Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/e79d38-a8ea-47c2-95dc-d194a7b05dda/1/TM6YuMJCaF3bYPTiEJwr01GmQn8.mft
File: TM6YuMJCaF3bYPTiEJwr01GmQn8.mft (raw, json)
Hash identifier: Z8uqAoIU/L9pBuDpwTdaaXrs9cHbpOP4Y65BdNogzyQ=
Subject key identifier: 59:85:2E:7E:62:09:22:59:7D:C3:E3:22:18:33:DA:30:D8:E1:E6:FD
Authority key identifier: 4C:CE:98:B8:C2:42:68:5D:DB:60:F4:E2:10:9C:2B:D3:51:A6:42:7F
Certificate issuer: /CN=4cce98b8c242685ddb60f4e2109c2bd351a6427f
Certificate serial: 01984776FA2B2256BDD43DAFA895923B3617
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TM6YuMJCaF3bYPTiEJwr01GmQn8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/e79d38-a8ea-47c2-95dc-d194a7b05dda/1/TM6YuMJCaF3bYPTiEJwr01GmQn8.mft
Manifest number: 15FE
Signing time: Sat 26 Jul 2025 16:00:36 +0000
Manifest this update: Sat 26 Jul 2025 16:00:36 +0000
Manifest next update: Sun 27 Jul 2025 16:00:36 +0000
Files and hashes: 1: TM6YuMJCaF3bYPTiEJwr01GmQn8.crl (hash: edIPd0AtBkdp3EzM/b0XGoLmC3lcQyCn8MAl+SrVqyM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/e79d38-a8ea-47c2-95dc-d194a7b05dda/1/TM6YuMJCaF3bYPTiEJwr01GmQn8.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/e79d38-a8ea-47c2-95dc-d194a7b05dda/1/TM6YuMJCaF3bYPTiEJwr01GmQn8.mft
rsync://rpki.ripe.net/repository/DEFAULT/TM6YuMJCaF3bYPTiEJwr01GmQn8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 15:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:47:76:fa:2b:22:56:bd:d4:3d:af:a8:95:92:3b:36:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4cce98b8c242685ddb60f4e2109c2bd351a6427f
Validity
Not Before: Jul 26 16:00:36 2025 GMT
Not After : Jul 27 16:00:36 2025 GMT
Subject: CN=59852e7e620922597dc3e3221833da30d8e1e6fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:95:13:5f:ea:9b:57:01:2a:72:c6:9c:0b:b8:
4c:fc:8f:7c:2a:5e:f3:d0:08:5b:4d:e6:d6:c3:a0:
70:5e:6b:f6:e2:6a:33:67:02:36:b6:a8:18:62:3b:
e2:5b:95:a8:cf:00:c5:e1:c4:9a:9b:4b:7f:42:10:
6a:c8:9f:d5:b3:dd:31:bf:26:e7:5e:ef:d8:cc:9e:
01:e6:76:4e:d1:d6:31:6d:f5:a3:66:8c:cb:0d:51:
0c:f1:a2:5a:76:18:57:51:f8:dc:54:a7:68:33:05:
58:b4:92:e9:ac:ab:d7:0f:7e:db:97:91:94:60:80:
cd:de:7d:d8:a5:42:38:2d:fd:39:b3:47:1f:09:c4:
a6:ba:d7:62:e2:0a:9d:ad:e2:e5:ba:31:ed:f8:00:
1d:b9:60:42:5d:11:63:37:c3:ac:d0:96:fe:0f:c2:
44:97:5a:c9:34:b5:3a:b8:ce:df:3f:cc:98:25:b3:
96:11:73:c7:d4:a7:73:63:48:1f:a6:a2:e8:42:87:
55:6e:05:d3:9c:6d:8e:c9:8a:80:38:91:18:e5:d5:
ee:83:25:04:ed:e5:8c:54:db:2d:e0:fc:fa:00:48:
65:50:08:8d:eb:43:f1:e8:75:38:59:7c:f8:bc:bf:
fe:72:22:bf:a1:e9:db:5f:a0:40:b1:90:2f:f0:5a:
43:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:85:2E:7E:62:09:22:59:7D:C3:E3:22:18:33:DA:30:D8:E1:E6:FD
X509v3 Authority Key Identifier:
keyid:4C:CE:98:B8:C2:42:68:5D:DB:60:F4:E2:10:9C:2B:D3:51:A6:42:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TM6YuMJCaF3bYPTiEJwr01GmQn8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/e79d38-a8ea-47c2-95dc-d194a7b05dda/1/TM6YuMJCaF3bYPTiEJwr01GmQn8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/e79d38-a8ea-47c2-95dc-d194a7b05dda/1/TM6YuMJCaF3bYPTiEJwr01GmQn8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:53:c0:63:1b:81:aa:8e:b1:f5:fd:bc:e0:eb:81:21:7d:6d:
03:be:85:a4:7f:d5:d0:86:2f:25:5b:a2:a7:b7:cd:51:ed:8c:
94:87:de:3a:53:94:47:91:6b:0b:1b:a0:fd:7f:0f:91:c4:1f:
6b:9a:89:c8:07:4f:87:89:38:5d:3b:0b:33:c4:b7:58:e7:93:
f9:67:87:a1:cc:12:13:bd:16:10:18:68:9b:9a:72:48:6d:45:
ad:68:5f:86:bf:24:be:18:67:c8:87:54:09:3e:fc:6b:95:c3:
91:c4:f6:44:35:e4:f4:c2:97:99:62:3f:84:16:71:a1:d6:bc:
8a:92:e9:9a:c7:46:20:aa:79:3e:9a:d0:21:68:32:9f:3c:e9:
c5:7d:ec:a4:8b:d9:a8:cb:f8:64:4b:29:0d:e1:c2:7f:ef:6e:
73:20:fc:93:92:27:21:ed:16:28:6c:0d:68:10:bc:5f:97:4b:
b7:a2:a0:24:d3:40:73:55:6a:75:2e:a3:c8:4e:70:00:e5:73:
1d:9c:30:93:12:52:4a:6f:bd:00:ee:67:cd:32:72:98:0c:92:
6c:bc:ae:2c:f3:f9:da:ca:39:ad:9a:86:02:47:cb:1a:4a:d7:
4d:3d:ba:d3:54:e8:b0:59:6f:18:e0:2d:62:8a:18:86:11:aa:
36:8e:02:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 01:31:59 2025 by rpki-client