
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/1980bd-0753-4161-b6f5-9c72e157abb3/1/Tm_7mQbuvrofWxpVju1jcvZTzoY.mft
File: Tm_7mQbuvrofWxpVju1jcvZTzoY.mft (raw, json)
Hash identifier: xAv0ZZUsPg9kmSF8JgcVBO/2AHxokSeI3Cx/rxKOsLU=
Subject key identifier: BA:89:39:23:70:0D:0B:41:F3:20:74:EC:33:8B:BA:01:74:42:94:8A
Authority key identifier: 4E:6F:FB:99:06:EE:BE:BA:1F:5B:1A:55:8E:ED:63:72:F6:53:CE:86
Certificate issuer: /CN=4e6ffb9906eebeba1f5b1a558eed6372f653ce86
Certificate serial: 0199221E8B773132CE9A07B3B347B4CC1EC5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tm_7mQbuvrofWxpVju1jcvZTzoY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/1980bd-0753-4161-b6f5-9c72e157abb3/1/Tm_7mQbuvrofWxpVju1jcvZTzoY.mft
Manifest number: 166E
Signing time: Sun 07 Sep 2025 03:00:51 +0000
Manifest this update: Sun 07 Sep 2025 03:00:51 +0000
Manifest next update: Mon 08 Sep 2025 03:00:51 +0000
Files and hashes: 1: Tm_7mQbuvrofWxpVju1jcvZTzoY.crl (hash: P23hfUEamIResikNBdNbXvFRtAwUg1xzJTU88xAiZRE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/1980bd-0753-4161-b6f5-9c72e157abb3/1/Tm_7mQbuvrofWxpVju1jcvZTzoY.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/1980bd-0753-4161-b6f5-9c72e157abb3/1/Tm_7mQbuvrofWxpVju1jcvZTzoY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Tm_7mQbuvrofWxpVju1jcvZTzoY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 03:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:1e:8b:77:31:32:ce:9a:07:b3:b3:47:b4:cc:1e:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e6ffb9906eebeba1f5b1a558eed6372f653ce86
Validity
Not Before: Sep 7 03:00:51 2025 GMT
Not After : Sep 8 03:00:51 2025 GMT
Subject: CN=ba893923700d0b41f32074ec338bba017442948a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:82:34:ee:d3:2e:29:5a:a2:72:f6:e4:b4:35:
d1:78:35:b0:70:77:0f:0c:61:ec:f9:c2:ee:66:06:
1d:de:56:e6:0a:7c:9d:4e:31:1c:3e:83:1f:43:0a:
db:c1:dc:a1:4b:ec:43:e6:62:9f:82:a3:a9:06:e6:
62:29:76:37:fb:3d:f3:67:88:50:f7:23:74:14:8e:
6f:e1:04:fa:4f:c7:2f:1c:3b:9f:1d:7d:d0:f7:a6:
40:b1:a5:e0:dc:99:00:4e:48:85:b3:32:25:52:77:
02:3d:dd:bd:79:95:0e:47:5d:c7:ae:ff:41:9d:13:
fc:04:48:74:41:48:74:51:b6:9b:7e:8f:b0:6f:fd:
66:7a:73:a4:90:c1:8b:34:bc:0f:17:5e:20:e6:d3:
ba:c5:db:89:4f:0c:0a:f4:11:88:5a:6b:54:33:e9:
6d:32:ba:90:44:7d:ea:8e:71:8f:85:4d:f1:c9:5e:
32:31:c2:51:ea:37:25:a7:33:fc:b2:dd:be:20:7a:
28:31:89:08:cd:c8:14:1f:35:09:b6:c0:ca:17:6c:
74:25:c6:db:51:93:ab:9f:4a:99:7f:0a:41:73:a0:
fb:35:8a:56:1c:43:74:3a:26:b8:fb:3e:45:af:bc:
b5:67:10:a4:eb:8c:3c:8f:57:e3:e7:d3:63:0b:5b:
73:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:89:39:23:70:0D:0B:41:F3:20:74:EC:33:8B:BA:01:74:42:94:8A
X509v3 Authority Key Identifier:
keyid:4E:6F:FB:99:06:EE:BE:BA:1F:5B:1A:55:8E:ED:63:72:F6:53:CE:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tm_7mQbuvrofWxpVju1jcvZTzoY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/1980bd-0753-4161-b6f5-9c72e157abb3/1/Tm_7mQbuvrofWxpVju1jcvZTzoY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/1980bd-0753-4161-b6f5-9c72e157abb3/1/Tm_7mQbuvrofWxpVju1jcvZTzoY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e3:91:f6:d6:1d:f2:1d:5f:0f:c1:da:85:52:b5:07:7b:3a:9c:
cb:03:72:7b:ed:0b:1e:b1:d1:14:88:62:f7:2d:fb:9b:56:ef:
f5:42:8c:bb:01:8b:1e:9f:90:a3:af:88:0e:d9:f2:09:24:ec:
db:1c:b0:76:aa:7f:1f:6b:02:64:91:c6:ed:e4:77:82:3b:b4:
00:44:41:6b:77:92:85:9a:ec:84:b0:a0:86:80:1e:5e:c0:01:
37:29:0f:2a:56:98:aa:8f:4a:b2:0e:01:25:e2:4f:25:6a:28:
99:9a:43:04:39:69:4e:79:45:91:b5:81:ee:59:78:9e:ca:a4:
87:80:a0:37:ae:61:11:5f:d1:ed:7d:2f:5a:0a:79:a1:8b:ef:
7c:e6:0f:b5:73:9e:10:a4:e5:81:26:f6:60:e8:9f:d1:f0:7d:
bd:12:1f:cb:2c:79:13:08:97:2a:19:0e:35:79:b6:6f:5d:03:
bc:9b:86:06:b1:f1:c6:da:96:48:13:2d:15:d5:1f:8e:0e:77:
69:4c:33:f5:70:6f:28:9e:4f:d8:19:dd:cd:f4:17:fb:9a:be:
4a:e7:0b:ea:63:11:c8:88:d8:ae:64:7c:15:18:05:2d:c3:62:
0d:97:56:98:9b:ab:60:e7:d8:5d:d0:ab:3f:70:c0:5f:08:ca:
51:26:cf:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:24:59 2025 by rpki-client