Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/1980bd-0753-4161-b6f5-9c72e157abb3/1/Tm_7mQbuvrofWxpVju1jcvZTzoY.mft
File: Tm_7mQbuvrofWxpVju1jcvZTzoY.mft (raw, json)
Hash identifier: 2E4qwI+kh3mZwYL/QWjNjWtyIeRAZVzRbguW9BRqLes=
Subject key identifier: FD:3A:5B:8F:3B:A6:34:03:CC:B7:03:A4:15:52:43:0F:36:7C:4A:26
Authority key identifier: 4E:6F:FB:99:06:EE:BE:BA:1F:5B:1A:55:8E:ED:63:72:F6:53:CE:86
Certificate issuer: /CN=4e6ffb9906eebeba1f5b1a558eed6372f653ce86
Certificate serial: 0199FC590D67B36656F519D30BF0953F1E3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tm_7mQbuvrofWxpVju1jcvZTzoY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/1980bd-0753-4161-b6f5-9c72e157abb3/1/Tm_7mQbuvrofWxpVju1jcvZTzoY.mft
Manifest number: 16DF
Signing time: Sun 19 Oct 2025 12:01:58 +0000
Manifest this update: Sun 19 Oct 2025 12:01:58 +0000
Manifest next update: Mon 20 Oct 2025 12:01:58 +0000
Files and hashes: 1: Tm_7mQbuvrofWxpVju1jcvZTzoY.crl (hash: N5Zd5RpguH8HoEeKW/jfgyWqN8JjLNPjy5jOWC2TpTI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/1980bd-0753-4161-b6f5-9c72e157abb3/1/Tm_7mQbuvrofWxpVju1jcvZTzoY.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/1980bd-0753-4161-b6f5-9c72e157abb3/1/Tm_7mQbuvrofWxpVju1jcvZTzoY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Tm_7mQbuvrofWxpVju1jcvZTzoY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:59:0d:67:b3:66:56:f5:19:d3:0b:f0:95:3f:1e:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e6ffb9906eebeba1f5b1a558eed6372f653ce86
Validity
Not Before: Oct 19 12:01:58 2025 GMT
Not After : Oct 20 12:01:58 2025 GMT
Subject: CN=fd3a5b8f3ba63403ccb703a41552430f367c4a26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:0f:2f:41:ee:6e:3f:ab:84:19:07:45:02:ea:
a9:a5:c6:c5:25:47:31:d4:0d:00:ee:0a:ef:f6:38:
ed:0f:68:70:0a:90:1d:94:ac:14:c5:6e:ed:75:0b:
27:ee:49:23:16:3e:c0:19:8e:eb:dd:b6:b0:23:47:
56:c3:3e:9f:ad:03:b2:56:49:b3:70:7a:77:e9:41:
8f:2d:35:3e:ed:67:59:02:27:2d:61:13:95:e6:36:
49:09:5b:9b:ff:9b:60:4e:ea:67:5e:86:1e:74:6b:
4a:85:27:21:19:d2:e2:46:50:a8:ae:e1:5e:1f:e5:
b6:95:6c:56:1e:3d:1d:f0:cb:e7:c4:f1:a0:32:fc:
d6:f7:c1:71:ff:17:c8:81:ab:2f:ec:18:76:7d:f7:
56:df:53:2e:f8:95:de:94:3a:d1:6b:80:7a:45:e5:
0f:fb:23:fc:29:4a:e7:4c:da:f3:19:d5:70:8b:9d:
d3:17:b4:99:cc:04:22:c2:bd:a6:c2:19:3d:63:ff:
c1:8d:bc:71:e2:cb:3c:bf:2f:f9:cc:58:92:c9:33:
dc:ff:4e:a0:5a:c9:a6:fc:15:a7:16:1a:f1:d0:73:
1f:08:9c:86:ca:e6:77:8a:a8:cd:2b:1c:7a:3e:9f:
15:87:11:f0:39:b0:81:f0:72:74:b8:87:f8:88:4d:
f3:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:3A:5B:8F:3B:A6:34:03:CC:B7:03:A4:15:52:43:0F:36:7C:4A:26
X509v3 Authority Key Identifier:
keyid:4E:6F:FB:99:06:EE:BE:BA:1F:5B:1A:55:8E:ED:63:72:F6:53:CE:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tm_7mQbuvrofWxpVju1jcvZTzoY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/1980bd-0753-4161-b6f5-9c72e157abb3/1/Tm_7mQbuvrofWxpVju1jcvZTzoY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/1980bd-0753-4161-b6f5-9c72e157abb3/1/Tm_7mQbuvrofWxpVju1jcvZTzoY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:6d:79:47:2a:0b:2e:a8:03:69:02:26:d9:54:31:d5:f7:89:
22:b3:d4:9a:a5:3d:a7:47:ae:d7:df:fc:05:0d:38:c3:82:a0:
aa:5e:64:48:04:4e:73:12:f1:80:43:d4:a3:c9:56:5b:42:eb:
1d:83:ce:ec:9a:26:05:2e:7e:0d:4c:e6:1c:3a:1a:da:21:e5:
20:cb:25:09:9a:76:52:f3:ee:08:08:8e:77:b7:ae:19:3b:18:
66:5f:3e:10:4e:77:41:1f:47:5a:01:a3:6e:ec:4a:e2:31:41:
23:f0:97:4a:dc:31:bd:e7:fd:0f:cd:3c:d6:0a:3f:63:ca:bd:
6e:1e:c0:ab:4c:ee:a7:7c:56:be:62:b8:da:35:0b:a3:d1:12:
6f:53:c9:d7:d2:a0:3d:b4:89:72:30:4f:ea:9f:73:5e:d6:8d:
9f:d4:be:bb:62:4c:bb:6e:48:9b:14:e5:1d:bb:b9:21:9d:a9:
ca:b0:cc:d0:e5:35:fd:47:e8:63:3a:25:e4:8e:8a:75:de:d1:
f7:34:7b:60:bb:fe:81:6c:80:64:d5:72:04:89:51:0e:9e:4c:
de:cb:f9:4a:56:f2:55:69:d8:e6:b3:3b:45:05:2f:f9:0e:1e:
96:90:a9:21:db:27:c5:b4:16:26:e3:c9:72:58:d0:ae:55:30:
3a:4a:95:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 21:13:10 2025 by rpki-client