Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/e49afe-15ae-485a-af76-66516ffce750/1/tpQiR24a5eoNWOT4_fkfBfEC_vs.mft
File: tpQiR24a5eoNWOT4_fkfBfEC_vs.mft (raw, json)
Hash identifier: 9gdMw/4JPCcdQ0AJpI8hMtmj2c6H0z9WDscXDuspxRA=
Subject key identifier: 83:7E:03:BB:95:04:35:1A:CC:05:79:EE:BA:DB:8A:87:0D:98:9A:BE
Authority key identifier: B6:94:22:47:6E:1A:E5:EA:0D:58:E4:F8:FD:F9:1F:05:F1:02:FE:FB
Certificate issuer: /CN=b69422476e1ae5ea0d58e4f8fdf91f05f102fefb
Certificate serial: 0199FCC6C4E7EE8193C1F61C12A5FAF0AB24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tpQiR24a5eoNWOT4_fkfBfEC_vs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/e49afe-15ae-485a-af76-66516ffce750/1/tpQiR24a5eoNWOT4_fkfBfEC_vs.mft
Manifest number: 16DF
Signing time: Sun 19 Oct 2025 14:01:48 +0000
Manifest this update: Sun 19 Oct 2025 14:01:48 +0000
Manifest next update: Mon 20 Oct 2025 14:01:48 +0000
Files and hashes: 1: tpQiR24a5eoNWOT4_fkfBfEC_vs.crl (hash: 6J8dWC32ZegrRQ2qjc0FUoCsFH+WUHRVgO73Fd5Spcw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/e49afe-15ae-485a-af76-66516ffce750/1/tpQiR24a5eoNWOT4_fkfBfEC_vs.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/e49afe-15ae-485a-af76-66516ffce750/1/tpQiR24a5eoNWOT4_fkfBfEC_vs.mft
rsync://rpki.ripe.net/repository/DEFAULT/tpQiR24a5eoNWOT4_fkfBfEC_vs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:c4:e7:ee:81:93:c1:f6:1c:12:a5:fa:f0:ab:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b69422476e1ae5ea0d58e4f8fdf91f05f102fefb
Validity
Not Before: Oct 19 14:01:48 2025 GMT
Not After : Oct 20 14:01:48 2025 GMT
Subject: CN=837e03bb9504351acc0579eebadb8a870d989abe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:cd:c9:5b:88:fd:04:bf:02:88:97:29:1b:8b:
55:a3:7d:ba:6b:83:03:d7:dd:64:1c:b6:8c:d6:1c:
a5:ee:fb:ab:f6:9c:81:29:09:6e:e8:b0:73:ec:f7:
5a:69:21:d8:42:9b:42:a0:4a:81:97:6f:98:66:21:
16:12:42:97:48:12:f8:4f:da:59:ce:62:14:55:9d:
ca:05:5f:55:8b:9a:60:f2:23:9e:6b:e7:c2:85:94:
6c:8a:d7:bf:ed:e5:8e:31:bd:a6:ec:74:78:42:82:
43:86:72:fb:70:33:e7:0b:99:ee:d8:6a:df:bb:a8:
3c:d6:aa:54:9a:c6:1d:f3:12:42:61:a1:79:af:3e:
fe:62:81:ac:a2:c7:83:9b:0f:0a:13:69:88:3c:81:
f0:ee:b8:4a:cd:9b:78:6e:60:a5:e1:c7:9f:c5:d4:
05:09:1e:69:88:3b:f4:89:cb:0b:42:f1:36:97:4f:
eb:46:0a:9d:ac:21:be:2f:5d:16:d2:70:08:95:0e:
44:05:38:54:2d:ec:46:da:90:3c:8b:dd:f9:d2:fd:
56:4f:07:40:33:fa:77:3e:cc:e9:f0:39:42:cf:79:
c1:b7:5d:5f:e7:93:f3:e8:30:85:f0:53:6c:0c:be:
fc:04:dc:08:ee:6c:35:64:81:1c:60:c7:9f:d1:64:
54:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:7E:03:BB:95:04:35:1A:CC:05:79:EE:BA:DB:8A:87:0D:98:9A:BE
X509v3 Authority Key Identifier:
keyid:B6:94:22:47:6E:1A:E5:EA:0D:58:E4:F8:FD:F9:1F:05:F1:02:FE:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tpQiR24a5eoNWOT4_fkfBfEC_vs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/e49afe-15ae-485a-af76-66516ffce750/1/tpQiR24a5eoNWOT4_fkfBfEC_vs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/e49afe-15ae-485a-af76-66516ffce750/1/tpQiR24a5eoNWOT4_fkfBfEC_vs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:17:9e:ef:9a:c6:67:6c:c5:5a:ad:a5:b6:ff:a3:52:73:ad:
ad:45:9b:1c:e8:ee:e1:63:ee:31:03:74:77:fb:4c:29:28:85:
a4:99:c0:9f:4c:fe:17:74:1f:07:3f:10:8f:73:8b:c6:e5:f3:
68:03:b0:5e:d6:ad:5b:4c:c3:29:07:12:73:25:76:f7:fd:e5:
7a:a5:68:6b:70:d2:e8:59:1b:51:90:2d:ab:d2:ab:68:1f:d2:
c0:72:42:83:3e:a8:8e:fb:95:b5:1f:3c:d5:ce:b0:51:d3:d1:
74:d3:ea:8a:5a:02:d9:1e:dc:33:79:74:80:e3:de:59:1c:f2:
31:44:a9:c9:95:35:f4:e9:6e:36:b7:e8:a5:46:fd:18:c0:e1:
8a:13:09:50:d0:ec:55:b0:b4:1b:26:f0:f0:c0:84:53:51:05:
20:95:e4:f7:9e:0b:68:d3:80:c6:56:76:52:51:0d:1c:7f:29:
29:76:f2:d6:ed:e0:ce:bf:73:a7:62:3d:99:e2:c5:09:29:8a:
6d:65:7e:cf:e9:79:55:32:d6:59:b0:42:19:eb:9b:51:6f:fa:
83:91:49:b7:25:d9:a4:eb:6f:9a:62:89:63:5a:5c:ea:93:be:
0f:89:e6:4f:94:c9:a9:e9:21:ed:b7:a6:42:42:83:c8:c5:77:
8b:0f:ff:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:45:40 2025 by rpki-client