Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/6e000e-e755-47e6-99a8-354871a85c7a/1/tt41SvltyILzXBLU9fpnUHY6tyA.mft
File: tt41SvltyILzXBLU9fpnUHY6tyA.mft (raw, json)
Hash identifier: c6d2hUcW+NX+BZbrXfWX9rJV3/ZxEU+7E/FzDE/o3/4=
Subject key identifier: 49:B7:80:0E:99:F1:39:32:40:24:6E:25:8B:35:E9:DD:2A:E1:94:8E
Authority key identifier: B6:DE:35:4A:F9:6D:C8:82:F3:5C:12:D4:F5:FA:67:50:76:3A:B7:20
Certificate issuer: /CN=b6de354af96dc882f35c12d4f5fa6750763ab720
Certificate serial: 019A4EF45F8BA197ECF88EE53EE6B6F8AB1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tt41SvltyILzXBLU9fpnUHY6tyA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/6e000e-e755-47e6-99a8-354871a85c7a/1/tt41SvltyILzXBLU9fpnUHY6tyA.mft
Manifest number: 0E33
Signing time: Tue 04 Nov 2025 13:00:29 +0000
Manifest this update: Tue 04 Nov 2025 13:00:29 +0000
Manifest next update: Wed 05 Nov 2025 13:00:29 +0000
Files and hashes: 1: tt41SvltyILzXBLU9fpnUHY6tyA.crl (hash: CnNcx/E6V2vL+tCGRRfF22eJRRrO42U2ArIu/4Whq0Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/6e000e-e755-47e6-99a8-354871a85c7a/1/tt41SvltyILzXBLU9fpnUHY6tyA.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/6e000e-e755-47e6-99a8-354871a85c7a/1/tt41SvltyILzXBLU9fpnUHY6tyA.mft
rsync://rpki.ripe.net/repository/DEFAULT/tt41SvltyILzXBLU9fpnUHY6tyA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:5f:8b:a1:97:ec:f8:8e:e5:3e:e6:b6:f8:ab:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b6de354af96dc882f35c12d4f5fa6750763ab720
Validity
Not Before: Nov 4 13:00:29 2025 GMT
Not After : Nov 5 13:00:29 2025 GMT
Subject: CN=49b7800e99f1393240246e258b35e9dd2ae1948e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:5b:af:01:8a:9e:60:19:ce:32:11:da:12:40:
ae:45:3b:84:0a:01:aa:99:1c:85:4b:53:b0:cc:66:
64:90:26:32:62:a6:16:a8:c2:bd:42:10:7f:92:76:
7e:7a:8e:3d:87:96:f5:0c:5e:a9:9d:f3:89:85:4a:
f1:e8:1c:60:7e:da:25:e7:2d:34:5f:74:1e:9b:23:
b1:ae:04:aa:92:8b:d0:63:f5:6c:d8:2e:50:f8:a5:
36:5c:b3:f7:18:eb:75:f7:12:04:6a:c3:34:53:5c:
6e:7c:b7:ed:a8:ec:96:6d:ec:63:b3:ed:20:b7:6c:
3d:f2:fa:36:76:bd:dc:ba:a3:e1:ed:6e:11:96:28:
2f:e4:a9:b7:23:1c:e7:23:7a:cf:fd:27:85:4c:20:
59:25:08:f0:88:f4:41:ef:d1:db:84:8e:91:3c:68:
9c:34:89:92:70:ec:e1:08:cb:61:e4:9e:79:9d:55:
c9:7c:24:85:ca:50:17:b9:af:9c:ef:b5:12:1f:e7:
8f:9a:98:93:7a:71:0b:88:d5:63:3a:07:84:aa:17:
1b:83:95:de:f4:1b:0c:eb:02:da:b4:92:ea:00:0d:
be:73:1d:99:96:11:02:a3:22:0c:2f:27:37:93:ce:
07:2a:84:88:fa:72:84:1f:0a:d0:aa:18:9c:c7:71:
cf:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:B7:80:0E:99:F1:39:32:40:24:6E:25:8B:35:E9:DD:2A:E1:94:8E
X509v3 Authority Key Identifier:
keyid:B6:DE:35:4A:F9:6D:C8:82:F3:5C:12:D4:F5:FA:67:50:76:3A:B7:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tt41SvltyILzXBLU9fpnUHY6tyA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/6e000e-e755-47e6-99a8-354871a85c7a/1/tt41SvltyILzXBLU9fpnUHY6tyA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/6e000e-e755-47e6-99a8-354871a85c7a/1/tt41SvltyILzXBLU9fpnUHY6tyA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d0:3b:81:18:84:a7:bd:2d:e2:9f:19:8e:b7:89:6f:a3:29:3a:
e1:9b:38:57:47:65:2f:c0:57:a0:8d:8b:7e:a9:0e:29:3d:39:
02:48:76:9b:3b:34:a4:f3:e7:95:6c:b5:48:68:e1:5c:e3:78:
a5:f9:b5:28:2c:ff:c3:e6:4a:07:f8:e3:7c:93:a0:c6:b6:0e:
8c:17:e6:bd:4d:98:d8:19:5c:3b:3e:00:69:9a:6e:2b:5e:38:
09:bd:16:b8:54:72:26:a4:66:05:f0:80:e2:f8:04:03:cd:ca:
76:cb:00:46:9c:88:c0:2d:cc:6a:24:2c:a2:fc:82:8a:5d:73:
76:97:74:cf:32:38:a1:d7:7d:8e:60:26:30:40:b7:60:37:56:
5f:ab:7b:7f:da:81:95:71:12:32:19:a3:43:a7:41:3f:19:00:
cb:b9:df:1e:2e:55:4f:da:b2:62:c2:c6:0e:df:89:83:00:10:
83:e6:69:5d:63:b1:60:ec:d6:29:05:4c:aa:6a:85:32:fa:c7:
8b:e9:93:58:c1:c7:80:00:34:f6:d2:0c:dc:af:c4:a7:44:eb:
ba:d3:99:3d:4b:c7:bf:5e:3c:4b:03:3a:9d:02:f2:44:82:eb:
8d:80:49:47:d4:92:97:d4:66:34:04:4b:a4:0c:bb:38:c0:20:
f5:f6:8d:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:50:16 2025 by rpki-client