Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/ca4c34-2704-4f82-bff8-a7ccd0098477/1/TmIrxVBoe20O9geIzq2w_IIKOB8.mft
File: TmIrxVBoe20O9geIzq2w_IIKOB8.mft (raw, json)
Hash identifier: E2BAcVhk8qq3+ouL0A3JY43P/3k9DiDHLSxu4jajT4A=
Subject key identifier: E1:69:E0:50:48:23:AC:63:59:34:2C:32:91:DD:E3:E3:AD:B3:F4:39
Authority key identifier: 4E:62:2B:C5:50:68:7B:6D:0E:F6:07:88:CE:AD:B0:FC:82:0A:38:1F
Certificate issuer: /CN=4e622bc550687b6d0ef60788ceadb0fc820a381f
Certificate serial: 0199228CAA50206C258DD379B34B261FEFE5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TmIrxVBoe20O9geIzq2w_IIKOB8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/ca4c34-2704-4f82-bff8-a7ccd0098477/1/TmIrxVBoe20O9geIzq2w_IIKOB8.mft
Manifest number: 09B7
Signing time: Sun 07 Sep 2025 05:01:07 +0000
Manifest this update: Sun 07 Sep 2025 05:01:07 +0000
Manifest next update: Mon 08 Sep 2025 05:01:07 +0000
Files and hashes: 1: TmIrxVBoe20O9geIzq2w_IIKOB8.crl (hash: tlo4IL+BB3+feLaKXH1M7njdJ9PUa6TXWmamoSXggkA=)
2: t4aglK9u5BBs2nCD-lvEdZGnyNE.roa (hash: poJOpqUdh9mquobj4xZre8xkqBntoXYzhaUhNLYqXsg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/ca4c34-2704-4f82-bff8-a7ccd0098477/1/TmIrxVBoe20O9geIzq2w_IIKOB8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/ca4c34-2704-4f82-bff8-a7ccd0098477/1/TmIrxVBoe20O9geIzq2w_IIKOB8.mft
rsync://rpki.ripe.net/repository/DEFAULT/TmIrxVBoe20O9geIzq2w_IIKOB8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:8c:aa:50:20:6c:25:8d:d3:79:b3:4b:26:1f:ef:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e622bc550687b6d0ef60788ceadb0fc820a381f
Validity
Not Before: Sep 7 05:01:07 2025 GMT
Not After : Sep 8 05:01:07 2025 GMT
Subject: CN=e169e0504823ac6359342c3291dde3e3adb3f439
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:0b:07:c9:e0:e6:87:11:79:a9:fe:e0:b6:ee:
18:11:0a:f8:37:80:15:32:9b:85:a6:9b:13:be:a1:
9d:62:fd:df:d1:97:4c:70:b8:b2:6f:43:38:8a:a8:
60:75:78:2e:a3:5e:de:8e:4d:d9:10:ed:58:44:c9:
29:99:37:81:3c:21:f0:5f:96:47:59:56:26:85:fd:
0b:62:12:7f:7a:18:51:15:33:53:dc:88:89:b5:f9:
e0:cb:83:de:db:12:e3:e1:dc:ce:d6:72:23:80:6c:
ec:b6:b5:ff:b4:da:f0:bb:b3:2c:2b:11:00:07:88:
e4:af:64:30:de:6a:cd:ce:96:ed:37:b8:9a:80:05:
77:c4:a7:1a:df:fe:a9:e7:4f:32:76:53:6a:bc:0c:
29:0e:b8:cb:60:49:f6:a2:90:55:b6:03:64:1a:20:
01:6a:ed:57:1d:ba:d9:81:db:8d:08:94:49:b8:dd:
3e:f3:0e:03:fe:18:19:8a:dd:87:30:df:7a:8b:d1:
71:6a:7d:2e:8a:7e:d3:59:e3:6d:af:0a:98:f5:a4:
64:dc:7e:36:ea:f7:7d:6d:42:12:d9:85:20:86:bc:
6b:7e:c6:26:7c:9d:21:db:04:07:1f:84:8c:dd:7c:
c0:08:fc:e4:30:ec:c7:fb:c9:2b:77:3e:33:e0:71:
c7:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:69:E0:50:48:23:AC:63:59:34:2C:32:91:DD:E3:E3:AD:B3:F4:39
X509v3 Authority Key Identifier:
keyid:4E:62:2B:C5:50:68:7B:6D:0E:F6:07:88:CE:AD:B0:FC:82:0A:38:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TmIrxVBoe20O9geIzq2w_IIKOB8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/ca4c34-2704-4f82-bff8-a7ccd0098477/1/TmIrxVBoe20O9geIzq2w_IIKOB8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/ca4c34-2704-4f82-bff8-a7ccd0098477/1/TmIrxVBoe20O9geIzq2w_IIKOB8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:15:9b:ea:79:64:25:7e:97:df:13:19:df:0f:ca:3e:16:31:
b9:e2:f8:5b:3a:76:82:5e:e7:0f:b1:cf:93:de:92:13:2c:27:
a5:f0:c9:78:29:fa:1d:51:55:8c:28:28:27:12:ea:41:3a:f4:
a8:b1:1b:58:c9:c7:b7:61:bc:6a:7b:8a:fb:cd:a4:48:7f:56:
8d:fc:55:40:58:8c:b6:29:a9:ee:a7:2a:dc:8c:1f:36:a3:ff:
8e:0d:47:90:ed:e3:96:29:42:97:8f:b9:20:ec:e3:4f:2e:5c:
35:6e:23:40:a4:c3:cc:47:c6:2a:f0:ce:fe:f6:e7:29:5b:2b:
f2:77:b1:d7:16:67:20:84:18:90:17:22:55:dc:42:01:a8:36:
45:da:99:66:da:ce:f4:58:8a:88:70:25:f2:9f:97:bf:e6:7b:
78:70:f4:a4:4f:1d:56:e7:1d:b6:21:c6:4c:fd:99:75:00:c6:
df:a2:bc:13:24:b0:5a:13:41:85:19:f6:3c:44:bf:4b:fd:a6:
c6:af:d6:05:43:c1:2f:51:54:15:77:87:09:db:14:2a:00:3d:
13:0b:7a:0b:d0:45:90:3b:f4:09:a4:ee:cc:69:10:95:94:ea:
64:71:c1:9d:14:b0:53:d2:26:d7:56:a3:f6:8b:42:d9:39:1d:
d9:64:69:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:25:04 2025 by rpki-client