6c:b0:
e3:c3:a3:bd:93:7b:a4:c4:3f:ef:80:ca:db:d1:6c:b4:e0:b2:
3b:be:15:5b:08:e6:9a:d3:59:3c:dd:c8:0c:8a:e0:9a:30:01:
a0:3c:ed:4b:06:c7:ac:07:bf:bf:b7:70:4e:cc:9a:a7:f5:d2:
19:c8:af:56:6d:ae:92:a4:fa:8f:c9:af:ee:ae:10:49:8d:12:
60:7e:28:03:ee:c6:71:59:1c:d4:d3:b0:21:bb:b8:c3:2f:a1:
5a:3c:a0:fc:ec:f5:8e:ba:5f:bc:1a:ab:35:d3:5c:0b:4c:82:
9e:9e:4a:ba:e0:e3:bf:79:a8:1a:37:67:68:6a:a8:92:de:6a:
b4:6f:be:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:41:21 2025 by rpki-client