Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/e94ce1-0d7b-431b-9143-fc3f5ec14a5b/1/TsRiBLT4hZI6pKl4btWsr7HACd4.mft
File: TsRiBLT4hZI6pKl4btWsr7HACd4.mft (raw, json)
Hash identifier: +tyibo8jfGk9tp3sapG2xw9gWo2POK3KEZb0gCwb0PY=
Subject key identifier: 77:40:FB:C6:60:71:A4:FE:0A:9D:86:B3:7A:69:7C:42:7F:9B:34:90
Authority key identifier: 4E:C4:62:04:B4:F8:85:92:3A:A4:A9:78:6E:D5:AC:AF:B1:C0:09:DE
Certificate issuer: /CN=4ec46204b4f885923aa4a9786ed5acafb1c009de
Certificate serial: 01984AAED4B3DE8BD10C463CD417557B79E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TsRiBLT4hZI6pKl4btWsr7HACd4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/e94ce1-0d7b-431b-9143-fc3f5ec14a5b/1/TsRiBLT4hZI6pKl4btWsr7HACd4.mft
Manifest number: 0AD1
Signing time: Sun 27 Jul 2025 07:00:28 +0000
Manifest this update: Sun 27 Jul 2025 07:00:28 +0000
Manifest next update: Mon 28 Jul 2025 07:00:28 +0000
Files and hashes: 1: TsRiBLT4hZI6pKl4btWsr7HACd4.crl (hash: vDxlQwpM2DG4YS/nFa/gWiq3LXXEX+z4TiAZvdZir3I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/e94ce1-0d7b-431b-9143-fc3f5ec14a5b/1/TsRiBLT4hZI6pKl4btWsr7HACd4.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/e94ce1-0d7b-431b-9143-fc3f5ec14a5b/1/TsRiBLT4hZI6pKl4btWsr7HACd4.mft
rsync://rpki.ripe.net/repository/DEFAULT/TsRiBLT4hZI6pKl4btWsr7HACd4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:ae:d4:b3:de:8b:d1:0c:46:3c:d4:17:55:7b:79:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ec46204b4f885923aa4a9786ed5acafb1c009de
Validity
Not Before: Jul 27 07:00:28 2025 GMT
Not After : Jul 28 07:00:28 2025 GMT
Subject: CN=7740fbc66071a4fe0a9d86b37a697c427f9b3490
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:77:d8:df:ba:09:5b:9b:a6:96:c4:48:2d:a7:
a5:e8:6c:97:16:4a:d1:47:3b:a0:7d:1b:ce:a5:b7:
2f:6e:73:ae:fd:ac:1c:ce:c3:09:4a:29:8b:ee:e9:
9e:36:da:4d:9e:54:b4:f6:48:1d:74:88:3e:54:30:
cc:48:6e:56:ed:e6:29:ec:0a:7a:31:a9:75:15:08:
4c:3b:bc:9b:79:7e:c3:79:70:d8:da:3e:91:ac:b6:
20:b7:c3:68:97:e9:e5:f6:1d:dd:73:ac:85:ad:69:
fe:6f:9d:31:1b:56:5d:55:10:36:1e:41:c9:a5:b9:
c4:ee:54:e2:5a:ab:c8:4c:7b:91:fa:b8:f4:aa:73:
a6:fe:f9:75:43:72:58:e2:a0:29:33:09:ec:fd:e2:
1e:9d:ef:ab:ba:ac:f0:3d:3d:4f:7e:65:36:33:15:
d2:3d:8a:4c:3e:4f:7d:c8:17:90:a7:f4:ef:ff:c7:
fa:10:8e:80:3a:6d:0a:23:c1:d4:e1:42:13:32:66:
c1:02:6d:0c:06:11:36:63:1f:9e:1c:56:a9:80:2f:
a3:58:46:d6:02:c2:f6:31:ab:f0:01:6e:a4:2e:f1:
4d:97:bc:82:c1:64:16:7c:10:f4:ba:d8:7d:bd:d7:
7b:3c:df:1c:4c:2e:6a:b7:cc:ba:f4:21:3c:a9:5a:
99:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:40:FB:C6:60:71:A4:FE:0A:9D:86:B3:7A:69:7C:42:7F:9B:34:90
X509v3 Authority Key Identifier:
keyid:4E:C4:62:04:B4:F8:85:92:3A:A4:A9:78:6E:D5:AC:AF:B1:C0:09:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TsRiBLT4hZI6pKl4btWsr7HACd4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/e94ce1-0d7b-431b-9143-fc3f5ec14a5b/1/TsRiBLT4hZI6pKl4btWsr7HACd4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/e94ce1-0d7b-431b-9143-fc3f5ec14a5b/1/TsRiBLT4hZI6pKl4btWsr7HACd4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:55:45:a7:3b:dc:3a:ab:0d:c7:01:2d:1c:29:b1:1e:ec:62:
d9:2d:00:5a:26:10:64:4d:e1:9e:e5:cd:96:f5:fc:27:00:5f:
7d:38:9e:48:dc:0e:9b:73:0f:f7:bc:de:80:62:bc:9a:7e:1f:
87:07:ba:d3:e9:a8:73:8b:3e:6a:50:53:8c:2d:8a:61:0f:a5:
94:3d:c2:8b:83:0a:33:80:55:21:59:a0:71:d2:45:6b:d5:aa:
a2:e9:7b:f9:86:89:9e:97:bd:63:9d:9f:af:a5:38:09:ae:b3:
da:e9:7c:ee:4a:43:d1:52:6e:f9:46:15:0c:0d:54:4a:a4:a5:
48:5f:89:2e:86:64:d1:06:15:ab:6f:68:04:a6:f9:65:fe:0c:
bb:19:88:b6:b5:c9:8d:45:2d:a5:53:52:b3:35:97:0d:42:34:
a8:7c:e6:73:34:1e:fc:14:71:db:ad:22:04:a1:a7:c7:67:59:
75:5c:f5:8a:92:88:61:7c:38:64:62:b0:e6:a6:af:ab:3a:9d:
38:ae:39:a0:0f:16:62:55:b9:c4:a3:a4:7d:4c:bc:2a:ab:cc:
13:af:cf:6c:25:44:a0:8c:95:e2:68:50:a3:b3:18:51:cc:05:
f1:23:73:0c:c7:7b:ca:dc:fa:01:78:1e:24:28:77:e9:21:93:
44:9a:c1:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 08:30:47 2025 by rpki-client