
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/7a011b-31a4-499f-a391-0329c78a4cfa/1/TvJo4UPX5E0UNk0dKOhtw-VQqrc.mft
File: TvJo4UPX5E0UNk0dKOhtw-VQqrc.mft (raw, json)
Hash identifier: Whb9UMtv14vUkpJIITD3Bkw0jnZvyoTyHtk1gmtpW0s=
Subject key identifier: 8D:A1:7A:24:49:F9:76:C6:DF:DC:91:B0:EE:62:D5:83:D7:FE:31:B0
Authority key identifier: 4E:F2:68:E1:43:D7:E4:4D:14:36:4D:1D:28:E8:6D:C3:E5:50:AA:B7
Certificate issuer: /CN=4ef268e143d7e44d14364d1d28e86dc3e550aab7
Certificate serial: 01975045B75B67FC08F455EC8163BB731396
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TvJo4UPX5E0UNk0dKOhtw-VQqrc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/7a011b-31a4-499f-a391-0329c78a4cfa/1/TvJo4UPX5E0UNk0dKOhtw-VQqrc.mft
Manifest number: 157C
Signing time: Sun 08 Jun 2025 16:00:35 +0000
Manifest this update: Sun 08 Jun 2025 16:00:35 +0000
Manifest next update: Mon 09 Jun 2025 16:00:35 +0000
Files and hashes: 1: TvJo4UPX5E0UNk0dKOhtw-VQqrc.crl (hash: FFGtwzupOag5CwAN3A2WACsYZ7K3PoyFj3A3TZWe6Lg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/7a011b-31a4-499f-a391-0329c78a4cfa/1/TvJo4UPX5E0UNk0dKOhtw-VQqrc.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/7a011b-31a4-499f-a391-0329c78a4cfa/1/TvJo4UPX5E0UNk0dKOhtw-VQqrc.mft
rsync://rpki.ripe.net/repository/DEFAULT/TvJo4UPX5E0UNk0dKOhtw-VQqrc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:50:45:b7:5b:67:fc:08:f4:55:ec:81:63:bb:73:13:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ef268e143d7e44d14364d1d28e86dc3e550aab7
Validity
Not Before: Jun 8 16:00:35 2025 GMT
Not After : Jun 9 16:00:35 2025 GMT
Subject: CN=8da17a2449f976c6dfdc91b0ee62d583d7fe31b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:4c:71:e0:a4:27:e6:18:2d:a0:be:80:dd:10:
ce:d2:d5:8d:38:9e:2b:0c:4b:27:30:8b:41:6b:0d:
e5:f4:f6:7c:bc:f6:0f:10:c2:8d:ae:5b:4f:1f:b5:
3f:f7:e1:0c:4a:c4:77:6b:0f:3a:30:66:ed:5b:c3:
87:0d:03:a4:0a:b4:1e:4a:36:be:29:b0:8b:5b:9d:
48:50:05:e3:b8:8b:c7:92:55:61:14:ab:d4:84:58:
94:b0:ec:0f:4e:59:0b:6d:b2:e7:37:2d:e1:b4:1b:
81:a1:52:f8:c0:b7:a4:8d:31:e3:53:3d:72:7f:9c:
cd:f8:9e:0f:90:27:92:26:c4:1f:ad:24:c7:d5:57:
58:22:67:72:42:17:6c:5f:09:69:1a:e8:90:4e:f9:
5c:6c:b2:50:96:c6:07:db:ca:7c:86:c2:c0:00:78:
7b:ab:24:1c:99:ce:2b:78:93:cf:d8:c7:3d:08:93:
71:82:e1:d8:63:dc:11:52:55:25:0a:f0:46:94:55:
74:22:d5:13:c2:86:58:5f:b8:2d:a6:df:63:65:2e:
24:24:fd:6f:2f:8d:37:48:ab:f4:a1:79:d4:ce:48:
7d:46:6f:7c:13:42:bb:69:7b:c5:36:6f:b9:ab:51:
6f:f7:a5:c7:e7:d6:c0:7c:e8:fb:a3:ad:07:c1:ae:
54:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:A1:7A:24:49:F9:76:C6:DF:DC:91:B0:EE:62:D5:83:D7:FE:31:B0
X509v3 Authority Key Identifier:
keyid:4E:F2:68:E1:43:D7:E4:4D:14:36:4D:1D:28:E8:6D:C3:E5:50:AA:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TvJo4UPX5E0UNk0dKOhtw-VQqrc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/7a011b-31a4-499f-a391-0329c78a4cfa/1/TvJo4UPX5E0UNk0dKOhtw-VQqrc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/7a011b-31a4-499f-a391-0329c78a4cfa/1/TvJo4UPX5E0UNk0dKOhtw-VQqrc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:39:15:a5:94:2e:97:9a:f0:d3:a1:bd:0c:cb:51:d8:eb:b3:
12:53:05:18:c3:07:c5:eb:7e:98:a7:2b:5e:ef:30:e8:2f:80:
ff:4f:ea:a3:55:40:3f:26:7a:01:86:0b:93:cd:9a:1e:6d:d8:
9c:35:f7:d8:4c:16:31:0a:31:bf:11:93:b2:51:d7:dd:0a:81:
4a:b3:a1:ed:14:d7:6f:a0:7b:ae:aa:f5:64:34:d1:08:b3:1a:
40:46:70:e9:c9:51:39:ac:31:b5:25:01:b5:9d:72:e6:01:ed:
e0:5b:23:83:63:a7:b8:60:9f:6e:32:7c:43:2e:eb:a3:e9:7e:
06:04:67:90:30:7f:4f:af:29:c8:4c:fb:3c:af:71:11:77:86:
c7:26:18:42:e1:cf:cd:b0:66:fc:1a:ad:57:7e:6a:2a:a1:4c:
c6:77:94:8b:46:1a:e2:51:98:d0:87:90:85:07:5d:62:57:65:
a0:e1:bb:aa:23:a5:0a:6b:7a:e1:75:b2:3a:a0:39:f9:6e:44:
70:12:1a:ac:ad:1b:0f:5a:d2:11:45:98:24:62:3c:e0:09:26:
f1:a3:b7:30:b8:b9:14:ca:d8:38:11:65:d8:c6:ee:86:c5:7c:
c3:5f:58:10:83:13:32:07:e7:d2:b4:e8:eb:fe:f5:f6:27:0a:
97:a5:bd:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 20:12:13 2025 by rpki-client