Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/901607-b1ee-49f0-bde2-7cba35cb6b81/1/tPtrTEeRZokREVxp4mlk89XsovQ.mft
File: tPtrTEeRZokREVxp4mlk89XsovQ.mft (raw, json)
Hash identifier: iFOlfXuhvRGGHJVu7YodODgAAP/6ZXGvD74HHf9AFdA=
Subject key identifier: 58:A1:CF:E2:B2:7A:98:DA:5D:3D:D7:16:40:59:6C:67:7C:3C:D2:88
Authority key identifier: B4:FB:6B:4C:47:91:66:89:11:11:5C:69:E2:69:64:F3:D5:EC:A2:F4
Certificate issuer: /CN=b4fb6b4c4791668911115c69e26964f3d5eca2f4
Certificate serial: 01993492BE330AE54551F681561D26903814
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tPtrTEeRZokREVxp4mlk89XsovQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/901607-b1ee-49f0-bde2-7cba35cb6b81/1/tPtrTEeRZokREVxp4mlk89XsovQ.mft
Manifest number: 03D5
Signing time: Wed 10 Sep 2025 17:00:56 +0000
Manifest this update: Wed 10 Sep 2025 17:00:56 +0000
Manifest next update: Thu 11 Sep 2025 17:00:56 +0000
Files and hashes: 1: tPtrTEeRZokREVxp4mlk89XsovQ.crl (hash: aF+uxTsTlxPBOcGcQTHGY5yjdJamDLQ8SC8wkNsgJLU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/901607-b1ee-49f0-bde2-7cba35cb6b81/1/tPtrTEeRZokREVxp4mlk89XsovQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/901607-b1ee-49f0-bde2-7cba35cb6b81/1/tPtrTEeRZokREVxp4mlk89XsovQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/tPtrTEeRZokREVxp4mlk89XsovQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:34:92:be:33:0a:e5:45:51:f6:81:56:1d:26:90:38:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4fb6b4c4791668911115c69e26964f3d5eca2f4
Validity
Not Before: Sep 10 17:00:56 2025 GMT
Not After : Sep 11 17:00:56 2025 GMT
Subject: CN=58a1cfe2b27a98da5d3dd71640596c677c3cd288
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:de:4a:04:1e:1f:27:ee:0b:a1:08:3a:2f:71:
19:f1:ff:07:8b:38:0d:35:21:f0:28:0b:66:b6:c5:
e0:73:9d:9b:b2:81:40:55:a7:5b:d4:b0:aa:b0:65:
00:55:ee:a7:d9:89:39:6a:4c:72:45:a0:cc:78:28:
ef:83:5f:ea:4b:1f:44:a1:1a:51:a9:db:12:3c:66:
54:f9:a6:27:9c:c6:15:56:35:b4:22:89:de:c5:26:
19:47:5e:4e:28:19:14:ba:c0:81:35:a7:cb:10:b5:
a4:d6:ce:b2:c3:83:09:f2:3b:e4:bd:8f:7a:04:85:
9f:12:0c:04:79:5a:4d:e7:ac:b2:e8:82:3e:fd:cd:
30:3b:4b:7a:04:d4:40:35:81:9f:3a:e1:83:aa:70:
84:9c:24:d9:f6:ee:eb:d2:24:69:58:ef:c4:4b:86:
08:9a:31:35:9d:2f:66:ac:86:b9:63:5c:2f:59:3e:
6d:d6:b8:28:75:b0:6b:37:dc:7b:a9:6b:2c:51:d5:
b2:92:c7:2e:19:d2:4e:5e:1b:9e:c2:72:d4:f6:f1:
ae:8e:6f:4d:2a:0c:7e:f7:92:94:6c:7c:5e:aa:a4:
75:29:1c:86:f9:9a:b0:cb:48:fe:6e:ff:17:18:a3:
22:0a:cf:5e:03:f6:b1:c8:93:1f:4c:be:46:1d:f3:
85:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:A1:CF:E2:B2:7A:98:DA:5D:3D:D7:16:40:59:6C:67:7C:3C:D2:88
X509v3 Authority Key Identifier:
keyid:B4:FB:6B:4C:47:91:66:89:11:11:5C:69:E2:69:64:F3:D5:EC:A2:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tPtrTEeRZokREVxp4mlk89XsovQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/901607-b1ee-49f0-bde2-7cba35cb6b81/1/tPtrTEeRZokREVxp4mlk89XsovQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/901607-b1ee-49f0-bde2-7cba35cb6b81/1/tPtrTEeRZokREVxp4mlk89XsovQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
df:ec:e5:27:cf:68:aa:68:26:43:a1:07:31:10:0e:b4:4c:19:
bf:fa:d6:13:96:2f:da:5b:9e:48:04:73:82:31:4d:2d:c5:13:
05:a6:b7:27:60:06:d9:87:a1:29:8f:ca:f1:5e:d8:84:1c:5c:
61:b4:1a:1f:a5:ab:5b:b6:6a:a6:ce:77:44:27:56:d3:6f:39:
69:ea:1d:8b:6d:ff:21:79:0e:48:fc:5d:27:4d:9d:2f:9f:3e:
1c:25:37:38:21:2a:82:96:e8:49:9f:17:cc:28:17:b9:2a:f8:
1e:82:de:29:8a:68:06:ef:af:f5:8d:81:12:10:a5:94:f8:a4:
73:c9:15:ac:40:7a:93:0b:e9:fc:fe:9c:a4:81:9b:b8:f6:89:
50:4f:90:01:b0:7a:1b:d9:bd:15:22:47:d6:9a:8b:d5:5a:c6:
18:6b:5d:b4:66:a3:64:bd:c3:9f:ee:75:26:b1:ba:1e:ae:85:
ca:40:cb:37:03:d6:92:d6:1d:e3:9d:4f:f9:f4:a3:75:88:9c:
90:d0:76:d4:c2:af:7f:08:5d:cf:ee:7f:96:01:7c:83:fb:60:
b6:2c:68:76:d4:72:fb:89:78:8c:cd:42:08:ae:e5:be:60:7d:
2f:ce:9c:f7:ea:f9:07:0b:97:21:4d:75:09:51:c5:16:bd:7c:
5e:40:37:7d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZk0kr4zCuVFUfaBVh0mkDgUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI0ZmI2YjRjNDc5MTY2ODkxMTExNWM2OWUyNjk2NGYzZDVl
Y2EyZjQwHhcNMjUwOTEwMTcwMDU2WhcNMjUwOTExMTcwMDU2WjAzMTEwLwYDVQQD
Eyg1OGExY2ZlMmIyN2E5OGRhNWQzZGQ3MTY0MDU5NmM2NzdjM2NkMjg4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArd5KBB4fJ+4LoQg6L3EZ8f8HizgN
NSHwKAtmtsXgc52bsoFAVadb1LCqsGUAVe6n2Yk5akxyRaDMeCjvg1/qSx9EoRpR
qdsSPGZU+aYnnMYVVjW0IonexSYZR15OKBkUusCBNafLELWk1s6yw4MJ8jvkvY96
BIWfEgwEeVpN56yy6II+/c0wO0t6BNRANYGfOuGDqnCEnCTZ9u7r0iRpWO/ES4YI
mjE1nS9mrIa5Y1wvWT5t1rgodbBrN9x7qWssUdWykscuGdJOXhuewnLU9vGujm9N
Kgx+95KUbHxeqqR1KRyG+Zqwy0j+bv8XGKMiCs9eA/axyJMfTL5GHfOFzwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFihz+KyepjaXT3XFkBZbGd8PNKIMB8GA1UdIwQY
MBaAFLT7a0xHkWaJERFcaeJpZPPV7KL0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdFB0clRFZVJab2tSRVZ4cDRtbGs4OVhzb3ZRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OC85MDE2MDctYjFlZS00OWYwLWJkZTIt
N2NiYTM1Y2I2YjgxLzEvdFB0clRFZVJab2tSRVZ4cDRtbGs4OVhzb3ZRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84OC85MDE2MDctYjFlZS00OWYwLWJkZTItN2NiYTM1Y2I2Yjgx
LzEvdFB0clRFZVJab2tSRVZ4cDRtbGs4OVhzb3ZRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA3+zlJ89o
qmgmQ6EHMRAOtEwZv/rWE5Yv2lueSARzgjFNLcUTBaa3J2AG2YehKY/K8V7YhBxc
YbQaH6WrW7Zqps53RCdW0285aeodi23/IXkOSPxdJ02dL58+HCU3OCEqgpboSZ8X
zCgXuSr4HoLeKYpoBu+v9Y2BEhCllPikc8kVrEB6kwvp/P6cpIGbuPaJUE+QAbB6
G9m9FSJH1pqL1VrGGGtdtGajZL3Dn+51JrG6Hq6FykDLNwPWktYd451P+fSjdYic
kNB21MKvfwhdz+5/lgF8g/tgtixodtRy+4l4jM1CCK7lvmB9L86c9+r5BwuXIU11
CVHFFr18XkA3fQ==
-----END CERTIFICATE-----
Generated at Wed Sep 10 23:31:09 2025 by rpki-client