Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/5cc127-e6ec-4da1-8469-c4a0e9706597/1/t3CHf-B99JohaBSt5wHQh7EWk7Q.mft
File: t3CHf-B99JohaBSt5wHQh7EWk7Q.mft (raw, json)
Hash identifier: w3ykMDmabPhy0yfXack+VGLJOcfDXM3+Nj1qy+BbpmM=
Subject key identifier: A4:A4:97:F6:05:80:59:AD:DF:28:32:E1:37:85:0E:2B:FA:99:B0:24
Authority key identifier: B7:70:87:7F:E0:7D:F4:9A:21:68:14:AD:E7:01:D0:87:B1:16:93:B4
Certificate issuer: /CN=b770877fe07df49a216814ade701d087b11693b4
Certificate serial: 01992255EADBD3DE915D4D7C283F3133F51C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t3CHf-B99JohaBSt5wHQh7EWk7Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/5cc127-e6ec-4da1-8469-c4a0e9706597/1/t3CHf-B99JohaBSt5wHQh7EWk7Q.mft
Manifest number: 04B6
Signing time: Sun 07 Sep 2025 04:01:19 +0000
Manifest this update: Sun 07 Sep 2025 04:01:19 +0000
Manifest next update: Mon 08 Sep 2025 04:01:19 +0000
Files and hashes: 1: t3CHf-B99JohaBSt5wHQh7EWk7Q.crl (hash: yvtOhHVU9sDySu7jXOOQ3wjL8wl1Dz7QP6O1Rx3mIEI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/5cc127-e6ec-4da1-8469-c4a0e9706597/1/t3CHf-B99JohaBSt5wHQh7EWk7Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/5cc127-e6ec-4da1-8469-c4a0e9706597/1/t3CHf-B99JohaBSt5wHQh7EWk7Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/t3CHf-B99JohaBSt5wHQh7EWk7Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 04:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:55:ea:db:d3:de:91:5d:4d:7c:28:3f:31:33:f5:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b770877fe07df49a216814ade701d087b11693b4
Validity
Not Before: Sep 7 04:01:19 2025 GMT
Not After : Sep 8 04:01:19 2025 GMT
Subject: CN=a4a497f6058059addf2832e137850e2bfa99b024
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:a6:e2:c6:3a:c7:5a:8b:56:f7:e7:82:1b:f1:
2a:43:ad:99:d4:6f:74:05:f6:64:a1:6c:57:c6:be:
99:c3:93:76:5f:36:75:79:61:bc:19:20:f0:5d:ce:
07:66:a5:cf:f6:9e:0f:db:db:b4:af:d9:d7:04:12:
4a:1b:14:77:41:22:20:12:c5:57:cb:94:9b:31:c1:
0a:73:c1:95:ab:66:21:ea:b3:ca:b2:df:fb:12:e5:
ec:34:ea:a2:a0:36:a1:84:80:11:07:00:eb:fd:d9:
1f:de:7d:a4:02:17:fa:2f:38:b8:dd:a8:82:0f:27:
94:fa:24:08:48:fa:ce:78:29:8d:ec:7a:10:19:d1:
8e:c9:16:02:ec:dc:51:09:47:8c:b3:49:9c:6c:45:
9f:c3:6b:51:14:da:6d:96:0a:c0:32:69:03:63:56:
33:aa:9e:5c:dd:e4:ac:50:96:ab:e8:ca:ea:fe:33:
82:1c:4c:fd:e8:dc:c5:e4:f6:5f:ba:f1:5d:46:cc:
13:bc:8a:54:54:41:e8:b0:53:80:0c:d3:9f:98:53:
4e:9d:a4:2c:eb:fd:0b:9a:25:41:a4:b7:40:b6:04:
bc:94:1e:76:16:99:90:19:76:97:1e:55:42:c5:d2:
52:36:ab:a7:35:76:f9:e1:75:f4:9d:cb:7a:48:2c:
27:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:A4:97:F6:05:80:59:AD:DF:28:32:E1:37:85:0E:2B:FA:99:B0:24
X509v3 Authority Key Identifier:
keyid:B7:70:87:7F:E0:7D:F4:9A:21:68:14:AD:E7:01:D0:87:B1:16:93:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t3CHf-B99JohaBSt5wHQh7EWk7Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/5cc127-e6ec-4da1-8469-c4a0e9706597/1/t3CHf-B99JohaBSt5wHQh7EWk7Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/5cc127-e6ec-4da1-8469-c4a0e9706597/1/t3CHf-B99JohaBSt5wHQh7EWk7Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:a5:5d:3d:3f:47:57:fd:31:91:d8:db:a7:0d:3e:df:0a:e7:
b0:ec:00:e4:c7:a6:ae:96:c3:38:40:27:05:89:79:0e:57:46:
09:40:d4:86:65:b5:cb:65:12:c3:a3:3d:2a:7e:ee:2f:a0:f7:
c2:c3:eb:6d:27:4e:65:0d:28:a9:24:03:9e:5b:09:ab:79:5c:
00:db:be:67:e2:96:76:16:1d:b2:dc:4d:df:e4:83:45:0a:12:
5e:b2:ff:18:4b:fb:4c:3c:f7:00:03:8c:a3:38:9d:3b:94:e2:
09:cb:cb:eb:aa:f6:f1:2d:c9:5e:d5:9b:5b:81:26:12:c8:d3:
9e:77:b0:71:b0:2e:c3:6a:bf:a4:2e:54:f3:b4:7f:29:b3:34:
e8:90:2e:3a:30:18:9e:3c:f2:6a:9b:59:bb:f0:a6:93:2c:e0:
d0:cb:69:15:1b:06:32:e5:c1:f2:92:65:e4:2e:bc:e3:b7:96:
6a:c1:14:4e:c1:1e:39:f8:86:d7:85:2b:1e:0e:04:48:7b:a3:
94:9c:c1:db:ce:41:42:d0:b3:8d:a1:33:da:1d:a0:25:4f:de:
5b:e6:40:91:00:47:2a:d1:d3:17:a1:dd:dd:f4:fb:db:de:9f:
f6:02:33:b9:80:eb:5e:4f:26:ab:66:52:27:bf:18:d5:3d:62:
cf:1d:f4:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 13:52:44 2025 by rpki-client