
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/9b2fc1-ba58-4957-8540-eb1ed0b487b1/1/TSE3TacxMU8KBRddJbDYmnb24IE.mft
File: TSE3TacxMU8KBRddJbDYmnb24IE.mft (raw, json)
Hash identifier: QCHW0wIGZhx9MaNlAkPlX7UKVs/jS4W254rq+7aBhmc=
Subject key identifier: A6:27:D5:6B:EA:99:E6:3A:E1:AF:78:13:66:37:72:6E:E9:CA:3E:3F
Authority key identifier: 4D:21:37:4D:A7:31:31:4F:0A:05:17:5D:25:B0:D8:9A:76:F6:E0:81
Certificate issuer: /CN=4d21374da731314f0a05175d25b0d89a76f6e081
Certificate serial: 019A5187E4C2C86B6C38AD0EE1E4E8FCD80E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TSE3TacxMU8KBRddJbDYmnb24IE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/9b2fc1-ba58-4957-8540-eb1ed0b487b1/1/TSE3TacxMU8KBRddJbDYmnb24IE.mft
Manifest number: 067D
Signing time: Wed 05 Nov 2025 01:00:51 +0000
Manifest this update: Wed 05 Nov 2025 01:00:51 +0000
Manifest next update: Thu 06 Nov 2025 01:00:51 +0000
Files and hashes: 1: TSE3TacxMU8KBRddJbDYmnb24IE.crl (hash: OJCjHf2Ppz1C3UoolJydXZQvhhp2P9ByeHIn0/oCQp0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/9b2fc1-ba58-4957-8540-eb1ed0b487b1/1/TSE3TacxMU8KBRddJbDYmnb24IE.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/9b2fc1-ba58-4957-8540-eb1ed0b487b1/1/TSE3TacxMU8KBRddJbDYmnb24IE.mft
rsync://rpki.ripe.net/repository/DEFAULT/TSE3TacxMU8KBRddJbDYmnb24IE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:37:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:87:e4:c2:c8:6b:6c:38:ad:0e:e1:e4:e8:fc:d8:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d21374da731314f0a05175d25b0d89a76f6e081
Validity
Not Before: Nov 5 01:00:51 2025 GMT
Not After : Nov 6 01:00:51 2025 GMT
Subject: CN=a627d56bea99e63ae1af78136637726ee9ca3e3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:60:1a:f4:11:12:38:3c:c4:bd:5d:99:a1:92:
a1:f8:eb:a3:97:9e:0e:b3:09:31:ff:d6:4d:31:b2:
3e:d3:d5:2e:33:98:bb:40:cf:ec:09:18:6f:33:63:
d4:a7:c5:dd:11:f2:09:ea:be:78:1b:b6:94:dc:81:
84:28:9b:78:64:c8:40:7c:d1:ba:24:b3:ee:80:90:
a2:55:bb:06:38:f1:09:f3:6f:26:9b:23:a7:2b:f9:
be:ab:35:61:b5:31:64:d3:2f:cb:a5:89:36:86:70:
42:9f:1b:48:fa:bc:d7:8a:62:95:35:a1:b5:a9:bd:
e6:a5:cb:dd:bc:f5:ea:bd:27:c2:1b:a6:dc:91:66:
b4:f7:3b:3a:60:91:45:a7:0c:57:6b:9d:b8:61:29:
b2:20:fe:13:52:bd:76:45:51:e0:bd:9a:be:4b:1e:
e4:40:31:64:08:7b:65:e0:1e:3d:02:d0:1b:ab:31:
4b:41:f4:f6:dc:4a:ed:13:3d:a4:ef:c3:91:d0:e7:
36:8c:95:cc:1b:fa:4e:f9:ee:e3:0c:2d:13:9b:b8:
4b:78:b0:86:51:48:78:c5:8b:0e:ec:eb:22:ab:99:
84:c3:47:f6:7f:2b:20:54:73:84:95:05:16:ba:d1:
45:4f:19:e7:6f:75:e4:b0:41:32:b8:9a:1a:e1:7c:
05:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:27:D5:6B:EA:99:E6:3A:E1:AF:78:13:66:37:72:6E:E9:CA:3E:3F
X509v3 Authority Key Identifier:
keyid:4D:21:37:4D:A7:31:31:4F:0A:05:17:5D:25:B0:D8:9A:76:F6:E0:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TSE3TacxMU8KBRddJbDYmnb24IE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/9b2fc1-ba58-4957-8540-eb1ed0b487b1/1/TSE3TacxMU8KBRddJbDYmnb24IE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/9b2fc1-ba58-4957-8540-eb1ed0b487b1/1/TSE3TacxMU8KBRddJbDYmnb24IE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:a4:d8:97:5c:ab:c6:69:82:3a:ee:8e:b8:43:5c:78:92:2a:
d8:4b:e5:06:7b:7c:1b:3c:b4:f2:7b:92:fa:a3:1f:e9:88:67:
43:57:be:cd:8e:3b:43:c8:a7:63:2c:4d:e0:2b:55:fe:bd:5b:
43:60:9e:bd:29:d7:ae:04:98:85:05:7c:ae:d4:31:c3:e7:2c:
58:a4:65:c4:72:c9:24:ca:ff:09:50:eb:1a:38:cd:5b:6e:ad:
b5:67:61:d0:09:44:13:de:27:3c:24:88:50:a2:df:64:a0:3f:
93:82:92:ed:14:54:60:6e:a9:10:0e:01:8c:50:17:1e:9d:f9:
86:32:20:b7:08:63:4b:0b:08:2d:09:45:cf:4f:4a:71:4b:af:
a1:1d:91:60:6b:47:c2:cf:9e:be:1b:06:82:de:10:65:be:e8:
94:98:ca:91:97:c9:0d:a5:47:23:b7:e6:02:e8:ac:de:60:f5:
87:29:9c:54:fc:de:00:a3:e2:64:44:90:75:31:31:f6:ac:d5:
a7:7f:83:b0:5b:b8:2e:e6:c1:b3:18:4f:4d:6a:b1:c6:63:c3:
e1:f9:5c:03:f2:0a:c6:3e:f6:f0:25:28:51:c1:02:ab:7c:81:
75:04:78:fa:73:4e:59:bc:5a:61:14:7b:fa:11:e2:2c:4a:28:
a8:fe:3a:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 05:24:17 2025 by rpki-client