Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/fdff01-762f-43a9-a4be-7bb1844014d6/1/tT8fJDLiJL3km_qxn2dTYpq1cH8.mft
File: tT8fJDLiJL3km_qxn2dTYpq1cH8.mft (raw, json)
Hash identifier: cAq96WbnLWUqleCao63C2N49FJSP228Y9MAn794LsuI=
Subject key identifier: 01:7C:20:82:69:55:31:0F:AE:F2:6B:3F:A5:E7:DC:E0:AF:1D:FB:7C
Authority key identifier: B5:3F:1F:24:32:E2:24:BD:E4:9B:FA:B1:9F:67:53:62:9A:B5:70:7F
Certificate issuer: /CN=b53f1f2432e224bde49bfab19f6753629ab5707f
Certificate serial: 019A4D07A7DBC87841E18D95257A3DAABAAF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tT8fJDLiJL3km_qxn2dTYpq1cH8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/fdff01-762f-43a9-a4be-7bb1844014d6/1/tT8fJDLiJL3km_qxn2dTYpq1cH8.mft
Manifest number: 0D69
Signing time: Tue 04 Nov 2025 04:02:18 +0000
Manifest this update: Tue 04 Nov 2025 04:02:18 +0000
Manifest next update: Wed 05 Nov 2025 04:02:18 +0000
Files and hashes: 1: tT8fJDLiJL3km_qxn2dTYpq1cH8.crl (hash: JbLEtO+2ISR3TIrn0Eg2nvmvMqdg+f3Fo284Pvwpxpg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/fdff01-762f-43a9-a4be-7bb1844014d6/1/tT8fJDLiJL3km_qxn2dTYpq1cH8.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/fdff01-762f-43a9-a4be-7bb1844014d6/1/tT8fJDLiJL3km_qxn2dTYpq1cH8.mft
rsync://rpki.ripe.net/repository/DEFAULT/tT8fJDLiJL3km_qxn2dTYpq1cH8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 04:02:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:07:a7:db:c8:78:41:e1:8d:95:25:7a:3d:aa:ba:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b53f1f2432e224bde49bfab19f6753629ab5707f
Validity
Not Before: Nov 4 04:02:18 2025 GMT
Not After : Nov 5 04:02:18 2025 GMT
Subject: CN=017c20826955310faef26b3fa5e7dce0af1dfb7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:f7:62:db:ad:55:c0:0e:e6:4f:5e:4e:a8:d7:
6e:69:fc:f9:f4:85:2f:a0:b7:5a:cb:c7:d2:5b:51:
61:7a:fc:70:98:fc:d9:54:ba:db:e0:82:3d:89:72:
d7:4f:67:5b:5e:7e:bc:4f:e7:73:a0:70:58:0c:cf:
c7:c1:64:52:f5:ad:f0:08:e8:92:b0:b4:42:3f:77:
93:f3:b7:ef:d6:17:77:da:c0:43:e8:99:28:44:b2:
9d:88:4d:3f:30:91:8b:83:df:da:59:66:f7:e2:c6:
f6:b7:fe:49:6b:c8:cc:20:65:aa:92:f5:a8:08:37:
19:ce:18:1a:ba:c0:c1:67:0d:bc:cd:87:8e:66:2c:
79:f2:45:ef:84:35:9c:2f:0e:40:98:c5:9b:d6:ae:
b0:45:9a:cb:d0:8c:5f:9d:19:39:a7:16:f6:d9:9e:
1a:c7:ec:3f:45:bd:2a:82:a8:b6:77:15:9b:d1:28:
0b:ae:5f:77:78:f6:29:3a:49:92:e9:cb:33:b8:83:
b3:64:fd:83:eb:9f:dd:28:7c:23:cb:9f:47:29:4a:
7a:cb:6e:2e:0f:d3:2b:c7:e6:1a:ba:20:69:97:9c:
19:36:ed:55:86:33:8b:45:69:f7:4b:b8:30:eb:42:
35:37:0f:7c:86:f1:f0:40:d5:ff:e3:3e:33:43:c9:
c9:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:7C:20:82:69:55:31:0F:AE:F2:6B:3F:A5:E7:DC:E0:AF:1D:FB:7C
X509v3 Authority Key Identifier:
keyid:B5:3F:1F:24:32:E2:24:BD:E4:9B:FA:B1:9F:67:53:62:9A:B5:70:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tT8fJDLiJL3km_qxn2dTYpq1cH8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/fdff01-762f-43a9-a4be-7bb1844014d6/1/tT8fJDLiJL3km_qxn2dTYpq1cH8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/fdff01-762f-43a9-a4be-7bb1844014d6/1/tT8fJDLiJL3km_qxn2dTYpq1cH8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:b2:f0:76:79:ac:c4:49:86:6e:7a:ac:e5:d2:08:80:ed:b7:
5c:ac:a1:74:43:3f:5b:75:fe:d6:f3:27:36:d3:b6:87:11:6c:
b6:32:d0:ba:24:3e:27:a4:53:e7:1a:c2:c0:4d:7c:44:ac:4a:
ea:d8:a3:c6:5d:5d:5d:e4:8b:90:2d:06:9c:71:bd:f8:5c:75:
00:1b:cf:c7:e1:75:78:8d:6f:4a:18:07:df:50:e6:1e:a5:13:
43:cb:0e:1c:7d:05:19:d5:ca:ea:c0:f7:2c:09:57:d7:6f:6c:
ea:fa:d7:ab:cd:b8:74:39:9d:63:9a:1d:fa:96:bb:c8:ae:a0:
27:e6:6a:b1:63:41:9e:62:29:9b:f4:f1:fd:5f:83:4f:b8:09:
22:c8:32:63:90:44:45:ae:a6:98:86:d9:9d:06:3f:9d:0e:6a:
04:91:bf:86:1a:6f:37:4a:d1:81:37:38:b6:f8:ae:76:cf:3f:
6e:e2:13:df:74:97:36:e4:80:ef:34:e4:1e:47:1e:ad:e4:0a:
14:23:e1:43:4e:9a:6f:84:ed:83:40:0d:ec:03:88:05:bf:8c:
0f:aa:56:18:f1:a6:a7:d1:18:60:60:fa:80:95:31:5b:b7:eb:
1b:d6:a2:70:d8:4d:06:85:51:fb:aa:eb:4a:e3:2a:f8:a5:90:
49:8b:0d:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:55:27 2025 by rpki-client