Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/e94ce1-0d7b-431b-9143-fc3f5ec14a5b/1/TsRiBLT4hZI6pKl4btWsr7HACd4.mft
File: TsRiBLT4hZI6pKl4btWsr7HACd4.mft (raw, json)
Hash identifier: k307EybpkkZgOgz1AUp/lkyCHd/xm5AIDwMhTmJjkCs=
Subject key identifier: 95:F3:E8:78:F4:40:65:FD:43:E9:71:AF:DF:EB:E6:8C:9E:FD:E5:62
Authority key identifier: 4E:C4:62:04:B4:F8:85:92:3A:A4:A9:78:6E:D5:AC:AF:B1:C0:09:DE
Certificate issuer: /CN=4ec46204b4f885923aa4a9786ed5acafb1c009de
Certificate serial: 0199FB45C248012B7412D02456FE13179023
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TsRiBLT4hZI6pKl4btWsr7HACd4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/e94ce1-0d7b-431b-9143-fc3f5ec14a5b/1/TsRiBLT4hZI6pKl4btWsr7HACd4.mft
Manifest number: 0BB1
Signing time: Sun 19 Oct 2025 07:01:16 +0000
Manifest this update: Sun 19 Oct 2025 07:01:16 +0000
Manifest next update: Mon 20 Oct 2025 07:01:16 +0000
Files and hashes: 1: TsRiBLT4hZI6pKl4btWsr7HACd4.crl (hash: SiwCLvNqsE5y3qo0K15BqCIZz8j0TMlDLAvkacv06HM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/e94ce1-0d7b-431b-9143-fc3f5ec14a5b/1/TsRiBLT4hZI6pKl4btWsr7HACd4.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/e94ce1-0d7b-431b-9143-fc3f5ec14a5b/1/TsRiBLT4hZI6pKl4btWsr7HACd4.mft
rsync://rpki.ripe.net/repository/DEFAULT/TsRiBLT4hZI6pKl4btWsr7HACd4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:45:c2:48:01:2b:74:12:d0:24:56:fe:13:17:90:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ec46204b4f885923aa4a9786ed5acafb1c009de
Validity
Not Before: Oct 19 07:01:16 2025 GMT
Not After : Oct 20 07:01:16 2025 GMT
Subject: CN=95f3e878f44065fd43e971afdfebe68c9efde562
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:34:cb:76:8a:b4:58:f8:40:01:90:98:df:22:
e0:22:cc:0c:8a:24:a9:ff:87:dd:77:32:ed:a7:e9:
0e:30:95:ea:14:db:cb:e8:86:c9:c8:a5:61:32:6f:
48:89:14:24:78:3a:6d:01:ef:14:c3:ce:26:6a:fc:
21:8b:38:df:8a:80:14:b5:41:4c:a2:8c:55:a7:9c:
68:10:25:c2:40:8b:80:36:bc:74:53:54:67:9d:c9:
41:f4:57:f0:bc:68:a3:0e:1d:66:52:05:6a:ac:52:
4a:ec:bd:71:35:0d:e9:c1:16:99:0b:88:06:b9:a1:
29:4c:a5:55:83:d2:d6:89:95:2c:b8:7f:67:b9:9b:
e7:b6:fa:af:9c:ba:a6:16:91:5f:b2:fb:ac:ad:24:
47:a3:88:27:5c:dc:d6:b4:f5:c8:13:f6:9c:24:d4:
7d:2b:6c:05:52:2e:b4:e6:79:ae:d0:59:5e:cf:44:
a4:97:09:d0:8e:60:ec:bb:1f:55:c4:53:1a:e6:a3:
cd:59:3d:a2:ac:99:9b:a2:b9:ca:30:b3:d9:d9:aa:
6c:87:89:fa:07:6b:e5:ae:53:0d:76:ec:31:67:c0:
a6:00:fb:0d:97:75:a6:49:de:37:08:cf:9d:c7:9f:
da:d4:a8:e2:06:47:62:c1:91:8e:c0:78:53:14:65:
cf:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:F3:E8:78:F4:40:65:FD:43:E9:71:AF:DF:EB:E6:8C:9E:FD:E5:62
X509v3 Authority Key Identifier:
keyid:4E:C4:62:04:B4:F8:85:92:3A:A4:A9:78:6E:D5:AC:AF:B1:C0:09:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TsRiBLT4hZI6pKl4btWsr7HACd4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/e94ce1-0d7b-431b-9143-fc3f5ec14a5b/1/TsRiBLT4hZI6pKl4btWsr7HACd4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/e94ce1-0d7b-431b-9143-fc3f5ec14a5b/1/TsRiBLT4hZI6pKl4btWsr7HACd4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:cc:0b:99:e6:85:43:6a:47:b0:1f:b7:2e:1d:ae:59:8c:12:
dd:84:50:5a:c2:e8:ad:b6:3a:c7:ad:d5:bd:f0:e2:21:f1:d1:
91:bf:de:3c:36:89:dc:61:ea:ce:bb:13:6b:a0:18:84:6c:9a:
45:4c:35:ea:4e:c7:d3:85:21:59:cc:f2:49:58:a3:d5:4c:d1:
58:b2:4d:43:2a:2a:18:b2:25:21:23:e2:f0:2c:89:4e:b4:ad:
36:74:69:d2:b0:9a:8d:56:50:9b:eb:40:06:c4:5d:6e:da:89:
ec:f5:f1:26:43:83:5d:cc:e4:34:92:14:fe:53:ac:db:27:5f:
15:ca:84:c6:46:e2:7e:46:2f:a2:ab:63:73:5f:c2:b5:f1:f9:
3e:63:db:cc:de:8f:17:e8:e7:58:39:28:31:09:7f:6b:ce:7a:
63:fe:97:af:0b:f2:08:34:7b:8c:d9:17:18:d0:86:8a:fa:47:
b2:e7:ee:82:10:8e:28:73:48:ad:a6:d9:db:f6:9e:60:bc:b5:
e8:03:3c:79:ff:8f:f2:14:28:80:f5:c3:6b:0a:bd:b7:11:3f:
b8:77:38:e6:b0:f6:57:ed:0c:fe:62:35:e3:02:24:06:84:97:
f3:84:e5:99:68:46:e0:be:70:89:47:70:4e:f8:dc:de:56:02:
60:66:6a:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:06:29 2025 by rpki-client