Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/e85903-7574-4ab3-b441-5267d716e4ce/1/TI3qBN5uN7GQNV4DzSYAxHIS4Y4.mft
File: TI3qBN5uN7GQNV4DzSYAxHIS4Y4.mft (raw, json)
Hash identifier: dz4k5DzhpuA93FZIiqn2CSqtokmmxV2OQen80UjeRGo=
Subject key identifier: 9E:40:B8:C1:1B:08:74:DB:3F:03:7D:EE:C4:85:73:15:9B:CB:0A:7D
Authority key identifier: 4C:8D:EA:04:DE:6E:37:B1:90:35:5E:03:CD:26:00:C4:72:12:E1:8E
Certificate issuer: /CN=4c8dea04de6e37b190355e03cd2600c47212e18e
Certificate serial: 019922559A3C052BA606E0EF2D60108EA14A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TI3qBN5uN7GQNV4DzSYAxHIS4Y4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/e85903-7574-4ab3-b441-5267d716e4ce/1/TI3qBN5uN7GQNV4DzSYAxHIS4Y4.mft
Manifest number: 0762
Signing time: Sun 07 Sep 2025 04:00:58 +0000
Manifest this update: Sun 07 Sep 2025 04:00:58 +0000
Manifest next update: Mon 08 Sep 2025 04:00:58 +0000
Files and hashes: 1: TI3qBN5uN7GQNV4DzSYAxHIS4Y4.crl (hash: yGTqJOf8HaSr+cYIT/ZTFJ+8s0CM7KdA/0qGPlyR3vw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/e85903-7574-4ab3-b441-5267d716e4ce/1/TI3qBN5uN7GQNV4DzSYAxHIS4Y4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/e85903-7574-4ab3-b441-5267d716e4ce/1/TI3qBN5uN7GQNV4DzSYAxHIS4Y4.mft
rsync://rpki.ripe.net/repository/DEFAULT/TI3qBN5uN7GQNV4DzSYAxHIS4Y4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 04:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:55:9a:3c:05:2b:a6:06:e0:ef:2d:60:10:8e:a1:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c8dea04de6e37b190355e03cd2600c47212e18e
Validity
Not Before: Sep 7 04:00:58 2025 GMT
Not After : Sep 8 04:00:58 2025 GMT
Subject: CN=9e40b8c11b0874db3f037deec48573159bcb0a7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:4e:ed:2b:c9:ea:8d:8c:d3:1f:9c:a7:19:7f:
de:4e:78:dd:4a:e4:08:86:9a:8c:a0:ec:2b:ef:6f:
1f:ca:87:ca:b6:9f:f0:50:14:90:3a:1b:05:75:8c:
17:8e:f3:d5:0c:82:ce:50:e1:2c:6e:85:9f:5b:b5:
ef:60:d8:93:a0:81:4a:8b:d2:78:68:fd:b3:21:a0:
4e:03:a6:9c:0b:78:e4:bf:17:5d:dd:a3:e9:6f:5d:
5d:e4:59:53:cc:bb:72:16:81:a5:d7:b3:85:2e:c6:
fd:4f:70:19:04:23:99:91:24:df:e9:38:c9:81:61:
61:f8:8f:9a:fe:fc:d1:9e:49:14:62:58:12:3d:5d:
13:77:2d:27:f8:35:61:c6:51:1c:0b:ab:04:ce:cc:
27:06:7b:da:e5:f1:ec:15:0a:e6:57:5c:5e:2c:07:
78:7f:00:7b:20:4e:52:5f:84:a3:ab:3f:44:7e:38:
4b:bc:fe:07:ab:f5:d7:d5:14:96:d0:ac:e0:8c:88:
f1:2a:e4:a9:1e:9f:f4:7c:d3:aa:28:33:93:31:a4:
98:5a:19:73:bb:e4:ea:8b:1b:82:56:bc:f6:dd:12:
a8:ec:50:bc:e1:91:9a:10:ab:03:27:e2:24:06:d7:
d9:b1:ac:57:9a:b6:96:fc:cb:58:4f:fc:cc:9e:91:
6b:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:40:B8:C1:1B:08:74:DB:3F:03:7D:EE:C4:85:73:15:9B:CB:0A:7D
X509v3 Authority Key Identifier:
keyid:4C:8D:EA:04:DE:6E:37:B1:90:35:5E:03:CD:26:00:C4:72:12:E1:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TI3qBN5uN7GQNV4DzSYAxHIS4Y4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/e85903-7574-4ab3-b441-5267d716e4ce/1/TI3qBN5uN7GQNV4DzSYAxHIS4Y4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/e85903-7574-4ab3-b441-5267d716e4ce/1/TI3qBN5uN7GQNV4DzSYAxHIS4Y4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:83:de:6d:27:e6:27:62:18:a9:a7:46:dd:8a:a4:f9:63:06:
5e:91:74:e9:2f:96:41:f1:97:a7:0e:51:02:69:50:28:65:6a:
e3:d3:3e:14:38:37:f6:00:ed:c1:1a:09:7f:9d:ff:6c:ff:57:
03:4c:86:24:7f:d7:1c:b6:c7:36:62:06:db:3d:3e:8d:ec:ee:
47:f6:bf:c5:57:80:4f:4e:de:df:4a:a8:de:fb:58:ff:c3:00:
ca:c8:18:1e:15:11:76:13:96:85:a2:bb:29:c2:8c:4a:6b:3c:
af:fa:d5:b0:87:e3:76:44:91:9a:52:f7:aa:2c:11:73:9c:66:
cd:43:ff:48:c1:3a:fa:0a:b5:9e:c0:28:e7:2e:34:e6:c0:ef:
7a:50:0c:a7:84:64:ce:89:dc:37:90:f7:fd:69:61:77:a6:8e:
7f:75:81:84:84:43:82:72:71:ca:e5:cf:77:2e:2e:47:43:a8:
12:da:f1:15:9e:a8:97:2c:4f:f8:39:77:f0:03:43:7d:6d:05:
39:d8:46:44:53:f7:d6:3a:c5:a3:08:59:c7:87:dc:2d:f6:32:
6e:3d:ee:e0:36:71:79:68:6a:03:8b:a2:b1:77:8a:e8:37:87:
48:5a:d4:15:3a:77:dc:ba:b4:84:43:e6:18:18:6a:f1:a6:41:
51:dd:e8:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:41:14 2025 by rpki-client