Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/f21bf0-ba49-43ba-898c-539f9cba00c5/1/Tddxzuh-yov3sS4KYwbxgdKlWm0.mft
File: Tddxzuh-yov3sS4KYwbxgdKlWm0.mft (raw, json)
Hash identifier: NJUEVL8ih1l8KQSxbwb9fXMbUA2+19GESSyHhyuj9nU=
Subject key identifier: 77:4D:77:47:8E:F6:DE:E0:8D:DF:F4:A5:B3:F1:68:3A:BF:74:D7:09
Authority key identifier: 4D:D7:71:CE:E8:7E:CA:8B:F7:B1:2E:0A:63:06:F1:81:D2:A5:5A:6D
Certificate issuer: /CN=4dd771cee87eca8bf7b12e0a6306f181d2a55a6d
Certificate serial: 0199FCFD2AFB8F59E2BF9B5C9DA05DA0CD36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tddxzuh-yov3sS4KYwbxgdKlWm0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/f21bf0-ba49-43ba-898c-539f9cba00c5/1/Tddxzuh-yov3sS4KYwbxgdKlWm0.mft
Manifest number: 02A9
Signing time: Sun 19 Oct 2025 15:01:14 +0000
Manifest this update: Sun 19 Oct 2025 15:01:14 +0000
Manifest next update: Mon 20 Oct 2025 15:01:14 +0000
Files and hashes: 1: Tddxzuh-yov3sS4KYwbxgdKlWm0.crl (hash: tAayPQP3pJUerwuIpYI8YkT829uG8RLcRGnagrVJds0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/f21bf0-ba49-43ba-898c-539f9cba00c5/1/Tddxzuh-yov3sS4KYwbxgdKlWm0.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/f21bf0-ba49-43ba-898c-539f9cba00c5/1/Tddxzuh-yov3sS4KYwbxgdKlWm0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Tddxzuh-yov3sS4KYwbxgdKlWm0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:fd:2a:fb:8f:59:e2:bf:9b:5c:9d:a0:5d:a0:cd:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4dd771cee87eca8bf7b12e0a6306f181d2a55a6d
Validity
Not Before: Oct 19 15:01:14 2025 GMT
Not After : Oct 20 15:01:14 2025 GMT
Subject: CN=774d77478ef6dee08ddff4a5b3f1683abf74d709
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:7d:20:2b:a6:91:01:66:20:df:d6:24:76:f2:
c6:7a:c2:ca:9d:fa:ea:f6:03:b3:75:92:b7:77:4a:
2e:46:96:3a:ce:ab:79:ee:1b:c9:63:c1:ed:d0:f6:
23:c0:f1:e9:65:86:5e:67:0c:15:63:3d:2c:fc:48:
75:5c:a0:f5:e7:e7:0d:55:97:66:f9:fb:8b:0a:da:
99:7d:a7:72:b5:a4:d9:7c:82:5e:49:69:86:9c:5f:
02:34:ab:38:a9:ff:52:e2:df:e9:93:aa:e3:52:20:
d0:48:3f:18:01:7b:08:d1:cc:e7:f4:bb:38:10:56:
b9:08:6c:40:9d:bb:e3:83:14:02:0d:91:a0:cb:c4:
cb:ee:63:67:49:33:89:46:22:0b:b6:8a:aa:c6:68:
36:f9:17:56:26:06:40:b0:43:2e:5d:a6:4d:f9:42:
89:1b:c6:24:d8:94:20:ff:3b:fb:63:7a:88:34:5e:
66:60:26:b2:d0:b9:96:c0:a6:bf:6c:68:0b:aa:f0:
b7:8d:4e:d5:af:ab:28:f5:57:40:a4:3c:22:22:c8:
a8:ed:e9:a8:71:b6:96:4a:a0:4e:0a:9a:23:c5:c2:
7c:27:34:a0:e0:e3:e8:5d:40:76:28:1a:61:42:8a:
a0:0d:e2:4a:be:6f:08:de:14:88:56:e1:80:c1:b0:
8f:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:4D:77:47:8E:F6:DE:E0:8D:DF:F4:A5:B3:F1:68:3A:BF:74:D7:09
X509v3 Authority Key Identifier:
keyid:4D:D7:71:CE:E8:7E:CA:8B:F7:B1:2E:0A:63:06:F1:81:D2:A5:5A:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tddxzuh-yov3sS4KYwbxgdKlWm0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/f21bf0-ba49-43ba-898c-539f9cba00c5/1/Tddxzuh-yov3sS4KYwbxgdKlWm0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/f21bf0-ba49-43ba-898c-539f9cba00c5/1/Tddxzuh-yov3sS4KYwbxgdKlWm0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:40:8f:51:23:bd:44:33:ac:81:66:c2:66:04:bf:0c:fd:70:
66:df:66:a8:b8:54:ab:ba:1d:66:6d:75:6e:3a:b1:dc:81:a7:
95:56:33:c4:5d:d3:82:6c:e2:0b:8f:56:24:65:b8:30:97:dd:
2f:5e:81:ee:d1:38:90:4e:0a:4d:72:ac:0b:4e:bb:d8:22:e0:
fa:96:6e:6c:e3:97:2c:f7:54:e6:52:7b:b8:30:30:73:c6:93:
ab:a2:80:36:e5:f9:87:6b:78:ba:c2:b7:67:7a:aa:5c:bc:58:
f7:73:75:2d:5d:a8:fd:4c:f0:94:9d:82:7b:95:38:39:8d:4f:
7e:6b:7f:56:3b:22:62:be:38:8d:6d:6e:69:43:90:9b:11:88:
a8:df:d4:17:42:c2:01:d7:65:df:79:97:fb:61:0d:fe:11:a4:
62:4e:7f:b0:b6:40:8e:ad:08:4a:41:a1:5f:b5:8b:98:0c:e8:
fa:83:22:ef:67:8e:2d:64:bc:60:cf:cc:25:4c:8f:c4:23:77:
0d:2e:47:2d:ab:21:b1:fc:df:4b:97:36:99:d9:46:bd:40:14:
5b:84:25:d0:fe:21:36:52:f7:1d:9b:70:3b:a0:e7:6a:d3:36:
8c:7f:48:05:6c:40:83:c7:ab:65:d1:67:f1:0d:73:0e:b5:49:
32:64:61:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:07:13 2025 by rpki-client