Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/887501-4d8e-4beb-9590-65079b75868a/1/TTpxp39MqbpTb5hhKpxW1AwMO50.mft
File: TTpxp39MqbpTb5hhKpxW1AwMO50.mft (raw, json)
Hash identifier: apUYuBVPZtAeu5jcvJTW8PnleIYbPXyEO2Asa9txQsY=
Subject key identifier: 01:B7:14:10:BB:C7:02:43:B9:8A:84:07:12:7A:BE:3A:C2:F3:20:E8
Authority key identifier: 4D:3A:71:A7:7F:4C:A9:BA:53:6F:98:61:2A:9C:56:D4:0C:0C:3B:9D
Certificate issuer: /CN=4d3a71a77f4ca9ba536f98612a9c56d40c0c3b9d
Certificate serial: 019A4EF4726CB2B6A5CAF6C41640E0481A8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TTpxp39MqbpTb5hhKpxW1AwMO50.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/887501-4d8e-4beb-9590-65079b75868a/1/TTpxp39MqbpTb5hhKpxW1AwMO50.mft
Manifest number: 170A
Signing time: Tue 04 Nov 2025 13:00:34 +0000
Manifest this update: Tue 04 Nov 2025 13:00:34 +0000
Manifest next update: Wed 05 Nov 2025 13:00:34 +0000
Files and hashes: 1: TTpxp39MqbpTb5hhKpxW1AwMO50.crl (hash: /TqaXbLgCiBxnZeSvZG1Gi/ep0wkcfCUrWz2tFZDNmo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/887501-4d8e-4beb-9590-65079b75868a/1/TTpxp39MqbpTb5hhKpxW1AwMO50.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/887501-4d8e-4beb-9590-65079b75868a/1/TTpxp39MqbpTb5hhKpxW1AwMO50.mft
rsync://rpki.ripe.net/repository/DEFAULT/TTpxp39MqbpTb5hhKpxW1AwMO50.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:72:6c:b2:b6:a5:ca:f6:c4:16:40:e0:48:1a:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d3a71a77f4ca9ba536f98612a9c56d40c0c3b9d
Validity
Not Before: Nov 4 13:00:34 2025 GMT
Not After : Nov 5 13:00:34 2025 GMT
Subject: CN=01b71410bbc70243b98a8407127abe3ac2f320e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:02:ff:60:b6:6a:ad:69:ab:d3:80:5f:3f:a8:
3d:6f:0e:ec:78:5f:9f:4b:14:89:0e:7b:9b:a8:3c:
6e:44:9b:3b:21:f4:94:ed:e0:91:a8:f5:b9:94:52:
b9:3a:b1:bf:23:f8:17:46:01:8c:86:fa:69:f9:5e:
20:0b:00:d8:0c:23:80:03:c9:f1:18:46:81:22:3f:
d0:af:bc:bd:80:b2:79:5a:41:51:8d:f4:d4:a4:f8:
8d:7f:67:1d:dd:8a:ef:3e:12:83:cf:7c:81:e6:d0:
b8:de:88:58:18:0f:14:a2:08:49:6c:4a:0b:fb:e7:
68:2f:2d:de:5c:29:9c:3e:26:07:d1:5b:d2:87:75:
6d:31:a0:6d:1e:6c:8e:f7:2b:94:a3:27:57:ae:83:
f9:13:e4:ab:16:0a:15:bc:f8:19:5d:50:86:fb:d4:
a7:35:41:93:fb:b7:10:90:f3:d4:b2:96:3e:f2:78:
fa:ca:04:ec:e2:1f:fa:17:f0:fc:76:d1:33:f2:38:
8b:f8:81:9b:1f:1c:47:b7:de:31:e7:57:a1:c7:60:
4a:fb:9e:f3:fb:b3:ed:dc:6a:60:54:d8:83:f2:d3:
e1:20:e0:c8:f4:88:08:5e:9d:ed:e2:fd:5d:96:9d:
df:5d:05:2d:fd:63:90:50:42:93:20:2e:28:21:d2:
53:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:B7:14:10:BB:C7:02:43:B9:8A:84:07:12:7A:BE:3A:C2:F3:20:E8
X509v3 Authority Key Identifier:
keyid:4D:3A:71:A7:7F:4C:A9:BA:53:6F:98:61:2A:9C:56:D4:0C:0C:3B:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TTpxp39MqbpTb5hhKpxW1AwMO50.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/887501-4d8e-4beb-9590-65079b75868a/1/TTpxp39MqbpTb5hhKpxW1AwMO50.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/887501-4d8e-4beb-9590-65079b75868a/1/TTpxp39MqbpTb5hhKpxW1AwMO50.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:19:be:58:61:f5:39:b2:3c:2e:34:b8:bb:91:16:08:da:b3:
af:e2:fe:99:21:af:eb:f4:9f:c2:ab:a7:11:e3:34:b1:f4:6d:
b4:ee:b7:66:1b:0e:d5:71:59:7a:1f:b7:23:49:76:df:2d:fa:
1c:f8:75:29:c4:97:f6:e2:c3:81:71:15:5f:11:3e:f8:67:f6:
88:ad:fb:1d:72:cd:6a:58:1a:81:e9:a4:f7:01:af:46:f7:e7:
24:80:dc:b9:75:69:fa:c2:7c:71:f5:de:b3:9a:1e:af:2a:95:
e0:e8:20:43:af:bc:25:f9:02:76:c3:58:ed:a3:1b:66:78:85:
93:a5:4f:ff:e0:e6:94:89:bc:00:3c:73:a5:51:6d:79:36:ee:
2b:0a:ce:99:9b:4a:cd:17:28:3c:e5:42:66:02:69:3c:c6:4b:
bb:ea:74:a0:c6:81:d3:b1:2b:8f:46:e9:38:49:68:0a:f6:d7:
55:19:b4:33:8d:e3:0c:81:2c:2c:3b:79:df:e5:93:82:34:bb:
0c:36:58:0e:2d:94:d0:33:4b:c6:a3:7e:1b:bf:af:35:a0:84:
3b:4e:e8:a4:1b:fe:3c:15:01:45:2c:6d:a6:36:c4:a6:68:b0:
71:3d:f1:94:af:36:06:70:a0:bd:56:dd:26:45:8b:78:bc:57:
22:e6:d7:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:06:38 2025 by rpki-client