Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/92062e-fd7d-4204-b56e-6a0ce52c7abd/1/TitWhe45Z_zPVK8VDpg_D4AlWpI.mft
File: TitWhe45Z_zPVK8VDpg_D4AlWpI.mft (raw, json)
Hash identifier: 4nSlA0y3u+N5KIHfvT616u/x+b6Je/SzMikf6JkpYjw=
Subject key identifier: 2F:2C:23:77:23:42:F2:E6:63:DF:3C:2D:A9:39:78:6F:07:69:A5:BE
Authority key identifier: 4E:2B:56:85:EE:39:67:FC:CF:54:AF:15:0E:98:3F:0F:80:25:5A:92
Certificate issuer: /CN=4e2b5685ee3967fccf54af150e983f0f80255a92
Certificate serial: 019A4EF458A03999EAAB457C50DCEDC2B3CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TitWhe45Z_zPVK8VDpg_D4AlWpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/92062e-fd7d-4204-b56e-6a0ce52c7abd/1/TitWhe45Z_zPVK8VDpg_D4AlWpI.mft
Manifest number: 0B01
Signing time: Tue 04 Nov 2025 13:00:27 +0000
Manifest this update: Tue 04 Nov 2025 13:00:27 +0000
Manifest next update: Wed 05 Nov 2025 13:00:27 +0000
Files and hashes: 1: TitWhe45Z_zPVK8VDpg_D4AlWpI.crl (hash: 8+eqFXzmk4K9++dEZhKElaiRzyss9p2W0V26fIJFhb8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/92062e-fd7d-4204-b56e-6a0ce52c7abd/1/TitWhe45Z_zPVK8VDpg_D4AlWpI.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/92062e-fd7d-4204-b56e-6a0ce52c7abd/1/TitWhe45Z_zPVK8VDpg_D4AlWpI.mft
rsync://rpki.ripe.net/repository/DEFAULT/TitWhe45Z_zPVK8VDpg_D4AlWpI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:58:a0:39:99:ea:ab:45:7c:50:dc:ed:c2:b3:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e2b5685ee3967fccf54af150e983f0f80255a92
Validity
Not Before: Nov 4 13:00:27 2025 GMT
Not After : Nov 5 13:00:27 2025 GMT
Subject: CN=2f2c23772342f2e663df3c2da939786f0769a5be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:9b:ba:05:cd:04:79:82:30:75:5d:f7:46:25:
3c:f9:42:03:69:f8:8e:ad:88:76:9f:b7:ea:c9:d7:
fd:f0:14:4a:95:9d:be:64:b2:10:45:82:f1:af:0d:
11:64:0c:11:02:84:b3:3a:aa:a4:63:0d:a7:39:67:
4c:91:56:f1:6f:f2:8f:e6:29:27:8f:b9:78:eb:ea:
a7:ef:d8:bf:9f:e5:d0:e2:19:6b:d6:48:42:9d:3c:
ce:04:ca:6b:4a:a4:93:61:d6:ab:ea:ac:fc:50:37:
c3:38:e4:74:1f:c3:00:fa:52:4f:e1:bd:51:4a:72:
72:32:63:7f:09:96:ac:8a:eb:01:6c:cc:f5:12:7b:
e6:49:27:dd:4a:ee:cd:a2:7a:8c:43:74:bc:63:e3:
34:72:81:6e:76:25:84:b6:0e:cf:9d:6a:ae:a3:df:
e4:52:cf:2d:68:8a:6d:1d:51:77:8f:84:4e:87:17:
c4:36:ef:62:cf:34:fe:3b:e2:ae:33:17:7a:cc:f0:
1d:90:29:f0:1c:65:32:78:47:bd:8a:76:ed:75:7d:
f0:2d:1d:dc:f8:37:e5:c0:c2:af:e8:51:c5:1a:84:
53:bd:64:01:35:4b:83:6e:9f:d1:bc:39:be:a2:83:
3a:93:3f:72:2c:59:de:88:1d:58:2d:14:1d:20:ac:
b8:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:2C:23:77:23:42:F2:E6:63:DF:3C:2D:A9:39:78:6F:07:69:A5:BE
X509v3 Authority Key Identifier:
keyid:4E:2B:56:85:EE:39:67:FC:CF:54:AF:15:0E:98:3F:0F:80:25:5A:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TitWhe45Z_zPVK8VDpg_D4AlWpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/92062e-fd7d-4204-b56e-6a0ce52c7abd/1/TitWhe45Z_zPVK8VDpg_D4AlWpI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/92062e-fd7d-4204-b56e-6a0ce52c7abd/1/TitWhe45Z_zPVK8VDpg_D4AlWpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:02:5c:ca:2e:3c:87:c3:7f:60:63:7e:dc:ed:eb:43:62:20:
f4:7b:bd:9a:02:4b:79:ba:1b:b3:6d:41:ec:c3:ce:bc:1b:f6:
31:0d:3b:03:a3:e6:d8:73:7c:26:f3:f5:64:6b:ca:53:35:b3:
91:e7:0b:47:b4:9f:89:b6:c6:e1:d6:11:23:48:f4:cc:85:1f:
32:2d:ed:12:71:df:ad:90:c7:ea:a9:2f:66:8a:9e:65:43:b2:
79:44:08:23:17:52:73:99:da:d2:d1:6c:5d:5e:c2:c0:49:18:
3d:6c:1f:50:8f:70:dd:b1:2b:ae:94:7f:17:ab:22:3e:0b:f6:
91:12:b4:a3:4c:10:18:22:8e:05:63:78:59:3c:1f:61:ba:00:
47:a9:d7:96:09:1b:19:ff:7c:be:65:bc:23:88:a7:fd:e0:55:
f8:ac:d6:8f:67:e9:6e:d7:93:11:05:f4:57:01:db:51:6c:9d:
39:3e:f1:34:1c:a1:5a:4b:19:48:89:01:a5:ee:1c:dc:6f:ef:
4a:d9:18:09:7b:50:63:83:cd:a7:75:2a:c9:bd:9e:c5:9c:64:
3e:02:21:c3:a2:ad:54:65:49:98:46:ce:91:f0:6d:59:dc:65:
3b:f3:4c:5d:ed:3e:0a:4a:a7:fd:7f:05:8f:02:db:e3:10:77:
38:26:67:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:51:18 2025 by rpki-client