Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/51e8b5-7e2c-4008-bf83-b12eb1ceaa14/1/TNN3vorxFHipq-Jx-L3i3j0zNAg.mft
File: TNN3vorxFHipq-Jx-L3i3j0zNAg.mft (raw, json)
Hash identifier: uQvZgbkrzIL9hzwkiCmQTKSE5rWiYaFTmaX7sxHu44o=
Subject key identifier: 85:62:CE:25:BD:E5:85:7E:D9:C4:EC:B9:7D:EE:42:9C:75:A7:48:EA
Authority key identifier: 4C:D3:77:BE:8A:F1:14:78:A9:AB:E2:71:F8:BD:E2:DE:3D:33:34:08
Certificate issuer: /CN=4cd377be8af11478a9abe271f8bde2de3d333408
Certificate serial: 019A5150C9BA46CE776D7A7B4B6C048B8BCA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TNN3vorxFHipq-Jx-L3i3j0zNAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/51e8b5-7e2c-4008-bf83-b12eb1ceaa14/1/TNN3vorxFHipq-Jx-L3i3j0zNAg.mft
Manifest number: 095E
Signing time: Wed 05 Nov 2025 00:00:40 +0000
Manifest this update: Wed 05 Nov 2025 00:00:40 +0000
Manifest next update: Thu 06 Nov 2025 00:00:40 +0000
Files and hashes: 1: TNN3vorxFHipq-Jx-L3i3j0zNAg.crl (hash: ehdMePXKTkpKLqx2PXwOVB0+LmDu5dnUes1bg/Vzc4k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/51e8b5-7e2c-4008-bf83-b12eb1ceaa14/1/TNN3vorxFHipq-Jx-L3i3j0zNAg.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/51e8b5-7e2c-4008-bf83-b12eb1ceaa14/1/TNN3vorxFHipq-Jx-L3i3j0zNAg.mft
rsync://rpki.ripe.net/repository/DEFAULT/TNN3vorxFHipq-Jx-L3i3j0zNAg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 00:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:50:c9:ba:46:ce:77:6d:7a:7b:4b:6c:04:8b:8b:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4cd377be8af11478a9abe271f8bde2de3d333408
Validity
Not Before: Nov 5 00:00:40 2025 GMT
Not After : Nov 6 00:00:40 2025 GMT
Subject: CN=8562ce25bde5857ed9c4ecb97dee429c75a748ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:65:95:8f:40:4f:d8:74:35:62:df:93:4e:15:
38:0c:71:60:62:d0:a0:17:ff:e4:53:9a:e9:4c:74:
e0:28:94:46:a0:5d:5f:63:1e:6d:29:39:e9:5e:59:
86:9b:f5:e6:f7:37:94:b0:ad:94:79:37:98:8f:59:
c5:54:64:1d:ca:f3:8e:ac:f8:b5:81:ff:0a:f4:b2:
44:f1:d4:0b:15:c7:23:99:30:77:30:0f:6e:6a:3b:
0e:36:80:18:8c:0e:42:f5:9f:69:47:0f:48:27:6b:
df:4c:e5:d0:82:55:e8:28:c1:ae:3b:49:dc:7a:98:
9f:05:3f:f3:aa:18:67:c4:5a:03:18:cd:d6:05:6a:
03:23:a5:39:5e:15:b9:fd:a8:82:99:e8:2e:ad:df:
4e:13:a3:71:cc:ae:b3:4e:0a:76:8e:71:6b:dd:e8:
5b:6c:99:fb:ee:93:da:fb:03:f9:ba:d9:10:7b:a2:
8c:6b:3e:f3:fc:bf:08:60:54:16:66:fa:54:6b:8d:
5f:56:09:d1:11:8d:48:9c:65:a3:2f:5a:60:ae:00:
47:09:16:3e:ed:43:75:c6:70:81:ee:d8:87:8c:59:
21:01:90:93:49:63:d4:9a:b1:7c:5b:a7:97:04:d7:
f2:c8:3a:29:a6:b1:5e:82:d4:16:91:29:6f:41:98:
e7:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:62:CE:25:BD:E5:85:7E:D9:C4:EC:B9:7D:EE:42:9C:75:A7:48:EA
X509v3 Authority Key Identifier:
keyid:4C:D3:77:BE:8A:F1:14:78:A9:AB:E2:71:F8:BD:E2:DE:3D:33:34:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TNN3vorxFHipq-Jx-L3i3j0zNAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/51e8b5-7e2c-4008-bf83-b12eb1ceaa14/1/TNN3vorxFHipq-Jx-L3i3j0zNAg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/51e8b5-7e2c-4008-bf83-b12eb1ceaa14/1/TNN3vorxFHipq-Jx-L3i3j0zNAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:a8:42:c2:d2:bb:1d:15:c0:c6:6b:17:2a:ff:bb:e8:c0:04:
74:07:fe:b9:21:86:b1:9a:7e:11:af:64:d9:17:86:a2:e7:44:
1e:85:b3:71:9f:c2:68:0f:a3:d7:56:27:26:1c:b1:0b:1c:5d:
53:31:22:30:a8:64:2c:b5:23:75:b3:b3:d7:fd:ec:ff:d7:ca:
f6:07:59:6c:1d:96:7f:4c:c4:1f:2d:1a:30:04:93:8e:96:f7:
f6:cb:e3:3d:1e:97:2e:c8:4a:7c:e2:29:14:c7:b5:d3:67:f3:
f0:ea:ba:8a:17:20:44:00:5f:ae:6a:86:55:54:98:fc:a9:72:
52:7f:40:b6:0d:4f:01:b7:f3:26:80:8d:43:dd:6f:a5:af:28:
34:84:82:01:a0:2b:6e:ae:16:b8:53:14:59:3c:18:58:43:c1:
15:eb:06:14:a9:69:aa:a5:4e:0a:08:78:68:42:29:4d:0a:a1:
44:73:39:41:86:66:71:84:02:16:2c:ff:cf:60:67:2b:31:8a:
3f:57:60:ca:f9:80:6b:cd:fc:93:ab:57:d0:3b:0e:6f:5f:10:
3d:f7:ea:f6:ad:2d:bc:6d:18:1c:53:81:ac:e4:56:7a:15:7d:
d6:ec:82:9a:ca:36:fc:56:06:35:53:0c:f5:c9:e7:20:44:4b:
f3:42:74:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 09:00:46 2025 by rpki-client