Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/37d3ee-640f-471f-a9b7-ac5a297f9ba4/1/Tb6Htwra566IC0Zwv6B46QmE1mA.mft
File: Tb6Htwra566IC0Zwv6B46QmE1mA.mft (raw, json)
Hash identifier: 6V8V9k53Fo39huNj6KIh8u1SJ0fQMqU4kEGWhOhscOU=
Subject key identifier: 5C:F0:67:85:9F:E8:89:E0:74:D9:62:A0:38:8F:70:BB:CE:BC:34:BA
Authority key identifier: 4D:BE:87:B7:0A:DA:E7:AE:88:0B:46:70:BF:A0:78:E9:09:84:D6:60
Certificate issuer: /CN=4dbe87b70adae7ae880b4670bfa078e90984d660
Certificate serial: 0199225573AEB936B48727AF78CE323872B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tb6Htwra566IC0Zwv6B46QmE1mA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/37d3ee-640f-471f-a9b7-ac5a297f9ba4/1/Tb6Htwra566IC0Zwv6B46QmE1mA.mft
Manifest number: 1098
Signing time: Sun 07 Sep 2025 04:00:49 +0000
Manifest this update: Sun 07 Sep 2025 04:00:49 +0000
Manifest next update: Mon 08 Sep 2025 04:00:49 +0000
Files and hashes: 1: Tb6Htwra566IC0Zwv6B46QmE1mA.crl (hash: WFHBqGoMXKhy9/RVSMGkt/WyWh9Z4YG4TcsoA8Qx2+g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/37d3ee-640f-471f-a9b7-ac5a297f9ba4/1/Tb6Htwra566IC0Zwv6B46QmE1mA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/37d3ee-640f-471f-a9b7-ac5a297f9ba4/1/Tb6Htwra566IC0Zwv6B46QmE1mA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Tb6Htwra566IC0Zwv6B46QmE1mA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 04:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:55:73:ae:b9:36:b4:87:27:af:78:ce:32:38:72:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4dbe87b70adae7ae880b4670bfa078e90984d660
Validity
Not Before: Sep 7 04:00:49 2025 GMT
Not After : Sep 8 04:00:49 2025 GMT
Subject: CN=5cf067859fe889e074d962a0388f70bbcebc34ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:04:e2:7a:e0:88:9b:5d:d7:2c:85:2b:03:4b:
4b:bc:07:1f:7d:7c:6d:a7:58:d7:4d:d6:05:e8:ae:
5a:e9:7f:d8:aa:8e:73:0d:49:35:a1:19:b1:08:ee:
c6:42:79:59:80:a7:59:e4:c3:2a:2b:2c:d1:92:a2:
0c:b2:d6:00:71:d4:75:58:af:c9:73:80:a3:b3:a6:
25:88:e5:ec:87:8e:41:8e:2c:71:e0:fc:25:0a:fb:
73:ea:c9:de:41:a6:39:51:09:0d:d2:34:87:0f:21:
d9:20:55:3e:44:41:22:0b:9c:79:02:53:79:83:67:
65:99:42:69:54:2d:e6:7c:81:a5:93:63:4c:a3:7b:
8d:70:a0:b3:56:5b:c9:9b:ee:49:04:4c:c8:99:2d:
e2:e4:2d:eb:15:10:76:4a:f2:d1:a9:d4:37:83:df:
5b:ff:81:16:c1:00:5b:10:ca:13:e0:3a:2b:87:28:
f9:78:e9:08:18:3d:8e:ea:14:ea:12:49:f3:b9:1b:
a5:45:03:40:f7:c8:90:87:8d:32:10:01:ae:6d:38:
35:7b:7b:76:7c:9b:e4:9d:21:2d:5c:f6:31:e7:45:
7c:16:c7:26:25:a0:78:08:2f:a8:72:ea:6f:3c:75:
7c:9c:61:97:e7:35:2f:69:3d:d0:81:d0:f2:48:eb:
3f:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:F0:67:85:9F:E8:89:E0:74:D9:62:A0:38:8F:70:BB:CE:BC:34:BA
X509v3 Authority Key Identifier:
keyid:4D:BE:87:B7:0A:DA:E7:AE:88:0B:46:70:BF:A0:78:E9:09:84:D6:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tb6Htwra566IC0Zwv6B46QmE1mA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/37d3ee-640f-471f-a9b7-ac5a297f9ba4/1/Tb6Htwra566IC0Zwv6B46QmE1mA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/37d3ee-640f-471f-a9b7-ac5a297f9ba4/1/Tb6Htwra566IC0Zwv6B46QmE1mA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:35:4f:82:2a:f6:59:26:6d:5b:a9:95:ff:b5:47:9d:40:4d:
e3:49:a9:48:90:73:e0:ed:ed:12:43:88:60:2f:d9:e0:f6:c6:
68:fb:1a:32:a3:7e:e2:04:24:ae:20:85:54:66:00:43:e2:59:
80:98:0f:5b:50:22:bf:3d:cf:5c:ad:b2:69:df:e0:76:c2:2b:
27:44:b0:6f:a9:ed:33:fb:d9:21:54:f2:1e:d9:38:85:37:a2:
5b:2a:18:a9:94:31:81:3b:54:da:0c:6e:3d:0f:fd:a5:3b:19:
e4:01:8f:2f:a7:e6:be:da:9e:90:1a:7c:59:5d:bb:65:fb:72:
12:61:17:84:cd:64:5e:de:a4:01:6e:d7:49:07:9f:25:13:a2:
c6:a0:31:0f:24:03:20:46:7d:c4:ef:45:06:ee:5b:25:d0:aa:
f3:29:79:e2:52:a1:30:df:5e:5d:b6:ef:3f:d6:3d:a4:7d:7d:
78:84:72:46:47:49:5f:80:42:f5:1a:0c:2a:4c:a6:ae:8c:70:
65:a7:55:e2:65:3b:b9:e7:c4:b8:7f:87:12:df:a3:2a:ad:74:
27:1a:ed:c7:b6:e6:60:62:ae:1f:e4:50:df:03:77:e5:6f:f3:
65:b3:49:9c:1d:c3:4c:e4:5e:be:d1:05:f0:9b:db:a4:3b:eb:
fa:c8:03:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:16:17 2025 by rpki-client