Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/e49afe-15ae-485a-af76-66516ffce750/1/tpQiR24a5eoNWOT4_fkfBfEC_vs.mft
File: tpQiR24a5eoNWOT4_fkfBfEC_vs.mft (raw, json)
Hash identifier: ppe0FcJC4zwhI5tHnCEleluI092Mn/SG6vPHr1GFUJY=
Subject key identifier: F3:B5:A6:F1:3D:D8:F8:5A:34:C9:F4:22:9C:FB:6C:0F:52:9C:33:26
Authority key identifier: B6:94:22:47:6E:1A:E5:EA:0D:58:E4:F8:FD:F9:1F:05:F1:02:FE:FB
Certificate issuer: /CN=b69422476e1ae5ea0d58e4f8fdf91f05f102fefb
Certificate serial: 019A4DE199D98D362F07E57F968D6D8A37AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tpQiR24a5eoNWOT4_fkfBfEC_vs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/e49afe-15ae-485a-af76-66516ffce750/1/tpQiR24a5eoNWOT4_fkfBfEC_vs.mft
Manifest number: 1709
Signing time: Tue 04 Nov 2025 08:00:21 +0000
Manifest this update: Tue 04 Nov 2025 08:00:21 +0000
Manifest next update: Wed 05 Nov 2025 08:00:21 +0000
Files and hashes: 1: tpQiR24a5eoNWOT4_fkfBfEC_vs.crl (hash: 2sxO6d709TpGY95rM7aK2QpQyJ59DcJNs0yJP6v5TFU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/e49afe-15ae-485a-af76-66516ffce750/1/tpQiR24a5eoNWOT4_fkfBfEC_vs.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/e49afe-15ae-485a-af76-66516ffce750/1/tpQiR24a5eoNWOT4_fkfBfEC_vs.mft
rsync://rpki.ripe.net/repository/DEFAULT/tpQiR24a5eoNWOT4_fkfBfEC_vs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e1:99:d9:8d:36:2f:07:e5:7f:96:8d:6d:8a:37:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b69422476e1ae5ea0d58e4f8fdf91f05f102fefb
Validity
Not Before: Nov 4 08:00:21 2025 GMT
Not After : Nov 5 08:00:21 2025 GMT
Subject: CN=f3b5a6f13dd8f85a34c9f4229cfb6c0f529c3326
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:e5:55:e2:0a:6d:60:99:69:ec:a3:c2:59:16:
9a:93:86:9c:f9:35:cd:dd:3e:aa:9c:ab:11:81:a0:
1b:ba:45:fd:f1:16:aa:b3:3e:d3:a4:7c:15:c0:15:
03:4d:05:d5:e3:95:1f:c4:ec:1f:35:1e:4b:53:2c:
7f:a9:b8:25:01:a5:96:8d:bd:e9:69:a0:9d:65:7d:
8f:0c:15:65:34:e9:f4:b0:e0:c5:ea:1f:bd:45:a7:
c3:4d:36:52:79:30:ff:60:49:ab:87:dc:7e:08:20:
3a:0f:58:a3:4c:09:06:48:ef:6f:3b:a1:d3:7b:80:
c2:40:ea:f6:0b:0a:ed:8b:c7:b5:41:29:4b:25:ac:
71:6c:67:23:8d:2d:8b:54:bf:f4:2b:f0:95:15:20:
4e:b9:73:db:cf:e3:59:d6:ea:d3:fa:05:c9:1b:0a:
65:f3:7d:a2:53:8f:cb:7a:9b:bb:9f:7c:1a:2f:c0:
96:01:4e:ef:2c:b6:eb:e7:4e:3c:d0:9f:f3:98:76:
f9:ef:4b:96:ce:54:f0:bd:1d:a7:f3:34:b8:41:39:
80:ad:c8:7e:ac:63:0d:87:3a:ac:f6:01:e7:e6:4e:
22:d0:b3:18:7c:01:56:aa:29:ab:82:2c:92:e8:93:
45:88:ee:4b:01:97:6d:4b:cd:ec:72:ea:d5:bb:7d:
3a:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:B5:A6:F1:3D:D8:F8:5A:34:C9:F4:22:9C:FB:6C:0F:52:9C:33:26
X509v3 Authority Key Identifier:
keyid:B6:94:22:47:6E:1A:E5:EA:0D:58:E4:F8:FD:F9:1F:05:F1:02:FE:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tpQiR24a5eoNWOT4_fkfBfEC_vs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/e49afe-15ae-485a-af76-66516ffce750/1/tpQiR24a5eoNWOT4_fkfBfEC_vs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/e49afe-15ae-485a-af76-66516ffce750/1/tpQiR24a5eoNWOT4_fkfBfEC_vs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:c8:a7:04:68:85:a1:6e:eb:2d:74:47:4e:9b:02:97:6b:87:
3d:f4:a9:e0:a3:97:9d:89:8b:40:44:fa:ad:ae:c9:ea:7d:15:
6e:b3:0f:dc:fd:08:12:ea:c7:08:d1:b6:79:43:82:50:9a:34:
03:90:49:18:bf:4e:a8:1e:9b:02:06:61:c0:07:f2:05:0f:61:
47:5c:99:69:1c:36:0b:b6:46:8f:c9:e4:02:8a:9a:2b:50:d6:
39:6d:27:89:a2:0e:11:9f:2c:0b:52:95:9c:14:4d:e8:10:ca:
2d:09:a9:6e:da:e8:67:9a:d9:fd:9a:2f:8c:7a:bb:ee:c4:8d:
52:e9:2c:5f:4f:c2:c1:ea:03:0b:d4:fd:9b:a6:80:12:63:ea:
c5:59:f5:17:6e:0a:6b:49:46:19:a5:5e:c3:d5:e4:6c:e5:d1:
6a:eb:3b:29:31:35:75:e8:92:1e:97:ec:a5:5c:1e:69:34:14:
8a:db:b9:80:19:47:69:7b:40:0a:cd:64:61:4f:b4:c2:3c:50:
69:e1:73:64:f9:16:5d:70:57:1f:ee:c6:2a:45:b4:83:2b:fb:
96:48:3e:57:0b:a6:99:d3:59:2a:b7:7d:95:5e:59:71:c0:67:
9a:fa:97:55:6e:61:fd:4c:a3:b8:a9:24:fc:7b:74:d6:45:61:
5e:a7:4a:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:00:40 2025 by rpki-client