Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/d6513d-2d53-4022-8360-3117989601ad/1/tKIIXH3jtZgha4n7Dysdkw3mbBk.mft
File: tKIIXH3jtZgha4n7Dysdkw3mbBk.mft (raw, json)
Hash identifier: /WbP8+82al3JrfRKvQEyY0X+6m8AOpft3nrYE918QMI=
Subject key identifier: C2:77:0F:FC:15:17:F1:FB:68:C3:06:14:77:07:D4:E6:84:80:A3:80
Authority key identifier: B4:A2:08:5C:7D:E3:B5:98:21:6B:89:FB:0F:2B:1D:93:0D:E6:6C:19
Certificate issuer: /CN=b4a2085c7de3b598216b89fb0f2b1d930de66c19
Certificate serial: 019A4E8670A453B708F1C42BED30072E034A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tKIIXH3jtZgha4n7Dysdkw3mbBk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/d6513d-2d53-4022-8360-3117989601ad/1/tKIIXH3jtZgha4n7Dysdkw3mbBk.mft
Manifest number: 16E3
Signing time: Tue 04 Nov 2025 11:00:24 +0000
Manifest this update: Tue 04 Nov 2025 11:00:24 +0000
Manifest next update: Wed 05 Nov 2025 11:00:24 +0000
Files and hashes: 1: tKIIXH3jtZgha4n7Dysdkw3mbBk.crl (hash: GLSOut+Vd+7hKt+6Lgy6CnmSvck56pd8WgQoeWvwZFw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/d6513d-2d53-4022-8360-3117989601ad/1/tKIIXH3jtZgha4n7Dysdkw3mbBk.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/d6513d-2d53-4022-8360-3117989601ad/1/tKIIXH3jtZgha4n7Dysdkw3mbBk.mft
rsync://rpki.ripe.net/repository/DEFAULT/tKIIXH3jtZgha4n7Dysdkw3mbBk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:86:70:a4:53:b7:08:f1:c4:2b:ed:30:07:2e:03:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4a2085c7de3b598216b89fb0f2b1d930de66c19
Validity
Not Before: Nov 4 11:00:24 2025 GMT
Not After : Nov 5 11:00:24 2025 GMT
Subject: CN=c2770ffc1517f1fb68c306147707d4e68480a380
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:b6:7c:8b:3e:9f:23:b0:ae:2b:68:9b:88:e0:
94:30:23:f8:9c:d4:37:c4:d8:cf:d4:11:f5:c5:52:
94:de:30:23:8f:f5:80:8c:ab:e6:90:2b:60:27:dc:
75:a5:ac:fa:ae:18:41:b5:c3:1a:95:c5:2a:b6:74:
89:58:fe:b7:dc:0c:75:8c:7f:ab:7c:96:8f:dd:b0:
3f:b7:84:d1:ac:d7:36:9c:b6:c9:6c:d3:74:d6:ba:
9a:a5:73:3c:fc:97:c4:a8:b1:d4:02:e2:b3:61:04:
ca:44:9e:44:ca:8a:59:b3:81:be:c2:59:1f:e3:ae:
7e:ad:b8:de:27:18:3f:1f:be:db:fe:b3:ab:cb:0b:
9a:a8:d7:c7:96:95:6c:ba:5a:48:d8:96:f7:e3:0c:
ce:a7:c1:ba:dc:0f:90:57:e6:31:d2:21:93:b4:15:
4b:57:c9:b5:42:69:11:63:81:3e:2f:03:f1:0c:b3:
8d:44:a0:c9:27:04:b1:ea:6b:d8:7e:54:75:16:57:
a3:6a:cd:49:f2:73:66:99:db:21:2f:b4:31:1f:c0:
78:79:d9:46:94:3e:bd:0d:3f:fd:7a:31:2d:a0:87:
6b:12:13:92:9a:ad:6a:e0:b6:01:f0:3b:24:b2:2e:
1d:3c:ef:e0:be:fd:25:38:b2:d3:db:df:4f:10:1f:
c9:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:77:0F:FC:15:17:F1:FB:68:C3:06:14:77:07:D4:E6:84:80:A3:80
X509v3 Authority Key Identifier:
keyid:B4:A2:08:5C:7D:E3:B5:98:21:6B:89:FB:0F:2B:1D:93:0D:E6:6C:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tKIIXH3jtZgha4n7Dysdkw3mbBk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/d6513d-2d53-4022-8360-3117989601ad/1/tKIIXH3jtZgha4n7Dysdkw3mbBk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/d6513d-2d53-4022-8360-3117989601ad/1/tKIIXH3jtZgha4n7Dysdkw3mbBk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:16:da:15:e6:b6:35:46:d8:c3:58:d2:b0:1e:77:ef:66:93:
32:99:b5:f6:bb:72:d6:48:8a:83:d5:06:ef:dd:3d:b7:eb:f6:
27:f8:ae:63:8f:03:d5:39:03:e6:e8:11:f4:4c:be:a4:a2:ae:
ce:44:70:7a:00:18:31:96:19:41:a1:dd:67:57:cd:6a:33:8a:
73:bf:a4:66:b8:78:9b:48:19:cc:83:7d:c4:9f:ef:76:50:96:
cb:59:ae:e5:44:31:11:e6:15:57:85:0c:f9:bb:9c:b4:8a:7b:
e7:d7:76:90:2d:39:74:d0:cf:85:f1:f6:83:ad:c5:d7:80:76:
46:7a:59:2e:81:e5:a3:50:73:f9:21:95:9e:77:17:dd:e9:55:
2d:eb:62:b4:ec:6d:e4:65:32:09:0a:8f:22:47:8e:3b:31:46:
b4:48:e3:a9:ae:8a:c5:e6:fb:67:13:41:c9:e3:c8:cb:3a:ce:
4d:6a:90:56:2d:fa:bb:2f:eb:34:6d:89:b8:db:e0:28:d9:4c:
a4:55:da:c0:58:1e:fc:2b:6d:62:04:a0:1b:d8:bf:0d:dc:08:
bc:ae:6b:5f:72:c7:15:5e:d1:29:28:9a:5e:d7:ae:b9:dc:b0:
0d:a5:47:19:70:90:33:93:d3:a5:84:7b:40:80:78:3b:55:86:
aa:ef:a3:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:19:31 2025 by rpki-client