
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/0355f6-270c-42b8-b264-b0d7117d794f/1/T1VxCj6EBcGv2mxj6edzZu_GHnw.mft
File: T1VxCj6EBcGv2mxj6edzZu_GHnw.mft (raw, json)
Hash identifier: YChi5m9ZOCfx2bmpMGCjjUVv8X83zM2a0hfgTnjxJXA=
Subject key identifier: E7:AA:2B:19:93:8B:EF:70:80:42:50:1B:E9:54:B9:B9:72:17:E1:FA
Authority key identifier: 4F:55:71:0A:3E:84:05:C1:AF:DA:6C:63:E9:E7:73:66:EF:C6:1E:7C
Certificate issuer: /CN=4f55710a3e8405c1afda6c63e9e77366efc61e7c
Certificate serial: 019A5119A4F7FB25D4C391CD1CEE67FFE252
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T1VxCj6EBcGv2mxj6edzZu_GHnw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/0355f6-270c-42b8-b264-b0d7117d794f/1/T1VxCj6EBcGv2mxj6edzZu_GHnw.mft
Manifest number: 030F
Signing time: Tue 04 Nov 2025 23:00:26 +0000
Manifest this update: Tue 04 Nov 2025 23:00:26 +0000
Manifest next update: Wed 05 Nov 2025 23:00:26 +0000
Files and hashes: 1: T1VxCj6EBcGv2mxj6edzZu_GHnw.crl (hash: v5lEAeO+VYBkJR2DLOqO4A2YRvp1KWW02x9Q4G7EnV4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/0355f6-270c-42b8-b264-b0d7117d794f/1/T1VxCj6EBcGv2mxj6edzZu_GHnw.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/0355f6-270c-42b8-b264-b0d7117d794f/1/T1VxCj6EBcGv2mxj6edzZu_GHnw.mft
rsync://rpki.ripe.net/repository/DEFAULT/T1VxCj6EBcGv2mxj6edzZu_GHnw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:37:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:19:a4:f7:fb:25:d4:c3:91:cd:1c:ee:67:ff:e2:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f55710a3e8405c1afda6c63e9e77366efc61e7c
Validity
Not Before: Nov 4 23:00:26 2025 GMT
Not After : Nov 5 23:00:26 2025 GMT
Subject: CN=e7aa2b19938bef708042501be954b9b97217e1fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:b5:68:c0:c4:90:54:08:c0:5b:80:1a:2b:59:
01:ec:5c:c4:6c:99:f4:b0:ed:cb:8e:17:ff:29:e6:
0b:8f:4f:d2:b8:b6:2a:61:07:44:a8:08:66:15:2c:
6b:d5:57:d3:2c:e1:f5:98:3f:8a:b2:5e:06:48:cd:
ad:d1:57:ab:61:60:85:6a:d3:a8:81:2f:ff:01:12:
6f:0c:f6:8b:2d:43:a0:45:c8:e8:06:3d:46:74:b7:
97:2f:1b:e6:b5:ab:10:63:94:02:03:91:6a:13:8b:
e8:b2:e3:68:e1:3c:93:85:2d:ed:53:f0:ae:6d:b8:
00:59:19:b3:2a:f1:8e:02:e0:60:d7:94:b2:66:ff:
32:73:37:b3:5f:f9:59:0a:49:9c:19:a1:7f:d6:97:
6e:e2:05:98:39:dc:ff:83:05:db:7b:62:7d:4c:e6:
9d:b3:84:71:de:fb:42:83:9e:ba:66:f6:07:e1:83:
72:97:9e:13:fa:7e:35:db:e4:2a:e7:ad:52:ce:5e:
28:5a:5e:7f:d6:3f:36:62:fd:62:b6:b0:62:99:e6:
f7:76:0c:05:54:22:1d:0d:cf:d1:ed:df:16:b6:21:
c2:9a:ec:52:0a:e7:fd:92:23:6e:e4:2e:c8:4e:87:
38:6a:07:72:44:29:b0:da:4f:ea:16:63:41:4e:84:
24:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:AA:2B:19:93:8B:EF:70:80:42:50:1B:E9:54:B9:B9:72:17:E1:FA
X509v3 Authority Key Identifier:
keyid:4F:55:71:0A:3E:84:05:C1:AF:DA:6C:63:E9:E7:73:66:EF:C6:1E:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T1VxCj6EBcGv2mxj6edzZu_GHnw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/0355f6-270c-42b8-b264-b0d7117d794f/1/T1VxCj6EBcGv2mxj6edzZu_GHnw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/0355f6-270c-42b8-b264-b0d7117d794f/1/T1VxCj6EBcGv2mxj6edzZu_GHnw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:b5:64:65:e4:57:da:45:ec:b3:4b:30:f5:90:b3:f6:82:7b:
65:2e:15:c3:1f:29:20:3b:dc:57:86:fe:f1:e9:ba:6b:c8:bf:
bb:46:22:a1:7b:22:3b:a7:2b:2b:fb:90:23:7f:74:52:c0:09:
85:1a:df:83:2d:4f:54:21:b6:42:a7:74:ab:e5:b3:cf:40:e2:
9f:93:80:dd:6a:d4:83:de:1d:f8:a8:1f:11:cf:4e:a8:cd:78:
ed:a3:7b:2f:45:24:94:46:b0:c5:ee:7f:33:70:9e:36:c1:76:
3f:ca:c4:ca:2e:d8:8e:f6:89:cf:4c:6a:ca:96:85:2d:6d:82:
6d:78:ed:91:83:f8:19:c7:20:a1:0f:5e:66:aa:4b:a3:69:11:
a8:7d:ce:38:08:67:8a:a3:e2:ef:54:f3:7a:a9:28:24:af:dc:
d6:6b:1d:ab:53:55:e5:87:f5:70:ff:be:d0:9d:5d:d4:3b:ac:
49:f5:08:0b:2f:81:bf:40:46:4a:04:1c:92:52:7d:31:b2:18:
db:c4:99:c5:19:09:b8:b1:d3:1d:94:98:45:16:5e:d0:4e:00:
19:af:75:af:c6:c4:0e:26:85:5f:71:52:0b:24:aa:51:3f:9d:
6d:33:7c:04:cf:38:bd:29:ad:2f:fb:1a:60:0c:34:20:7c:ed:
7f:01:75:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 05:52:27 2025 by rpki-client