Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/c95639-722a-4021-beeb-ac5ee625babc/1/_tPwXKP9-ef5nGXMagpnJPWTGnA.mft
File: _tPwXKP9-ef5nGXMagpnJPWTGnA.mft (raw, json)
Hash identifier: WlR4qTX8Rh9B/2wcjqlYDdqz5LS3Ct8p4L7UebC2IUc=
Subject key identifier: F8:5F:FC:A6:BA:3F:FE:E9:C8:77:53:61:31:BD:CA:B1:16:71:0F:D0
Authority key identifier: FE:D3:F0:5C:A3:FD:F9:E7:F9:9C:65:CC:6A:0A:67:24:F5:93:1A:70
Certificate issuer: /CN=fed3f05ca3fdf9e7f99c65cc6a0a6724f5931a70
Certificate serial: 019A54C0E317D4118BF3070AAB0E91476F1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_tPwXKP9-ef5nGXMagpnJPWTGnA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/c95639-722a-4021-beeb-ac5ee625babc/1/_tPwXKP9-ef5nGXMagpnJPWTGnA.mft
Manifest number: 170B
Signing time: Wed 05 Nov 2025 16:01:58 +0000
Manifest this update: Wed 05 Nov 2025 16:01:58 +0000
Manifest next update: Thu 06 Nov 2025 16:01:58 +0000
Files and hashes: 1: _tPwXKP9-ef5nGXMagpnJPWTGnA.crl (hash: bhkSFiBNlTPTlW/ZlJ/RnOZ0NOn9oBj4V27yk6xSzws=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/c95639-722a-4021-beeb-ac5ee625babc/1/_tPwXKP9-ef5nGXMagpnJPWTGnA.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/c95639-722a-4021-beeb-ac5ee625babc/1/_tPwXKP9-ef5nGXMagpnJPWTGnA.mft
rsync://rpki.ripe.net/repository/DEFAULT/_tPwXKP9-ef5nGXMagpnJPWTGnA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:54:c0:e3:17:d4:11:8b:f3:07:0a:ab:0e:91:47:6f:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fed3f05ca3fdf9e7f99c65cc6a0a6724f5931a70
Validity
Not Before: Nov 5 16:01:58 2025 GMT
Not After : Nov 6 16:01:58 2025 GMT
Subject: CN=f85ffca6ba3ffee9c877536131bdcab116710fd0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:0b:c1:db:23:8f:9a:58:09:3d:bd:6c:40:9c:
81:4a:d1:df:e3:0a:fb:6e:97:65:fe:ab:46:00:df:
46:14:1b:41:fe:27:59:17:7e:e4:54:82:5e:3f:a1:
36:38:c1:3e:2f:ee:62:7c:e9:a1:f6:d8:98:3e:ac:
02:f8:d6:9c:94:f5:5d:bb:08:c3:47:45:6d:aa:f3:
81:2a:e3:df:0c:4a:e8:90:ad:ef:1e:99:0a:fb:01:
5c:3b:d8:9f:7a:ee:16:40:ed:be:04:88:5d:11:c4:
d6:b4:84:80:e2:db:d0:79:ed:3a:31:c1:49:b2:a2:
87:5d:e5:74:bc:9e:45:b4:bf:60:38:8b:26:e4:34:
86:71:74:e2:4b:e8:ac:2d:c3:5a:f3:6d:d7:14:3e:
28:3c:3e:12:dd:db:4b:19:27:49:56:ed:ff:df:57:
d9:d2:72:ab:6a:91:e4:46:da:bd:89:d0:2a:97:6f:
b6:77:12:54:f9:19:9f:bc:fc:b1:4c:cc:2b:9c:0b:
06:25:8d:75:20:0d:4c:99:06:41:da:05:87:62:dc:
d6:60:71:d6:da:a1:f9:3c:ac:fd:58:01:14:1c:ef:
6b:a2:fd:8a:62:9d:5c:35:6a:22:60:9a:c8:c8:28:
77:5b:1f:33:c3:7b:99:95:b2:7f:99:d3:f9:f1:98:
0e:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:5F:FC:A6:BA:3F:FE:E9:C8:77:53:61:31:BD:CA:B1:16:71:0F:D0
X509v3 Authority Key Identifier:
keyid:FE:D3:F0:5C:A3:FD:F9:E7:F9:9C:65:CC:6A:0A:67:24:F5:93:1A:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_tPwXKP9-ef5nGXMagpnJPWTGnA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/c95639-722a-4021-beeb-ac5ee625babc/1/_tPwXKP9-ef5nGXMagpnJPWTGnA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/c95639-722a-4021-beeb-ac5ee625babc/1/_tPwXKP9-ef5nGXMagpnJPWTGnA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ce:37:0b:bd:4c:33:50:18:5a:84:2b:d8:5f:16:87:a3:99:82:
db:45:f2:ba:91:1b:f3:09:92:a3:9a:63:03:05:f6:54:aa:cd:
6c:6e:68:5e:c0:9b:6c:98:9f:74:15:f4:a5:af:d2:b8:30:3e:
62:a8:4a:68:02:13:8a:a0:4c:a0:f1:4d:15:51:d8:0e:63:e7:
d5:e5:fe:72:35:32:66:23:c8:71:ff:59:e1:4b:ff:5b:8e:d6:
92:4a:d7:c3:a6:92:bd:7d:7c:ab:f2:c9:8a:a6:1e:1f:e5:5c:
cb:be:f1:01:54:16:9f:bb:22:40:fc:84:24:9b:19:59:bf:43:
fb:c4:84:2a:53:58:aa:55:09:b6:79:8f:50:a9:04:3f:0d:95:
7e:95:24:90:47:90:e7:6d:c8:dc:64:ee:71:f6:90:83:be:36:
02:a8:d9:08:07:ac:1d:c6:36:f1:e9:aa:e4:3f:79:88:f9:16:
69:4d:42:e3:b6:d6:34:48:8a:25:5a:1e:87:80:05:34:a9:d0:
6d:cf:ba:6a:94:c7:05:20:29:aa:e1:62:89:cc:49:91:2b:f9:
91:2d:e2:53:f3:dd:87:d3:cc:51:f2:73:cc:90:23:c7:58:dd:
9c:8f:1c:c0:e3:8c:b5:be:a6:cd:4f:24:fa:63:cb:47:16:e7:
21:0c:51:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 21:41:39 2025 by rpki-client