Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/3737f7-1871-442a-8dba-dc2aaaa12003/1/TSwkU9AHkc_xMy-nHPtdo2qgCgo.mft
File: TSwkU9AHkc_xMy-nHPtdo2qgCgo.mft (raw, json)
Hash identifier: SRYHZgNg9uE0cPkQ2392f/bGe8M2ExExv7LHKZBI2PE=
Subject key identifier: DD:58:F0:35:2A:C6:CD:8A:88:2F:7B:ED:3A:44:BE:0F:74:7E:E9:D7
Authority key identifier: 4D:2C:24:53:D0:07:91:CF:F1:33:2F:A7:1C:FB:5D:A3:6A:A0:0A:0A
Certificate issuer: /CN=4d2c2453d00791cff1332fa71cfb5da36aa00a0a
Certificate serial: 0199FB7CAF163016616481D774D73A3CEEE8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TSwkU9AHkc_xMy-nHPtdo2qgCgo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/3737f7-1871-442a-8dba-dc2aaaa12003/1/TSwkU9AHkc_xMy-nHPtdo2qgCgo.mft
Manifest number: 88
Signing time: Sun 19 Oct 2025 08:01:16 +0000
Manifest this update: Sun 19 Oct 2025 08:01:16 +0000
Manifest next update: Mon 20 Oct 2025 08:01:16 +0000
Files and hashes: 1: TSwkU9AHkc_xMy-nHPtdo2qgCgo.crl (hash: W/GbHu+itVf56aDBmgpDO2FVN93hTjdw8vObHvjf0dQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/3737f7-1871-442a-8dba-dc2aaaa12003/1/TSwkU9AHkc_xMy-nHPtdo2qgCgo.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/3737f7-1871-442a-8dba-dc2aaaa12003/1/TSwkU9AHkc_xMy-nHPtdo2qgCgo.mft
rsync://rpki.ripe.net/repository/DEFAULT/TSwkU9AHkc_xMy-nHPtdo2qgCgo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:7c:af:16:30:16:61:64:81:d7:74:d7:3a:3c:ee:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d2c2453d00791cff1332fa71cfb5da36aa00a0a
Validity
Not Before: Oct 19 08:01:16 2025 GMT
Not After : Oct 20 08:01:16 2025 GMT
Subject: CN=dd58f0352ac6cd8a882f7bed3a44be0f747ee9d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:39:14:ad:bf:a4:87:f7:37:1a:5a:76:47:0e:
97:1e:41:3e:dd:42:64:be:3c:4c:01:95:ad:96:e2:
14:7e:ad:74:3c:04:95:bb:77:68:c7:d9:31:ce:91:
dc:7c:4a:ad:e8:28:08:2c:e5:51:a6:05:78:8d:83:
3a:2f:0f:db:9a:07:ca:e7:14:c1:62:d4:7a:2a:cc:
05:19:3d:c0:01:4c:b1:b1:f7:05:77:3b:72:de:47:
3f:90:0c:15:24:ba:87:ea:54:87:7c:f9:5e:e8:93:
6b:db:7a:ab:17:71:bd:c8:fa:0e:34:c9:44:2f:ea:
bc:8f:51:5f:8f:ca:09:74:74:1c:eb:f2:02:6b:c9:
b8:62:a7:87:d1:fe:f6:e5:97:7f:d9:88:34:a1:ae:
0f:36:e5:73:38:24:18:d5:14:20:40:71:d2:2b:a8:
bf:7d:30:2b:b2:21:9c:53:2a:96:47:8d:67:3d:3d:
bf:ae:c0:d2:b7:7d:88:93:e4:a0:b8:7d:95:f6:ec:
03:10:f8:b1:f3:1e:58:b2:17:72:48:d3:5f:b1:75:
bf:bb:16:d7:d1:6a:f4:17:c6:cb:76:9f:90:37:e0:
01:e5:d0:89:01:d4:c4:0a:4a:19:78:af:16:c1:10:
d9:ab:12:2e:15:42:8d:64:79:99:04:1b:42:97:2c:
3c:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:58:F0:35:2A:C6:CD:8A:88:2F:7B:ED:3A:44:BE:0F:74:7E:E9:D7
X509v3 Authority Key Identifier:
keyid:4D:2C:24:53:D0:07:91:CF:F1:33:2F:A7:1C:FB:5D:A3:6A:A0:0A:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TSwkU9AHkc_xMy-nHPtdo2qgCgo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/3737f7-1871-442a-8dba-dc2aaaa12003/1/TSwkU9AHkc_xMy-nHPtdo2qgCgo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/3737f7-1871-442a-8dba-dc2aaaa12003/1/TSwkU9AHkc_xMy-nHPtdo2qgCgo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:99:2c:57:cc:cf:e0:a0:3a:a3:f6:6f:64:5a:9a:c5:9a:a5:
83:d5:f4:0c:35:c8:82:87:fd:25:d5:8f:ad:a0:61:61:b4:b5:
e2:77:91:c5:bb:70:ae:72:46:1f:53:8a:fe:1d:de:14:e5:97:
b4:64:89:56:0f:3c:4e:05:b0:63:73:5a:cc:2f:76:ca:bf:2c:
51:1e:18:2b:fd:b9:50:71:88:62:69:a7:91:4e:ed:ec:29:4b:
5a:d4:54:1a:9a:40:a4:88:dc:6b:e9:51:84:32:3d:73:22:4b:
db:82:45:3f:f0:4d:aa:c7:f6:9e:6f:fd:5b:34:da:56:c9:c8:
fd:5a:d8:1c:b7:a3:0e:50:96:a4:a3:d0:83:72:db:df:60:bd:
c9:b7:f0:cb:4d:3c:52:2f:c8:8f:60:0a:2d:7b:e0:0e:f5:8c:
1d:c7:07:8f:41:44:72:62:48:72:2e:e3:f1:4e:c7:11:2b:2e:
9c:07:b3:1e:e0:03:91:49:72:75:a3:a2:0f:7d:cf:e6:9d:a4:
7b:6c:5c:d4:a3:07:fb:c0:da:90:7c:4e:3c:9b:fc:39:ee:64:
bf:22:a7:15:db:ff:79:dd:ee:f0:8a:23:4d:fb:e1:e1:65:89:
81:39:e9:48:fa:3b:fd:94:5c:e0:7f:2b:c5:d7:2e:2f:79:8b:
2f:72:51:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:03:56 2025 by rpki-client