Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/639e5f-0797-4473-aeff-52f5753fc3be/1/TvYP_RC7937OmKeBY1mERCd9v6Q.mft
File: TvYP_RC7937OmKeBY1mERCd9v6Q.mft (raw, json)
Hash identifier: wA5HlTSxB/Zpy3JlG5L476pAfbUtJLb9e/7k6knPZw4=
Subject key identifier: 3E:BA:E9:A0:DC:BF:D4:AF:11:EC:19:6A:08:3C:67:40:10:8B:C8:5B
Authority key identifier: 4E:F6:0F:FD:10:BB:F7:7E:CE:98:A7:81:63:59:84:44:27:7D:BF:A4
Certificate issuer: /CN=4ef60ffd10bbf77ece98a78163598444277dbfa4
Certificate serial: 0198D4723BB5BDB9EFE1AD92DA80CBC8DA5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TvYP_RC7937OmKeBY1mERCd9v6Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/639e5f-0797-4473-aeff-52f5753fc3be/1/TvYP_RC7937OmKeBY1mERCd9v6Q.mft
Manifest number: 1645
Signing time: Sat 23 Aug 2025 01:01:52 +0000
Manifest this update: Sat 23 Aug 2025 01:01:52 +0000
Manifest next update: Sun 24 Aug 2025 01:01:52 +0000
Files and hashes: 1: TvYP_RC7937OmKeBY1mERCd9v6Q.crl (hash: 6X4lToRUjJpTcTAgoZOhMVuocEPg7PTccoHWkZGKIiI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/639e5f-0797-4473-aeff-52f5753fc3be/1/TvYP_RC7937OmKeBY1mERCd9v6Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/639e5f-0797-4473-aeff-52f5753fc3be/1/TvYP_RC7937OmKeBY1mERCd9v6Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/TvYP_RC7937OmKeBY1mERCd9v6Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 01:01:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:72:3b:b5:bd:b9:ef:e1:ad:92:da:80:cb:c8:da:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ef60ffd10bbf77ece98a78163598444277dbfa4
Validity
Not Before: Aug 23 01:01:52 2025 GMT
Not After : Aug 24 01:01:52 2025 GMT
Subject: CN=3ebae9a0dcbfd4af11ec196a083c6740108bc85b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:88:b7:24:bf:ce:9f:a8:46:2c:5d:77:22:1a:
ca:e7:e6:7d:a9:ba:6f:ec:40:54:a3:59:c4:93:94:
d1:11:b8:ae:ef:38:ab:d2:c6:4f:59:ac:7a:bc:44:
a4:1e:db:05:92:fe:fe:a1:58:bd:f7:7c:0b:a4:1c:
f7:24:dd:2e:c8:69:7b:06:53:3e:95:12:e4:72:de:
d8:92:be:8a:55:43:02:ba:a7:47:41:16:1d:e2:7c:
54:6b:d2:c8:de:7e:7c:09:b3:5f:49:3b:d4:51:72:
55:8f:cc:67:a2:21:2c:c2:83:a8:3e:8b:b4:ae:ef:
7c:6c:50:e9:81:58:6c:2d:f2:8a:55:2d:27:43:f1:
38:cb:55:05:fc:9f:f0:1c:88:7a:f5:12:73:21:a8:
dd:52:5d:0c:09:b9:0e:32:e2:ce:03:98:54:04:53:
cf:84:8c:d2:6f:cd:29:0f:31:c4:1a:65:23:40:52:
33:d8:fb:c5:69:11:94:55:d2:f1:69:c2:e0:f4:72:
80:c9:49:d7:c6:68:da:64:29:61:16:d4:15:95:99:
35:6c:b7:0b:4a:7d:dc:13:50:c6:8b:f4:f2:92:3f:
bc:30:25:6f:d4:90:27:48:56:ad:ae:3a:05:7a:38:
23:1e:94:6c:73:20:1b:f8:26:64:3b:87:1b:b6:04:
ef:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:BA:E9:A0:DC:BF:D4:AF:11:EC:19:6A:08:3C:67:40:10:8B:C8:5B
X509v3 Authority Key Identifier:
keyid:4E:F6:0F:FD:10:BB:F7:7E:CE:98:A7:81:63:59:84:44:27:7D:BF:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TvYP_RC7937OmKeBY1mERCd9v6Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/639e5f-0797-4473-aeff-52f5753fc3be/1/TvYP_RC7937OmKeBY1mERCd9v6Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/639e5f-0797-4473-aeff-52f5753fc3be/1/TvYP_RC7937OmKeBY1mERCd9v6Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:6f:92:bd:df:7d:ad:b4:54:b6:c4:6b:f6:31:23:ef:da:44:
2c:5e:fc:1c:54:84:1e:a6:1b:6a:09:fd:7a:e0:38:53:76:7d:
5c:87:e7:2d:64:41:0b:ec:d3:19:58:96:37:31:a4:d8:a3:00:
b2:30:56:44:87:cc:e7:1c:22:5f:ba:1c:eb:51:a6:67:31:6d:
bd:75:aa:d2:b9:3e:25:4d:65:ad:51:0c:f9:d3:0d:29:8b:4a:
b6:9a:c9:0c:7e:da:60:93:0e:ed:c3:9c:64:5e:d6:ca:92:d9:
e5:52:e9:5a:5b:7f:d7:35:5c:be:03:6c:ad:7a:60:90:2f:a6:
01:2c:0b:be:04:22:84:cc:aa:b9:6a:4d:52:de:ab:b0:4f:80:
94:b9:6d:ee:fc:26:51:cc:1e:c9:3d:8b:71:2a:ef:36:f0:d5:
4d:a8:25:89:32:19:c0:8b:cc:92:fe:6a:0e:e4:dd:9a:5b:19:
28:09:e6:e1:ad:eb:cf:2e:9e:c1:50:88:a0:21:86:17:0a:e1:
7f:38:f8:ea:50:04:c0:ce:0c:7f:2d:0c:87:2e:b1:d9:54:38:
dd:7e:ab:2c:1b:0a:b7:c3:c6:9e:c3:b6:9e:db:2d:83:6a:83:
b6:cd:df:d1:45:e3:ff:6a:18:02:5d:1b:e1:c7:a2:0e:d7:7c:
80:7c:9b:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:52:53 2025 by rpki-client