Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/51e8b5-7e2c-4008-bf83-b12eb1ceaa14/1/TNN3vorxFHipq-Jx-L3i3j0zNAg.mft
File: TNN3vorxFHipq-Jx-L3i3j0zNAg.mft (raw, json)
Hash identifier: snjYGLp4CIdRXEyONVHa5HOQPAY1qO9kLsPF2+q1ze0=
Subject key identifier: 4C:83:29:5D:3F:EB:16:1C:D0:1E:B9:BC:48:04:95:C7:C5:63:85:93
Authority key identifier: 4C:D3:77:BE:8A:F1:14:78:A9:AB:E2:71:F8:BD:E2:DE:3D:33:34:08
Certificate issuer: /CN=4cd377be8af11478a9abe271f8bde2de3d333408
Certificate serial: 019A0035B23E99EDBF014667F8FB2435EAF0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TNN3vorxFHipq-Jx-L3i3j0zNAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/51e8b5-7e2c-4008-bf83-b12eb1ceaa14/1/TNN3vorxFHipq-Jx-L3i3j0zNAg.mft
Manifest number: 0934
Signing time: Mon 20 Oct 2025 06:01:50 +0000
Manifest this update: Mon 20 Oct 2025 06:01:50 +0000
Manifest next update: Tue 21 Oct 2025 06:01:50 +0000
Files and hashes: 1: TNN3vorxFHipq-Jx-L3i3j0zNAg.crl (hash: J3Ila0Td+9wx4ozL7XeEoICJTOOJh5mJ3UT16Iq1sB8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/51e8b5-7e2c-4008-bf83-b12eb1ceaa14/1/TNN3vorxFHipq-Jx-L3i3j0zNAg.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/51e8b5-7e2c-4008-bf83-b12eb1ceaa14/1/TNN3vorxFHipq-Jx-L3i3j0zNAg.mft
rsync://rpki.ripe.net/repository/DEFAULT/TNN3vorxFHipq-Jx-L3i3j0zNAg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 06:01:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:00:35:b2:3e:99:ed:bf:01:46:67:f8:fb:24:35:ea:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4cd377be8af11478a9abe271f8bde2de3d333408
Validity
Not Before: Oct 20 06:01:50 2025 GMT
Not After : Oct 21 06:01:50 2025 GMT
Subject: CN=4c83295d3feb161cd01eb9bc480495c7c5638593
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:3a:2b:a8:a5:34:d6:b0:1d:1f:63:ee:c8:78:
ee:3f:b7:c8:47:e5:c3:dc:aa:42:39:bd:6a:87:db:
fd:a9:7a:65:f7:d4:78:85:6f:a5:2f:a6:64:ca:c9:
49:10:8d:6f:f4:bc:17:a7:87:4d:4b:33:eb:b3:f4:
3c:90:52:4d:9e:81:35:1c:f6:af:c5:8c:5c:bf:20:
90:d0:1c:b3:67:d1:3f:fb:4a:47:56:c9:67:ec:3a:
ee:10:14:59:7f:a0:14:01:e8:1d:ec:d0:b7:35:23:
53:ed:4f:50:9c:b7:11:03:23:c5:9a:fe:8b:f6:60:
79:0e:63:65:d5:c3:c8:21:5d:2b:77:24:f6:45:05:
ee:d3:ec:3b:b9:84:ef:3b:22:2b:83:76:a4:ba:c2:
7b:f7:84:d8:a8:3e:0b:ef:88:4c:5a:70:3a:1e:99:
fe:0e:b4:87:e8:4c:58:dd:ae:f2:85:a7:9b:00:b4:
b3:92:b0:de:5f:1e:25:49:22:e0:2c:71:73:40:c0:
03:b7:19:d6:78:9d:94:76:40:f9:bb:cb:af:32:f6:
39:f3:51:07:2a:6e:8c:9b:11:04:66:97:be:7b:15:
0e:ee:af:51:21:8b:d5:49:a8:d6:d5:72:30:be:61:
10:9d:99:27:10:77:26:19:a7:3b:48:51:9f:77:68:
39:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:83:29:5D:3F:EB:16:1C:D0:1E:B9:BC:48:04:95:C7:C5:63:85:93
X509v3 Authority Key Identifier:
keyid:4C:D3:77:BE:8A:F1:14:78:A9:AB:E2:71:F8:BD:E2:DE:3D:33:34:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TNN3vorxFHipq-Jx-L3i3j0zNAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/51e8b5-7e2c-4008-bf83-b12eb1ceaa14/1/TNN3vorxFHipq-Jx-L3i3j0zNAg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/51e8b5-7e2c-4008-bf83-b12eb1ceaa14/1/TNN3vorxFHipq-Jx-L3i3j0zNAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:a8:c0:8e:35:7f:87:49:42:89:82:3b:d2:4b:51:ff:b6:da:
1d:53:12:bf:1c:2f:69:83:f8:ca:f8:ba:13:57:5a:b7:a9:23:
91:6a:20:7c:61:92:2e:ad:90:e8:d7:c8:64:a8:b7:da:76:a9:
b0:23:06:dc:8d:14:83:69:93:d9:74:51:df:50:e6:1f:11:fd:
80:15:cc:d3:5f:b2:27:4b:a5:5d:51:c3:bb:4a:bd:79:6d:6d:
1b:c8:cb:0f:31:48:cb:9f:bc:6d:4e:a7:23:30:9a:21:27:c8:
a2:54:4a:e6:98:f1:72:76:de:63:fb:56:72:c6:7d:8d:ca:cf:
e4:70:7e:5d:2f:1b:27:ff:c3:2d:1f:18:21:49:2b:90:4b:46:
3a:54:35:da:f6:80:8a:a7:f2:c2:06:a0:59:8d:c1:71:cf:b5:
68:2e:6c:be:08:3a:8e:58:39:73:aa:88:60:df:8d:ab:08:a6:
c7:29:65:95:5a:72:a1:d1:1b:b3:a6:4c:99:16:ed:06:56:af:
38:13:b5:79:a0:b6:7e:6e:51:1c:56:df:b8:3f:a0:ea:5e:ef:
da:c7:6f:f9:12:d2:32:c4:36:36:ab:5a:af:1b:1b:71:9f:13:
cb:dd:0c:62:62:fe:44:49:ed:0b:ea:4d:81:0f:58:97:03:fe:
06:12:c5:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 15:56:49 2025 by rpki-client