Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/ec5584-6618-4b12-a11c-3055cb729bcf/1/TDuIzbE_PrEqm-VKsZuqkFWbOWo.mft
File: TDuIzbE_PrEqm-VKsZuqkFWbOWo.mft (raw, json)
Hash identifier: REuTsb4wAVe05Oj8eCnQ2YVFPqeo6CPkVf54WpXETxQ=
Subject key identifier: D7:BD:F7:F6:64:36:AF:3C:C4:DB:61:EF:B8:1F:F8:70:AD:7D:07:98
Authority key identifier: 4C:3B:88:CD:B1:3F:3E:B1:2A:9B:E5:4A:B1:9B:AA:90:55:9B:39:6A
Certificate issuer: /CN=4c3b88cdb13f3eb12a9be54ab19baa90559b396a
Certificate serial: 0199FBB3620F5A03E4D3920C97B830E65D0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TDuIzbE_PrEqm-VKsZuqkFWbOWo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/ec5584-6618-4b12-a11c-3055cb729bcf/1/TDuIzbE_PrEqm-VKsZuqkFWbOWo.mft
Manifest number: 087A
Signing time: Sun 19 Oct 2025 09:01:01 +0000
Manifest this update: Sun 19 Oct 2025 09:01:01 +0000
Manifest next update: Mon 20 Oct 2025 09:01:01 +0000
Files and hashes: 1: TDuIzbE_PrEqm-VKsZuqkFWbOWo.crl (hash: 1M+Rg82/EpRxJhS0qC3HtbfniMcju9E+B0CQnl6tefo=)
2: eaPs4hBLMn8_uYbwGtb-aHFlTMw.roa (hash: J6ydyveQsR9vsUeW4Dd9AR32+AJgGbJK7r7hogwsc4Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/ec5584-6618-4b12-a11c-3055cb729bcf/1/TDuIzbE_PrEqm-VKsZuqkFWbOWo.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/ec5584-6618-4b12-a11c-3055cb729bcf/1/TDuIzbE_PrEqm-VKsZuqkFWbOWo.mft
rsync://rpki.ripe.net/repository/DEFAULT/TDuIzbE_PrEqm-VKsZuqkFWbOWo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 09:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:b3:62:0f:5a:03:e4:d3:92:0c:97:b8:30:e6:5d:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c3b88cdb13f3eb12a9be54ab19baa90559b396a
Validity
Not Before: Oct 19 09:01:01 2025 GMT
Not After : Oct 20 09:01:01 2025 GMT
Subject: CN=d7bdf7f66436af3cc4db61efb81ff870ad7d0798
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:94:e4:6e:e0:9e:12:4a:14:18:09:95:1c:5e:
88:fb:0e:1d:b6:ec:58:e5:ca:23:7f:f2:a6:30:25:
53:42:e1:0a:32:08:d2:c1:ff:12:5d:f7:78:f9:9f:
2a:f7:5a:99:d6:7c:c2:fa:bf:de:f6:6d:55:8a:9e:
71:1d:fc:7c:01:97:09:59:8e:c5:16:e8:86:f8:24:
ab:dd:02:53:65:00:7f:72:f8:96:7a:ea:44:5a:ae:
e1:c9:de:cb:76:d6:f0:53:90:58:60:62:07:d1:a5:
c4:2f:30:93:23:7d:74:59:4f:a6:54:85:84:30:db:
66:0b:17:05:ad:f0:e4:7d:cc:75:e9:87:b6:6e:21:
88:d3:4b:b3:7b:51:1f:94:2a:7c:7e:c1:67:9c:f5:
12:6e:22:c3:40:8d:e7:a3:27:33:34:f1:b7:2e:75:
9b:18:c3:ee:80:3c:9a:e5:8a:40:4b:cf:c0:df:1e:
18:bf:db:6d:d0:8a:ec:c5:b9:c8:28:48:18:a7:36:
c5:58:fa:bd:d6:17:65:1a:85:c2:2b:be:20:3d:8f:
fa:a1:dd:24:02:a9:27:d2:96:15:8d:29:31:2b:5b:
60:7e:e7:86:1c:74:03:d2:35:91:01:06:cc:ad:3a:
06:e1:5e:82:e3:61:d0:4e:9e:48:fa:ef:38:9b:5c:
c3:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:BD:F7:F6:64:36:AF:3C:C4:DB:61:EF:B8:1F:F8:70:AD:7D:07:98
X509v3 Authority Key Identifier:
keyid:4C:3B:88:CD:B1:3F:3E:B1:2A:9B:E5:4A:B1:9B:AA:90:55:9B:39:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TDuIzbE_PrEqm-VKsZuqkFWbOWo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/ec5584-6618-4b12-a11c-3055cb729bcf/1/TDuIzbE_PrEqm-VKsZuqkFWbOWo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/ec5584-6618-4b12-a11c-3055cb729bcf/1/TDuIzbE_PrEqm-VKsZuqkFWbOWo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:d3:fd:de:83:2d:6f:09:aa:b0:b7:72:63:65:31:1c:97:8d:
c3:c1:55:93:99:ee:1e:f3:7c:ef:ac:8e:10:16:f1:18:32:df:
83:e9:38:00:c5:53:db:e6:8c:11:67:62:d2:e9:e5:15:59:52:
27:90:ab:31:b4:0f:af:10:d6:bb:cd:70:52:4c:27:ad:4d:15:
17:81:2a:65:e8:14:7b:7a:ce:77:4f:19:cc:f3:67:e3:16:42:
49:b4:56:47:2e:2d:df:32:4b:05:4c:43:5f:77:42:33:52:bc:
7a:b6:4d:ee:8b:28:1e:47:d2:bd:1b:fb:79:2c:2b:b7:45:72:
d1:b5:79:ce:23:a1:12:4f:52:da:a1:29:5c:80:29:b1:af:cb:
f9:59:46:d5:8c:33:a4:27:2e:c5:9e:b9:83:34:25:9f:52:28:
c0:25:ee:44:75:7c:57:5c:35:13:72:18:9e:45:62:9d:4d:75:
29:d4:bf:94:39:12:e0:2b:0b:a8:bb:62:eb:b1:63:fd:7b:2c:
e0:16:e2:e7:4a:7f:be:0c:7c:fe:97:ab:54:02:c2:34:94:e6:
d4:c0:d0:b6:1c:85:9b:eb:fe:3f:0e:4f:33:01:b3:54:0f:e9:
63:1d:f2:d1:fb:56:dd:68:c7:30:e7:34:0d:52:8a:dc:76:38:
c2:23:0d:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:39:24 2025 by rpki-client