Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/e2451c-e31c-4c30-86f2-0e516f9c4d45/1/_tvrNJcjK29ayaJodTchEBWihxA.mft
File: _tvrNJcjK29ayaJodTchEBWihxA.mft (raw, json)
Hash identifier: m1aqRHpkH27zvW3YH1pmPiq1kfplu3VU3iOQ03+W31o=
Subject key identifier: AB:34:27:EC:E8:9B:40:68:7C:A4:0F:F0:EE:1C:6E:0B:F2:BE:9A:1B
Authority key identifier: FE:DB:EB:34:97:23:2B:6F:5A:C9:A2:68:75:37:21:10:15:A2:87:10
Certificate issuer: /CN=fedbeb3497232b6f5ac9a2687537211015a28710
Certificate serial: 019A52D24B0D4062E9ABE401070D5AE6CB97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_tvrNJcjK29ayaJodTchEBWihxA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/e2451c-e31c-4c30-86f2-0e516f9c4d45/1/_tvrNJcjK29ayaJodTchEBWihxA.mft
Manifest number: 170D
Signing time: Wed 05 Nov 2025 07:01:44 +0000
Manifest this update: Wed 05 Nov 2025 07:01:44 +0000
Manifest next update: Thu 06 Nov 2025 07:01:44 +0000
Files and hashes: 1: _tvrNJcjK29ayaJodTchEBWihxA.crl (hash: y28QaqtXsCxP3Wt6EXzRnFJqSmkbHSBMOxLHanvW4H0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/e2451c-e31c-4c30-86f2-0e516f9c4d45/1/_tvrNJcjK29ayaJodTchEBWihxA.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/e2451c-e31c-4c30-86f2-0e516f9c4d45/1/_tvrNJcjK29ayaJodTchEBWihxA.mft
rsync://rpki.ripe.net/repository/DEFAULT/_tvrNJcjK29ayaJodTchEBWihxA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:d2:4b:0d:40:62:e9:ab:e4:01:07:0d:5a:e6:cb:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fedbeb3497232b6f5ac9a2687537211015a28710
Validity
Not Before: Nov 5 07:01:44 2025 GMT
Not After : Nov 6 07:01:44 2025 GMT
Subject: CN=ab3427ece89b40687ca40ff0ee1c6e0bf2be9a1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:71:f0:f8:cd:df:20:7b:1e:fd:10:87:65:f6:
a5:7d:c2:c7:99:29:6e:84:d4:4f:85:20:bf:c6:13:
4a:8c:5d:e3:07:d8:01:60:d9:01:06:88:a9:03:1d:
1e:19:09:ca:7c:29:ac:44:ad:f3:3e:70:50:73:73:
b3:b7:d4:7f:96:cf:87:9a:72:59:7d:20:f7:f7:44:
aa:12:a9:50:7c:e5:59:2b:1c:55:c3:ca:2d:35:cd:
fe:e6:da:8c:61:7d:44:9c:f3:74:8d:14:d8:ce:50:
4f:7f:35:a6:e5:7e:e6:41:c7:bb:d1:e7:4f:cb:ae:
82:b1:83:02:3c:32:3a:53:d9:9f:f0:eb:d2:d9:a2:
6c:0d:cf:10:3d:73:ff:97:f2:ca:cc:9c:b0:ee:02:
0e:42:99:22:80:7c:7e:fe:f9:25:cf:01:45:6f:24:
ae:9a:40:35:84:d0:c3:25:27:80:b9:b0:2d:50:57:
18:88:e7:b1:92:62:c2:8b:79:d3:3c:d0:9b:2b:2e:
c2:2b:13:ba:64:c8:a3:6b:43:77:a2:a1:d4:6b:7e:
91:0a:9f:09:ff:c4:e9:7d:5b:6c:2d:37:77:72:c6:
45:9f:57:9f:5f:31:e1:6d:92:78:da:ea:63:1c:da:
e3:15:6f:da:f2:31:d2:ea:29:8a:9c:f5:ae:69:0c:
c5:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:34:27:EC:E8:9B:40:68:7C:A4:0F:F0:EE:1C:6E:0B:F2:BE:9A:1B
X509v3 Authority Key Identifier:
keyid:FE:DB:EB:34:97:23:2B:6F:5A:C9:A2:68:75:37:21:10:15:A2:87:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_tvrNJcjK29ayaJodTchEBWihxA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/e2451c-e31c-4c30-86f2-0e516f9c4d45/1/_tvrNJcjK29ayaJodTchEBWihxA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/e2451c-e31c-4c30-86f2-0e516f9c4d45/1/_tvrNJcjK29ayaJodTchEBWihxA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:81:f3:29:f1:52:7d:df:b9:b1:57:b0:5f:7e:bd:80:3a:67:
f4:b4:6d:c6:70:8e:a2:b8:13:ce:c9:4d:26:af:5d:e9:bd:dc:
61:41:e6:11:0a:52:bc:c6:17:c9:f6:c5:af:79:af:29:d4:e9:
8c:05:e4:3b:cc:55:3c:a0:3b:cb:14:24:1f:38:29:2d:af:37:
7f:4e:dc:78:d5:9a:42:1a:36:3a:a8:69:8b:87:e9:1b:33:d5:
cf:11:af:4a:58:5a:1f:f8:be:1b:4e:5d:0e:bf:09:e5:18:ca:
a3:69:5f:51:2d:74:05:2e:14:a4:59:37:2d:85:d9:96:cc:66:
ec:18:61:a7:84:6c:40:b7:28:b2:9b:64:18:c7:f0:b4:c1:e1:
6c:ce:3e:f0:17:58:f2:77:c0:31:3d:cb:e2:68:b4:55:13:3a:
17:3e:f1:2c:00:74:ee:d5:81:47:4b:52:ff:38:6e:a0:be:5e:
a8:f8:51:4f:30:bf:4e:84:62:a0:6e:f6:7f:d8:6a:6c:ed:bf:
6c:5f:a3:19:62:bf:42:2d:46:83:fb:db:85:cf:32:42:eb:ca:
11:c9:ae:79:c9:75:3d:28:f8:77:2e:2f:a3:7d:7d:3a:9d:c5:
4f:d5:fb:e4:db:02:87:7e:be:16:92:6d:6c:6d:f0:50:c0:ca:
a2:c1:81:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 11:15:40 2025 by rpki-client