Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/02b7d6-269b-4bb2-b455-391768573496/1/TjS6bj4mlMezjkZRr-4GGwsh3q4.mft
File: TjS6bj4mlMezjkZRr-4GGwsh3q4.mft (raw, json)
Hash identifier: vTgzBWFZfo7kkgIt0BbyZ+I1Ni2i1wdFuxzh98awkQY=
Subject key identifier: A5:29:AF:50:27:B0:A6:F2:AB:22:51:50:9B:10:34:95:A7:18:70:52
Authority key identifier: 4E:34:BA:6E:3E:26:94:C7:B3:8E:46:51:AF:EE:06:1B:0B:21:DE:AE
Certificate issuer: /CN=4e34ba6e3e2694c7b38e4651afee061b0b21deae
Certificate serial: 019921B22C1C64B64C25C15DD0B7FCC5D4F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TjS6bj4mlMezjkZRr-4GGwsh3q4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/02b7d6-269b-4bb2-b455-391768573496/1/TjS6bj4mlMezjkZRr-4GGwsh3q4.mft
Manifest number: 0192
Signing time: Sun 07 Sep 2025 01:02:28 +0000
Manifest this update: Sun 07 Sep 2025 01:02:28 +0000
Manifest next update: Mon 08 Sep 2025 01:02:28 +0000
Files and hashes: 1: TjS6bj4mlMezjkZRr-4GGwsh3q4.crl (hash: njUzlZbCU2Uu7Wlr5XFN4xnNcBYeXqvu3RvCAFe6//Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/02b7d6-269b-4bb2-b455-391768573496/1/TjS6bj4mlMezjkZRr-4GGwsh3q4.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/02b7d6-269b-4bb2-b455-391768573496/1/TjS6bj4mlMezjkZRr-4GGwsh3q4.mft
rsync://rpki.ripe.net/repository/DEFAULT/TjS6bj4mlMezjkZRr-4GGwsh3q4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 01:02:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:b2:2c:1c:64:b6:4c:25:c1:5d:d0:b7:fc:c5:d4:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e34ba6e3e2694c7b38e4651afee061b0b21deae
Validity
Not Before: Sep 7 01:02:28 2025 GMT
Not After : Sep 8 01:02:28 2025 GMT
Subject: CN=a529af5027b0a6f2ab2251509b103495a7187052
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:b3:9d:05:9e:61:d9:9c:3f:d2:5b:32:e0:74:
e9:f9:7c:d1:b3:98:09:aa:5f:70:d5:c1:ac:ab:e4:
c3:eb:78:63:2a:49:3d:38:fa:a4:4e:a7:f3:39:f1:
2c:e8:7e:ac:29:f2:c7:af:41:d7:d1:d4:2f:5f:c9:
f8:58:19:76:47:e9:d4:46:4a:44:86:cf:7d:35:09:
a0:d7:f0:18:a2:88:9b:00:f2:d1:20:ce:5d:3d:8c:
e3:fe:4d:5c:98:a8:10:51:85:ac:d6:8c:a0:87:4a:
06:f6:0b:b3:f5:b7:d7:03:51:52:2b:fd:4a:c8:86:
02:42:6f:4a:ae:df:3a:6c:33:de:41:ac:8b:2c:c4:
6d:27:2b:99:37:f5:17:7f:68:f1:71:37:fd:12:ca:
67:04:dc:a6:36:ca:32:db:ef:9a:f1:c1:27:2c:0c:
c3:2c:a6:d5:ba:8e:7d:63:81:00:11:e1:22:85:63:
c2:76:70:a1:87:a0:5c:ae:17:46:ca:f7:bc:04:b3:
96:7a:39:f7:90:72:ba:0c:b4:76:39:b5:f7:90:a1:
da:61:04:88:b0:a5:ed:69:6e:74:3a:13:f3:e4:a0:
48:01:bb:af:e1:26:1f:8f:98:91:90:66:93:c2:53:
f0:33:59:e1:c0:2e:18:00:e1:d2:18:ea:39:b5:e7:
dd:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:29:AF:50:27:B0:A6:F2:AB:22:51:50:9B:10:34:95:A7:18:70:52
X509v3 Authority Key Identifier:
keyid:4E:34:BA:6E:3E:26:94:C7:B3:8E:46:51:AF:EE:06:1B:0B:21:DE:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TjS6bj4mlMezjkZRr-4GGwsh3q4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/02b7d6-269b-4bb2-b455-391768573496/1/TjS6bj4mlMezjkZRr-4GGwsh3q4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/02b7d6-269b-4bb2-b455-391768573496/1/TjS6bj4mlMezjkZRr-4GGwsh3q4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:42:fd:2a:0a:96:48:9b:7d:9f:4e:22:17:93:7c:cf:25:d4:
73:15:be:8b:4f:52:30:80:d8:02:92:20:dd:04:40:2d:f8:4f:
f7:73:97:8b:4c:fe:e4:bc:83:dc:1d:33:e6:5d:57:f8:6c:77:
0d:82:43:1a:b6:24:14:0a:67:4e:6c:59:cd:e8:68:de:b9:b3:
6f:c2:d9:83:a5:bf:ee:8c:ca:67:05:0b:1e:34:5c:e4:b0:b5:
e2:f3:24:6d:7d:13:46:1d:a1:46:b6:4e:b2:0c:49:68:f1:27:
0a:1b:8c:be:88:dc:98:73:5b:42:75:64:38:37:30:65:b1:70:
db:02:a5:d8:01:55:89:fb:d3:30:6c:7f:88:ea:f0:64:32:49:
2b:c4:04:9a:89:9b:0e:34:a2:ad:18:fb:e7:15:dd:1e:f8:32:
fb:c3:90:30:ab:3f:40:74:43:70:8b:65:03:f6:00:04:18:18:
c5:bf:8c:6c:ad:0f:e7:6f:65:0e:f9:48:30:9d:04:9c:c8:92:
e9:99:9c:c8:70:50:51:d7:e2:22:11:5d:47:f4:d3:c1:3a:6e:
47:57:76:dc:76:3e:2a:69:a9:25:90:14:65:3f:70:b3:8f:dc:
14:e0:e5:53:03:d1:5a:e6:db:1c:9f:40:f3:9a:83:9d:1b:4f:
35:a1:88:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 09:53:05 2025 by rpki-client