Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/fb2401-e470-4c05-99b8-f8eecb425087/1/CEl1fj41qqtdV8UYYkOkNxc-TTY.mft
File: CEl1fj41qqtdV8UYYkOkNxc-TTY.mft (raw, json)
Hash identifier: 799+Y9SpdPr0VUNmvEE8OYoH6T+xNVWnelQmOQiVLec=
Subject key identifier: C2:D9:5C:08:76:05:19:CC:3D:4E:73:3B:F9:57:94:A2:3F:E2:F6:FB
Authority key identifier: 08:49:75:7E:3E:35:AA:AB:5D:57:C5:18:62:43:A4:37:17:3E:4D:36
Certificate issuer: /CN=0849757e3e35aaab5d57c5186243a437173e4d36
Certificate serial: 019A4EF4F0A50913E8D09F12F8912DD7DA3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CEl1fj41qqtdV8UYYkOkNxc-TTY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/fb2401-e470-4c05-99b8-f8eecb425087/1/CEl1fj41qqtdV8UYYkOkNxc-TTY.mft
Manifest number: 1446
Signing time: Tue 04 Nov 2025 13:01:06 +0000
Manifest this update: Tue 04 Nov 2025 13:01:06 +0000
Manifest next update: Wed 05 Nov 2025 13:01:06 +0000
Files and hashes: 1: CEl1fj41qqtdV8UYYkOkNxc-TTY.crl (hash: dHmrjsI2CYQPKDYzOy87wDJFMcpAY3z13+2/0KxnI8I=)
2: ughB2qwCJjXq23HnnasoQDdXgE8.roa (hash: LImj3hNpOasXYHWcbm9URdJgBeEySrqqax18nJO4GMo=)
3: v0jeM-EK5U0lFswlXgsyLuIVWWw.roa (hash: M3nsb4FrAgnB7zU3prkNFU+S+Vg3EPSnI0a1Dxv4l5Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/fb2401-e470-4c05-99b8-f8eecb425087/1/CEl1fj41qqtdV8UYYkOkNxc-TTY.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/fb2401-e470-4c05-99b8-f8eecb425087/1/CEl1fj41qqtdV8UYYkOkNxc-TTY.mft
rsync://rpki.ripe.net/repository/DEFAULT/CEl1fj41qqtdV8UYYkOkNxc-TTY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:f0:a5:09:13:e8:d0:9f:12:f8:91:2d:d7:da:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0849757e3e35aaab5d57c5186243a437173e4d36
Validity
Not Before: Nov 4 13:01:06 2025 GMT
Not After : Nov 5 13:01:06 2025 GMT
Subject: CN=c2d95c08760519cc3d4e733bf95794a23fe2f6fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:ed:10:47:d8:46:77:f4:27:10:ec:6f:7a:cb:
7f:51:c3:75:b9:c1:8f:53:3a:7b:a6:02:05:31:13:
84:d9:6b:71:90:ec:09:b7:60:4c:b1:88:3e:90:4a:
f4:a2:df:a4:5b:69:9d:93:6a:6a:4d:07:03:52:1e:
be:12:da:3a:58:cf:f9:f5:ed:ab:67:c5:37:e4:e9:
33:e0:be:9e:36:78:7b:5f:b9:fd:5a:f4:bf:f2:7b:
28:87:14:0c:40:90:8b:ed:1a:bd:09:0a:b5:ff:1a:
65:8c:d3:3f:b6:f8:9d:66:8a:5f:bc:5e:49:15:59:
d1:0f:a1:a4:72:37:28:3b:7c:1d:ca:b7:68:94:ab:
20:f6:a1:74:7f:c7:f0:d2:10:98:3f:f1:c5:e0:7b:
64:76:6d:c5:78:b8:b5:a9:59:4e:6b:98:39:7c:f6:
f1:89:0f:24:2e:71:7d:26:0b:8b:df:f7:33:6f:29:
2c:76:52:0a:fd:77:6b:29:89:17:26:45:3a:96:91:
a1:ed:78:55:ee:14:28:bb:52:ec:9e:b7:68:d4:2f:
50:57:72:9c:fa:41:39:62:16:3e:4e:17:a6:cc:f9:
98:80:65:60:0b:8a:32:4c:04:9d:25:e2:0c:d7:08:
e5:41:f7:22:52:11:8b:f2:10:82:50:bf:01:c5:d1:
6c:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:D9:5C:08:76:05:19:CC:3D:4E:73:3B:F9:57:94:A2:3F:E2:F6:FB
X509v3 Authority Key Identifier:
keyid:08:49:75:7E:3E:35:AA:AB:5D:57:C5:18:62:43:A4:37:17:3E:4D:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CEl1fj41qqtdV8UYYkOkNxc-TTY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/fb2401-e470-4c05-99b8-f8eecb425087/1/CEl1fj41qqtdV8UYYkOkNxc-TTY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/fb2401-e470-4c05-99b8-f8eecb425087/1/CEl1fj41qqtdV8UYYkOkNxc-TTY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:74:7e:be:ea:c4:92:80:dc:f9:db:14:73:0b:52:90:a9:59:
3c:d0:ed:35:df:0b:95:f9:d6:84:1b:f4:4d:aa:1c:35:aa:65:
ad:f5:2e:06:c6:d2:f2:e4:67:3a:ea:92:85:53:b9:34:13:81:
27:a9:2c:47:7d:d2:f6:d8:2b:e4:64:65:f4:19:17:6d:d8:e6:
4d:61:1e:0a:1a:b3:4a:2d:ae:25:d6:b3:8a:c7:2d:85:e2:ce:
f6:73:a8:d5:1c:cc:39:03:b3:19:10:d4:16:47:5c:b8:9b:3e:
f2:28:47:2c:0e:b8:67:1c:80:2f:2f:1f:76:d7:9d:92:cd:9c:
af:20:7c:4f:58:75:3a:ad:d3:40:df:d5:0d:74:0e:cc:ad:75:
34:74:94:4d:9c:fb:ae:09:8d:b5:fc:50:96:74:01:85:82:47:
c8:bd:a0:2e:10:f4:6d:f9:81:74:65:73:d0:35:e0:a5:b4:cd:
0f:98:3b:c9:72:24:11:33:a7:96:eb:be:3c:75:d8:3f:a5:d4:
94:58:85:8e:c1:6f:f9:69:5c:dd:80:b8:dd:e8:cd:82:c9:71:
c8:d0:12:55:0d:9a:dc:cc:89:dd:29:a4:7a:66:d9:a4:6a:2f:
ba:04:67:17:9b:2a:16:a7:6a:71:15:e8:22:b9:fd:f5:7a:b4:
40:60:ce:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:46:45 2025 by rpki-client