Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/02b7d6-269b-4bb2-b455-391768573496/1/TjS6bj4mlMezjkZRr-4GGwsh3q4.mft
File: TjS6bj4mlMezjkZRr-4GGwsh3q4.mft (raw, json)
Hash identifier: yzzlRh3OHmzbGaJjRA+OPqA/5TQ2LE0CEln+cKMMUeg=
Subject key identifier: 44:29:C3:DB:11:45:F8:4E:74:84:01:D5:6D:49:72:18:95:22:D0:35
Authority key identifier: 4E:34:BA:6E:3E:26:94:C7:B3:8E:46:51:AF:EE:06:1B:0B:21:DE:AE
Certificate issuer: /CN=4e34ba6e3e2694c7b38e4651afee061b0b21deae
Certificate serial: 0199FBEC1CABD842745665F40187129DA3CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TjS6bj4mlMezjkZRr-4GGwsh3q4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/02b7d6-269b-4bb2-b455-391768573496/1/TjS6bj4mlMezjkZRr-4GGwsh3q4.mft
Manifest number: 0203
Signing time: Sun 19 Oct 2025 10:02:59 +0000
Manifest this update: Sun 19 Oct 2025 10:02:59 +0000
Manifest next update: Mon 20 Oct 2025 10:02:59 +0000
Files and hashes: 1: TjS6bj4mlMezjkZRr-4GGwsh3q4.crl (hash: e0QLu82awiuuzjC3zoLvg8ouw6Cd6y6+7CIJ644yF10=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/02b7d6-269b-4bb2-b455-391768573496/1/TjS6bj4mlMezjkZRr-4GGwsh3q4.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/02b7d6-269b-4bb2-b455-391768573496/1/TjS6bj4mlMezjkZRr-4GGwsh3q4.mft
rsync://rpki.ripe.net/repository/DEFAULT/TjS6bj4mlMezjkZRr-4GGwsh3q4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:02:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ec:1c:ab:d8:42:74:56:65:f4:01:87:12:9d:a3:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e34ba6e3e2694c7b38e4651afee061b0b21deae
Validity
Not Before: Oct 19 10:02:59 2025 GMT
Not After : Oct 20 10:02:59 2025 GMT
Subject: CN=4429c3db1145f84e748401d56d4972189522d035
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:0c:5f:26:b5:20:4e:25:aa:21:63:3a:d3:23:
6f:ce:de:a7:85:1f:60:0d:3e:54:6d:b0:d3:9f:aa:
88:58:83:9d:ef:ed:69:bb:8a:ca:54:7d:e7:c7:b6:
9b:c5:df:13:7d:e7:bc:fe:9f:83:11:f0:74:b0:e7:
50:e3:65:9b:23:bd:62:db:a8:22:3e:e8:12:55:f0:
74:03:92:0b:ff:17:70:b9:2b:c4:25:71:ff:1f:86:
66:7b:8e:ab:3f:9d:51:b7:2d:27:da:dd:8b:bb:79:
2f:60:51:06:63:54:ef:be:fa:f4:45:1f:51:a1:3d:
e1:1e:ed:25:2e:a1:10:c5:88:d8:0d:cb:01:b5:9a:
72:f1:d5:6d:e1:ce:1b:8e:6c:b3:8c:bb:8c:6d:92:
c4:10:ce:b1:b7:b0:14:53:cb:2e:ba:9f:a6:4d:55:
17:5c:57:c6:90:5e:f6:b0:df:09:16:0b:f9:98:0a:
59:a1:5a:52:4f:20:2a:31:f5:a5:6d:5c:a1:f8:95:
aa:2a:27:7e:58:d9:f7:7a:9a:51:ef:c2:d3:6f:d1:
62:e2:21:cb:e8:da:b9:00:ad:c0:31:90:35:48:65:
5e:5f:9c:f6:66:44:db:f8:5e:f5:5b:19:80:e2:66:
6c:f2:3a:e4:3a:5a:95:44:10:f7:32:55:d8:e4:78:
64:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:29:C3:DB:11:45:F8:4E:74:84:01:D5:6D:49:72:18:95:22:D0:35
X509v3 Authority Key Identifier:
keyid:4E:34:BA:6E:3E:26:94:C7:B3:8E:46:51:AF:EE:06:1B:0B:21:DE:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TjS6bj4mlMezjkZRr-4GGwsh3q4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/02b7d6-269b-4bb2-b455-391768573496/1/TjS6bj4mlMezjkZRr-4GGwsh3q4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/02b7d6-269b-4bb2-b455-391768573496/1/TjS6bj4mlMezjkZRr-4GGwsh3q4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:4c:3b:51:e0:a0:89:dc:e7:23:c9:20:aa:33:c6:76:de:e4:
a9:bd:c2:1b:1a:fd:40:73:be:a7:60:c0:16:40:e6:85:97:64:
e7:ae:fd:bf:af:75:a6:61:b4:37:26:25:2e:7f:3c:b3:61:05:
71:e1:02:17:9d:d4:5a:21:aa:b5:f5:42:92:1c:f7:a3:9f:46:
e6:e2:82:cd:b6:7b:d5:97:12:59:3a:83:89:3a:48:5a:ca:88:
dd:58:73:55:81:d2:3a:e8:b0:0d:d6:b5:3d:1c:f4:2a:5b:11:
02:06:cf:25:b3:fd:4a:05:ea:fd:8a:78:90:0f:ce:98:50:7a:
3c:d5:17:bf:fb:9f:89:b4:24:c6:f8:07:e0:3b:13:f9:62:88:
d9:b9:87:30:19:6b:a0:16:59:fc:cb:76:04:e0:65:df:5a:5a:
9d:8f:db:d0:f1:13:9b:2c:f4:92:f1:f4:e3:c2:d6:70:a3:b5:
2a:05:41:ee:dc:78:e1:84:38:79:9d:f9:17:2e:78:61:d3:26:
d8:97:86:d6:66:79:9a:74:fb:78:54:32:a3:1e:51:23:25:0a:
b9:ea:56:4b:ee:bc:aa:fe:25:46:e1:fe:53:b5:f6:7a:a7:57:
b9:61:e8:07:6a:6f:85:be:c7:c1:11:2b:c7:28:fb:25:5b:7b:
d9:2d:ea:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:35:13 2025 by rpki-client