Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/dc09cf-770c-4172-a6ee-b61384ff0ec2/1/tQ7fyW0rYXiGiVMxQpaeZVZlEqo.mft
File: tQ7fyW0rYXiGiVMxQpaeZVZlEqo.mft (raw, json)
Hash identifier: L8dPgnZQ2kjSxQU2FqkTKxP1GCiWzVzU9qRC5cQ1LuE=
Subject key identifier: 4C:5C:E9:F7:D9:02:1B:4E:AF:0C:05:37:4B:0E:8D:34:3F:9C:31:94
Authority key identifier: B5:0E:DF:C9:6D:2B:61:78:86:89:53:31:42:96:9E:65:56:65:12:AA
Certificate issuer: /CN=b50edfc96d2b61788689533142969e65566512aa
Certificate serial: 019A4DE17A43FCDC3D91A1D2208A4C1774DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tQ7fyW0rYXiGiVMxQpaeZVZlEqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/dc09cf-770c-4172-a6ee-b61384ff0ec2/1/tQ7fyW0rYXiGiVMxQpaeZVZlEqo.mft
Manifest number: 168D
Signing time: Tue 04 Nov 2025 08:00:13 +0000
Manifest this update: Tue 04 Nov 2025 08:00:13 +0000
Manifest next update: Wed 05 Nov 2025 08:00:13 +0000
Files and hashes: 1: tQ7fyW0rYXiGiVMxQpaeZVZlEqo.crl (hash: zSNz9D6BYC/TRdDXHQasluL1k5g5cgDkGHrB1QbL4b8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/dc09cf-770c-4172-a6ee-b61384ff0ec2/1/tQ7fyW0rYXiGiVMxQpaeZVZlEqo.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/dc09cf-770c-4172-a6ee-b61384ff0ec2/1/tQ7fyW0rYXiGiVMxQpaeZVZlEqo.mft
rsync://rpki.ripe.net/repository/DEFAULT/tQ7fyW0rYXiGiVMxQpaeZVZlEqo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e1:7a:43:fc:dc:3d:91:a1:d2:20:8a:4c:17:74:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b50edfc96d2b61788689533142969e65566512aa
Validity
Not Before: Nov 4 08:00:13 2025 GMT
Not After : Nov 5 08:00:13 2025 GMT
Subject: CN=4c5ce9f7d9021b4eaf0c05374b0e8d343f9c3194
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:77:93:04:90:9b:8b:5b:59:5c:57:35:5b:30:
e0:47:9a:28:40:b6:58:36:78:c4:00:ff:fe:01:66:
2f:ca:72:a0:05:cc:f9:7a:e7:1a:88:36:bc:e4:ff:
9c:e9:be:5a:58:c2:f5:f8:8e:a7:8d:62:51:c5:cf:
ed:43:3c:03:a9:2b:de:3d:78:de:a8:95:b9:16:93:
90:a0:48:d6:f3:8a:b6:51:9d:a4:d2:90:f4:f3:b6:
6f:43:52:f0:8f:1b:b6:44:13:29:a4:74:d1:98:31:
33:cd:4a:2f:71:e8:e0:a1:62:9c:41:5e:75:4b:9b:
ed:c3:ac:4b:91:6e:bf:85:b7:d6:0c:6a:f5:8d:79:
2c:e7:6b:3b:92:c7:6b:4b:76:52:77:95:1c:2c:86:
0d:69:cc:f1:7d:33:2b:7c:97:50:50:94:94:ea:c3:
9c:61:fc:9d:05:ea:54:eb:94:5c:83:e4:a9:f9:11:
8f:2b:b2:f3:62:46:86:1e:40:0e:96:a3:d3:6b:50:
8b:79:9d:92:bb:eb:61:32:7e:f1:a6:e2:cb:d1:20:
7e:26:74:80:19:69:b0:9a:2c:9b:92:3b:f5:90:1b:
0d:ab:a7:2b:89:74:30:b5:14:8d:d8:76:88:e4:e4:
3a:6e:1e:a3:05:78:06:3e:7e:09:c4:e7:26:f7:ee:
4f:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:5C:E9:F7:D9:02:1B:4E:AF:0C:05:37:4B:0E:8D:34:3F:9C:31:94
X509v3 Authority Key Identifier:
keyid:B5:0E:DF:C9:6D:2B:61:78:86:89:53:31:42:96:9E:65:56:65:12:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tQ7fyW0rYXiGiVMxQpaeZVZlEqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/dc09cf-770c-4172-a6ee-b61384ff0ec2/1/tQ7fyW0rYXiGiVMxQpaeZVZlEqo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/dc09cf-770c-4172-a6ee-b61384ff0ec2/1/tQ7fyW0rYXiGiVMxQpaeZVZlEqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:4f:26:78:d8:a2:c7:8a:4c:be:2e:21:4f:a5:91:85:ad:e5:
02:3f:2f:c5:f2:d4:4b:7f:da:a0:cd:f3:fd:e8:92:96:a9:18:
bc:54:c1:a8:8f:aa:f1:ca:7b:9a:db:b6:5c:71:db:52:bb:62:
9b:53:ce:95:a6:4c:77:35:48:51:6d:cc:a8:9d:61:30:0e:6c:
9c:7c:cf:29:6a:ea:ac:30:6b:f8:16:f1:88:25:b3:34:84:f7:
17:85:fc:a0:52:c3:da:16:4f:43:f7:cf:53:96:0d:ce:65:d3:
17:0c:a4:4b:99:45:ce:b0:cd:77:13:72:da:7a:b9:0d:06:0c:
9f:46:cc:73:b9:a0:e3:6e:36:7f:af:95:9c:01:aa:f4:6a:c7:
a7:c3:8c:bc:cf:42:59:8d:29:2e:3f:48:07:64:65:d9:ca:af:
82:dd:62:50:c2:8d:04:bb:ca:8d:35:3d:b4:a2:00:67:a3:8e:
71:ee:cd:ac:4e:21:5a:62:ba:f0:52:ff:50:7d:c0:c8:ea:e8:
91:ec:17:fc:bc:65:44:ab:d2:a8:81:21:60:f3:0c:ab:2c:18:
0c:47:20:10:cc:8b:4b:55:10:f9:36:b7:b4:b2:07:a0:24:ee:
a1:61:21:f2:1a:03:c6:38:43:96:ae:8d:55:35:05:39:68:ef:
ea:e6:88:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:53:52 2025 by rpki-client