
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/16e2aa-ddbd-4ee1-ae60-08bc640aed67/1/tWqJV8zDCqTsLUeOU_OHJsmVWjE.mft
File: tWqJV8zDCqTsLUeOU_OHJsmVWjE.mft (raw, json)
Hash identifier: 8/U0vXWeehRkaoEAyynGEPGdEbNgrM+HOBhO1bdDsTM=
Subject key identifier: 24:C3:09:E0:B6:75:14:BD:41:F8:2B:17:77:03:EA:F0:A9:5C:93:44
Authority key identifier: B5:6A:89:57:CC:C3:0A:A4:EC:2D:47:8E:53:F3:87:26:C9:95:5A:31
Certificate issuer: /CN=b56a8957ccc30aa4ec2d478e53f38726c9955a31
Certificate serial: 01991808BF3DA146C979251600FFAC90785B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tWqJV8zDCqTsLUeOU_OHJsmVWjE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/16e2aa-ddbd-4ee1-ae60-08bc640aed67/1/tWqJV8zDCqTsLUeOU_OHJsmVWjE.mft
Manifest number: 1666
Signing time: Fri 05 Sep 2025 04:00:50 +0000
Manifest this update: Fri 05 Sep 2025 04:00:50 +0000
Manifest next update: Sat 06 Sep 2025 04:00:50 +0000
Files and hashes: 1: tWqJV8zDCqTsLUeOU_OHJsmVWjE.crl (hash: LkCV+6UIPH8DXJF+PoC5QQl/yMDTWXIPWA1+hIFpQAQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/16e2aa-ddbd-4ee1-ae60-08bc640aed67/1/tWqJV8zDCqTsLUeOU_OHJsmVWjE.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/16e2aa-ddbd-4ee1-ae60-08bc640aed67/1/tWqJV8zDCqTsLUeOU_OHJsmVWjE.mft
rsync://rpki.ripe.net/repository/DEFAULT/tWqJV8zDCqTsLUeOU_OHJsmVWjE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Sep 2025 01:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:18:08:bf:3d:a1:46:c9:79:25:16:00:ff:ac:90:78:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b56a8957ccc30aa4ec2d478e53f38726c9955a31
Validity
Not Before: Sep 5 04:00:50 2025 GMT
Not After : Sep 6 04:00:50 2025 GMT
Subject: CN=24c309e0b67514bd41f82b177703eaf0a95c9344
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:85:97:ca:b3:97:6c:0b:52:a9:05:47:16:de:
1d:99:aa:03:e9:3f:d4:61:8f:2b:cf:a4:26:8b:1e:
ab:ea:bb:70:88:1c:db:bf:b4:27:e4:73:a8:74:a3:
96:8d:11:22:34:ff:64:c6:73:ce:27:45:93:ff:f7:
e5:1c:58:eb:55:56:49:82:41:22:e1:75:62:6f:3b:
11:c5:58:93:88:3b:38:33:e8:ce:92:ef:f4:03:57:
1b:58:09:f8:f8:60:3c:e0:c8:bd:35:07:85:4c:f3:
08:01:6c:fb:cb:7b:2b:b9:cc:18:46:80:25:fa:61:
80:4a:39:dc:29:1b:7b:c9:86:9d:fe:62:40:47:a6:
d6:2b:64:af:89:59:37:d6:09:b1:c4:4e:8d:30:42:
42:49:8b:0c:51:90:44:5d:f0:a3:9f:1a:2b:af:5a:
46:a0:8b:74:84:70:de:cd:8c:c9:3b:59:db:43:b8:
0e:09:27:21:f8:c3:89:6b:7c:c1:bd:b3:80:25:a8:
cc:a2:83:6d:e9:12:0f:37:3b:ee:b7:09:a4:dd:ce:
d3:6a:ca:3d:02:de:5d:9b:7a:27:bd:0b:fe:30:b1:
6d:d0:ce:f8:b1:43:35:5e:23:5c:4e:92:db:08:51:
48:93:e8:f9:20:5e:a7:a6:e1:6c:ea:f5:46:e1:b6:
67:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:C3:09:E0:B6:75:14:BD:41:F8:2B:17:77:03:EA:F0:A9:5C:93:44
X509v3 Authority Key Identifier:
keyid:B5:6A:89:57:CC:C3:0A:A4:EC:2D:47:8E:53:F3:87:26:C9:95:5A:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tWqJV8zDCqTsLUeOU_OHJsmVWjE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/16e2aa-ddbd-4ee1-ae60-08bc640aed67/1/tWqJV8zDCqTsLUeOU_OHJsmVWjE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/16e2aa-ddbd-4ee1-ae60-08bc640aed67/1/tWqJV8zDCqTsLUeOU_OHJsmVWjE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:70:14:79:b0:52:f8:26:8e:02:86:b4:ef:3c:ef:a0:ac:3f:
2d:b1:d5:a5:49:63:4d:db:51:6c:a9:aa:56:e7:25:d4:f0:69:
0a:49:00:ee:46:92:d6:ac:06:0a:83:11:b6:78:2b:88:c3:db:
97:69:f7:03:bf:49:12:ef:a7:c7:55:fd:1e:b9:90:57:b2:ac:
64:f4:9a:ec:ff:67:d4:cb:30:d7:28:82:86:ef:ab:a7:88:a3:
80:99:0f:11:08:69:af:32:0e:11:ac:81:b3:e8:f6:57:9d:4a:
ae:73:d0:35:3a:d1:ac:41:ee:33:f6:1b:81:d9:2e:5f:4c:40:
c5:1a:fd:89:93:8e:02:62:da:b8:a0:31:0c:2f:db:b1:1a:db:
85:5d:ec:9b:52:e8:c6:d9:8f:88:7a:17:d4:c8:18:73:bf:30:
0d:33:8a:37:42:dc:78:50:0f:16:da:91:6b:9a:52:e9:9b:e2:
b0:63:6c:c4:35:23:46:0e:9f:0f:99:b2:a8:4a:88:e4:c2:c3:
7a:dd:9c:e1:aa:13:ce:f3:70:45:e5:d8:90:d4:c3:13:96:03:
2c:40:13:75:1b:eb:41:54:0d:2f:b5:11:41:70:82:f9:e8:36:
ec:62:9b:8c:35:d9:9c:3e:99:0f:ed:a1:00:64:af:e3:28:e7:
bd:60:f0:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 09:54:53 2025 by rpki-client