Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/1f889b-4445-4770-a95e-f8063230e183/1/tT1dyv8VkDIr61fsPrrvYlBBKVU.mft
File: tT1dyv8VkDIr61fsPrrvYlBBKVU.mft (raw, json)
Hash identifier: 6pjmmpO8FGb0FxIZFG9TOKx4Mfvq6lj8LDutlIp0TL8=
Subject key identifier: 17:16:5A:32:1D:4E:D6:E8:C9:90:6D:88:3D:20:47:95:76:65:25:19
Authority key identifier: B5:3D:5D:CA:FF:15:90:32:2B:EB:57:EC:3E:BA:EF:62:50:41:29:55
Certificate issuer: /CN=b53d5dcaff1590322beb57ec3ebaef6250412955
Certificate serial: 019A50E2F2CD4FD6397C56E0160933BFED98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tT1dyv8VkDIr61fsPrrvYlBBKVU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/1f889b-4445-4770-a95e-f8063230e183/1/tT1dyv8VkDIr61fsPrrvYlBBKVU.mft
Manifest number: 09D4
Signing time: Tue 04 Nov 2025 22:00:41 +0000
Manifest this update: Tue 04 Nov 2025 22:00:41 +0000
Manifest next update: Wed 05 Nov 2025 22:00:41 +0000
Files and hashes: 1: tT1dyv8VkDIr61fsPrrvYlBBKVU.crl (hash: CSs/kRUmOrFPr677nkHr31A2VKpQShdhDpPJBauzNP4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/1f889b-4445-4770-a95e-f8063230e183/1/tT1dyv8VkDIr61fsPrrvYlBBKVU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/1f889b-4445-4770-a95e-f8063230e183/1/tT1dyv8VkDIr61fsPrrvYlBBKVU.mft
rsync://rpki.ripe.net/repository/DEFAULT/tT1dyv8VkDIr61fsPrrvYlBBKVU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:e2:f2:cd:4f:d6:39:7c:56:e0:16:09:33:bf:ed:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b53d5dcaff1590322beb57ec3ebaef6250412955
Validity
Not Before: Nov 4 22:00:41 2025 GMT
Not After : Nov 5 22:00:41 2025 GMT
Subject: CN=17165a321d4ed6e8c9906d883d20479576652519
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:fa:10:6e:ad:fe:07:1b:7c:f1:30:f2:3f:dc:
6e:c2:07:1d:0e:e1:36:3a:85:1b:66:26:0d:1b:64:
c3:14:3e:0a:b0:21:a5:2d:96:be:32:9e:ce:e9:98:
68:95:a9:12:68:eb:0e:ce:07:4e:b3:84:b6:01:d1:
86:53:58:fe:d5:c4:73:80:a4:82:88:96:07:56:84:
66:a4:c9:6a:e0:30:0d:8f:4a:fb:23:cc:a8:d7:23:
de:3f:c0:49:76:3b:8f:12:41:82:32:31:78:85:5b:
3d:44:e0:8e:a9:a7:5b:49:2a:75:e2:d1:c3:9c:c8:
13:8e:a0:3d:66:e0:e7:b1:b2:4e:2b:39:08:2f:65:
b3:e0:77:7d:0a:cc:07:63:b4:54:be:b4:8d:a1:f6:
2c:e7:cf:94:d3:11:d3:38:71:86:97:b7:eb:d9:e5:
33:bd:69:3a:a0:40:99:b4:88:43:1d:67:f2:fa:27:
69:f9:93:73:e6:65:03:7b:04:75:4f:49:63:3c:5b:
19:45:08:ee:c8:52:f3:6f:13:4e:c6:fd:a6:5a:88:
77:2c:80:07:f8:18:58:4e:57:7e:d1:dc:db:6f:df:
b7:fd:31:34:53:dd:66:c0:7d:78:15:d2:2f:26:1a:
1b:be:3c:c7:4d:d8:3e:4c:d2:65:b1:69:8e:1b:58:
8a:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:16:5A:32:1D:4E:D6:E8:C9:90:6D:88:3D:20:47:95:76:65:25:19
X509v3 Authority Key Identifier:
keyid:B5:3D:5D:CA:FF:15:90:32:2B:EB:57:EC:3E:BA:EF:62:50:41:29:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tT1dyv8VkDIr61fsPrrvYlBBKVU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/1f889b-4445-4770-a95e-f8063230e183/1/tT1dyv8VkDIr61fsPrrvYlBBKVU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/1f889b-4445-4770-a95e-f8063230e183/1/tT1dyv8VkDIr61fsPrrvYlBBKVU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:d4:8c:93:70:46:ab:49:81:ad:a8:b8:41:25:6c:66:e0:a1:
35:8b:04:64:05:bb:8d:10:a2:4e:a0:c9:4e:7b:69:80:90:32:
cb:58:51:d7:4f:59:c3:7d:6a:04:17:fb:b2:a5:22:e4:1c:54:
0f:a8:83:6c:6b:99:3b:08:11:7d:97:09:ac:b7:b9:69:4e:fa:
54:4a:47:94:82:f1:77:b1:8a:a8:3d:5e:ca:44:33:e6:29:ff:
c8:71:3c:cb:96:6d:02:4c:2c:fd:3e:3a:34:18:5b:7c:46:30:
52:94:47:42:54:dd:f5:97:9a:75:1c:f6:d4:cb:09:47:43:82:
79:3d:ff:e2:d5:9a:95:fa:88:62:be:81:bd:b1:97:1d:63:6f:
67:1c:2e:56:68:bc:05:ee:6e:59:55:d7:40:16:f6:07:c8:c9:
91:49:85:05:8d:88:28:c2:8b:9e:c0:b8:e2:64:1a:ef:78:41:
2a:28:6f:1c:14:04:35:2b:56:8a:98:5d:f5:3c:ff:6a:57:72:
d3:dd:0d:88:5e:ec:c8:74:31:1f:fd:5f:ef:50:de:ce:b6:ed:
37:17:e9:59:da:b3:1f:46:7a:ef:f3:bd:a0:84:d9:f6:2b:db:
9b:cd:d4:92:b1:82:c0:00:39:14:7e:63:e5:71:4d:df:5e:c0:
3a:f4:c4:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 01:50:58 2025 by rpki-client