Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/69322d-ad71-4877-a470-9ad9099de1d3/1/Tu8gTX6G_4FiSmGBKG521DOHa8c.mft
File: Tu8gTX6G_4FiSmGBKG521DOHa8c.mft (raw, json)
Hash identifier: OeKZ344qLT3exraxUJtmk7mw9Fx1pWF0Vl9IeNKY2TY=
Subject key identifier: 81:98:FF:F0:F2:83:F1:92:75:F0:02:48:21:74:8A:F0:CE:3B:91:2B
Authority key identifier: 4E:EF:20:4D:7E:86:FF:81:62:4A:61:81:28:6E:76:D4:33:87:6B:C7
Certificate issuer: /CN=4eef204d7e86ff81624a6181286e76d433876bc7
Certificate serial: 0199180958EEC962CDF700C6B5A4B1E13872
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tu8gTX6G_4FiSmGBKG521DOHa8c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/69322d-ad71-4877-a470-9ad9099de1d3/1/Tu8gTX6G_4FiSmGBKG521DOHa8c.mft
Manifest number: 156C
Signing time: Fri 05 Sep 2025 04:01:29 +0000
Manifest this update: Fri 05 Sep 2025 04:01:29 +0000
Manifest next update: Sat 06 Sep 2025 04:01:29 +0000
Files and hashes: 1: Tu8gTX6G_4FiSmGBKG521DOHa8c.crl (hash: iD8oe5zsmIN7AHvYDHAXfs8Btqr8+tRlunH68ov3kow=)
2: shBm13sVD-3FD9e1R6_cr96dhfU.roa (hash: n/xarPDtIVC1p+Buc2MZvYZnuxYBvdgfF2U0DRag658=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/69322d-ad71-4877-a470-9ad9099de1d3/1/Tu8gTX6G_4FiSmGBKG521DOHa8c.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/69322d-ad71-4877-a470-9ad9099de1d3/1/Tu8gTX6G_4FiSmGBKG521DOHa8c.mft
rsync://rpki.ripe.net/repository/DEFAULT/Tu8gTX6G_4FiSmGBKG521DOHa8c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Sep 2025 01:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:18:09:58:ee:c9:62:cd:f7:00:c6:b5:a4:b1:e1:38:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4eef204d7e86ff81624a6181286e76d433876bc7
Validity
Not Before: Sep 5 04:01:29 2025 GMT
Not After : Sep 6 04:01:29 2025 GMT
Subject: CN=8198fff0f283f19275f0024821748af0ce3b912b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:c3:3d:37:4a:88:d7:2b:34:e0:77:53:c7:3c:
7d:a7:54:cc:bd:06:27:3a:51:7b:01:8d:a9:29:35:
8c:44:32:10:33:74:27:81:b9:77:a0:1a:bb:b1:7e:
f4:a8:d3:10:f0:72:36:65:9c:2a:a3:82:86:92:fe:
42:80:b0:15:84:27:41:ce:f1:0c:48:74:93:38:6a:
a0:16:37:c9:76:26:13:27:1f:a8:d7:21:68:40:05:
ab:05:89:10:30:2e:65:ca:cb:51:c0:81:87:ef:3a:
8e:6f:85:c1:4e:82:a4:cb:60:2f:f3:f3:69:bb:bc:
6c:2e:86:b7:e3:8d:67:2b:0d:21:a8:69:62:1d:9a:
ac:aa:24:62:1e:35:b6:f7:0c:84:d5:92:2f:c7:75:
43:ef:16:29:c8:97:53:d3:c0:79:ae:79:44:f6:e0:
aa:c7:4a:42:73:d8:db:a2:fa:7f:10:05:e5:aa:cf:
17:d4:96:5b:06:7d:80:d3:cd:90:7d:f3:cc:b6:88:
7e:37:25:ca:1b:42:a5:03:d5:e9:4a:7a:0e:c9:52:
56:69:92:39:b1:6d:10:23:f3:5c:ce:c3:ef:0a:0a:
73:1d:4a:5d:e3:ea:59:77:74:2e:cc:51:5a:3e:ac:
03:95:17:ed:de:88:7b:e2:10:33:10:6b:e9:93:57:
2d:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:98:FF:F0:F2:83:F1:92:75:F0:02:48:21:74:8A:F0:CE:3B:91:2B
X509v3 Authority Key Identifier:
keyid:4E:EF:20:4D:7E:86:FF:81:62:4A:61:81:28:6E:76:D4:33:87:6B:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tu8gTX6G_4FiSmGBKG521DOHa8c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/69322d-ad71-4877-a470-9ad9099de1d3/1/Tu8gTX6G_4FiSmGBKG521DOHa8c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/69322d-ad71-4877-a470-9ad9099de1d3/1/Tu8gTX6G_4FiSmGBKG521DOHa8c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:ef:35:49:b1:e8:c4:50:3e:9c:77:ed:ee:8a:6d:1b:8b:53:
bf:f3:d3:77:7e:1f:15:47:7d:8f:61:d7:66:4f:c7:23:28:44:
ea:16:37:e5:cf:4f:14:a7:e9:6a:78:aa:84:48:63:5f:b4:68:
e2:a0:07:a3:d1:8c:1f:70:4c:3b:5c:3f:fa:02:4c:b3:8d:aa:
03:ce:c3:29:88:24:0b:f9:85:31:0c:bc:70:37:9c:cb:19:3a:
58:bc:55:7a:62:7a:ed:25:1a:bd:06:d6:bb:6f:79:5b:e3:1f:
0e:f8:f1:8a:41:a9:79:17:db:8e:7a:c5:07:5e:7c:f9:89:4e:
8d:19:54:ef:10:98:2a:cf:92:93:8b:ed:6c:cd:6e:90:dc:c6:
e5:55:95:5c:7f:94:05:cc:17:3c:10:f1:7e:52:79:29:e3:fb:
05:0c:64:e7:93:c5:30:57:6f:5f:3f:bd:8d:fe:49:93:b6:ed:
17:47:d6:b8:d9:bc:f4:2b:b0:11:ee:a7:96:0f:db:cc:c9:9a:
70:5e:4a:6e:28:17:35:a2:58:53:21:75:98:44:6b:71:75:f6:
4a:31:ce:ce:3a:eb:22:cc:c9:08:88:71:78:63:f0:2d:73:ac:
37:f6:ae:94:d5:cb:c8:57:d9:d9:9e:6b:58:9b:e5:45:8c:8a:
71:11:c7:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 06:24:42 2025 by rpki-client