Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/3bee01-1fb8-47e2-b766-fe0a2ac0869f/1/tW2qb4UEFKE_ZQ3wlFBmKKRtwS8.mft
File: tW2qb4UEFKE_ZQ3wlFBmKKRtwS8.mft (raw, json)
Hash identifier: rb8HaBetf30ZbAQJza+VAmkXSiYiFM9miWRdZafw4ew=
Subject key identifier: E2:E0:DC:69:B3:84:C4:93:61:99:1D:3A:59:FD:2F:D0:9B:5E:AB:3A
Authority key identifier: B5:6D:AA:6F:85:04:14:A1:3F:65:0D:F0:94:50:66:28:A4:6D:C1:2F
Certificate issuer: /CN=b56daa6f850414a13f650df094506628a46dc12f
Certificate serial: 0199176470E631CE0E05A505FA3F5170FF5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tW2qb4UEFKE_ZQ3wlFBmKKRtwS8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/3bee01-1fb8-47e2-b766-fe0a2ac0869f/1/tW2qb4UEFKE_ZQ3wlFBmKKRtwS8.mft
Manifest number: 1167
Signing time: Fri 05 Sep 2025 01:01:22 +0000
Manifest this update: Fri 05 Sep 2025 01:01:22 +0000
Manifest next update: Sat 06 Sep 2025 01:01:22 +0000
Files and hashes: 1: tW2qb4UEFKE_ZQ3wlFBmKKRtwS8.crl (hash: LOqEz1iM9qHf9CT21znLdpqy0FSWH2Uzwa52feqVOro=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/3bee01-1fb8-47e2-b766-fe0a2ac0869f/1/tW2qb4UEFKE_ZQ3wlFBmKKRtwS8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/3bee01-1fb8-47e2-b766-fe0a2ac0869f/1/tW2qb4UEFKE_ZQ3wlFBmKKRtwS8.mft
rsync://rpki.ripe.net/repository/DEFAULT/tW2qb4UEFKE_ZQ3wlFBmKKRtwS8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Sep 2025 01:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:17:64:70:e6:31:ce:0e:05:a5:05:fa:3f:51:70:ff:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b56daa6f850414a13f650df094506628a46dc12f
Validity
Not Before: Sep 5 01:01:22 2025 GMT
Not After : Sep 6 01:01:22 2025 GMT
Subject: CN=e2e0dc69b384c49361991d3a59fd2fd09b5eab3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:64:20:d5:9d:2a:7a:c7:70:8d:95:7d:eb:94:
51:ac:1f:2a:fc:2c:31:1b:f3:80:14:1e:71:e0:47:
a0:82:45:be:a6:00:23:d5:56:4c:45:86:aa:b0:a6:
a3:a2:9c:b5:9e:67:fd:57:f9:60:69:34:56:2c:e2:
07:e4:da:ff:21:12:51:b5:52:a8:22:3d:5d:01:38:
81:0e:d7:76:58:c5:39:f2:75:0b:1c:9f:d1:75:d7:
46:75:c5:eb:3e:bf:8f:26:26:a8:99:38:44:91:07:
55:b9:9e:78:24:df:e2:15:9f:f1:3a:86:04:c9:b7:
5a:be:cb:60:ed:40:43:a7:6d:6b:2f:0e:55:f0:99:
b4:29:fb:33:40:ce:a4:7b:8d:b5:ee:9c:bc:fc:f5:
78:d0:54:1c:f8:1d:ab:f7:44:b7:ca:f5:39:fe:9e:
04:5d:e0:bb:34:a3:0e:90:64:57:4d:0d:21:7a:20:
35:c1:81:06:f0:78:f8:14:38:d7:bf:53:b2:62:22:
87:a7:f5:88:fb:2f:bc:f8:a2:c9:c5:05:43:ed:92:
f6:78:03:a6:ef:25:c9:bc:6a:10:d8:f2:67:18:56:
60:68:18:ef:e8:0f:75:da:f6:54:c3:ec:54:c5:36:
ed:39:c0:ee:72:9d:75:2a:78:ad:f3:93:ac:d0:75:
5f:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:E0:DC:69:B3:84:C4:93:61:99:1D:3A:59:FD:2F:D0:9B:5E:AB:3A
X509v3 Authority Key Identifier:
keyid:B5:6D:AA:6F:85:04:14:A1:3F:65:0D:F0:94:50:66:28:A4:6D:C1:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tW2qb4UEFKE_ZQ3wlFBmKKRtwS8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/3bee01-1fb8-47e2-b766-fe0a2ac0869f/1/tW2qb4UEFKE_ZQ3wlFBmKKRtwS8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/3bee01-1fb8-47e2-b766-fe0a2ac0869f/1/tW2qb4UEFKE_ZQ3wlFBmKKRtwS8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:46:00:0f:05:71:60:77:53:6a:1e:f3:dc:fb:ba:4a:ae:61:
40:1d:82:3a:9d:de:ce:ed:09:10:7c:63:a8:d6:86:af:2e:81:
41:ba:fc:8b:5c:69:7f:23:72:cd:1d:dd:fb:d1:3e:2c:8f:36:
43:8a:25:b6:8c:78:01:7f:47:ed:17:0f:51:d3:e8:ee:92:cb:
f6:6d:dd:d4:39:4a:f8:e2:b9:6b:a2:dd:a5:97:05:dc:80:20:
05:39:ed:64:62:5e:52:d0:b1:f3:0d:15:87:62:e8:4f:39:e4:
46:89:2b:7f:78:25:d9:64:82:7f:3e:f7:4d:df:84:de:00:6e:
1a:71:2b:41:6b:10:3b:6d:bb:6c:cc:76:18:15:0b:53:10:42:
e2:fb:b0:d6:41:94:ea:db:9e:b1:2d:60:ed:ce:1f:f1:ce:1b:
a4:eb:58:7f:c0:0f:91:64:99:6d:23:76:69:eb:21:c8:7c:93:
8b:b8:90:17:47:f1:87:a3:e8:7c:bf:08:15:a2:44:3d:7b:5f:
ec:58:0e:ce:05:a7:e9:d0:f9:bb:df:50:c1:5a:c1:72:63:a7:
a5:fc:f4:cf:e9:54:4f:99:28:ae:1f:fe:ce:cf:bd:25:84:f8:
f0:24:dd:a3:3c:e2:ee:a3:00:78:a5:ef:dd:5b:cb:31:09:4c:
fb:7b:06:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 06:03:24 2025 by rpki-client