Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/fdff01-762f-43a9-a4be-7bb1844014d6/1/tT8fJDLiJL3km_qxn2dTYpq1cH8.mft
File: tT8fJDLiJL3km_qxn2dTYpq1cH8.mft (raw, json)
Hash identifier: 5g9winpczMUZiIXYuQQvagq8T5cK7vmtL5SBlBUIb14=
Subject key identifier: 37:1F:F8:AD:95:CB:58:C4:77:0A:40:89:3D:28:8D:49:C6:4E:FC:5B
Authority key identifier: B5:3F:1F:24:32:E2:24:BD:E4:9B:FA:B1:9F:67:53:62:9A:B5:70:7F
Certificate issuer: /CN=b53f1f2432e224bde49bfab19f6753629ab5707f
Certificate serial: 0199239FAA30986241A24DBEE5511E99F2A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tT8fJDLiJL3km_qxn2dTYpq1cH8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/fdff01-762f-43a9-a4be-7bb1844014d6/1/tT8fJDLiJL3km_qxn2dTYpq1cH8.mft
Manifest number: 0CCF
Signing time: Sun 07 Sep 2025 10:01:30 +0000
Manifest this update: Sun 07 Sep 2025 10:01:30 +0000
Manifest next update: Mon 08 Sep 2025 10:01:30 +0000
Files and hashes: 1: tT8fJDLiJL3km_qxn2dTYpq1cH8.crl (hash: X6O1Sl/R0C90RNbhVUSG3G7BFN+cjMwuekpVI0joS24=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/fdff01-762f-43a9-a4be-7bb1844014d6/1/tT8fJDLiJL3km_qxn2dTYpq1cH8.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/fdff01-762f-43a9-a4be-7bb1844014d6/1/tT8fJDLiJL3km_qxn2dTYpq1cH8.mft
rsync://rpki.ripe.net/repository/DEFAULT/tT8fJDLiJL3km_qxn2dTYpq1cH8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:9f:aa:30:98:62:41:a2:4d:be:e5:51:1e:99:f2:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b53f1f2432e224bde49bfab19f6753629ab5707f
Validity
Not Before: Sep 7 10:01:30 2025 GMT
Not After : Sep 8 10:01:30 2025 GMT
Subject: CN=371ff8ad95cb58c4770a40893d288d49c64efc5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:7c:dd:7c:5a:71:71:83:94:e6:9b:14:93:5e:
d3:b7:90:b3:89:b6:ca:2a:b0:59:96:64:e0:b2:83:
6a:bc:4a:1d:61:47:27:d9:5e:d8:c5:b5:ea:ff:b6:
55:bb:aa:0d:2b:01:4b:77:8a:b1:8a:52:fe:7a:04:
0d:c1:97:83:3a:2a:cc:0e:35:72:73:bf:1f:8a:2c:
22:70:9c:a4:43:ff:ed:9d:03:e9:0a:8c:02:c8:37:
f9:1f:17:d2:f9:31:26:d2:48:3e:cc:1e:49:ea:2e:
2e:5b:da:10:e3:a1:fd:15:ab:47:dc:2c:52:82:b0:
e9:de:13:d4:8a:b2:59:ae:ec:1f:7e:0b:71:9e:3a:
03:32:82:db:4e:2c:b4:b8:40:50:98:ba:46:7c:22:
8f:df:60:75:5b:bd:95:8f:b4:b7:b7:a4:97:b9:ec:
fb:47:7d:8e:c6:ab:92:5e:97:70:a2:0a:12:37:9b:
6c:e1:e3:c1:0f:d2:f8:8c:98:6f:db:c3:3a:02:5c:
9a:f8:ac:c2:8c:c4:a5:e1:fe:c7:8d:a5:f9:3b:a0:
b7:de:f3:19:95:fe:2c:e7:4b:59:d7:6c:58:e9:26:
4a:db:b2:2e:58:7e:a3:bd:31:18:83:c5:8c:49:03:
b0:c7:b8:03:92:a9:c5:02:96:27:d0:c4:ae:1d:9c:
d4:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:1F:F8:AD:95:CB:58:C4:77:0A:40:89:3D:28:8D:49:C6:4E:FC:5B
X509v3 Authority Key Identifier:
keyid:B5:3F:1F:24:32:E2:24:BD:E4:9B:FA:B1:9F:67:53:62:9A:B5:70:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tT8fJDLiJL3km_qxn2dTYpq1cH8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/fdff01-762f-43a9-a4be-7bb1844014d6/1/tT8fJDLiJL3km_qxn2dTYpq1cH8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/fdff01-762f-43a9-a4be-7bb1844014d6/1/tT8fJDLiJL3km_qxn2dTYpq1cH8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:66:72:02:83:39:4b:e3:a6:cd:8d:e9:fa:65:43:9d:f7:2d:
38:4c:87:9c:ac:a0:e0:ad:39:71:d7:dd:4e:c5:80:89:5b:61:
32:cb:2e:77:5f:78:01:d7:04:3d:4d:20:2f:d6:f9:a9:1e:ea:
92:ec:0c:19:0e:3f:ff:5f:e6:ee:bc:2e:74:1f:c1:c9:22:9a:
87:50:77:1a:10:36:5e:e6:12:f0:b5:32:38:e2:20:19:39:15:
98:52:46:2e:48:63:c4:12:7b:4a:44:6c:5a:5e:e7:2d:62:70:
87:94:4b:6a:21:83:d4:47:18:bc:41:a1:d3:b8:c6:2d:1b:a3:
6a:21:7b:1e:67:30:c2:73:b3:99:88:02:6c:27:7e:e3:d1:3b:
59:b2:44:49:15:fa:43:fa:fb:e7:a2:11:34:cc:f6:af:3a:43:
e8:e6:00:8c:08:43:a3:27:a1:8a:a4:d2:b6:e5:67:53:30:ac:
9b:e3:55:ce:ca:b8:72:4a:df:04:d2:26:a1:7a:fe:55:bc:f5:
c0:f0:cf:62:6e:df:79:ce:a1:77:bf:1b:a4:14:fb:29:39:e1:
2d:47:f3:b5:e0:20:b8:72:33:99:cc:8f:76:20:ca:0e:84:13:
fb:82:35:00:d4:ad:de:05:0b:9f:4c:6d:f8:cb:71:77:ae:c1:
4d:a7:ed:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:20:40 2025 by rpki-client