Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/aaf36c-666d-4ac4-b0f3-4bb37b18b9fe/1/tTrKNoRtLTAjZI6sWBx9m2MX7tw.mft
File: tTrKNoRtLTAjZI6sWBx9m2MX7tw.mft (raw, json)
Hash identifier: dbB/A5o8aFX/eei5BEi145XdnI405aZhSFS5xV3LeF0=
Subject key identifier: AB:6E:9B:34:14:65:B9:9A:02:82:AB:88:C9:B3:7D:9C:35:4E:5F:B5
Authority key identifier: B5:3A:CA:36:84:6D:2D:30:23:64:8E:AC:58:1C:7D:9B:63:17:EE:DC
Certificate issuer: /CN=b53aca36846d2d3023648eac581c7d9b6317eedc
Certificate serial: 0199228C627704DE0C28154E44C0A2A1F066
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tTrKNoRtLTAjZI6sWBx9m2MX7tw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/aaf36c-666d-4ac4-b0f3-4bb37b18b9fe/1/tTrKNoRtLTAjZI6sWBx9m2MX7tw.mft
Manifest number: 0270
Signing time: Sun 07 Sep 2025 05:00:49 +0000
Manifest this update: Sun 07 Sep 2025 05:00:49 +0000
Manifest next update: Mon 08 Sep 2025 05:00:49 +0000
Files and hashes: 1: tTrKNoRtLTAjZI6sWBx9m2MX7tw.crl (hash: 7mncrTVpHrpQEMwBmtTxHQTOMA9AQDXb3xWH7cT6Wwg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/aaf36c-666d-4ac4-b0f3-4bb37b18b9fe/1/tTrKNoRtLTAjZI6sWBx9m2MX7tw.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/aaf36c-666d-4ac4-b0f3-4bb37b18b9fe/1/tTrKNoRtLTAjZI6sWBx9m2MX7tw.mft
rsync://rpki.ripe.net/repository/DEFAULT/tTrKNoRtLTAjZI6sWBx9m2MX7tw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:8c:62:77:04:de:0c:28:15:4e:44:c0:a2:a1:f0:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b53aca36846d2d3023648eac581c7d9b6317eedc
Validity
Not Before: Sep 7 05:00:49 2025 GMT
Not After : Sep 8 05:00:49 2025 GMT
Subject: CN=ab6e9b341465b99a0282ab88c9b37d9c354e5fb5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:d9:cd:8e:4f:3b:6a:07:3e:1d:96:6d:a1:6d:
ce:78:af:28:57:3e:9e:b4:36:81:27:33:1b:1d:d7:
46:39:4c:2f:bf:9b:e2:47:e5:04:4e:5d:c6:17:4a:
88:90:de:23:c4:a7:9f:27:22:55:39:8a:94:fb:f4:
ae:fb:1d:c2:18:52:1d:b9:7e:9b:ae:b1:75:cf:bb:
6d:8b:ea:64:df:13:73:58:49:9a:48:36:4b:14:fe:
c2:4a:b2:91:70:5f:e1:36:23:c6:b4:ba:9c:d0:7d:
40:f6:e8:47:04:4a:25:0e:14:ec:f1:10:92:83:86:
a2:ae:cd:49:be:cd:8e:84:51:2a:1a:33:1a:78:51:
e0:9d:34:fc:e3:13:be:7b:3e:c1:71:e9:f6:ec:0d:
82:39:8c:69:dc:b2:2c:d6:f3:f1:67:9c:25:9c:9d:
4b:04:ec:9c:f8:a6:2f:3c:7f:82:cc:13:c8:93:fe:
7a:65:ad:6c:fa:4f:df:30:31:b0:9b:c5:7f:eb:7a:
2a:21:12:ff:9a:2d:ea:f2:cd:4f:bf:17:f8:e0:d7:
8a:b8:30:81:6d:c3:3e:ca:a0:81:fc:55:d6:8f:2a:
c6:9a:e3:ce:76:9f:7b:b3:79:cb:63:cf:5c:d1:c5:
b6:6d:c7:73:e1:c6:b9:e4:20:24:e4:fe:ef:2b:e6:
e5:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:6E:9B:34:14:65:B9:9A:02:82:AB:88:C9:B3:7D:9C:35:4E:5F:B5
X509v3 Authority Key Identifier:
keyid:B5:3A:CA:36:84:6D:2D:30:23:64:8E:AC:58:1C:7D:9B:63:17:EE:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tTrKNoRtLTAjZI6sWBx9m2MX7tw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/aaf36c-666d-4ac4-b0f3-4bb37b18b9fe/1/tTrKNoRtLTAjZI6sWBx9m2MX7tw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/aaf36c-666d-4ac4-b0f3-4bb37b18b9fe/1/tTrKNoRtLTAjZI6sWBx9m2MX7tw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:02:9e:5c:2a:80:69:00:6a:b3:61:e7:3f:4f:0c:c8:17:6f:
db:f1:08:61:70:ef:3f:3b:ce:62:cb:13:d7:2e:3b:4b:00:87:
5e:bd:f7:b4:b9:60:91:be:5b:e1:87:4f:44:1c:51:e5:90:11:
c9:20:a2:00:f2:65:96:85:1c:28:be:fe:04:5a:3f:85:ba:c6:
87:6d:d8:bb:3c:36:f6:11:96:80:f3:31:3a:be:ac:aa:fd:1d:
ec:d5:3f:27:91:4b:a8:f2:fe:04:e6:e8:09:9d:70:d3:8a:2c:
a6:4d:77:1b:a7:af:a2:ac:9d:bd:45:48:7a:13:50:dd:af:a3:
91:94:6f:5f:7a:c9:05:a4:72:81:68:79:f4:64:45:04:72:40:
79:cd:87:fd:59:0f:91:75:98:75:84:0a:fc:63:f4:c6:ca:4a:
24:d6:87:0a:68:9d:42:75:d0:f9:5b:c4:af:7f:72:77:c1:ba:
4e:aa:ad:0b:cd:37:1b:1b:78:c3:dc:60:6e:6a:af:86:ff:81:
b1:c1:86:a1:31:55:15:8a:55:ac:40:52:43:a2:02:44:c5:88:
4c:f0:18:49:81:8b:1d:ad:7a:e4:9f:f1:5a:0f:5a:5d:f5:05:
77:54:3b:d6:e5:eb:e5:58:de:41:1b:ed:67:c3:0f:9d:46:8b:
d2:f3:d8:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:04:34 2025 by rpki-client