Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/6f40dd-4c07-405b-a042-f9250dd79fe9/1/TNcQtlNz4NkQ2nBjb8FDwGul3aw.mft
File: TNcQtlNz4NkQ2nBjb8FDwGul3aw.mft (raw, json)
Hash identifier: +C/YntFQx2QEs+A1yc6OA07Ka8r9q5cueGl6DemGtTU=
Subject key identifier: 74:4A:FD:2E:31:0E:CF:08:B9:C3:3A:04:C8:7C:6C:87:02:16:06:D2
Authority key identifier: 4C:D7:10:B6:53:73:E0:D9:10:DA:70:63:6F:C1:43:C0:6B:A5:DD:AC
Certificate issuer: /CN=4cd710b65373e0d910da70636fc143c06ba5ddac
Certificate serial: 019A51507CB19DC69C7E4DA0CF64BF9E50B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TNcQtlNz4NkQ2nBjb8FDwGul3aw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/6f40dd-4c07-405b-a042-f9250dd79fe9/1/TNcQtlNz4NkQ2nBjb8FDwGul3aw.mft
Manifest number: 1664
Signing time: Wed 05 Nov 2025 00:00:20 +0000
Manifest this update: Wed 05 Nov 2025 00:00:20 +0000
Manifest next update: Thu 06 Nov 2025 00:00:20 +0000
Files and hashes: 1: TNcQtlNz4NkQ2nBjb8FDwGul3aw.crl (hash: 3ial2nUMewzw1SMp0h7p7XYQ+uxIiIA/5p3SB++32mY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/6f40dd-4c07-405b-a042-f9250dd79fe9/1/TNcQtlNz4NkQ2nBjb8FDwGul3aw.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/6f40dd-4c07-405b-a042-f9250dd79fe9/1/TNcQtlNz4NkQ2nBjb8FDwGul3aw.mft
rsync://rpki.ripe.net/repository/DEFAULT/TNcQtlNz4NkQ2nBjb8FDwGul3aw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:50:7c:b1:9d:c6:9c:7e:4d:a0:cf:64:bf:9e:50:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4cd710b65373e0d910da70636fc143c06ba5ddac
Validity
Not Before: Nov 5 00:00:20 2025 GMT
Not After : Nov 6 00:00:20 2025 GMT
Subject: CN=744afd2e310ecf08b9c33a04c87c6c87021606d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:c2:95:4b:b9:8d:11:40:b0:03:ba:24:10:d4:
80:78:04:34:50:59:58:3a:bf:44:f0:cb:29:83:d7:
18:3e:56:e1:74:cf:45:dd:02:27:9e:c5:d3:18:84:
12:a3:dd:d7:26:91:f9:95:46:e0:28:8c:84:e3:9f:
5c:47:94:3c:f3:7d:bb:d1:c5:77:33:03:98:18:50:
3a:eb:c9:b5:55:bf:91:f1:05:1c:9a:38:2e:0a:ab:
73:4f:59:dd:ef:6a:f4:fe:2f:fc:05:31:e5:1b:df:
cf:b4:a6:8e:dc:45:5f:de:2c:62:f6:07:76:57:4c:
28:cb:fe:c9:0b:37:88:a4:18:8e:ce:e7:79:af:68:
f3:9e:82:8a:13:03:1f:80:1e:b3:50:00:f2:a5:07:
10:38:0a:9a:92:11:37:c4:12:c6:fb:97:94:9b:0b:
7f:d2:90:06:ac:aa:ba:f2:b1:5c:a2:a7:11:2c:24:
52:55:0b:42:d0:e1:5d:aa:66:cb:25:0b:b0:f2:89:
38:10:d3:1f:1c:7c:2a:f6:7a:1d:6f:01:41:48:60:
d3:64:41:31:ac:88:41:1f:53:00:c6:89:ea:f2:42:
75:cf:27:78:7e:e6:c8:a3:d6:36:87:3e:f7:a0:01:
2f:d5:0a:26:76:0a:04:e2:8d:c4:2d:2d:8e:c8:8b:
12:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:4A:FD:2E:31:0E:CF:08:B9:C3:3A:04:C8:7C:6C:87:02:16:06:D2
X509v3 Authority Key Identifier:
keyid:4C:D7:10:B6:53:73:E0:D9:10:DA:70:63:6F:C1:43:C0:6B:A5:DD:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TNcQtlNz4NkQ2nBjb8FDwGul3aw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/6f40dd-4c07-405b-a042-f9250dd79fe9/1/TNcQtlNz4NkQ2nBjb8FDwGul3aw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/6f40dd-4c07-405b-a042-f9250dd79fe9/1/TNcQtlNz4NkQ2nBjb8FDwGul3aw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:22:b2:fb:7e:a9:3e:85:e6:13:47:87:e9:46:39:d7:2e:b6:
fc:81:07:79:d6:30:55:69:41:37:49:19:f6:93:5a:45:fe:bf:
c0:0b:f3:92:81:c1:bb:85:5b:8c:ad:3c:58:96:af:90:1b:0c:
2f:8a:9a:3d:51:3f:b5:2a:9b:bc:aa:67:65:68:74:ef:2f:7b:
50:3c:47:89:9f:20:c8:85:9e:50:ff:fa:62:a1:e8:88:23:96:
30:ee:bf:d4:bf:45:74:5a:33:9b:47:82:48:ab:ad:ef:5b:75:
ae:86:6d:8e:25:8e:5d:61:80:39:37:ab:8f:77:0d:9a:d9:7e:
71:ec:ba:ee:5e:73:fe:0e:d6:88:15:c5:9a:72:06:29:0a:00:
db:11:a8:df:7a:d9:fa:fc:a7:81:d2:e7:3e:4d:2b:52:3d:77:
5d:c3:76:b9:37:50:0d:aa:ad:6d:86:d6:56:7c:68:95:f7:51:
f6:84:4a:bb:bc:52:7c:2c:06:00:71:28:06:ab:f3:ea:33:dc:
47:b6:5e:1e:5e:c7:56:6d:89:1e:59:47:87:16:7e:59:3c:15:
6d:0e:cd:ad:4d:55:e6:69:b9:0e:93:2d:f4:b6:9f:2b:f8:13:
5b:05:a1:42:01:f7:14:42:5a:7e:90:56:90:b0:58:3e:ed:db:
84:c9:d4:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 03:33:59 2025 by rpki-client