Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/a4aedf-cab5-4199-a207-5cf6748d8784/1/tDtWqlNz6PXng0dnQkDv98KCctw.mft
File: tDtWqlNz6PXng0dnQkDv98KCctw.mft (raw, json)
Hash identifier: hCZrRo6cVbarq+S4FKvX7Gi77fUDH5NxldO/ICA8qBY=
Subject key identifier: 40:3D:BE:22:72:8F:E4:78:DA:FA:1F:19:A5:7A:D6:9D:AC:C2:E2:0D
Authority key identifier: B4:3B:56:AA:53:73:E8:F5:E7:83:47:67:42:40:EF:F7:C2:82:72:DC
Certificate issuer: /CN=b43b56aa5373e8f5e78347674240eff7c28272dc
Certificate serial: 019921B213E00C3CD1632498FE7FC5F2E2EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDtWqlNz6PXng0dnQkDv98KCctw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/a4aedf-cab5-4199-a207-5cf6748d8784/1/tDtWqlNz6PXng0dnQkDv98KCctw.mft
Manifest number: 0FA9
Signing time: Sun 07 Sep 2025 01:02:22 +0000
Manifest this update: Sun 07 Sep 2025 01:02:22 +0000
Manifest next update: Mon 08 Sep 2025 01:02:22 +0000
Files and hashes: 1: tDtWqlNz6PXng0dnQkDv98KCctw.crl (hash: ELD5/L8FjvkuBVqsuzZUlsDQZTlrUC9l2Fdq+ZdAgXQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/a4aedf-cab5-4199-a207-5cf6748d8784/1/tDtWqlNz6PXng0dnQkDv98KCctw.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/a4aedf-cab5-4199-a207-5cf6748d8784/1/tDtWqlNz6PXng0dnQkDv98KCctw.mft
rsync://rpki.ripe.net/repository/DEFAULT/tDtWqlNz6PXng0dnQkDv98KCctw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 01:02:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:b2:13:e0:0c:3c:d1:63:24:98:fe:7f:c5:f2:e2:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b43b56aa5373e8f5e78347674240eff7c28272dc
Validity
Not Before: Sep 7 01:02:22 2025 GMT
Not After : Sep 8 01:02:22 2025 GMT
Subject: CN=403dbe22728fe478dafa1f19a57ad69dacc2e20d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:6e:5d:64:5c:a2:97:76:ba:41:6b:08:1a:d3:
07:88:5a:53:bf:06:ae:f5:c9:d6:5e:32:09:f0:68:
79:03:68:8b:bd:dc:8f:21:0c:2f:dd:b1:0e:ce:a5:
21:df:35:ec:54:da:41:d9:82:79:85:7f:79:dc:f2:
53:1c:05:cf:d3:c1:59:57:3a:4c:38:80:6b:b0:2d:
b4:39:b8:57:e0:43:18:e4:c5:3a:fb:6e:69:aa:80:
45:e4:a5:85:aa:34:e3:70:9a:f3:c3:a8:b3:98:71:
4e:09:0c:8e:f6:e9:1c:45:6c:44:34:e0:2c:5d:3a:
9f:97:ce:65:d4:35:8c:d6:34:c3:50:ae:56:eb:28:
bd:74:b6:71:8b:42:43:0a:c4:3c:25:70:1c:8c:9e:
28:90:23:9c:ef:b0:e6:a6:82:55:74:c9:bc:90:e0:
20:19:a4:e9:84:d9:e5:80:c3:93:29:8f:6f:fe:48:
a4:42:b4:e2:25:29:02:c3:b6:e4:22:3a:7d:2f:83:
8e:64:6f:8b:30:47:65:79:3d:48:35:66:79:65:22:
f2:7c:90:a4:39:35:6c:8f:e5:bd:e5:ec:72:a9:06:
8c:1e:c6:3c:18:3a:e7:5e:09:98:66:a9:8a:64:c4:
0e:95:70:19:1a:bf:5b:af:df:2b:4d:fd:a9:6a:af:
bf:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:3D:BE:22:72:8F:E4:78:DA:FA:1F:19:A5:7A:D6:9D:AC:C2:E2:0D
X509v3 Authority Key Identifier:
keyid:B4:3B:56:AA:53:73:E8:F5:E7:83:47:67:42:40:EF:F7:C2:82:72:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDtWqlNz6PXng0dnQkDv98KCctw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/a4aedf-cab5-4199-a207-5cf6748d8784/1/tDtWqlNz6PXng0dnQkDv98KCctw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/a4aedf-cab5-4199-a207-5cf6748d8784/1/tDtWqlNz6PXng0dnQkDv98KCctw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:f0:ad:6a:76:61:25:83:3f:0d:1c:cc:ed:fe:f4:cf:66:40:
31:d5:22:2e:e0:04:9b:31:d0:6f:b3:55:c1:87:31:75:3e:d6:
7f:7f:7f:bf:26:f6:f9:fe:11:13:54:f0:97:92:a1:28:af:d3:
ab:0a:d3:59:9d:88:3f:77:09:ed:af:a9:34:73:01:08:95:5d:
35:50:da:c9:0d:ac:fc:04:ef:be:67:29:53:e0:e3:23:14:68:
b8:81:86:74:69:5f:06:4e:f5:4e:50:cd:0f:13:f0:78:f9:11:
f0:af:8c:2e:78:19:be:cf:c7:16:b9:d2:a4:03:29:02:4d:64:
99:1b:20:da:b8:34:3a:35:cd:77:41:b1:fc:f0:96:d5:46:64:
e5:d1:71:d0:7c:8e:7f:42:3d:8d:91:88:a8:b0:22:33:ff:cf:
b6:54:6f:2a:24:ea:36:ed:c8:1a:13:99:3a:2d:9f:d0:4e:35:
d3:e4:f6:1a:68:66:6f:5f:ba:95:8d:b5:46:40:b0:b9:13:5c:
60:d1:06:8c:6c:e2:4c:56:2f:c5:69:ab:50:6c:7a:01:9b:3b:
9d:e0:53:21:f7:68:68:08:20:3f:31:19:1b:05:5f:e3:5c:32:
3a:1a:7e:66:a9:f7:84:ce:c2:4e:fb:64:dc:08:aa:e3:99:39:
5c:25:29:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:41:14 2025 by rpki-client