Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/e4c319-7223-4246-b66b-f9d096524c13/1/TEYfg3hoy-rKF670hnhPYfSSQ-0.mft
File: TEYfg3hoy-rKF670hnhPYfSSQ-0.mft (raw, json)
Hash identifier: /NKWNWp5B6/lU4oQYz3sJUE0dcKVrFHwOJzwCepP6kc=
Subject key identifier: 16:7D:45:1E:10:F6:80:25:E9:85:C0:EF:A8:91:7F:B2:F6:7E:76:51
Authority key identifier: 4C:46:1F:83:78:68:CB:EA:CA:17:AE:F4:86:78:4F:61:F4:92:43:ED
Certificate issuer: /CN=4c461f837868cbeaca17aef486784f61f49243ed
Certificate serial: 01984F9EABD292A02F375117903DAFFE2052
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TEYfg3hoy-rKF670hnhPYfSSQ-0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/e4c319-7223-4246-b66b-f9d096524c13/1/TEYfg3hoy-rKF670hnhPYfSSQ-0.mft
Manifest number: 1593
Signing time: Mon 28 Jul 2025 06:00:55 +0000
Manifest this update: Mon 28 Jul 2025 06:00:55 +0000
Manifest next update: Tue 29 Jul 2025 06:00:55 +0000
Files and hashes: 1: TEYfg3hoy-rKF670hnhPYfSSQ-0.crl (hash: N3SjooZ4vN+wJAJLn/ehGnAorF8NmfTphT//kIg1HLo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/e4c319-7223-4246-b66b-f9d096524c13/1/TEYfg3hoy-rKF670hnhPYfSSQ-0.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/e4c319-7223-4246-b66b-f9d096524c13/1/TEYfg3hoy-rKF670hnhPYfSSQ-0.mft
rsync://rpki.ripe.net/repository/DEFAULT/TEYfg3hoy-rKF670hnhPYfSSQ-0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 23:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4f:9e:ab:d2:92:a0:2f:37:51:17:90:3d:af:fe:20:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c461f837868cbeaca17aef486784f61f49243ed
Validity
Not Before: Jul 28 06:00:55 2025 GMT
Not After : Jul 29 06:00:55 2025 GMT
Subject: CN=167d451e10f68025e985c0efa8917fb2f67e7651
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:b9:99:77:37:6d:44:72:a4:12:98:64:19:88:
16:3a:f4:f3:95:86:3d:4f:3b:54:c4:f5:f3:8c:90:
08:c0:f9:ef:f1:94:6b:b0:45:86:89:5f:94:c8:d0:
b7:68:eb:ba:fb:da:4e:55:d7:db:a4:c5:ca:f3:01:
05:2f:b7:46:ed:9f:d7:ff:6c:ea:72:46:e1:56:8f:
46:6e:7c:f4:e8:ab:44:3d:a7:4d:c5:71:f5:3a:51:
73:61:6f:44:fe:dd:cd:21:17:c0:1d:af:c1:b1:38:
cc:d0:e0:ca:ba:7a:c2:eb:53:27:8b:5c:72:79:c9:
bb:7c:77:0d:c3:23:01:1c:51:07:7e:f2:c0:03:aa:
f2:b8:66:9b:b0:e2:de:18:49:83:86:6b:22:c1:46:
4f:15:ef:87:aa:ff:ea:4f:eb:6a:87:f0:c5:d8:b8:
d2:f1:6e:7c:73:77:a2:eb:15:c9:c7:ba:55:4d:2e:
50:a6:2f:20:0d:40:19:82:18:b5:82:41:42:67:ee:
bb:d5:35:1e:45:70:eb:bf:58:d2:e0:27:e8:c5:9a:
53:53:fe:b4:e5:0f:5f:58:a4:d9:57:44:57:ba:04:
d7:7e:7c:fb:73:dc:5f:f6:71:f4:fa:d2:f3:da:75:
d3:13:70:94:09:23:1d:df:32:04:87:13:c7:58:68:
11:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:7D:45:1E:10:F6:80:25:E9:85:C0:EF:A8:91:7F:B2:F6:7E:76:51
X509v3 Authority Key Identifier:
keyid:4C:46:1F:83:78:68:CB:EA:CA:17:AE:F4:86:78:4F:61:F4:92:43:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TEYfg3hoy-rKF670hnhPYfSSQ-0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/e4c319-7223-4246-b66b-f9d096524c13/1/TEYfg3hoy-rKF670hnhPYfSSQ-0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/e4c319-7223-4246-b66b-f9d096524c13/1/TEYfg3hoy-rKF670hnhPYfSSQ-0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:21:b6:8e:e1:5b:a1:4f:29:17:03:f4:17:8e:37:40:39:95:
5b:58:53:60:d3:85:25:5a:8f:6f:11:05:84:3b:3b:5a:39:e3:
b6:67:9a:0c:27:d0:98:96:66:30:66:1e:c5:2a:44:32:7c:1c:
c7:22:ba:b2:f3:d8:53:35:8d:8d:01:57:7f:f2:d7:aa:d5:57:
c9:63:70:51:01:aa:8c:aa:b7:0d:43:a9:65:a8:dc:dc:1c:80:
d9:24:35:87:78:88:b7:0f:d4:ff:e1:a1:17:9f:81:de:85:5b:
f5:78:20:cf:2d:79:e3:8e:cf:80:3e:ad:59:7f:1b:61:d9:10:
04:16:c1:f7:6a:35:05:3e:df:a9:06:40:1a:a0:34:78:d4:21:
1f:b8:8b:60:37:94:3d:c2:6b:f5:53:c2:8e:45:d0:3e:87:0d:
7f:53:0f:bb:62:fa:08:6e:00:3c:fc:e8:ba:06:53:d6:b0:23:
bf:c4:bb:d2:f0:22:d3:79:7d:37:ec:d6:92:1a:50:ba:7f:c1:
5c:e7:89:c0:66:4b:07:44:61:46:91:5e:de:1d:53:ca:53:bd:
10:a0:bf:92:ba:d3:11:d0:7e:ea:83:3d:f9:f3:ca:2b:51:72:
c0:d8:dc:a4:8a:2f:ea:77:f2:17:51:a8:dd:1e:a3:3a:34:58:
a0:d3:66:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 28 07:15:34 2025 by rpki-client