Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/16e2aa-ddbd-4ee1-ae60-08bc640aed67/1/tWqJV8zDCqTsLUeOU_OHJsmVWjE.mft
File: tWqJV8zDCqTsLUeOU_OHJsmVWjE.mft (raw, json)
Hash identifier: 1VDD4f2gujSTbi5/CWw/CKfgSUUbKiJLbqvyipD7Ijk=
Subject key identifier: E2:D4:0E:20:6F:D7:E2:95:C0:55:82:8D:F2:08:C9:E2:09:C8:AB:A0
Authority key identifier: B5:6A:89:57:CC:C3:0A:A4:EC:2D:47:8E:53:F3:87:26:C9:95:5A:31
Certificate issuer: /CN=b56a8957ccc30aa4ec2d478e53f38726c9955a31
Certificate serial: 019A4EF4F6A266FC0D7B2161B5B0972FB1AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tWqJV8zDCqTsLUeOU_OHJsmVWjE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/16e2aa-ddbd-4ee1-ae60-08bc640aed67/1/tWqJV8zDCqTsLUeOU_OHJsmVWjE.mft
Manifest number: 1707
Signing time: Tue 04 Nov 2025 13:01:07 +0000
Manifest this update: Tue 04 Nov 2025 13:01:07 +0000
Manifest next update: Wed 05 Nov 2025 13:01:07 +0000
Files and hashes: 1: tWqJV8zDCqTsLUeOU_OHJsmVWjE.crl (hash: UipXf/vz0Nj4fh/Ea76b3rXuWMLIMKD9mssZ6KQqV+o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/16e2aa-ddbd-4ee1-ae60-08bc640aed67/1/tWqJV8zDCqTsLUeOU_OHJsmVWjE.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/16e2aa-ddbd-4ee1-ae60-08bc640aed67/1/tWqJV8zDCqTsLUeOU_OHJsmVWjE.mft
rsync://rpki.ripe.net/repository/DEFAULT/tWqJV8zDCqTsLUeOU_OHJsmVWjE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 13:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:f6:a2:66:fc:0d:7b:21:61:b5:b0:97:2f:b1:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b56a8957ccc30aa4ec2d478e53f38726c9955a31
Validity
Not Before: Nov 4 13:01:07 2025 GMT
Not After : Nov 5 13:01:07 2025 GMT
Subject: CN=e2d40e206fd7e295c055828df208c9e209c8aba0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:e0:52:2a:f2:92:82:2c:ab:68:f2:7f:64:82:
af:11:83:aa:f4:32:d3:f1:f9:3a:50:77:48:69:45:
0c:11:85:0a:ae:99:6a:8f:2a:2b:3a:d5:94:4e:c5:
e3:11:1f:df:55:2b:9e:40:56:af:6d:78:bb:ac:74:
c5:6f:90:9a:eb:96:72:07:05:fe:f7:05:8a:4f:e7:
54:87:81:68:fb:15:3c:7f:a2:6e:ba:cd:cb:db:54:
83:39:d2:1d:2f:e9:9d:9d:04:04:4c:54:94:7e:9c:
35:9a:4d:fe:9b:65:b1:a8:e4:d9:47:0d:f3:5b:2b:
34:09:53:79:02:75:85:cd:09:0b:09:b3:ed:d6:ac:
b4:48:78:2e:ea:9e:8b:2f:a6:f9:17:f8:62:c5:68:
ab:a3:d0:b8:fd:56:3e:81:97:84:1c:d3:a0:8b:be:
fd:fe:a5:58:b3:0b:ef:89:3d:32:41:82:09:a2:e0:
de:68:a3:fb:69:0c:a7:5b:79:d7:c9:52:c9:a8:7a:
09:05:a1:3f:bf:b9:1d:5f:c3:ae:a1:c3:6e:bf:4f:
ab:a6:ae:37:bf:47:5f:a4:65:57:ff:a8:53:23:61:
b6:7c:c6:6b:97:d6:54:09:06:7d:5a:cf:18:9f:c2:
3c:20:32:77:52:a2:77:d5:f7:77:96:28:6a:55:86:
5c:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:D4:0E:20:6F:D7:E2:95:C0:55:82:8D:F2:08:C9:E2:09:C8:AB:A0
X509v3 Authority Key Identifier:
keyid:B5:6A:89:57:CC:C3:0A:A4:EC:2D:47:8E:53:F3:87:26:C9:95:5A:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tWqJV8zDCqTsLUeOU_OHJsmVWjE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/16e2aa-ddbd-4ee1-ae60-08bc640aed67/1/tWqJV8zDCqTsLUeOU_OHJsmVWjE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/16e2aa-ddbd-4ee1-ae60-08bc640aed67/1/tWqJV8zDCqTsLUeOU_OHJsmVWjE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:18:7b:98:b8:96:2b:74:d2:5c:e9:6e:4c:c0:ac:b2:3a:6f:
12:b0:3d:0c:5e:0f:c4:ae:cf:c9:7d:01:23:8e:b2:96:85:40:
3e:61:c0:06:77:3e:4f:58:af:69:80:d4:c4:28:e8:d2:ea:93:
5d:69:8a:02:91:71:5d:df:f0:32:fe:32:bc:cd:10:28:98:b3:
03:f9:e5:9d:1e:b4:d4:46:d8:cb:17:83:3e:7a:21:f9:4f:c8:
55:8e:46:f3:ba:c9:ce:4d:77:1e:7a:5c:47:59:67:90:a7:72:
a2:51:23:ec:fb:84:d8:42:e0:83:f4:e6:3a:5a:3e:99:79:93:
87:19:79:ca:e3:d3:bd:d0:22:cf:43:d1:aa:21:4d:3a:4e:1a:
12:3f:95:4b:4b:d6:01:a9:2a:ed:67:d0:55:22:79:d7:82:85:
10:db:88:e7:cc:e7:cc:ad:86:e0:9a:51:29:05:e5:2e:e4:ac:
ca:4f:b9:56:87:43:30:ae:b5:a3:6f:7d:be:9a:65:f8:aa:9e:
34:3e:2a:c2:97:06:01:83:19:1e:c2:7d:e6:45:14:e5:1a:e7:
e4:cd:87:2e:3c:f2:6f:ef:94:d5:f2:35:03:11:0e:87:f9:36:
ea:95:4e:57:66:bf:65:c0:8c:12:3f:c8:cf:8c:4d:1f:6d:07:
74:5c:e7:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:31:40 2025 by rpki-client