Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/847c9d-201c-477a-ba96-328f66996ec1/1/TShV3jcUZy5-qwceFh0RoDDT048.mft
File: TShV3jcUZy5-qwceFh0RoDDT048.mft (raw, json)
Hash identifier: XSB25cXjza2vCZ7A2VdEIrClkB3EGmETSISamrquvNM=
Subject key identifier: D5:74:D1:D3:7E:C7:B3:D1:CD:53:D4:DD:3A:00:9A:7C:49:3F:B1:8E
Authority key identifier: 4D:28:55:DE:37:14:67:2E:7E:AB:07:1E:16:1D:11:A0:30:D3:D3:8F
Certificate issuer: /CN=4d2855de3714672e7eab071e161d11a030d3d38f
Certificate serial: 019848893D47A3840ED29BFA8EE760297A83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TShV3jcUZy5-qwceFh0RoDDT048.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/847c9d-201c-477a-ba96-328f66996ec1/1/TShV3jcUZy5-qwceFh0RoDDT048.mft
Manifest number: 02BA
Signing time: Sat 26 Jul 2025 21:00:10 +0000
Manifest this update: Sat 26 Jul 2025 21:00:10 +0000
Manifest next update: Sun 27 Jul 2025 21:00:10 +0000
Files and hashes: 1: TShV3jcUZy5-qwceFh0RoDDT048.crl (hash: TK7YEpG7sldM0bSLjwnsu686hCElIK2voz0jVzVPqyo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/847c9d-201c-477a-ba96-328f66996ec1/1/TShV3jcUZy5-qwceFh0RoDDT048.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/847c9d-201c-477a-ba96-328f66996ec1/1/TShV3jcUZy5-qwceFh0RoDDT048.mft
rsync://rpki.ripe.net/repository/DEFAULT/TShV3jcUZy5-qwceFh0RoDDT048.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:89:3d:47:a3:84:0e:d2:9b:fa:8e:e7:60:29:7a:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d2855de3714672e7eab071e161d11a030d3d38f
Validity
Not Before: Jul 26 21:00:10 2025 GMT
Not After : Jul 27 21:00:10 2025 GMT
Subject: CN=d574d1d37ec7b3d1cd53d4dd3a009a7c493fb18e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:fa:ab:e9:94:b7:a7:30:00:ca:05:0c:d8:4f:
0a:89:92:2c:44:5e:b1:ca:76:ad:6f:4f:58:da:7c:
59:95:be:e1:31:90:1a:0a:28:13:2a:b8:c3:3c:87:
99:23:3a:f1:e5:f7:a7:92:b0:f1:74:2b:e8:b9:05:
bf:e1:1f:f6:4f:a8:45:36:af:d5:0b:bc:0b:04:11:
e5:e0:fb:61:e1:a8:3e:ca:62:35:6a:31:c2:6a:d3:
fc:37:08:6b:66:c4:0f:9e:84:3c:1b:fb:b4:71:79:
18:ba:8a:3e:ad:c7:3e:7a:0b:04:7d:18:70:4e:d6:
5c:19:97:33:ff:2b:f5:4b:a3:e1:d2:50:7a:b0:81:
33:26:e8:b4:d1:65:fb:a1:5e:8e:7a:bb:45:8a:b1:
4e:11:8b:b1:6f:18:53:d2:0c:09:01:5e:42:27:2f:
31:d1:5b:d0:2c:79:b2:fb:ca:d3:88:1c:aa:6d:c9:
a7:9e:87:32:2d:43:e1:b8:b2:c2:ff:68:c5:33:43:
01:15:f0:65:1d:c8:8d:11:ac:40:95:03:40:da:76:
07:9c:64:35:b7:93:16:08:68:10:aa:ab:18:c4:44:
a4:ad:4a:d0:7b:f4:04:0e:aa:d2:8b:57:12:a3:fd:
84:87:6b:40:91:30:42:b7:ae:a0:f1:30:88:d5:ef:
f0:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:74:D1:D3:7E:C7:B3:D1:CD:53:D4:DD:3A:00:9A:7C:49:3F:B1:8E
X509v3 Authority Key Identifier:
keyid:4D:28:55:DE:37:14:67:2E:7E:AB:07:1E:16:1D:11:A0:30:D3:D3:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TShV3jcUZy5-qwceFh0RoDDT048.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/847c9d-201c-477a-ba96-328f66996ec1/1/TShV3jcUZy5-qwceFh0RoDDT048.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/847c9d-201c-477a-ba96-328f66996ec1/1/TShV3jcUZy5-qwceFh0RoDDT048.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:ef:10:f2:7e:b8:f7:8e:40:a6:09:47:53:24:7d:e4:2b:0f:
ee:ae:31:0a:69:7c:a5:34:f1:0c:a5:f5:9d:6d:2f:74:fe:18:
33:13:7b:20:aa:6b:91:d3:e5:b3:cb:a8:ee:85:b6:57:42:b9:
ea:8e:ad:46:65:b9:e0:27:b5:cc:37:fb:66:24:1e:c7:31:b7:
98:57:96:68:24:29:37:7a:17:da:2c:28:a7:48:4f:a6:8e:88:
b3:eb:e3:a3:6b:59:83:f7:c7:17:98:25:53:a3:24:bf:0d:28:
6e:83:0c:59:2b:05:00:d0:be:fa:3b:13:db:61:24:88:79:b1:
58:84:31:a1:e1:47:7e:c7:b9:f1:26:42:b2:f1:94:fd:7e:e2:
ff:d4:bc:c0:57:3e:28:6c:93:51:ff:9b:cd:91:e7:c7:b0:b6:
46:4d:16:ea:39:f3:22:62:ce:98:d3:4d:0b:df:f3:d8:bd:b0:
4c:70:46:5b:d2:d9:00:37:8d:c9:a5:64:16:36:f6:55:ed:31:
45:0e:24:64:33:bd:da:5d:e6:2d:2a:9d:99:c0:77:06:da:6b:
67:d2:e8:da:c4:a9:45:06:02:07:3f:9c:d9:9b:60:fa:5b:81:
05:73:61:83:f2:99:61:ab:90:84:93:c8:da:f4:b6:8a:3f:36:
a3:f4:0e:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 01:56:38 2025 by rpki-client