Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/98183c-edc4-464d-bf45-8899d1058b64/1/_tSpb-HtAo1ZEtd6UAsJR4vRgyI.mft
File: _tSpb-HtAo1ZEtd6UAsJR4vRgyI.mft (raw, json)
Hash identifier: lCLXJqVTVfbQmm8YaIX8OvVyUUX3nu/tPfjheFsVhuc=
Subject key identifier: F2:30:E3:D5:1E:29:A3:59:07:56:62:C7:34:F4:F0:6C:59:7A:C3:92
Authority key identifier: FE:D4:A9:6F:E1:ED:02:8D:59:12:D7:7A:50:0B:09:47:8B:D1:83:22
Certificate issuer: /CN=fed4a96fe1ed028d5912d77a500b09478bd18322
Certificate serial: 019A522C531ECB997DFE3ED4BE862571586B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_tSpb-HtAo1ZEtd6UAsJR4vRgyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/98183c-edc4-464d-bf45-8899d1058b64/1/_tSpb-HtAo1ZEtd6UAsJR4vRgyI.mft
Manifest number: 170C
Signing time: Wed 05 Nov 2025 04:00:27 +0000
Manifest this update: Wed 05 Nov 2025 04:00:27 +0000
Manifest next update: Thu 06 Nov 2025 04:00:27 +0000
Files and hashes: 1: _tSpb-HtAo1ZEtd6UAsJR4vRgyI.crl (hash: nKYjD3XuAdUv4b6858YXfh3bkMDuG4oi+qNCz3Y/jfo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/98183c-edc4-464d-bf45-8899d1058b64/1/_tSpb-HtAo1ZEtd6UAsJR4vRgyI.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/98183c-edc4-464d-bf45-8899d1058b64/1/_tSpb-HtAo1ZEtd6UAsJR4vRgyI.mft
rsync://rpki.ripe.net/repository/DEFAULT/_tSpb-HtAo1ZEtd6UAsJR4vRgyI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:37:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:2c:53:1e:cb:99:7d:fe:3e:d4:be:86:25:71:58:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fed4a96fe1ed028d5912d77a500b09478bd18322
Validity
Not Before: Nov 5 04:00:27 2025 GMT
Not After : Nov 6 04:00:27 2025 GMT
Subject: CN=f230e3d51e29a359075662c734f4f06c597ac392
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:b4:f1:ed:f2:2b:4a:6d:c9:0e:45:d3:ef:6e:
f1:83:85:1a:bc:0d:c5:40:01:b0:a5:49:73:8b:bd:
6e:14:e5:18:62:9a:3c:d6:80:90:70:d7:b5:c8:c8:
f7:0b:8b:98:ba:e5:41:d5:4e:7b:74:ca:92:70:d9:
7a:7d:43:23:0e:a6:05:9c:ec:40:97:24:5e:f5:ee:
4a:65:f1:62:7e:bc:0c:df:17:01:71:11:6d:43:ac:
02:88:38:d5:ae:45:b0:66:85:80:11:df:3a:1e:bf:
c1:85:18:5d:d0:b3:7d:9f:11:ff:41:ad:fd:ee:a6:
2a:b8:4c:e4:43:ca:dd:7c:f3:15:7a:0e:96:c6:65:
dd:0f:f6:13:da:7d:e8:4b:57:ba:73:4c:56:66:c0:
1a:e1:39:1e:84:ac:4c:ac:45:89:9d:26:d2:24:b3:
4d:1d:f1:d2:f2:b2:f1:28:5d:4e:d7:df:04:ec:84:
9d:a6:83:21:f5:17:55:2a:fd:94:b2:52:14:05:8b:
9c:34:ce:cc:28:e9:2d:80:0d:42:6f:56:4c:b9:81:
1d:2b:6e:aa:a7:dd:35:b1:ad:94:61:cd:8d:03:b1:
eb:59:4e:03:50:02:a4:c8:06:2f:5a:d6:b4:0a:95:
47:41:b1:2a:ba:82:e1:55:3a:19:d5:8f:00:ce:00:
9a:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:30:E3:D5:1E:29:A3:59:07:56:62:C7:34:F4:F0:6C:59:7A:C3:92
X509v3 Authority Key Identifier:
keyid:FE:D4:A9:6F:E1:ED:02:8D:59:12:D7:7A:50:0B:09:47:8B:D1:83:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_tSpb-HtAo1ZEtd6UAsJR4vRgyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/98183c-edc4-464d-bf45-8899d1058b64/1/_tSpb-HtAo1ZEtd6UAsJR4vRgyI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/98183c-edc4-464d-bf45-8899d1058b64/1/_tSpb-HtAo1ZEtd6UAsJR4vRgyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:a3:2c:72:2d:2f:17:d0:ad:56:19:b5:37:91:fa:60:3b:5b:
ec:13:20:66:cf:d2:1e:90:71:6c:75:50:b3:43:f7:69:30:c7:
65:88:b8:60:91:56:49:65:de:2e:39:fb:d7:45:68:e2:83:d9:
10:fe:20:b3:44:66:84:97:66:52:23:12:51:e4:e2:6c:c8:00:
43:36:23:be:42:43:d3:1b:bf:37:a2:e1:ff:bc:4b:51:c9:77:
81:08:b7:45:78:a0:99:eb:55:4b:f2:4d:1b:b8:8b:f7:18:39:
78:7e:c1:72:e7:d7:3d:23:82:d7:0d:6a:de:6c:e1:66:93:df:
70:1c:82:7a:31:9a:4c:4a:91:8d:4d:d8:ed:05:2a:29:df:3f:
be:79:c0:65:dd:4b:cc:1a:e8:d4:d4:a6:35:a5:ab:65:e4:20:
5b:9e:14:fa:1c:d1:85:6c:47:df:ce:91:56:69:07:c6:79:e2:
89:80:50:96:d6:e1:38:d7:81:94:8c:d2:23:4d:ca:88:11:06:
43:5f:92:83:55:8a:01:cb:d7:2a:81:98:89:86:3f:73:c9:3c:
97:5d:a6:89:fa:b1:ad:60:c5:b8:df:93:1f:e8:4e:0d:99:0b:
7f:83:20:30:e0:f9:85:02:34:e2:37:92:93:88:b3:a1:72:4b:
5d:b7:55:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 05:45:09 2025 by rpki-client