Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/7104d4-7414-49d2-9b84-8b1a093c8c5c/1/TVP4paBndE6P43yXwcxLiH7axyA.mft
File: TVP4paBndE6P43yXwcxLiH7axyA.mft (raw, json)
Hash identifier: ksKB1uvwddYX2msl5waOQM/JVCnoNladUuY0WIoIrlk=
Subject key identifier: C6:11:F3:66:61:55:41:04:1A:33:8D:7C:7C:07:3F:87:FA:50:59:9B
Authority key identifier: 4D:53:F8:A5:A0:67:74:4E:8F:E3:7C:97:C1:CC:4B:88:7E:DA:C7:20
Certificate issuer: /CN=4d53f8a5a067744e8fe37c97c1cc4b887edac720
Certificate serial: 019A4D73CF3507D361DEB4DFC2A6C8889C05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TVP4paBndE6P43yXwcxLiH7axyA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/7104d4-7414-49d2-9b84-8b1a093c8c5c/1/TVP4paBndE6P43yXwcxLiH7axyA.mft
Manifest number: 164C
Signing time: Tue 04 Nov 2025 06:00:26 +0000
Manifest this update: Tue 04 Nov 2025 06:00:26 +0000
Manifest next update: Wed 05 Nov 2025 06:00:26 +0000
Files and hashes: 1: TVP4paBndE6P43yXwcxLiH7axyA.crl (hash: OCl3JE4XUlEMuzyRQCriXMciCFEPUt9Y9m8m6L74uaQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/7104d4-7414-49d2-9b84-8b1a093c8c5c/1/TVP4paBndE6P43yXwcxLiH7axyA.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/7104d4-7414-49d2-9b84-8b1a093c8c5c/1/TVP4paBndE6P43yXwcxLiH7axyA.mft
rsync://rpki.ripe.net/repository/DEFAULT/TVP4paBndE6P43yXwcxLiH7axyA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 06:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:73:cf:35:07:d3:61:de:b4:df:c2:a6:c8:88:9c:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d53f8a5a067744e8fe37c97c1cc4b887edac720
Validity
Not Before: Nov 4 06:00:26 2025 GMT
Not After : Nov 5 06:00:26 2025 GMT
Subject: CN=c611f366615541041a338d7c7c073f87fa50599b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:7f:3f:37:f8:db:25:ae:0a:c8:0d:8a:49:d3:
1b:66:3e:74:1a:69:38:6d:09:ff:c7:2d:a5:9f:d8:
91:09:d6:25:bf:3e:63:56:93:57:16:d6:55:0d:05:
d7:3b:9a:f4:88:f6:fc:bd:f5:14:90:4c:c9:01:97:
fc:c7:18:8c:27:e0:5a:90:6a:bc:0f:9d:2f:7b:7f:
ba:08:62:db:4d:fb:b5:fe:eb:72:6e:e5:7a:a2:dc:
49:5b:a7:1d:44:cd:e1:70:82:15:b0:bd:d9:5f:fc:
c5:5b:57:b9:8c:18:36:90:25:b8:62:61:95:af:02:
d3:41:03:fb:46:fd:0a:ad:df:77:58:91:43:22:2c:
74:7c:7a:ec:0f:ee:57:a6:15:ed:9e:ba:2a:b3:4a:
c9:9e:5e:0b:1f:d0:2f:27:27:f8:15:62:5e:a1:04:
e2:0e:88:ff:95:90:c6:42:83:70:d9:0f:26:c8:e5:
ae:35:4c:a9:e1:45:36:3c:19:cd:b1:ab:7b:d4:ae:
e5:79:1f:cc:b1:8e:e0:9c:37:11:41:bd:30:4b:10:
80:79:19:af:a3:ce:2d:26:ce:8b:38:cb:bd:dd:ec:
61:58:1f:f7:ed:ef:7c:d4:55:ce:6d:9c:98:d6:de:
f9:94:36:59:c1:29:b3:f4:3a:07:f1:4a:73:fc:a6:
a1:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:11:F3:66:61:55:41:04:1A:33:8D:7C:7C:07:3F:87:FA:50:59:9B
X509v3 Authority Key Identifier:
keyid:4D:53:F8:A5:A0:67:74:4E:8F:E3:7C:97:C1:CC:4B:88:7E:DA:C7:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TVP4paBndE6P43yXwcxLiH7axyA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/7104d4-7414-49d2-9b84-8b1a093c8c5c/1/TVP4paBndE6P43yXwcxLiH7axyA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/7104d4-7414-49d2-9b84-8b1a093c8c5c/1/TVP4paBndE6P43yXwcxLiH7axyA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:fc:d8:50:81:d7:cb:97:98:a1:35:13:5c:f2:dc:b5:5b:db:
98:b5:61:04:00:c0:8b:fb:99:c1:d7:2a:2e:27:f0:d3:65:89:
9b:c5:b2:cf:0d:3c:82:34:34:a5:f1:ae:bb:d5:e4:c6:b8:b3:
cb:50:19:81:a1:84:71:56:fa:4b:e9:ce:6e:e1:61:48:a1:dc:
ba:ee:17:ec:ae:25:91:92:79:c6:3c:34:45:97:e6:a6:8a:33:
82:bd:36:2a:4c:3d:f2:e7:1a:86:b4:f5:54:22:29:13:f1:af:
9a:89:dc:65:56:15:bd:79:03:0b:e0:f3:97:0d:16:6c:4a:38:
68:98:c0:54:07:3e:26:10:d2:67:c9:07:2f:16:02:59:2a:35:
06:6c:ad:c9:3b:73:1d:ae:2f:4a:9e:c9:3a:05:a9:43:ae:80:
7b:d4:9d:e7:c9:25:c7:2a:d7:77:4b:7f:36:d0:d4:2f:b1:6a:
41:47:1f:b4:bd:7d:52:04:bc:67:30:f8:1a:78:72:1a:f4:8e:
f6:ba:04:d6:4d:07:6d:49:6d:2e:6a:89:48:f0:ba:03:da:87:
07:54:98:86:72:4d:b1:51:b0:a2:f7:1d:e1:bc:2b:d1:d2:5d:
62:61:76:3d:54:7e:06:d1:c0:89:9c:b4:b1:65:20:db:b4:01:
aa:b0:37:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:41:51 2025 by rpki-client