Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/4e5049-856d-4c07-8556-e18184e80258/1/tRm7YH6Ot267nMsgIsxkbDzOC2A.mft
File: tRm7YH6Ot267nMsgIsxkbDzOC2A.mft (raw, json)
Hash identifier: i3YJ1DIAO0E08yzrygVSXsWJOc6CtkLOx+sn+zRauW4=
Subject key identifier: BF:92:A5:DB:DC:DE:47:6F:72:10:3D:BA:89:DB:F3:C5:B6:94:C2:94
Authority key identifier: B5:19:BB:60:7E:8E:B7:6E:BB:9C:CB:20:22:CC:64:6C:3C:CE:0B:60
Certificate issuer: /CN=b519bb607e8eb76ebb9ccb2022cc646c3cce0b60
Certificate serial: 019923A028AC41860CB1C3AF662D120D2BFB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tRm7YH6Ot267nMsgIsxkbDzOC2A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/4e5049-856d-4c07-8556-e18184e80258/1/tRm7YH6Ot267nMsgIsxkbDzOC2A.mft
Manifest number: 166E
Signing time: Sun 07 Sep 2025 10:02:02 +0000
Manifest this update: Sun 07 Sep 2025 10:02:02 +0000
Manifest next update: Mon 08 Sep 2025 10:02:02 +0000
Files and hashes: 1: tRm7YH6Ot267nMsgIsxkbDzOC2A.crl (hash: qLTO4GXM6F5AAcy1D2EAbWsucN6X1ivf2ZrNkqFRYmY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/4e5049-856d-4c07-8556-e18184e80258/1/tRm7YH6Ot267nMsgIsxkbDzOC2A.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/4e5049-856d-4c07-8556-e18184e80258/1/tRm7YH6Ot267nMsgIsxkbDzOC2A.mft
rsync://rpki.ripe.net/repository/DEFAULT/tRm7YH6Ot267nMsgIsxkbDzOC2A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:a0:28:ac:41:86:0c:b1:c3:af:66:2d:12:0d:2b:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b519bb607e8eb76ebb9ccb2022cc646c3cce0b60
Validity
Not Before: Sep 7 10:02:02 2025 GMT
Not After : Sep 8 10:02:02 2025 GMT
Subject: CN=bf92a5dbdcde476f72103dba89dbf3c5b694c294
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:87:54:5e:1a:af:fc:5d:69:d6:03:3f:97:af:
4f:a9:da:6f:68:3c:56:fa:8e:df:10:ea:86:8e:73:
1f:57:c5:28:fc:c5:c5:b5:7f:2e:37:a2:cc:5e:bf:
0c:8b:5d:0c:4f:fe:40:83:67:90:48:fe:0f:23:bd:
23:eb:2b:0d:aa:9c:57:38:ef:1f:49:18:9d:d9:37:
bd:7a:0e:48:20:3d:5b:70:e8:5a:db:2a:5b:8c:22:
1a:53:b4:4e:73:99:ce:d5:f2:59:64:fe:8e:f0:2f:
6e:f8:00:49:e2:e7:74:60:97:4b:83:11:11:29:ee:
1b:d1:c6:a0:a1:93:95:6a:02:a3:3a:91:43:55:92:
04:7d:85:ac:60:ab:3e:e0:86:0f:ee:52:a0:ab:51:
2e:df:b6:f1:35:d6:16:29:13:e9:b2:ac:8e:67:9f:
72:45:91:a3:06:8b:35:5b:a4:02:17:66:0f:ff:74:
8f:d1:3d:b2:49:0c:67:0e:70:03:9c:fa:01:69:31:
3a:28:2b:05:3d:61:a6:43:31:75:a4:63:83:9a:ab:
a5:22:16:7d:80:9f:e6:1e:20:9f:1d:a2:87:a4:ed:
9a:07:f7:84:4f:2f:27:57:66:83:ac:ac:a4:7e:d6:
67:24:5b:a5:b2:c9:a1:a5:bd:f0:b1:3a:ff:79:b2:
45:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:92:A5:DB:DC:DE:47:6F:72:10:3D:BA:89:DB:F3:C5:B6:94:C2:94
X509v3 Authority Key Identifier:
keyid:B5:19:BB:60:7E:8E:B7:6E:BB:9C:CB:20:22:CC:64:6C:3C:CE:0B:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tRm7YH6Ot267nMsgIsxkbDzOC2A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/4e5049-856d-4c07-8556-e18184e80258/1/tRm7YH6Ot267nMsgIsxkbDzOC2A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/4e5049-856d-4c07-8556-e18184e80258/1/tRm7YH6Ot267nMsgIsxkbDzOC2A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:03:d7:61:0a:50:f8:f1:20:39:5e:fb:e7:e5:b4:dd:9e:fc:
7b:f3:40:fa:c2:b9:aa:0e:b2:cb:36:60:32:5d:2e:da:33:85:
45:1e:64:94:de:97:08:a6:ac:30:cd:35:20:70:6a:94:1e:31:
03:90:83:82:55:05:bf:14:c2:7a:24:ac:1a:e7:42:d6:ed:f9:
5c:27:07:b7:98:2e:c1:e7:c9:71:ba:16:54:4f:86:d5:27:75:
5f:5d:eb:63:5c:24:f3:1d:a3:ef:fd:0a:a8:27:e5:5a:ee:6a:
47:5e:a1:65:d6:94:8a:5b:36:3c:15:63:db:d1:41:35:39:b9:
3e:25:e5:c5:a4:3a:d0:b1:83:b4:a2:ae:1e:a8:1c:a8:cf:5d:
8a:76:53:47:e6:ce:f4:7a:10:a6:d8:f9:52:da:e5:02:59:ff:
9b:8c:fd:0b:d1:c4:01:14:3d:6b:d3:46:f0:a6:23:a8:8d:fe:
92:d6:15:05:e5:ad:87:1b:39:bf:56:ea:fe:51:10:af:99:58:
eb:f3:07:97:da:62:e6:6d:13:c2:4d:a6:eb:cd:27:52:1d:fa:
4a:f6:d0:95:2c:78:93:da:e5:01:c7:f7:6f:a0:f1:09:d5:ee:
b1:b2:c9:b4:fe:ee:8a:ad:01:d3:c2:df:06:f2:57:73:ca:7f:
35:c6:30:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:33:01 2025 by rpki-client