Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/32619c-76a0-4a5d-b5d8-375c6b689e2f/1/TN57OL6vPGOHn_kwlz0WPx6I5-Y.mft
File: TN57OL6vPGOHn_kwlz0WPx6I5-Y.mft (raw, json)
Hash identifier: smABYb6intmYO1i3zIxp2w6sW2I4yBlY9J32TIXl/GA=
Subject key identifier: 57:EF:EE:FD:3A:DF:29:36:ED:34:36:79:B3:75:2A:66:B5:82:FF:D3
Authority key identifier: 4C:DE:7B:38:BE:AF:3C:63:87:9F:F9:30:97:3D:16:3F:1E:88:E7:E6
Certificate issuer: /CN=4cde7b38beaf3c63879ff930973d163f1e88e7e6
Certificate serial: 0199225576B6697C577CABF05B8F3C15D5DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TN57OL6vPGOHn_kwlz0WPx6I5-Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/32619c-76a0-4a5d-b5d8-375c6b689e2f/1/TN57OL6vPGOHn_kwlz0WPx6I5-Y.mft
Manifest number: 75
Signing time: Sun 07 Sep 2025 04:00:50 +0000
Manifest this update: Sun 07 Sep 2025 04:00:50 +0000
Manifest next update: Mon 08 Sep 2025 04:00:50 +0000
Files and hashes: 1: TN57OL6vPGOHn_kwlz0WPx6I5-Y.crl (hash: ChFTdnbONgmONWUqkJNba20k3Wcgr6MFcktI/2CaUb4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/32619c-76a0-4a5d-b5d8-375c6b689e2f/1/TN57OL6vPGOHn_kwlz0WPx6I5-Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/32619c-76a0-4a5d-b5d8-375c6b689e2f/1/TN57OL6vPGOHn_kwlz0WPx6I5-Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/TN57OL6vPGOHn_kwlz0WPx6I5-Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 04:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:55:76:b6:69:7c:57:7c:ab:f0:5b:8f:3c:15:d5:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4cde7b38beaf3c63879ff930973d163f1e88e7e6
Validity
Not Before: Sep 7 04:00:50 2025 GMT
Not After : Sep 8 04:00:50 2025 GMT
Subject: CN=57efeefd3adf2936ed343679b3752a66b582ffd3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:53:4d:c2:d2:6c:09:31:9f:33:e3:7b:b4:88:
d0:e3:6e:3b:69:8a:91:9a:70:fd:2e:3c:37:56:e6:
ed:8e:21:1b:58:ad:85:cf:8b:24:af:37:1d:1a:68:
81:c2:89:32:ac:f0:bb:4e:42:c5:86:d7:d5:19:4c:
39:39:84:96:9b:7f:f1:78:67:62:27:e0:73:4d:65:
7e:ca:ef:76:f7:a9:bc:56:88:17:b5:33:d4:d7:e2:
99:19:fb:f4:93:49:bf:24:8f:8e:9b:66:e0:65:bf:
3e:fd:d8:4a:2a:37:d3:80:45:d4:4e:f2:59:5a:e1:
7e:fb:95:91:2e:5c:8b:46:e5:2e:a2:df:b4:62:58:
1b:c7:83:cd:a5:60:dc:29:ea:88:2e:5d:a1:46:24:
fa:e9:cb:5c:63:a8:6c:ad:04:cf:9c:bc:8f:3a:9b:
73:e3:20:1a:44:95:fc:1a:3b:35:0a:22:61:c5:0e:
b7:ae:14:2a:5b:68:57:d2:8a:93:f6:e7:dc:ed:69:
9c:af:0e:50:68:5b:ba:61:84:5e:2d:b1:1b:52:aa:
6f:10:b7:20:10:14:11:94:a4:ae:7e:34:2c:1d:a9:
1a:e9:a5:2a:ff:d4:70:33:b1:b4:df:32:7b:6a:99:
5d:73:01:19:fa:fb:39:c5:5a:e8:a8:3b:f5:03:71:
9b:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:EF:EE:FD:3A:DF:29:36:ED:34:36:79:B3:75:2A:66:B5:82:FF:D3
X509v3 Authority Key Identifier:
keyid:4C:DE:7B:38:BE:AF:3C:63:87:9F:F9:30:97:3D:16:3F:1E:88:E7:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TN57OL6vPGOHn_kwlz0WPx6I5-Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/32619c-76a0-4a5d-b5d8-375c6b689e2f/1/TN57OL6vPGOHn_kwlz0WPx6I5-Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/32619c-76a0-4a5d-b5d8-375c6b689e2f/1/TN57OL6vPGOHn_kwlz0WPx6I5-Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:ef:63:82:ce:10:4b:f1:86:15:03:01:22:bf:41:20:08:d5:
3e:5e:56:63:30:1e:54:b1:3d:8e:1f:16:90:cf:f3:17:4f:c5:
ab:ee:46:cc:10:6d:8e:ca:2c:16:0a:6f:76:25:e0:ed:9e:b8:
c7:e1:ed:7a:45:ca:9b:e2:c0:08:e0:a0:33:71:ec:a5:d1:92:
6b:9f:96:f5:f9:33:0c:3f:fe:94:86:8e:d1:ee:a6:af:7d:c0:
2c:cc:b2:d7:e2:26:6b:53:b3:eb:f0:f5:84:97:d2:35:26:de:
44:a8:77:f8:47:d7:25:cf:a1:44:77:93:47:2e:92:f1:30:7a:
bf:53:63:43:28:8e:fd:bc:b9:62:a4:fb:a6:47:f6:42:9c:f1:
bb:e8:82:e2:6f:3b:0b:32:da:f5:43:2a:24:df:9a:f6:7f:c1:
53:2b:48:c9:8e:7e:0a:f0:8f:ec:d5:88:94:56:2a:b0:e0:b0:
eb:83:d0:c6:5f:b2:61:38:9d:fa:5c:57:83:41:ba:9e:23:0e:
ba:98:cd:58:c3:36:21:fc:13:48:b2:a7:a5:53:50:d4:5f:b4:
c5:d5:bc:cd:17:98:33:01:cb:a3:37:8a:62:e2:92:70:ef:c6:
67:bc:fc:50:86:95:07:5f:53:29:ee:71:8e:c3:41:18:31:1c:
66:40:1e:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:08:26 2025 by rpki-client