Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/bf8b0e-beda-4a56-baf0-82ad11626eed/1/TEz85gybDy1Hs2KGTY_rsiW7UkQ.mft
File: TEz85gybDy1Hs2KGTY_rsiW7UkQ.mft (raw, json)
Hash identifier: AUJHSLIDuwi6t/4Ve6WaGndk+AOK7ymEkicoP+33I/o=
Subject key identifier: D3:C4:C1:8E:7C:EE:AE:AD:E8:4D:86:60:97:75:F3:8C:26:39:8E:9C
Authority key identifier: 4C:4C:FC:E6:0C:9B:0F:2D:47:B3:62:86:4D:8F:EB:B2:25:BB:52:44
Certificate issuer: /CN=4c4cfce60c9b0f2d47b362864d8febb225bb5244
Certificate serial: 019A4F2B99FB320235E8CD7D8BE902355AE3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TEz85gybDy1Hs2KGTY_rsiW7UkQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/bf8b0e-beda-4a56-baf0-82ad11626eed/1/TEz85gybDy1Hs2KGTY_rsiW7UkQ.mft
Manifest number: 170A
Signing time: Tue 04 Nov 2025 14:00:48 +0000
Manifest this update: Tue 04 Nov 2025 14:00:48 +0000
Manifest next update: Wed 05 Nov 2025 14:00:48 +0000
Files and hashes: 1: TEz85gybDy1Hs2KGTY_rsiW7UkQ.crl (hash: Je+DVK3fCEfIJaZiRzsOrvhSJDFH3LV4pCmnW/wqTzE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/bf8b0e-beda-4a56-baf0-82ad11626eed/1/TEz85gybDy1Hs2KGTY_rsiW7UkQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/bf8b0e-beda-4a56-baf0-82ad11626eed/1/TEz85gybDy1Hs2KGTY_rsiW7UkQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/TEz85gybDy1Hs2KGTY_rsiW7UkQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 14:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:2b:99:fb:32:02:35:e8:cd:7d:8b:e9:02:35:5a:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c4cfce60c9b0f2d47b362864d8febb225bb5244
Validity
Not Before: Nov 4 14:00:48 2025 GMT
Not After : Nov 5 14:00:48 2025 GMT
Subject: CN=d3c4c18e7ceeaeade84d86609775f38c26398e9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:37:f6:c6:52:96:62:9e:13:e7:04:94:8f:c9:
c3:74:ee:7e:02:52:e1:9d:2c:5f:73:f5:45:72:c9:
d9:12:ae:70:ad:02:be:1b:b3:a6:a1:3a:2e:dd:a4:
12:40:c9:30:35:59:7c:b1:b8:90:1c:d1:dc:75:a4:
e5:0f:c2:15:b8:ca:a8:99:07:4a:7c:7b:11:a8:65:
84:88:ee:b1:ff:eb:a4:5c:82:73:b0:f0:bc:64:24:
82:ba:58:f6:53:ee:c2:fb:0d:5c:bf:9c:f1:ef:82:
59:d8:fd:12:d1:50:1a:16:f2:ae:4b:46:96:59:81:
dc:8b:8f:2a:a4:40:35:5d:b7:20:cc:e2:b0:82:55:
bb:41:f4:b7:da:4b:41:ab:c0:69:2a:fa:05:39:12:
1a:bc:bb:8b:8c:ec:25:2e:b6:ea:63:08:b6:ac:ff:
a7:c7:35:b8:ee:df:c1:31:2e:3b:e8:43:47:ad:81:
e6:d2:a5:31:9b:0f:c3:2c:50:9c:83:d5:68:01:a9:
e1:f1:23:90:8a:20:86:07:c5:fd:32:22:c0:70:fb:
8c:77:18:f3:6c:e7:66:d8:79:09:7e:a5:67:7f:86:
1c:aa:f6:4a:52:9b:a7:5f:64:05:88:d6:19:67:7b:
dd:3d:27:de:c1:e2:92:cc:02:0a:fa:4b:aa:fa:84:
be:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:C4:C1:8E:7C:EE:AE:AD:E8:4D:86:60:97:75:F3:8C:26:39:8E:9C
X509v3 Authority Key Identifier:
keyid:4C:4C:FC:E6:0C:9B:0F:2D:47:B3:62:86:4D:8F:EB:B2:25:BB:52:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TEz85gybDy1Hs2KGTY_rsiW7UkQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/bf8b0e-beda-4a56-baf0-82ad11626eed/1/TEz85gybDy1Hs2KGTY_rsiW7UkQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/bf8b0e-beda-4a56-baf0-82ad11626eed/1/TEz85gybDy1Hs2KGTY_rsiW7UkQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:33:f2:6b:52:34:66:ae:8f:d3:58:37:bd:28:3a:b9:0c:a3:
15:5f:f1:9d:d4:41:76:73:e8:8e:15:67:4c:5d:94:fc:13:98:
88:68:15:42:98:54:6c:66:72:fd:64:b5:7a:b6:30:7a:04:3b:
bd:44:a7:91:be:8e:45:e3:cf:4b:d3:b5:fb:5e:85:39:da:12:
ed:d4:13:6c:7a:1a:5c:a3:51:14:83:5f:79:eb:09:f4:e9:ab:
96:2a:77:27:43:cf:40:26:18:29:a6:0c:bc:83:9a:30:6e:97:
b2:4d:a3:5f:00:7c:7d:b0:17:93:ef:d3:66:00:56:8c:8d:5c:
7e:77:49:4e:8b:25:90:27:39:ac:db:f3:fd:4e:c4:64:12:04:
97:49:08:c2:78:97:d4:f1:05:0c:f0:4f:3c:72:6b:0e:6f:ef:
e2:39:9e:8e:db:af:7d:f9:7f:b6:62:7d:22:55:29:94:f9:ef:
77:1a:46:a0:fc:5a:49:83:2e:4a:61:ab:32:f3:57:02:da:0b:
d6:c7:46:93:90:9a:d1:83:9e:fd:a2:bf:b6:f0:bd:c2:d1:a0:
55:23:47:63:fd:7e:7c:ef:b6:74:7c:ce:06:e8:06:bf:06:c8:
5c:12:d5:02:cb:33:5d:36:f1:e2:82:20:34:5b:fd:02:8e:a6:
45:a4:4f:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:53:20 2025 by rpki-client