Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/a1adf5-7642-4e90-a07e-1f1b24118d85/1/Tx097mN940sTx0umz7TSBb5VYn4.mft
File: Tx097mN940sTx0umz7TSBb5VYn4.mft (raw, json)
Hash identifier: i008YedOGwK55GY8zEmW+ZcEWvatBM8ROjdEWN1CBsA=
Subject key identifier: 63:2D:55:C5:72:11:6C:E3:95:6F:C2:6B:38:15:32:54:71:D4:D1:15
Authority key identifier: 4F:1D:3D:EE:63:7D:E3:4B:13:C7:4B:A6:CF:B4:D2:05:BE:55:62:7E
Certificate issuer: /CN=4f1d3dee637de34b13c74ba6cfb4d205be55627e
Certificate serial: 019A4DE162971D18C9EC55B1F2BF8268591D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tx097mN940sTx0umz7TSBb5VYn4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/a1adf5-7642-4e90-a07e-1f1b24118d85/1/Tx097mN940sTx0umz7TSBb5VYn4.mft
Manifest number: 1708
Signing time: Tue 04 Nov 2025 08:00:07 +0000
Manifest this update: Tue 04 Nov 2025 08:00:07 +0000
Manifest next update: Wed 05 Nov 2025 08:00:07 +0000
Files and hashes: 1: Tx097mN940sTx0umz7TSBb5VYn4.crl (hash: +Ico33d5EX3jLiT7X6xkAGjRtPJDzFMPg1f7HXypCtA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/a1adf5-7642-4e90-a07e-1f1b24118d85/1/Tx097mN940sTx0umz7TSBb5VYn4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/a1adf5-7642-4e90-a07e-1f1b24118d85/1/Tx097mN940sTx0umz7TSBb5VYn4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Tx097mN940sTx0umz7TSBb5VYn4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e1:62:97:1d:18:c9:ec:55:b1:f2:bf:82:68:59:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1d3dee637de34b13c74ba6cfb4d205be55627e
Validity
Not Before: Nov 4 08:00:07 2025 GMT
Not After : Nov 5 08:00:07 2025 GMT
Subject: CN=632d55c572116ce3956fc26b3815325471d4d115
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:9d:7c:7f:78:51:6c:e9:41:c2:74:9f:16:49:
3c:f6:07:3b:f4:9b:d0:a9:28:d6:00:2c:48:46:10:
45:0d:09:61:43:36:96:2a:0d:70:1b:8d:c8:0a:e5:
a6:fd:4f:9d:69:7d:ed:4e:ff:1d:0a:b6:ee:63:86:
df:61:54:25:c4:92:2f:9d:1c:75:6f:1a:f5:b2:87:
1c:48:b6:99:b4:b4:f0:a8:37:ee:53:af:32:96:93:
e6:40:b5:1f:ed:c7:d4:0c:62:91:9d:1c:a7:28:84:
ba:1b:8c:ae:ee:13:b7:72:e2:75:6d:bf:37:c5:3d:
1b:22:26:96:6d:ae:19:c5:17:17:60:96:e3:1e:39:
a3:db:0e:06:00:1c:c6:41:cf:bf:7f:c3:f6:48:28:
a3:92:cc:64:c9:30:fd:ec:99:ef:2d:f3:9d:e3:0e:
98:31:66:1d:97:a2:5e:9d:a2:3b:1a:14:02:7d:9a:
bc:75:b5:82:94:00:28:2e:d7:4a:b1:38:8a:2c:b7:
50:23:54:2f:3c:d5:5b:02:41:6d:5f:d2:ee:7a:b7:
d9:52:c6:3c:ec:50:e0:dd:5e:55:f4:5f:ef:60:5c:
f3:ac:f3:f7:c6:23:2a:32:b0:1e:0a:96:d0:d5:9d:
58:cd:af:99:c3:a8:c1:62:63:1f:e9:3e:9f:df:c1:
e0:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:2D:55:C5:72:11:6C:E3:95:6F:C2:6B:38:15:32:54:71:D4:D1:15
X509v3 Authority Key Identifier:
keyid:4F:1D:3D:EE:63:7D:E3:4B:13:C7:4B:A6:CF:B4:D2:05:BE:55:62:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tx097mN940sTx0umz7TSBb5VYn4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/a1adf5-7642-4e90-a07e-1f1b24118d85/1/Tx097mN940sTx0umz7TSBb5VYn4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/a1adf5-7642-4e90-a07e-1f1b24118d85/1/Tx097mN940sTx0umz7TSBb5VYn4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:21:a0:57:7c:b3:b1:dc:9e:b2:18:9f:21:37:b8:20:a3:05:
31:d6:f7:0b:29:4e:7d:60:c8:d9:0a:7c:8b:04:89:c3:49:c0:
0d:d0:e0:87:75:97:da:7e:22:f5:1a:f4:a4:3a:09:39:ea:b1:
24:87:aa:8f:4c:b2:72:73:f3:66:c6:6f:bd:ff:ac:38:a7:4a:
b5:21:fc:3f:79:6e:f5:c8:20:0b:07:8b:34:ae:f5:f0:18:6b:
9b:21:bc:93:96:4a:3d:0b:89:a1:4e:68:c6:ba:e0:3b:5f:c1:
ed:77:a3:d1:77:76:e3:18:b7:41:6e:52:37:27:e7:46:75:36:
a4:df:3e:90:2a:10:19:25:41:8d:1c:e3:31:70:6d:14:03:c0:
f9:99:f5:6a:f7:2f:5c:15:09:89:c2:b2:80:fa:39:40:aa:8b:
fe:67:6c:ea:89:bc:bb:a5:1b:5f:2d:a0:ca:39:59:a0:58:99:
ea:21:9f:bc:91:26:5b:af:f5:8a:dd:b8:71:a4:06:6e:1a:93:
8f:54:0d:17:a3:0d:bc:be:c4:1e:2d:6f:43:bf:26:40:92:f4:
32:d2:94:b2:42:5e:18:89:e5:41:29:93:ff:cf:2d:b5:c2:99:
22:45:6b:77:b6:80:33:07:63:b9:bd:b6:18:53:1e:b6:50:7b:
23:8a:8a:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:41:24 2025 by rpki-client