Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/bf8b0e-beda-4a56-baf0-82ad11626eed/1/TEz85gybDy1Hs2KGTY_rsiW7UkQ.mft
File: TEz85gybDy1Hs2KGTY_rsiW7UkQ.mft (raw, json)
Hash identifier: iiTWkgnJMgZr/lu9pCVCMuo4jKOkcXU57qyckUhRmq4=
Subject key identifier: 5A:6C:4B:E3:FA:9B:D3:DE:AD:88:B6:EB:0E:C8:DD:AD:A7:68:A2:56
Authority key identifier: 4C:4C:FC:E6:0C:9B:0F:2D:47:B3:62:86:4D:8F:EB:B2:25:BB:52:44
Certificate issuer: /CN=4c4cfce60c9b0f2d47b362864d8febb225bb5244
Certificate serial: 0199221E8659C4DDE1522EC08B48156AB52C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TEz85gybDy1Hs2KGTY_rsiW7UkQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/bf8b0e-beda-4a56-baf0-82ad11626eed/1/TEz85gybDy1Hs2KGTY_rsiW7UkQ.mft
Manifest number: 166E
Signing time: Sun 07 Sep 2025 03:00:49 +0000
Manifest this update: Sun 07 Sep 2025 03:00:49 +0000
Manifest next update: Mon 08 Sep 2025 03:00:49 +0000
Files and hashes: 1: TEz85gybDy1Hs2KGTY_rsiW7UkQ.crl (hash: pMlflfDpZQyrn7Z3gR3AJOWa8XUkkBGvQDZ4BzwmxoQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/bf8b0e-beda-4a56-baf0-82ad11626eed/1/TEz85gybDy1Hs2KGTY_rsiW7UkQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/bf8b0e-beda-4a56-baf0-82ad11626eed/1/TEz85gybDy1Hs2KGTY_rsiW7UkQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/TEz85gybDy1Hs2KGTY_rsiW7UkQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 03:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:1e:86:59:c4:dd:e1:52:2e:c0:8b:48:15:6a:b5:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c4cfce60c9b0f2d47b362864d8febb225bb5244
Validity
Not Before: Sep 7 03:00:49 2025 GMT
Not After : Sep 8 03:00:49 2025 GMT
Subject: CN=5a6c4be3fa9bd3dead88b6eb0ec8ddada768a256
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:6e:13:f1:28:1f:a8:9a:e0:36:a4:f7:de:34:
68:2b:2e:84:ff:ea:23:2d:3e:fc:06:58:0c:75:3d:
5b:1c:de:c4:7d:42:b2:f6:6a:52:56:12:9d:98:9f:
e6:00:f5:bd:54:3f:32:41:95:1d:be:75:b1:3f:ef:
3a:ad:d2:14:74:8c:bc:11:b4:cf:20:70:47:d8:eb:
87:3e:24:30:d1:04:b6:99:7a:a8:fd:44:48:46:39:
19:90:66:b8:2d:7e:f6:0d:07:b5:e5:a4:c6:73:15:
bd:75:9c:de:86:f1:ca:3e:b8:f8:06:33:85:df:45:
03:c9:68:f9:ba:b7:1e:b0:9f:23:1b:32:da:8f:0b:
c9:e6:e0:92:bb:67:6d:e3:51:04:d4:d0:35:7f:0b:
ea:9f:26:1a:1a:19:7b:41:4a:67:82:6f:86:28:10:
13:e1:7d:a9:96:84:c7:f9:c1:e8:ce:42:be:42:65:
bf:bc:4f:43:6b:cf:7b:44:d5:f2:33:a5:77:32:6e:
fc:e0:67:26:c0:f4:e2:7f:ce:29:04:1f:07:4f:41:
0a:c0:89:f5:39:39:27:77:4b:b4:25:37:93:87:fc:
32:c1:2e:f3:ee:93:45:7f:82:ea:19:64:68:97:97:
51:c0:02:2b:a5:a4:2f:86:77:d8:cc:c6:40:15:fd:
37:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:6C:4B:E3:FA:9B:D3:DE:AD:88:B6:EB:0E:C8:DD:AD:A7:68:A2:56
X509v3 Authority Key Identifier:
keyid:4C:4C:FC:E6:0C:9B:0F:2D:47:B3:62:86:4D:8F:EB:B2:25:BB:52:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TEz85gybDy1Hs2KGTY_rsiW7UkQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/bf8b0e-beda-4a56-baf0-82ad11626eed/1/TEz85gybDy1Hs2KGTY_rsiW7UkQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/bf8b0e-beda-4a56-baf0-82ad11626eed/1/TEz85gybDy1Hs2KGTY_rsiW7UkQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:47:fa:96:13:e5:f4:a3:a7:22:e8:01:38:87:da:47:8d:61:
5f:fb:5d:42:16:0f:45:67:f4:77:20:e8:74:20:23:2b:ad:de:
11:43:c5:90:c3:2a:14:5c:b0:dd:83:14:75:47:fc:fc:dd:08:
f2:13:c3:e2:d3:15:a5:db:74:14:0c:6f:49:92:3d:02:d5:e6:
65:1c:fd:9f:8e:63:90:c4:89:f3:3c:ca:30:ee:d1:4f:fd:71:
41:3f:0a:2a:ed:e9:1d:a6:5c:b0:94:ca:8b:8f:1e:cd:09:65:
c0:88:00:d6:5e:59:90:b4:49:3b:8f:83:be:f6:49:82:19:2a:
04:9e:6d:47:cc:a5:36:dc:86:95:16:4a:e2:ee:85:2e:6d:b7:
ac:bd:e6:90:40:0d:6b:87:45:ad:04:15:5e:ad:2b:ea:4e:64:
33:27:d7:99:c7:93:fc:e6:c3:93:00:d4:bf:1b:ab:d1:17:a2:
6c:5d:d6:7d:1f:19:37:aa:9f:f9:a4:1c:65:f9:e4:cb:aa:6e:
57:09:26:21:54:9f:77:dd:62:f5:2f:98:00:2e:7c:ce:6d:cb:
63:d0:65:cc:d2:9e:e5:ad:e2:5e:11:e2:56:aa:7a:cf:b4:70:
b6:6b:17:a6:06:64:e0:48:59:ab:4b:d2:2f:05:73:a2:ab:8f:
40:1d:9a:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:48:41 2025 by rpki-client