Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/1c2984-fd83-41ba-b1dc-f683b9681d61/1/tU0YlEyigIUFOR3pf6nWsrxhiZo.mft
File: tU0YlEyigIUFOR3pf6nWsrxhiZo.mft (raw, json)
Hash identifier: S37+ISAQiFgNxYkINkc/XbBI0rWw+ajjWbhpm5d481Q=
Subject key identifier: 42:66:7D:03:63:B0:3A:BA:FB:62:5C:55:61:E9:9D:64:0B:BF:85:E6
Authority key identifier: B5:4D:18:94:4C:A2:80:85:05:39:1D:E9:7F:A9:D6:B2:BC:61:89:9A
Certificate issuer: /CN=b54d18944ca2808505391de97fa9d6b2bc61899a
Certificate serial: 019923A0AB248E0BF523A3AC93BFD05E15F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tU0YlEyigIUFOR3pf6nWsrxhiZo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/1c2984-fd83-41ba-b1dc-f683b9681d61/1/tU0YlEyigIUFOR3pf6nWsrxhiZo.mft
Manifest number: 110F
Signing time: Sun 07 Sep 2025 10:02:35 +0000
Manifest this update: Sun 07 Sep 2025 10:02:35 +0000
Manifest next update: Mon 08 Sep 2025 10:02:35 +0000
Files and hashes: 1: tU0YlEyigIUFOR3pf6nWsrxhiZo.crl (hash: AuLB+ZQOX9r+toxxbWnd9/UtfoQg9wlZx61leAXX9MU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/1c2984-fd83-41ba-b1dc-f683b9681d61/1/tU0YlEyigIUFOR3pf6nWsrxhiZo.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/1c2984-fd83-41ba-b1dc-f683b9681d61/1/tU0YlEyigIUFOR3pf6nWsrxhiZo.mft
rsync://rpki.ripe.net/repository/DEFAULT/tU0YlEyigIUFOR3pf6nWsrxhiZo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:a0:ab:24:8e:0b:f5:23:a3:ac:93:bf:d0:5e:15:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b54d18944ca2808505391de97fa9d6b2bc61899a
Validity
Not Before: Sep 7 10:02:35 2025 GMT
Not After : Sep 8 10:02:35 2025 GMT
Subject: CN=42667d0363b03abafb625c5561e99d640bbf85e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:ba:58:84:59:c9:8a:c7:74:28:56:d7:44:e5:
d1:c0:51:fb:3f:d9:28:83:db:41:e4:dc:8b:f4:c0:
08:06:5a:eb:83:b4:01:90:e8:f2:ee:4d:d5:d7:78:
a8:63:d3:53:5b:c0:64:77:1a:48:04:b1:c8:4d:0f:
e9:a3:77:3e:7f:8e:e7:93:ff:d9:67:ed:94:9c:97:
96:35:ea:61:84:43:6f:de:9b:a5:c2:b6:86:d8:4e:
fb:32:57:0a:c5:87:0a:6a:db:bc:2c:5f:7e:ce:c0:
97:c6:82:c9:b4:ce:c0:82:3b:63:da:6f:a1:f1:27:
1b:f9:41:27:f7:b4:5e:69:85:35:40:b1:bc:2e:f0:
ff:b2:25:f0:31:6b:28:44:43:78:63:ce:d2:83:5a:
ef:c0:01:43:2f:c7:4d:8a:f8:0a:2f:8d:84:6e:1a:
61:05:53:3b:81:fe:d2:98:2a:83:d5:29:14:7b:52:
b1:b7:2b:0e:ee:7d:35:fa:be:a9:6b:38:20:09:c9:
05:20:ed:16:08:ac:f6:4b:ca:85:0a:21:22:a1:c2:
d1:0d:96:b3:e0:aa:01:07:1a:d0:c2:0d:2a:1d:12:
07:94:28:1d:22:06:ef:4d:36:85:83:72:4a:d3:50:
1e:42:a2:ff:12:6d:4c:88:9b:9a:35:49:28:78:0b:
f0:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:66:7D:03:63:B0:3A:BA:FB:62:5C:55:61:E9:9D:64:0B:BF:85:E6
X509v3 Authority Key Identifier:
keyid:B5:4D:18:94:4C:A2:80:85:05:39:1D:E9:7F:A9:D6:B2:BC:61:89:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tU0YlEyigIUFOR3pf6nWsrxhiZo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1c2984-fd83-41ba-b1dc-f683b9681d61/1/tU0YlEyigIUFOR3pf6nWsrxhiZo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1c2984-fd83-41ba-b1dc-f683b9681d61/1/tU0YlEyigIUFOR3pf6nWsrxhiZo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:62:a2:a8:7f:15:0b:73:4c:0b:94:e7:b5:01:18:59:42:aa:
33:35:a2:70:a7:4d:66:d3:0f:a3:4b:c8:a9:16:83:88:93:36:
bf:44:d7:12:99:22:42:9a:94:f1:91:f4:36:ae:e7:23:2c:b1:
6c:ab:a2:9f:cc:e2:09:87:30:75:a0:4e:0a:0c:2e:f4:80:40:
10:a2:d7:78:90:23:a1:a3:81:95:b6:15:59:73:93:e2:37:59:
f9:86:2f:3a:e1:be:ec:b6:7b:b8:ac:30:f9:04:d9:74:e5:82:
f8:82:fa:8f:19:a2:99:3b:e0:5b:f2:b3:03:ff:39:c1:61:7c:
9e:c7:a4:c3:7a:d4:a6:b4:7d:32:7a:14:95:00:f6:5a:9b:96:
66:36:96:17:9c:89:64:e2:19:8e:14:ef:4d:3d:73:c9:d8:b0:
fa:19:e9:52:5e:dc:b2:04:c1:7e:94:53:f1:8c:df:4f:b2:e8:
15:53:11:85:1e:7b:7a:29:1f:34:94:0f:bb:73:c7:64:87:fd:
d0:a5:37:f6:85:4f:62:3e:8d:c2:c9:d2:24:7e:96:49:50:c9:
5f:45:00:21:ca:ad:03:1e:58:35:2c:cf:55:64:8d:d2:86:f5:
11:7e:bb:5a:84:04:c6:bc:56:65:cf:21:96:bc:64:1a:73:87:
43:fc:3e:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 14:00:40 2025 by rpki-client