Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/0196f1-4339-4bdc-8034-2eb2f2ed3029/1/_TSxP72Tgd-Exofwa80HTkp1WAM.mft
File: _TSxP72Tgd-Exofwa80HTkp1WAM.mft (raw, json)
Hash identifier: j5j4v8sOqfXdA+HIW2jBClRUPNaYfuVy0WxRRODCi+I=
Subject key identifier: BD:61:4D:CB:1D:52:3B:55:70:73:EE:72:85:0D:4D:DF:3D:F9:E2:E3
Authority key identifier: FD:34:B1:3F:BD:93:81:DF:84:C6:87:F0:6B:CD:07:4E:4A:75:58:03
Certificate issuer: /CN=fd34b13fbd9381df84c687f06bcd074e4a755803
Certificate serial: 0198481B65613E6DE567C532991DB8AA6FF4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_TSxP72Tgd-Exofwa80HTkp1WAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/0196f1-4339-4bdc-8034-2eb2f2ed3029/1/_TSxP72Tgd-Exofwa80HTkp1WAM.mft
Manifest number: 15FE
Signing time: Sat 26 Jul 2025 19:00:11 +0000
Manifest this update: Sat 26 Jul 2025 19:00:11 +0000
Manifest next update: Sun 27 Jul 2025 19:00:11 +0000
Files and hashes: 1: _TSxP72Tgd-Exofwa80HTkp1WAM.crl (hash: kr2DaISrTf4qBJndeq4pS48xvrMVsQPf2ChPpYau3OY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/0196f1-4339-4bdc-8034-2eb2f2ed3029/1/_TSxP72Tgd-Exofwa80HTkp1WAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/0196f1-4339-4bdc-8034-2eb2f2ed3029/1/_TSxP72Tgd-Exofwa80HTkp1WAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/_TSxP72Tgd-Exofwa80HTkp1WAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 19:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:1b:65:61:3e:6d:e5:67:c5:32:99:1d:b8:aa:6f:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd34b13fbd9381df84c687f06bcd074e4a755803
Validity
Not Before: Jul 26 19:00:11 2025 GMT
Not After : Jul 27 19:00:11 2025 GMT
Subject: CN=bd614dcb1d523b557073ee72850d4ddf3df9e2e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:4d:14:5e:bf:e9:96:8c:4e:8d:6b:25:0e:35:
d9:65:d2:39:ff:df:23:da:44:bd:79:d0:08:13:3f:
b0:fe:2b:2c:45:a9:8b:7e:fd:ea:09:21:ec:8c:7e:
65:8d:0f:3b:55:bd:d6:23:7d:5e:0f:29:af:0a:6a:
60:de:f7:23:15:f9:97:04:84:ba:e3:be:b9:ad:cc:
41:8e:1c:80:c9:60:1b:d3:ce:c2:b9:81:a3:3e:91:
76:b1:16:ef:2b:25:2c:cf:09:d9:ce:7b:a8:02:2c:
b0:3d:46:e0:4f:dd:52:0a:79:c3:1b:fa:0c:ec:2d:
c0:69:22:8c:1c:3f:d7:70:94:ba:57:af:39:97:0d:
b2:0a:60:cf:15:1e:01:75:9f:e1:88:be:a3:51:ab:
d2:04:4f:22:f7:84:8c:2f:17:b4:21:d0:ab:25:2a:
3d:8c:1f:c8:9d:6b:df:8d:ec:6a:49:ff:c1:f5:65:
f4:17:d3:5c:9f:39:c2:f1:6f:47:b8:e6:63:06:37:
22:1e:44:96:3a:29:ab:1e:d8:36:16:af:29:ae:3d:
39:e1:86:c4:6e:b5:f0:47:aa:c9:9e:84:ba:c0:18:
50:db:87:38:da:88:14:b1:fb:2c:9c:4a:36:76:49:
16:c5:d6:8e:b4:50:05:fa:1f:b8:56:a3:c9:7c:29:
2c:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:61:4D:CB:1D:52:3B:55:70:73:EE:72:85:0D:4D:DF:3D:F9:E2:E3
X509v3 Authority Key Identifier:
keyid:FD:34:B1:3F:BD:93:81:DF:84:C6:87:F0:6B:CD:07:4E:4A:75:58:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_TSxP72Tgd-Exofwa80HTkp1WAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/0196f1-4339-4bdc-8034-2eb2f2ed3029/1/_TSxP72Tgd-Exofwa80HTkp1WAM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/0196f1-4339-4bdc-8034-2eb2f2ed3029/1/_TSxP72Tgd-Exofwa80HTkp1WAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:91:b4:35:57:dd:9c:30:43:cc:60:e8:ce:80:02:50:e6:47:
35:b8:d3:17:5b:b6:ac:a4:7f:18:f6:5a:6b:93:0c:f1:e7:1e:
31:63:75:32:c6:75:56:45:8f:af:56:a0:8c:c2:1d:6f:38:d4:
c5:fe:e8:10:d7:fb:8a:39:05:a2:d1:1c:9c:bd:e9:cc:d7:82:
9e:ba:95:0b:0a:e7:58:71:38:24:72:46:25:40:76:cf:e2:cd:
f7:02:35:f7:f1:a5:c0:ea:e0:11:b1:9f:8a:64:70:e2:c2:9d:
16:b8:7c:b2:61:05:26:8a:bf:00:c7:89:13:83:58:81:31:e0:
3a:2a:96:1b:29:5c:b8:1c:bf:cd:26:3a:76:bd:2d:e8:98:50:
c2:33:4b:d5:c5:93:4c:a3:2a:ef:5a:46:61:76:08:ac:4f:0d:
c0:56:e5:13:63:72:44:2c:de:91:97:81:cc:59:2c:cd:40:0d:
f6:35:a9:ef:d0:fb:8e:34:52:f1:1c:c2:b2:79:e2:9a:79:6b:
a3:32:ca:25:d2:ce:7f:28:5a:c0:80:7b:a3:cf:d9:2b:a2:59:
dc:88:68:38:d4:3e:4a:e8:10:d2:cb:72:fa:5d:dd:64:12:b8:
97:90:51:51:49:a3:df:33:d7:6a:8b:93:f4:db:d8:9c:14:5d:
93:51:b6:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 02:24:28 2025 by rpki-client