Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/a58197-eb09-4415-a61d-abd61aa82426/1/TkifZhWfd7tY0rvH5Pwd_Z3csDQ.mft
File: TkifZhWfd7tY0rvH5Pwd_Z3csDQ.mft (raw, json)
Hash identifier: j51xNY7K/fAn37bb+VBrHXX3sW7jy8DA+4gIQyFqqiM=
Subject key identifier: 29:32:88:E2:60:A1:AB:59:9E:56:F1:8A:C0:AA:29:B7:9F:0D:31:F9
Authority key identifier: 4E:48:9F:66:15:9F:77:BB:58:D2:BB:C7:E4:FC:1D:FD:9D:DC:B0:34
Certificate issuer: /CN=4e489f66159f77bb58d2bbc7e4fc1dfd9ddcb034
Certificate serial: 019A4F62131974CD362DE3D67FE198E73F36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TkifZhWfd7tY0rvH5Pwd_Z3csDQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/a58197-eb09-4415-a61d-abd61aa82426/1/TkifZhWfd7tY0rvH5Pwd_Z3csDQ.mft
Manifest number: 1709
Signing time: Tue 04 Nov 2025 15:00:18 +0000
Manifest this update: Tue 04 Nov 2025 15:00:18 +0000
Manifest next update: Wed 05 Nov 2025 15:00:18 +0000
Files and hashes: 1: TkifZhWfd7tY0rvH5Pwd_Z3csDQ.crl (hash: W2iJ8y929h5IXVyGe4E8bdJsXsjY+q1cmotmAhN8up4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/a58197-eb09-4415-a61d-abd61aa82426/1/TkifZhWfd7tY0rvH5Pwd_Z3csDQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/a58197-eb09-4415-a61d-abd61aa82426/1/TkifZhWfd7tY0rvH5Pwd_Z3csDQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/TkifZhWfd7tY0rvH5Pwd_Z3csDQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:62:13:19:74:cd:36:2d:e3:d6:7f:e1:98:e7:3f:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e489f66159f77bb58d2bbc7e4fc1dfd9ddcb034
Validity
Not Before: Nov 4 15:00:18 2025 GMT
Not After : Nov 5 15:00:18 2025 GMT
Subject: CN=293288e260a1ab599e56f18ac0aa29b79f0d31f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:20:6e:6f:84:da:74:7d:88:fd:e2:de:d3:57:
6b:a8:79:10:eb:e0:22:31:3f:13:6b:97:b8:69:59:
e3:48:65:02:a3:7a:04:69:fa:24:41:f2:1a:2b:70:
46:3a:90:bc:9d:95:13:07:9c:50:1e:3f:e2:c6:ec:
e7:f3:3a:c1:9d:08:89:68:35:28:fc:67:a1:54:d2:
48:b1:ab:42:18:31:24:5f:af:91:82:81:20:19:f4:
12:4a:c1:99:00:97:b9:15:e2:c7:63:8e:76:1d:ee:
39:9e:56:b3:a4:4b:e0:cc:41:58:1f:14:3c:59:b9:
e0:9c:cc:35:66:a5:3a:82:0f:a7:94:d5:8e:43:a0:
3d:26:cb:bc:55:54:42:b4:72:1b:7f:6d:60:50:7a:
90:a9:c2:4a:36:9c:75:38:a3:cf:f5:3b:d0:d7:4b:
eb:2a:af:30:15:a5:64:53:7f:07:bf:04:ca:94:4f:
ed:ed:aa:33:bc:ac:28:97:4a:34:99:ad:e4:53:ff:
1e:02:56:60:33:86:85:1d:89:91:09:81:1f:d3:e2:
f3:79:18:ca:de:b3:cb:ab:7f:2d:88:a8:be:3f:94:
3c:9e:26:08:0b:29:47:08:fd:db:d1:22:9e:dc:c2:
9a:9f:95:56:2e:3d:04:98:9c:76:f4:38:75:bd:73:
d3:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:32:88:E2:60:A1:AB:59:9E:56:F1:8A:C0:AA:29:B7:9F:0D:31:F9
X509v3 Authority Key Identifier:
keyid:4E:48:9F:66:15:9F:77:BB:58:D2:BB:C7:E4:FC:1D:FD:9D:DC:B0:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TkifZhWfd7tY0rvH5Pwd_Z3csDQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/a58197-eb09-4415-a61d-abd61aa82426/1/TkifZhWfd7tY0rvH5Pwd_Z3csDQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/a58197-eb09-4415-a61d-abd61aa82426/1/TkifZhWfd7tY0rvH5Pwd_Z3csDQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c2:c0:90:79:b8:ba:af:e5:38:1c:88:8a:61:64:9f:d8:e6:31:
22:f0:b9:97:da:eb:de:d3:69:14:9a:ad:b7:71:9f:6e:0d:3c:
15:af:a6:69:13:df:d3:e7:ac:70:f5:58:89:30:4d:46:67:06:
89:69:29:f7:db:fe:87:01:8f:87:bf:09:da:07:d2:e1:ac:90:
73:57:07:ec:bb:09:24:17:b6:de:c0:41:64:f7:05:fd:a5:1f:
7a:a6:d6:b6:a4:69:bf:bc:9d:77:6b:23:fe:3e:eb:a1:2f:b1:
fc:65:55:b5:44:c3:94:28:c5:ef:91:4f:03:32:57:e0:43:37:
43:87:81:6b:df:fd:d7:c4:35:e6:b0:af:cf:ce:4d:36:6b:be:
b0:91:c1:ee:88:ae:f0:b2:05:0d:c4:26:81:05:c9:1a:b5:35:
82:04:07:f3:a3:66:77:95:2d:ea:ad:81:9c:27:9e:f8:d3:8e:
f7:f3:e2:0a:eb:74:c1:ce:3b:5a:15:47:23:93:6b:65:50:e5:
4e:ab:64:11:f0:dd:95:56:65:51:8c:09:22:2b:86:68:b0:ba:
d2:53:29:c9:7f:77:00:93:25:97:29:13:03:37:09:9f:a4:35:
41:d2:28:85:74:b8:32:bb:1b:56:6e:6e:82:04:9a:69:e0:fc:
ea:51:01:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:29:14 2025 by rpki-client