Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/8aa081-3969-432c-98d0-821936b31518/1/tZTrtnSP3BISfD-Sfn-5sa-JJiw.mft
File: tZTrtnSP3BISfD-Sfn-5sa-JJiw.mft (raw, json)
Hash identifier: jv7PFrKdyx6j7VfIEBAz0NWMl8xGTMtHUlQynqvLYac=
Subject key identifier: E2:C5:9C:6C:DF:DC:52:8B:BB:AD:CB:AC:F6:CD:15:BA:68:5F:B6:13
Authority key identifier: B5:94:EB:B6:74:8F:DC:12:12:7C:3F:92:7E:7F:B9:B1:AF:89:26:2C
Certificate issuer: /CN=b594ebb6748fdc12127c3f927e7fb9b1af89262c
Certificate serial: 0198D65F8A17CC9BD032D479E220927EE92C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tZTrtnSP3BISfD-Sfn-5sa-JJiw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/8aa081-3969-432c-98d0-821936b31518/1/tZTrtnSP3BISfD-Sfn-5sa-JJiw.mft
Manifest number: 1647
Signing time: Sat 23 Aug 2025 10:00:42 +0000
Manifest this update: Sat 23 Aug 2025 10:00:42 +0000
Manifest next update: Sun 24 Aug 2025 10:00:42 +0000
Files and hashes: 1: tZTrtnSP3BISfD-Sfn-5sa-JJiw.crl (hash: XleUCypHOekBFV6z8z+cRjoMPItjdUE04VLlmy1MKb8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/8aa081-3969-432c-98d0-821936b31518/1/tZTrtnSP3BISfD-Sfn-5sa-JJiw.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/8aa081-3969-432c-98d0-821936b31518/1/tZTrtnSP3BISfD-Sfn-5sa-JJiw.mft
rsync://rpki.ripe.net/repository/DEFAULT/tZTrtnSP3BISfD-Sfn-5sa-JJiw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:8a:17:cc:9b:d0:32:d4:79:e2:20:92:7e:e9:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b594ebb6748fdc12127c3f927e7fb9b1af89262c
Validity
Not Before: Aug 23 10:00:42 2025 GMT
Not After : Aug 24 10:00:42 2025 GMT
Subject: CN=e2c59c6cdfdc528bbbadcbacf6cd15ba685fb613
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:5f:9f:87:68:6c:f5:42:03:d4:28:c1:fe:57:
a5:86:79:52:16:86:bb:13:da:55:55:23:c2:cc:3f:
4e:46:7a:7d:8d:a9:13:1e:00:0d:e0:00:16:a0:fe:
8c:14:18:7a:70:91:c3:30:ba:90:c1:99:65:ee:df:
7a:c4:a8:42:67:a4:41:f7:47:b2:3d:3f:c0:f8:9a:
e0:c9:cb:bb:cb:c9:80:80:3d:e7:ac:d2:b7:f6:17:
51:14:a3:3a:47:82:7c:72:eb:b0:b6:90:d0:26:1a:
65:9a:04:74:a2:05:55:35:dc:e2:10:ac:f8:92:ac:
ff:67:70:0d:ef:65:a7:c4:d2:f8:70:37:f2:e0:32:
94:39:b8:85:6a:6c:62:e4:47:ee:fe:c3:f3:ba:6c:
34:8e:42:67:74:15:f0:79:26:e1:64:a2:bf:24:05:
e6:17:99:0c:55:e7:26:64:04:95:8c:6e:21:d7:5b:
1a:4e:07:b4:94:c4:83:52:db:8f:0c:13:1f:f7:01:
54:02:ff:ae:f8:34:3a:d9:1c:d3:56:7f:a7:5d:83:
8d:bd:b6:19:5a:28:ab:bd:9f:1d:f5:57:0e:a5:cc:
80:fa:67:6e:87:6a:9a:f9:18:c2:f2:cc:b5:ff:41:
53:09:21:10:3f:ed:dd:7f:7b:86:a2:e2:ed:9e:c9:
32:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:C5:9C:6C:DF:DC:52:8B:BB:AD:CB:AC:F6:CD:15:BA:68:5F:B6:13
X509v3 Authority Key Identifier:
keyid:B5:94:EB:B6:74:8F:DC:12:12:7C:3F:92:7E:7F:B9:B1:AF:89:26:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tZTrtnSP3BISfD-Sfn-5sa-JJiw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/8aa081-3969-432c-98d0-821936b31518/1/tZTrtnSP3BISfD-Sfn-5sa-JJiw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/8aa081-3969-432c-98d0-821936b31518/1/tZTrtnSP3BISfD-Sfn-5sa-JJiw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:06:72:71:1a:98:cf:ef:5b:01:5f:ca:f9:ba:a4:98:c4:26:
93:a3:ac:4f:a4:af:3c:7f:1f:ed:26:e8:6c:e0:88:61:1e:ae:
c1:9a:c1:99:2c:3f:4f:a7:c3:7c:19:22:06:fc:bd:d5:c2:63:
55:44:6f:07:fa:a4:14:b6:8b:3d:eb:5c:80:df:bd:49:0c:e0:
5c:88:37:f5:eb:c3:89:c1:d3:9e:96:2c:9d:c8:2f:c0:6f:d7:
7b:2f:f9:98:42:06:eb:dc:c3:32:b7:97:c8:0c:46:5a:5c:dc:
d9:7c:cd:1f:19:11:47:1c:ca:30:34:74:0f:04:99:9e:ff:ae:
ec:ba:bc:f3:a3:91:88:47:ff:06:0f:84:e9:98:e4:19:18:67:
63:43:0a:89:67:d6:e9:91:4d:57:6d:60:f2:a8:9f:7f:54:cc:
9d:0b:89:66:e2:d7:52:58:5d:94:f1:df:31:d7:1b:95:33:aa:
05:00:83:c7:19:2b:29:6d:7a:74:90:7c:a9:4e:f2:3a:97:52:
a5:6c:39:59:93:87:3e:4a:50:11:0c:c5:37:ab:36:5b:63:a2:
b3:7b:11:96:48:ef:03:83:db:26:ae:3f:69:f2:ce:09:ac:bd:
e6:6b:03:2a:e8:d9:6f:bd:e9:7e:21:40:cf:e1:6f:78:e5:53:
26:38:e1:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:30:36 2025 by rpki-client