Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/887501-4d8e-4beb-9590-65079b75868a/1/TTpxp39MqbpTb5hhKpxW1AwMO50.mft
File: TTpxp39MqbpTb5hhKpxW1AwMO50.mft (raw, json)
Hash identifier: y2PsnYILGPkGJmUxhkNZZHtA3IoCxwG+iP7oRVwsuLQ=
Subject key identifier: E9:99:34:F4:FA:BA:E4:BE:AE:78:88:19:D7:2D:83:3B:5F:39:80:5B
Authority key identifier: 4D:3A:71:A7:7F:4C:A9:BA:53:6F:98:61:2A:9C:56:D4:0C:0C:3B:9D
Certificate issuer: /CN=4d3a71a77f4ca9ba536f98612a9c56d40c0c3b9d
Certificate serial: 0199FFC755CD814CF9127075437DE99AF190
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TTpxp39MqbpTb5hhKpxW1AwMO50.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/887501-4d8e-4beb-9590-65079b75868a/1/TTpxp39MqbpTb5hhKpxW1AwMO50.mft
Manifest number: 16E1
Signing time: Mon 20 Oct 2025 04:01:17 +0000
Manifest this update: Mon 20 Oct 2025 04:01:17 +0000
Manifest next update: Tue 21 Oct 2025 04:01:17 +0000
Files and hashes: 1: TTpxp39MqbpTb5hhKpxW1AwMO50.crl (hash: a1d4/NLyPfiGZkVDSj+gyhGUB2jFihgFfudlO1nzJtc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/887501-4d8e-4beb-9590-65079b75868a/1/TTpxp39MqbpTb5hhKpxW1AwMO50.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/887501-4d8e-4beb-9590-65079b75868a/1/TTpxp39MqbpTb5hhKpxW1AwMO50.mft
rsync://rpki.ripe.net/repository/DEFAULT/TTpxp39MqbpTb5hhKpxW1AwMO50.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 04:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:c7:55:cd:81:4c:f9:12:70:75:43:7d:e9:9a:f1:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d3a71a77f4ca9ba536f98612a9c56d40c0c3b9d
Validity
Not Before: Oct 20 04:01:17 2025 GMT
Not After : Oct 21 04:01:17 2025 GMT
Subject: CN=e99934f4fabae4beae788819d72d833b5f39805b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:4c:25:2d:0d:f2:3d:0b:9e:10:60:c0:a3:32:
6c:17:b4:2b:4f:62:aa:73:e8:84:09:7e:0d:a5:16:
29:9d:16:a1:ee:dc:8f:c8:08:e9:57:bc:63:bb:71:
9a:fa:42:b9:ef:44:10:c3:14:67:19:6c:a9:7f:d9:
5d:8a:c3:3d:5b:f5:96:6a:25:c5:7e:c7:92:a0:26:
d6:12:60:2a:74:a2:7f:24:01:53:08:e9:fe:a6:4c:
1a:09:08:1c:c7:61:33:bb:f8:ac:ab:04:61:86:d6:
c9:73:86:ad:ff:8b:b3:fd:7c:95:d1:d3:1f:22:5d:
08:8f:a0:42:0b:a3:d6:24:00:c7:9c:2a:da:40:74:
e9:51:9a:10:17:fd:a7:f9:62:07:a0:5c:dc:e1:51:
3f:de:fe:f3:b2:cc:8d:48:5b:bb:99:01:69:99:e8:
b7:d4:d2:91:b3:18:3b:fe:6d:2c:00:e7:ff:28:bb:
32:e6:b2:b3:63:b7:73:45:2c:c3:df:4b:a7:5d:25:
5a:ca:16:70:34:8c:42:ce:7b:45:97:1e:cd:84:e7:
ea:4d:95:19:3e:57:a4:7f:35:f0:2d:48:12:07:49:
e2:4a:ac:f2:81:91:92:6a:cf:ee:de:58:9e:ae:16:
69:75:b7:02:77:41:8a:3e:12:47:87:2b:b6:5e:12:
8a:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:99:34:F4:FA:BA:E4:BE:AE:78:88:19:D7:2D:83:3B:5F:39:80:5B
X509v3 Authority Key Identifier:
keyid:4D:3A:71:A7:7F:4C:A9:BA:53:6F:98:61:2A:9C:56:D4:0C:0C:3B:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TTpxp39MqbpTb5hhKpxW1AwMO50.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/887501-4d8e-4beb-9590-65079b75868a/1/TTpxp39MqbpTb5hhKpxW1AwMO50.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/887501-4d8e-4beb-9590-65079b75868a/1/TTpxp39MqbpTb5hhKpxW1AwMO50.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c3:ae:0c:13:d3:0d:2c:a1:76:d4:b7:66:7d:42:91:5d:89:84:
52:aa:cc:c4:11:a3:5b:37:74:a3:13:1f:7c:44:8d:50:77:50:
9f:02:d5:50:de:f4:1d:38:2c:1b:6c:49:68:da:33:29:2a:5a:
30:7e:31:37:b4:58:c8:9c:e7:c4:0a:14:00:93:df:61:dd:ed:
4c:d2:17:65:63:8d:d8:70:8e:4c:36:62:5c:aa:02:38:b9:9c:
0d:dc:ba:2c:e0:1a:40:27:ee:19:11:51:ad:a1:4b:cb:4b:01:
e4:9f:ff:a3:c1:50:2c:2b:f3:6e:f3:22:73:3b:3d:2f:b2:12:
fe:69:e7:d2:12:0b:e4:d0:da:45:b4:97:f1:65:09:9e:11:1c:
be:36:d4:30:18:d5:6d:cb:10:7d:b8:69:93:d5:a2:84:32:5d:
12:27:17:d0:90:6b:16:67:c0:61:56:6a:16:84:19:94:88:99:
c5:8d:25:0c:c6:11:29:b7:ef:6a:32:68:7b:a5:46:b5:e6:a0:
23:48:48:78:e6:43:60:70:51:14:98:e4:41:34:7f:d0:7e:8f:
08:d9:84:70:de:3a:74:8d:18:73:98:87:56:76:85:56:19:08:
38:68:bd:3c:4f:63:14:47:28:82:ac:ba:2c:d1:4c:12:90:0e:
91:59:27:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:44:11 2025 by rpki-client