Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/e2451c-e31c-4c30-86f2-0e516f9c4d45/1/_tvrNJcjK29ayaJodTchEBWihxA.mft
File: _tvrNJcjK29ayaJodTchEBWihxA.mft (raw, json)
Hash identifier: j2lXruLS/VSTFPCgJBq1yx+A7PJLwgkfYTHMJbI9zy4=
Subject key identifier: 4A:F7:BA:28:5B:0E:AC:8B:A2:5A:5E:E5:8B:E9:A2:04:B8:63:03:2B
Authority key identifier: FE:DB:EB:34:97:23:2B:6F:5A:C9:A2:68:75:37:21:10:15:A2:87:10
Certificate issuer: /CN=fedbeb3497232b6f5ac9a2687537211015a28710
Certificate serial: 01984965F455A807AA54ED6347F4B772A2FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_tvrNJcjK29ayaJodTchEBWihxA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/e2451c-e31c-4c30-86f2-0e516f9c4d45/1/_tvrNJcjK29ayaJodTchEBWihxA.mft
Manifest number: 15FF
Signing time: Sun 27 Jul 2025 01:01:14 +0000
Manifest this update: Sun 27 Jul 2025 01:01:14 +0000
Manifest next update: Mon 28 Jul 2025 01:01:14 +0000
Files and hashes: 1: _tvrNJcjK29ayaJodTchEBWihxA.crl (hash: FdPh2wQ6yKFVMprzb/bysqXS7rK2R775JH2G2AiMSo8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/e2451c-e31c-4c30-86f2-0e516f9c4d45/1/_tvrNJcjK29ayaJodTchEBWihxA.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/e2451c-e31c-4c30-86f2-0e516f9c4d45/1/_tvrNJcjK29ayaJodTchEBWihxA.mft
rsync://rpki.ripe.net/repository/DEFAULT/_tvrNJcjK29ayaJodTchEBWihxA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 01:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:65:f4:55:a8:07:aa:54:ed:63:47:f4:b7:72:a2:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fedbeb3497232b6f5ac9a2687537211015a28710
Validity
Not Before: Jul 27 01:01:14 2025 GMT
Not After : Jul 28 01:01:14 2025 GMT
Subject: CN=4af7ba285b0eac8ba25a5ee58be9a204b863032b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:1e:28:dc:76:29:16:f8:42:ba:71:4a:e4:e5:
41:b9:c3:83:8b:d5:cf:02:eb:7e:2e:6f:db:5d:7d:
92:b2:bd:be:66:a7:23:a2:d6:23:7a:1f:3e:cf:ef:
9f:b4:9f:be:aa:c6:87:8c:46:2e:00:2b:e3:4c:98:
3a:ed:a2:36:57:f6:c7:26:ff:5f:8e:14:e6:42:f7:
16:95:27:f6:f9:04:db:27:0a:ea:7f:61:f4:4a:e4:
78:cc:c1:0e:62:cc:8e:0c:3f:38:5d:5a:52:c8:a4:
85:79:a7:1c:74:19:33:02:ad:bd:06:70:13:d2:62:
f5:a8:e0:f3:a6:8e:a8:d6:5e:15:d8:6e:13:43:0b:
e8:1f:d9:43:5e:4e:03:7b:67:cc:07:2e:fc:7b:8b:
50:ad:ea:9b:47:a2:19:4e:05:fe:6a:35:cf:c8:ad:
f3:81:22:30:26:7c:f4:9a:5d:ca:6d:be:61:e1:de:
ca:b1:9d:2d:ac:d1:6a:9b:be:74:49:a8:2e:29:ef:
6e:e8:bc:29:1a:32:94:de:d1:8c:68:8b:dc:5e:36:
e0:a7:73:cc:60:49:7f:14:35:d5:19:16:1b:6f:fe:
83:3f:1d:9b:5f:84:9a:d1:6f:5c:7f:df:78:b4:5e:
e8:ac:28:0e:be:20:84:0e:a0:9d:34:f9:6e:7e:ec:
15:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:F7:BA:28:5B:0E:AC:8B:A2:5A:5E:E5:8B:E9:A2:04:B8:63:03:2B
X509v3 Authority Key Identifier:
keyid:FE:DB:EB:34:97:23:2B:6F:5A:C9:A2:68:75:37:21:10:15:A2:87:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_tvrNJcjK29ayaJodTchEBWihxA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/e2451c-e31c-4c30-86f2-0e516f9c4d45/1/_tvrNJcjK29ayaJodTchEBWihxA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/e2451c-e31c-4c30-86f2-0e516f9c4d45/1/_tvrNJcjK29ayaJodTchEBWihxA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:91:77:90:6e:68:c5:04:60:9d:06:63:21:85:34:b8:ee:20:
1a:d2:0f:3d:96:69:30:61:df:0b:ae:77:31:3a:4a:3f:52:f3:
41:8c:b6:54:3d:80:65:68:ec:f0:13:18:bb:8c:f0:82:77:ee:
de:7d:4c:55:ba:a1:40:e9:09:15:89:32:d7:1e:4e:26:20:c5:
c0:0c:0f:df:47:06:b4:d4:54:d3:ac:a6:fb:5e:28:9a:8b:92:
34:e9:4e:2e:2e:5b:d6:81:24:7d:f8:dd:b4:7a:f5:0d:8d:c5:
9e:e2:e9:0f:9c:9a:5c:85:0b:32:af:43:8e:03:25:83:2c:52:
39:f2:13:89:94:b3:da:fb:46:74:20:bf:3a:82:61:0b:60:71:
cd:bb:8c:c6:ed:0a:58:00:cd:0b:36:dc:e1:26:a0:44:ab:b2:
17:c8:d6:38:3d:88:eb:58:35:15:7b:14:0b:6e:69:c4:c9:55:
95:56:18:ce:d8:85:96:1f:12:57:e2:a7:d9:7a:cc:f1:e7:88:
f8:12:83:03:24:d1:ba:26:b4:19:0a:df:ec:f0:2b:6f:92:5e:
43:0a:18:82:84:78:2a:b0:08:57:fa:67:e9:e5:1b:bd:ae:d4:
3f:61:28:67:8d:f9:e1:25:b0:d4:3b:15:17:2d:64:e7:bc:31:
46:df:53:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 10:12:35 2025 by rpki-client