Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/677106-4099-4aef-8cc6-e960a50cdc81/1/tPo4W-BSv6QF36zSnyarbwAeYEc.mft
File: tPo4W-BSv6QF36zSnyarbwAeYEc.mft (raw, json)
Hash identifier: KSDvQshfPxkunQZBEsn7TGNT5KEVVu5/cNbu55/Z7AA=
Subject key identifier: 94:1F:C9:A9:51:9E:1C:E2:6C:3F:48:85:DB:63:CD:5F:BB:38:4B:C2
Authority key identifier: B4:FA:38:5B:E0:52:BF:A4:05:DF:AC:D2:9F:26:AB:6F:00:1E:60:47
Certificate issuer: /CN=b4fa385be052bfa405dfacd29f26ab6f001e6047
Certificate serial: 019922C3A7C193132BB0E6B1CD64B8158BCC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tPo4W-BSv6QF36zSnyarbwAeYEc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/677106-4099-4aef-8cc6-e960a50cdc81/1/tPo4W-BSv6QF36zSnyarbwAeYEc.mft
Manifest number: 04EB
Signing time: Sun 07 Sep 2025 06:01:11 +0000
Manifest this update: Sun 07 Sep 2025 06:01:11 +0000
Manifest next update: Mon 08 Sep 2025 06:01:11 +0000
Files and hashes: 1: tPo4W-BSv6QF36zSnyarbwAeYEc.crl (hash: xjdaDYUa2AyVhwQWA/25LMWmh3x4Sr3K/tEgL0Z3g6Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/677106-4099-4aef-8cc6-e960a50cdc81/1/tPo4W-BSv6QF36zSnyarbwAeYEc.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/677106-4099-4aef-8cc6-e960a50cdc81/1/tPo4W-BSv6QF36zSnyarbwAeYEc.mft
rsync://rpki.ripe.net/repository/DEFAULT/tPo4W-BSv6QF36zSnyarbwAeYEc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 06:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:c3:a7:c1:93:13:2b:b0:e6:b1:cd:64:b8:15:8b:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4fa385be052bfa405dfacd29f26ab6f001e6047
Validity
Not Before: Sep 7 06:01:11 2025 GMT
Not After : Sep 8 06:01:11 2025 GMT
Subject: CN=941fc9a9519e1ce26c3f4885db63cd5fbb384bc2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:d5:9a:a6:68:ee:29:7c:35:42:52:3a:80:5c:
d1:83:df:bb:bc:30:e4:e6:8f:8a:bf:f4:bd:f7:56:
0d:80:31:e4:10:b0:e7:46:bd:45:f7:00:51:71:7b:
23:02:03:83:eb:3a:24:b4:f8:7f:55:5c:b5:7a:d7:
16:0f:bb:0b:d8:77:81:04:3b:a5:7c:b6:b5:49:2a:
f2:b5:03:b9:78:c6:ec:25:e0:4e:f0:ca:c0:54:12:
d6:ad:f6:5f:59:95:dc:16:98:5b:83:fe:9b:19:54:
d0:e3:76:5e:67:00:26:59:63:bb:bc:aa:89:81:49:
f5:5c:68:6c:00:bd:5e:a9:f6:45:5f:30:c3:45:b1:
2e:51:0c:5a:be:94:0d:4e:7f:47:cd:8f:79:7b:6f:
7c:3f:06:87:a5:9d:e1:93:ec:5f:d9:f7:48:15:44:
92:f0:8b:67:6b:64:66:44:91:77:f6:3c:ae:84:63:
66:38:a7:09:20:7d:49:fe:d6:40:5c:9f:77:b7:3f:
8a:90:de:52:eb:c4:3e:62:82:ec:e2:3a:be:e1:e2:
f7:63:20:72:77:58:89:2b:60:2b:c5:5f:8a:b1:18:
37:eb:09:ee:7b:ff:ba:11:11:b7:ac:a7:4e:03:c8:
9d:85:d3:fb:14:ee:f3:b7:83:08:74:2d:b8:4b:c9:
26:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:1F:C9:A9:51:9E:1C:E2:6C:3F:48:85:DB:63:CD:5F:BB:38:4B:C2
X509v3 Authority Key Identifier:
keyid:B4:FA:38:5B:E0:52:BF:A4:05:DF:AC:D2:9F:26:AB:6F:00:1E:60:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tPo4W-BSv6QF36zSnyarbwAeYEc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/677106-4099-4aef-8cc6-e960a50cdc81/1/tPo4W-BSv6QF36zSnyarbwAeYEc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/677106-4099-4aef-8cc6-e960a50cdc81/1/tPo4W-BSv6QF36zSnyarbwAeYEc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:f0:36:93:96:0d:a5:2b:a8:40:72:8b:75:5c:f9:92:47:00:
a2:d0:13:41:be:65:35:41:d1:c9:92:17:39:94:61:d9:5c:37:
c9:59:0f:a0:4f:b5:d5:fd:b7:6a:95:87:fb:c2:47:ad:67:a2:
5d:c5:bd:94:ac:10:ca:0b:fa:a1:f2:fd:e0:65:fb:39:da:e2:
e5:76:50:90:f2:8f:71:5e:2b:fc:62:48:8e:76:7f:7e:a4:1f:
be:4f:a5:c5:98:04:53:55:c6:d7:3e:d3:e1:8f:a2:35:9e:14:
f4:9a:11:b9:0b:ca:e9:b4:e3:69:d3:0c:04:cf:aa:18:1f:f6:
8a:f4:1e:4f:b7:bf:7c:22:cd:2c:c0:6d:1e:da:33:3f:51:90:
e0:c4:42:18:61:36:7c:7b:24:2d:29:db:f2:c3:19:0f:de:82:
03:a1:f5:d2:21:52:87:a5:0c:15:45:f6:5f:90:72:e0:ef:39:
93:7f:79:83:c1:74:f5:4a:76:fb:0a:f4:d6:d1:97:d3:0d:e7:
6c:88:21:26:39:c3:22:82:5f:4f:38:09:c7:96:7d:01:b7:38:
03:10:15:5c:05:e4:e7:48:d0:fe:4f:4e:ef:c4:93:5f:c0:91:
61:26:88:7e:73:96:04:ee:e1:06:46:c5:a1:13:ed:b9:f6:af:
77:e7:65:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 13:51:05 2025 by rpki-client