Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/277503-82e3-4c17-9699-712e2761daf5/1/Th1cISsoF0fIw-xuhm4Vs5TFu98.mft
File: Th1cISsoF0fIw-xuhm4Vs5TFu98.mft (raw, json)
Hash identifier: Umf9BHDDcgdgCT8fgWKA5zzYVZaij9cYRm/VvkgJtIY=
Subject key identifier: 9F:12:51:E0:94:8B:0F:D9:30:EE:24:DE:F0:1D:33:34:9E:8A:35:E9
Authority key identifier: 4E:1D:5C:21:2B:28:17:47:C8:C3:EC:6E:86:6E:15:B3:94:C5:BB:DF
Certificate issuer: /CN=4e1d5c212b281747c8c3ec6e866e15b394c5bbdf
Certificate serial: 0199FE7E19683AF0D38ECA101B815ECB3007
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Th1cISsoF0fIw-xuhm4Vs5TFu98.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/277503-82e3-4c17-9699-712e2761daf5/1/Th1cISsoF0fIw-xuhm4Vs5TFu98.mft
Manifest number: 0E1B
Signing time: Sun 19 Oct 2025 22:01:40 +0000
Manifest this update: Sun 19 Oct 2025 22:01:40 +0000
Manifest next update: Mon 20 Oct 2025 22:01:40 +0000
Files and hashes: 1: Th1cISsoF0fIw-xuhm4Vs5TFu98.crl (hash: uJpvh6g+pigCcJ6WPCSOtEyMWh393jW385H86deuSsM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/277503-82e3-4c17-9699-712e2761daf5/1/Th1cISsoF0fIw-xuhm4Vs5TFu98.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/277503-82e3-4c17-9699-712e2761daf5/1/Th1cISsoF0fIw-xuhm4Vs5TFu98.mft
rsync://rpki.ripe.net/repository/DEFAULT/Th1cISsoF0fIw-xuhm4Vs5TFu98.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:7e:19:68:3a:f0:d3:8e:ca:10:1b:81:5e:cb:30:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e1d5c212b281747c8c3ec6e866e15b394c5bbdf
Validity
Not Before: Oct 19 22:01:40 2025 GMT
Not After : Oct 20 22:01:40 2025 GMT
Subject: CN=9f1251e0948b0fd930ee24def01d33349e8a35e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:7f:5b:46:4a:ec:56:e5:0a:38:51:eb:79:87:
6a:52:aa:fa:9c:b3:04:bf:cf:b9:bc:90:4f:7c:a3:
90:14:c0:90:4d:20:52:85:3f:d0:9d:be:ad:90:84:
20:ce:58:8c:d2:0d:69:dd:c9:91:80:9a:8b:16:fd:
b9:31:24:89:d0:36:e6:4b:09:71:f1:34:02:81:66:
f9:cb:2d:84:aa:00:f1:b3:c1:0e:b2:8e:6f:bd:c4:
38:2a:1c:1c:d5:8c:25:97:fb:84:54:ec:cc:39:6c:
d1:5b:80:3c:d8:f4:f1:d4:e2:c7:63:48:46:30:41:
42:81:e6:ce:12:82:3b:cb:97:d2:5f:c3:7c:8f:59:
15:0c:1f:01:bb:0c:ac:33:03:a8:d8:88:3a:4c:0b:
8b:6c:c0:ff:2b:e8:ae:cb:a7:6d:31:fc:cf:98:98:
4c:64:cc:d2:cc:69:76:2e:f5:96:57:b4:67:a8:f5:
70:24:0c:ce:8f:27:e7:e0:93:3f:3b:a5:ab:d7:c3:
24:f0:b3:0b:7f:3e:51:93:9a:2a:df:e3:2b:35:cb:
6a:fc:fc:bc:2c:1f:1e:45:c6:6f:92:6b:86:ba:11:
2a:cc:01:e9:0e:86:db:3d:1b:55:07:c3:91:5c:50:
7c:62:5a:fb:5f:f0:e6:10:22:51:d4:a1:a7:59:86:
fa:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:12:51:E0:94:8B:0F:D9:30:EE:24:DE:F0:1D:33:34:9E:8A:35:E9
X509v3 Authority Key Identifier:
keyid:4E:1D:5C:21:2B:28:17:47:C8:C3:EC:6E:86:6E:15:B3:94:C5:BB:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Th1cISsoF0fIw-xuhm4Vs5TFu98.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/277503-82e3-4c17-9699-712e2761daf5/1/Th1cISsoF0fIw-xuhm4Vs5TFu98.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/277503-82e3-4c17-9699-712e2761daf5/1/Th1cISsoF0fIw-xuhm4Vs5TFu98.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:a4:a7:99:a0:5b:58:70:73:a8:1b:a2:33:e0:8f:12:6e:9f:
36:9f:c9:72:89:d4:5c:ee:fa:8e:b4:d7:41:17:97:a7:83:02:
a3:ea:3a:f7:5c:d7:24:06:94:27:ed:45:e2:8e:27:90:e6:dc:
90:4f:b3:9e:dc:75:24:f9:55:1c:50:fc:96:52:1f:0c:80:68:
83:ef:2c:24:4f:ab:0e:2a:9d:6d:7a:93:0a:3d:ed:09:c9:c8:
16:d5:dc:f6:08:02:41:0d:97:ce:aa:a2:8f:8b:44:00:a5:a7:
07:33:41:46:d5:70:7f:5f:1d:ea:66:f0:e0:30:46:0c:4a:d9:
95:e1:76:83:ec:26:fe:3d:3a:68:e7:fb:c4:21:aa:ba:56:1a:
90:17:fb:f6:ea:f7:a5:e5:93:9c:26:aa:e5:d7:0b:6c:02:35:
b8:a5:e0:40:79:b1:72:6d:95:c5:d6:4f:85:75:fd:fe:78:09:
70:97:bf:6a:59:14:5f:88:e5:18:ee:fc:74:2d:e6:65:fc:2d:
ee:d6:bd:2b:94:95:7e:c6:2a:2e:8b:b7:5b:fa:f9:65:83:e0:
0f:b5:45:90:32:b9:d9:2b:47:5c:8d:c9:56:97:a6:b1:99:ea:
61:ea:3d:7e:ba:2f:a7:9f:c3:19:08:42:df:3f:ab:2c:dd:e4:
ea:c0:2a:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 06:23:58 2025 by rpki-client