Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/58bb93-f6a2-4898-bfd8-05d8756f092e/1/TT2CE15FkxVfpq1vt_7LAfE4GLI.mft
File: TT2CE15FkxVfpq1vt_7LAfE4GLI.mft (raw, json)
Hash identifier: boYtIxfZ1raRbqr5xMbQYiXgnDQD39bJnznvtZ7q1/8=
Subject key identifier: 82:59:E9:29:0B:C9:7A:25:B6:AD:99:07:BB:86:16:C0:40:5C:08:3F
Authority key identifier: 4D:3D:82:13:5E:45:93:15:5F:A6:AD:6F:B7:FE:CB:01:F1:38:18:B2
Certificate issuer: /CN=4d3d82135e4593155fa6ad6fb7fecb01f13818b2
Certificate serial: 019923D5C9CB8E5FEBBA277332D29B7CBBCB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TT2CE15FkxVfpq1vt_7LAfE4GLI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/58bb93-f6a2-4898-bfd8-05d8756f092e/1/TT2CE15FkxVfpq1vt_7LAfE4GLI.mft
Manifest number: 0AE3
Signing time: Sun 07 Sep 2025 11:00:37 +0000
Manifest this update: Sun 07 Sep 2025 11:00:37 +0000
Manifest next update: Mon 08 Sep 2025 11:00:37 +0000
Files and hashes: 1: TT2CE15FkxVfpq1vt_7LAfE4GLI.crl (hash: TUtt459A3E9GHVW8p8Q5OZHQE2anpBZUqzvYEkDirsE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/58bb93-f6a2-4898-bfd8-05d8756f092e/1/TT2CE15FkxVfpq1vt_7LAfE4GLI.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/58bb93-f6a2-4898-bfd8-05d8756f092e/1/TT2CE15FkxVfpq1vt_7LAfE4GLI.mft
rsync://rpki.ripe.net/repository/DEFAULT/TT2CE15FkxVfpq1vt_7LAfE4GLI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:d5:c9:cb:8e:5f:eb:ba:27:73:32:d2:9b:7c:bb:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d3d82135e4593155fa6ad6fb7fecb01f13818b2
Validity
Not Before: Sep 7 11:00:37 2025 GMT
Not After : Sep 8 11:00:37 2025 GMT
Subject: CN=8259e9290bc97a25b6ad9907bb8616c0405c083f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:88:0a:29:37:c6:d1:5b:37:b4:ed:65:e8:ad:
a4:bc:0f:2b:02:5b:d5:86:41:c9:c4:cc:33:12:10:
37:b5:07:d2:31:b8:7d:c7:aa:5e:26:af:41:b2:e0:
aa:0c:9e:c0:e8:9e:84:18:e3:2c:11:b2:26:f4:22:
85:00:75:a9:59:85:fe:36:2b:22:b5:a9:e7:75:65:
bc:23:78:6a:4c:28:47:f5:0a:e3:c1:06:d2:82:15:
0b:ed:1e:ed:34:e8:2c:c7:c9:42:f7:62:43:39:c8:
cc:0b:a5:e6:3b:dc:80:f4:4e:8d:7a:51:5e:ec:7a:
2e:30:ee:71:ba:b4:e6:a0:66:73:14:ad:8e:d7:6a:
10:95:c0:83:6e:d3:cd:9e:03:61:14:e6:92:98:fc:
a1:f8:1c:13:98:87:e1:0e:11:b5:65:69:64:0b:3b:
18:8f:19:e9:c9:58:f5:60:ec:b0:6b:e7:a7:31:fe:
ce:e6:fb:3a:5b:d0:9d:a3:d5:1f:34:6b:8a:66:c6:
be:a5:3d:14:67:37:12:5a:4b:de:26:94:fb:16:56:
17:72:db:ff:a7:e3:64:fb:22:e5:a5:8a:36:ba:3e:
8b:66:8d:e3:e4:05:61:81:9b:25:78:d9:f4:ff:89:
19:aa:73:92:62:33:73:6a:27:0a:d5:f9:7b:9b:52:
15:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:59:E9:29:0B:C9:7A:25:B6:AD:99:07:BB:86:16:C0:40:5C:08:3F
X509v3 Authority Key Identifier:
keyid:4D:3D:82:13:5E:45:93:15:5F:A6:AD:6F:B7:FE:CB:01:F1:38:18:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TT2CE15FkxVfpq1vt_7LAfE4GLI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/58bb93-f6a2-4898-bfd8-05d8756f092e/1/TT2CE15FkxVfpq1vt_7LAfE4GLI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/58bb93-f6a2-4898-bfd8-05d8756f092e/1/TT2CE15FkxVfpq1vt_7LAfE4GLI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:6d:eb:65:91:5d:ef:46:a4:37:ae:1c:80:0b:14:82:19:96:
cb:ad:7f:66:3e:43:83:e2:ad:e4:8a:f0:f7:cf:d6:02:15:f6:
e9:03:80:a6:32:2f:ae:ee:83:6d:9d:87:2b:6e:d2:e2:4f:91:
63:2d:df:cc:46:18:72:14:4c:74:44:7e:f0:a2:8f:1f:24:1e:
35:2b:ac:e2:1f:75:d8:b8:ae:2c:74:57:f5:3d:b4:a7:7f:40:
ad:78:0f:e5:17:c0:32:36:fc:a4:30:6f:76:02:29:e8:98:ee:
ae:17:53:74:45:c5:49:cd:24:13:1d:f3:90:33:74:e1:68:f7:
99:3f:6d:d6:d5:ef:c1:58:d1:ea:9c:c9:18:9b:52:d2:0f:7b:
28:7f:ae:1d:c7:c9:d3:37:64:87:ab:7a:4a:07:c0:ff:be:9b:
12:59:14:47:cb:0e:40:6b:8f:1d:c3:e4:19:f0:80:1d:a5:5b:
a3:f1:8d:84:c0:56:b9:da:5c:c1:98:99:7b:34:cb:50:9b:d0:
7b:cc:0c:f8:ff:91:3c:75:d9:66:46:77:83:a7:6d:c5:a7:97:
36:2f:1d:15:af:31:1c:b8:6f:86:bf:0f:76:35:0b:45:1d:19:
03:2f:f8:52:f8:4a:49:bf:8b:8d:1f:3d:09:36:ee:c7:9c:6f:
b8:dd:66:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 15:24:21 2025 by rpki-client