Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/e85903-7574-4ab3-b441-5267d716e4ce/1/TI3qBN5uN7GQNV4DzSYAxHIS4Y4.mft
File: TI3qBN5uN7GQNV4DzSYAxHIS4Y4.mft (raw, json)
Hash identifier: Q5UokjI1q98AXwrpe/eZ0c/nVkGtVwZcQeJgSmtKmuo=
Subject key identifier: F4:9D:C8:CE:02:29:14:FF:EE:58:C6:90:94:75:4F:D4:00:FD:4E:00
Authority key identifier: 4C:8D:EA:04:DE:6E:37:B1:90:35:5E:03:CD:26:00:C4:72:12:E1:8E
Certificate issuer: /CN=4c8dea04de6e37b190355e03cd2600c47212e18e
Certificate serial: 019A4F62ADCEE418E90B3D81D05A954F9B58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TI3qBN5uN7GQNV4DzSYAxHIS4Y4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/e85903-7574-4ab3-b441-5267d716e4ce/1/TI3qBN5uN7GQNV4DzSYAxHIS4Y4.mft
Manifest number: 07FE
Signing time: Tue 04 Nov 2025 15:00:58 +0000
Manifest this update: Tue 04 Nov 2025 15:00:58 +0000
Manifest next update: Wed 05 Nov 2025 15:00:58 +0000
Files and hashes: 1: TI3qBN5uN7GQNV4DzSYAxHIS4Y4.crl (hash: psUVQTqcRl7gxyWxH0h/COP7z8jcn18GkQi+l59GEgw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/e85903-7574-4ab3-b441-5267d716e4ce/1/TI3qBN5uN7GQNV4DzSYAxHIS4Y4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/e85903-7574-4ab3-b441-5267d716e4ce/1/TI3qBN5uN7GQNV4DzSYAxHIS4Y4.mft
rsync://rpki.ripe.net/repository/DEFAULT/TI3qBN5uN7GQNV4DzSYAxHIS4Y4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:62:ad:ce:e4:18:e9:0b:3d:81:d0:5a:95:4f:9b:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c8dea04de6e37b190355e03cd2600c47212e18e
Validity
Not Before: Nov 4 15:00:58 2025 GMT
Not After : Nov 5 15:00:58 2025 GMT
Subject: CN=f49dc8ce022914ffee58c69094754fd400fd4e00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:9e:ca:bd:f2:62:39:6d:57:53:99:f7:bc:a6:
e7:f8:30:2f:1e:d7:be:f1:76:ab:8c:e0:a0:c2:76:
31:cb:f2:95:36:2d:63:aa:1b:35:46:02:8a:79:87:
10:78:e8:3b:4d:d1:10:bc:e3:d6:e9:ac:28:b5:df:
24:dd:94:67:60:19:a5:54:aa:7c:21:39:02:46:fb:
ba:29:d0:a4:dc:d5:e0:0e:1e:9e:e4:72:64:4b:6e:
c1:9d:00:5c:69:ed:ad:ed:e3:95:5d:fb:8e:e6:31:
cc:4e:d5:74:d3:d3:96:00:e3:12:ed:6e:d6:c8:27:
0b:5d:ee:ac:68:fe:f6:fc:a7:6d:cd:16:0e:c7:7d:
86:84:02:e3:6c:ea:be:de:31:bb:6a:73:6e:4e:e5:
3e:a4:e7:49:db:d8:26:64:6b:6a:7d:ac:b5:e8:0f:
b0:68:e9:1c:eb:00:3c:fc:cc:26:d6:9c:92:c8:6a:
7d:ab:38:14:09:3d:26:2f:15:43:d3:d2:49:e3:04:
95:ee:aa:a6:2e:7d:0c:e7:8a:ff:a9:1d:ff:b4:e2:
72:e3:b7:74:5d:50:39:7e:22:6e:f2:6e:a3:10:14:
7c:ac:37:6d:9f:fd:60:7e:02:31:4a:c2:85:01:21:
0b:bc:d4:18:3f:8d:cc:46:ff:c2:22:bf:bb:e6:7b:
91:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:9D:C8:CE:02:29:14:FF:EE:58:C6:90:94:75:4F:D4:00:FD:4E:00
X509v3 Authority Key Identifier:
keyid:4C:8D:EA:04:DE:6E:37:B1:90:35:5E:03:CD:26:00:C4:72:12:E1:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TI3qBN5uN7GQNV4DzSYAxHIS4Y4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/e85903-7574-4ab3-b441-5267d716e4ce/1/TI3qBN5uN7GQNV4DzSYAxHIS4Y4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/e85903-7574-4ab3-b441-5267d716e4ce/1/TI3qBN5uN7GQNV4DzSYAxHIS4Y4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:d8:a3:28:d9:a0:cb:7b:a3:15:2b:65:97:08:a8:21:46:cc:
63:47:52:a8:6f:14:ce:3f:00:0e:20:66:29:dd:6c:26:0b:e3:
a7:8f:a5:b2:34:80:a5:e4:36:60:19:3a:c5:74:cd:b7:aa:0f:
5f:6f:86:3e:e0:da:e0:5e:3a:7d:92:2c:aa:d5:16:55:bb:51:
40:40:06:50:e0:ab:63:67:23:11:f0:49:83:f3:8c:d9:34:80:
12:d0:ab:51:0f:03:17:d2:e9:e2:e3:66:88:36:9f:92:43:9f:
c8:56:df:7d:7b:69:44:3d:15:f0:2c:2c:68:0d:83:0f:81:a1:
8c:35:a4:73:9d:fe:87:8e:43:24:c3:54:13:75:f3:16:55:dc:
c1:18:b3:ca:f5:a3:cb:c4:bf:6b:db:a8:db:b1:e0:65:57:4b:
8a:9c:75:dc:2f:6a:bc:df:81:62:2d:9f:e2:a3:1d:77:08:b7:
a3:42:9a:a7:70:b7:d8:01:41:85:b4:8f:ad:61:f0:dd:f1:e7:
f5:54:f9:a1:9f:d3:8c:f3:29:f5:7b:10:d0:90:d3:d7:96:30:
78:2d:b7:67:4c:38:85:c0:2f:80:bb:b7:c0:5e:6f:cf:5e:29:
61:17:8c:c7:a1:93:e5:86:cd:2b:ca:77:d9:f4:28:0f:db:cd:
a9:77:3f:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:59:39 2025 by rpki-client