
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/244086-e974-4b48-ae74-370f000c3c0e/1/t64i7alidO6Wl8qqy1PfkXNwngM.mft
File: t64i7alidO6Wl8qqy1PfkXNwngM.mft (raw, json)
Hash identifier: zKJ81oeIAkaElDNiwGCT2PTQTBoT/SLTF9iyO6O9Qt0=
Subject key identifier: B0:86:18:FD:D3:D3:92:94:B1:E8:94:2F:E6:91:D4:A9:5B:7B:81:89
Authority key identifier: B7:AE:22:ED:A9:62:74:EE:96:97:CA:AA:CB:53:DF:91:73:70:9E:03
Certificate issuer: /CN=b7ae22eda96274ee9697caaacb53df9173709e03
Certificate serial: 0199221E48C985A293293B4F2579FD42C2EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t64i7alidO6Wl8qqy1PfkXNwngM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/244086-e974-4b48-ae74-370f000c3c0e/1/t64i7alidO6Wl8qqy1PfkXNwngM.mft
Manifest number: 13D0
Signing time: Sun 07 Sep 2025 03:00:33 +0000
Manifest this update: Sun 07 Sep 2025 03:00:33 +0000
Manifest next update: Mon 08 Sep 2025 03:00:33 +0000
Files and hashes: 1: t64i7alidO6Wl8qqy1PfkXNwngM.crl (hash: tmVRMlVvPRr9tI8/fdJR/EQz7bo0fGSolqDEAP65daA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/244086-e974-4b48-ae74-370f000c3c0e/1/t64i7alidO6Wl8qqy1PfkXNwngM.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/244086-e974-4b48-ae74-370f000c3c0e/1/t64i7alidO6Wl8qqy1PfkXNwngM.mft
rsync://rpki.ripe.net/repository/DEFAULT/t64i7alidO6Wl8qqy1PfkXNwngM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 03:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:1e:48:c9:85:a2:93:29:3b:4f:25:79:fd:42:c2:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b7ae22eda96274ee9697caaacb53df9173709e03
Validity
Not Before: Sep 7 03:00:33 2025 GMT
Not After : Sep 8 03:00:33 2025 GMT
Subject: CN=b08618fdd3d39294b1e8942fe691d4a95b7b8189
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:40:7a:29:fd:1a:75:bd:ac:f6:ba:cb:f8:18:
99:b8:82:ab:c0:c6:02:9f:a7:22:d2:cc:27:1a:cc:
cd:6c:37:da:56:2d:ae:77:82:1c:ac:8d:91:19:90:
d9:fc:bf:57:59:08:77:e6:9c:fe:ae:ab:ad:53:fc:
5e:e1:72:2b:37:43:28:68:91:60:80:f5:7d:9d:21:
e5:6c:d6:cf:69:7d:40:0c:80:48:d1:87:0e:52:46:
5f:0b:ec:ad:62:59:9a:0c:c5:24:78:6f:fa:02:84:
58:2b:ed:0d:a9:83:2c:34:c6:8d:63:15:c5:5f:6d:
2f:37:d9:bb:cf:2a:45:66:f2:92:5d:b8:a2:0c:60:
0d:ff:b5:d8:b3:6e:bf:7b:b0:38:33:76:35:16:64:
4c:81:fa:d0:09:25:94:2b:8a:9a:b6:4f:1d:6a:31:
78:26:63:77:0b:cd:21:73:e3:fb:f7:18:6e:95:08:
7c:07:64:57:f6:ce:d5:02:db:98:54:03:fb:e4:1a:
92:e6:9c:4a:1f:20:4f:ef:0f:fe:16:9a:6f:05:77:
e4:80:b1:57:75:9a:2d:1c:20:cf:e0:59:33:47:2a:
d3:cd:29:c4:62:e2:57:67:69:2f:0d:12:27:2a:b7:
ac:e5:70:73:f6:31:99:c8:ce:bb:fb:ea:1b:25:db:
07:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:86:18:FD:D3:D3:92:94:B1:E8:94:2F:E6:91:D4:A9:5B:7B:81:89
X509v3 Authority Key Identifier:
keyid:B7:AE:22:ED:A9:62:74:EE:96:97:CA:AA:CB:53:DF:91:73:70:9E:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t64i7alidO6Wl8qqy1PfkXNwngM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/244086-e974-4b48-ae74-370f000c3c0e/1/t64i7alidO6Wl8qqy1PfkXNwngM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/244086-e974-4b48-ae74-370f000c3c0e/1/t64i7alidO6Wl8qqy1PfkXNwngM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:02:2a:83:c7:8b:85:f4:db:ec:69:df:0a:bd:68:48:1e:14:
d3:e2:ba:1f:08:1d:27:be:3a:64:f6:a0:bf:3c:2d:47:f8:99:
cd:fd:56:e4:cd:68:5c:cd:21:b3:d0:fd:15:b6:01:54:bf:9c:
72:b2:07:de:24:17:c1:02:86:a2:93:7b:e7:0e:05:76:90:99:
72:db:48:eb:a4:17:79:3f:6f:81:21:9b:9b:77:b2:ba:78:b3:
57:6f:67:e3:70:f0:47:90:c8:dc:10:54:80:96:2b:06:41:40:
6a:82:eb:b6:03:c6:ed:32:b6:91:42:57:50:bf:a5:69:08:bb:
96:82:c5:36:4f:d1:5c:76:e2:80:42:15:5f:bf:b8:fe:60:c7:
83:9f:9a:79:51:74:dc:c9:c9:ea:4c:d5:e6:80:00:94:e0:38:
41:60:2c:f0:76:3b:70:95:a5:dc:99:69:10:38:5f:55:e2:63:
86:4f:ff:a6:3b:bf:39:9d:f5:61:bd:72:49:bf:56:03:2b:b5:
cb:04:41:0a:31:38:56:0c:64:ca:92:2d:f3:2b:25:ad:6d:cb:
cc:56:17:09:51:a2:77:99:73:d5:60:00:a2:ba:14:bc:89:39:
83:4a:c6:f9:12:45:94:1d:c8:ed:71:45:af:fc:21:af:d2:df:
f6:11:db:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:21:11 2025 by rpki-client