Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/7104d4-7414-49d2-9b84-8b1a093c8c5c/1/TVP4paBndE6P43yXwcxLiH7axyA.mft
File: TVP4paBndE6P43yXwcxLiH7axyA.mft (raw, json)
Hash identifier: OVxD8yHTMv7Fh10QsUVLf1aWQtpT5uEH12YmjWpAvDE=
Subject key identifier: 05:0A:45:05:AB:25:3E:DD:3D:EA:DD:BF:09:8E:D0:8D:B5:69:56:BF
Authority key identifier: 4D:53:F8:A5:A0:67:74:4E:8F:E3:7C:97:C1:CC:4B:88:7E:DA:C7:20
Certificate issuer: /CN=4d53f8a5a067744e8fe37c97c1cc4b887edac720
Certificate serial: 0199FC585608A1752B6209958E58E75C307D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TVP4paBndE6P43yXwcxLiH7axyA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/7104d4-7414-49d2-9b84-8b1a093c8c5c/1/TVP4paBndE6P43yXwcxLiH7axyA.mft
Manifest number: 1622
Signing time: Sun 19 Oct 2025 12:01:11 +0000
Manifest this update: Sun 19 Oct 2025 12:01:11 +0000
Manifest next update: Mon 20 Oct 2025 12:01:11 +0000
Files and hashes: 1: TVP4paBndE6P43yXwcxLiH7axyA.crl (hash: 8Wjj6THI/cizRmgGT1uNr9KGRRAM2iiY8xWrdvDSme8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/7104d4-7414-49d2-9b84-8b1a093c8c5c/1/TVP4paBndE6P43yXwcxLiH7axyA.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/7104d4-7414-49d2-9b84-8b1a093c8c5c/1/TVP4paBndE6P43yXwcxLiH7axyA.mft
rsync://rpki.ripe.net/repository/DEFAULT/TVP4paBndE6P43yXwcxLiH7axyA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:56:08:a1:75:2b:62:09:95:8e:58:e7:5c:30:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d53f8a5a067744e8fe37c97c1cc4b887edac720
Validity
Not Before: Oct 19 12:01:11 2025 GMT
Not After : Oct 20 12:01:11 2025 GMT
Subject: CN=050a4505ab253edd3deaddbf098ed08db56956bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:08:14:8a:02:5c:d3:61:34:4e:bb:f2:39:4a:
4d:ca:d4:ad:55:f2:e8:fd:1b:88:20:5c:f0:97:2e:
f8:8c:f7:a4:01:2f:ea:32:81:09:a7:85:2b:a3:1a:
df:f9:48:6d:f8:11:99:f1:ad:3a:bf:c1:8a:b3:cf:
b5:5a:bd:a0:d1:66:8e:57:4a:d1:c7:35:91:7c:39:
d7:e1:5b:40:da:51:fa:96:a9:95:7a:7e:f0:06:82:
5e:87:b4:c7:1b:36:45:e8:b4:5c:65:f3:d6:e3:43:
bd:d2:aa:e6:53:32:d6:fd:61:cf:1b:0a:a3:8e:75:
a0:a1:1a:ed:ce:6a:b4:e2:40:57:39:3e:e9:17:f1:
e0:fd:62:01:b5:87:eb:d8:30:99:72:01:d3:5e:64:
78:3a:2b:1a:70:93:e9:44:88:31:61:2a:a0:57:14:
6d:76:6b:2c:11:48:05:76:2c:d7:0b:84:5a:7c:6c:
bc:ec:ea:b5:e9:f5:1f:62:f6:05:cd:bd:02:ea:d5:
38:bd:cd:2c:ae:e1:be:e9:e4:25:77:ac:fb:7e:be:
f2:82:d6:d1:30:8d:e2:84:2a:ff:af:a3:6b:4a:8a:
96:4b:f3:fc:8e:d4:f7:d0:73:c7:e8:af:6d:a9:c0:
08:ea:d3:72:f6:27:8e:7c:f7:52:ad:f9:9d:95:38:
e6:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:0A:45:05:AB:25:3E:DD:3D:EA:DD:BF:09:8E:D0:8D:B5:69:56:BF
X509v3 Authority Key Identifier:
keyid:4D:53:F8:A5:A0:67:74:4E:8F:E3:7C:97:C1:CC:4B:88:7E:DA:C7:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TVP4paBndE6P43yXwcxLiH7axyA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/7104d4-7414-49d2-9b84-8b1a093c8c5c/1/TVP4paBndE6P43yXwcxLiH7axyA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/7104d4-7414-49d2-9b84-8b1a093c8c5c/1/TVP4paBndE6P43yXwcxLiH7axyA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:91:ef:64:ee:bd:3b:57:71:d4:19:b1:cd:b0:56:f9:72:39:
e4:25:f3:d2:45:5b:a4:9b:d0:06:b6:ff:71:ae:ce:bd:3f:b7:
0d:c2:db:26:47:98:27:0e:6d:90:0c:d8:ed:4d:bb:cb:ce:06:
38:43:f2:6d:6c:c9:22:4f:cb:67:0c:fe:44:ca:ca:b4:d3:3b:
91:56:07:2c:65:50:8d:74:81:ca:ff:08:f1:89:4c:d3:b1:bb:
1e:a2:f8:35:26:46:4d:5a:d3:4b:9d:4b:6a:40:7c:59:7a:a8:
ad:69:0b:33:8a:6f:7f:d0:eb:c3:5b:d3:f1:8e:21:e3:8e:95:
e5:ed:8a:85:87:11:6a:49:40:ed:8f:8b:7a:d9:04:19:98:5a:
e4:c2:74:bf:e3:fc:84:96:84:38:89:f7:56:11:43:4d:17:7a:
a1:94:92:ca:fb:f3:f4:7d:c6:00:2f:d7:84:2d:45:3f:3d:be:
7e:5e:4b:08:78:4c:98:e8:e3:fd:30:f0:7b:29:c4:66:9a:d8:
96:d5:3c:87:84:b4:82:b8:4c:ba:ac:68:8a:4a:b8:77:c9:5b:
80:4d:97:37:a2:14:5a:ff:2e:a4:08:e1:4e:b7:91:84:35:84:
68:f1:a1:42:17:f9:63:9a:7b:c7:3f:d2:11:f8:23:90:03:d7:
d3:7a:d4:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:05:36 2025 by rpki-client