Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/e2451c-e31c-4c30-86f2-0e516f9c4d45/1/_tvrNJcjK29ayaJodTchEBWihxA.mft
File: _tvrNJcjK29ayaJodTchEBWihxA.mft (raw, json)
Hash identifier: 0TASU3MEkJ796hQOqRjcMTAk05NmDsJFEpSMYXqYKrA=
Subject key identifier: B4:D1:E0:DA:13:87:9B:3E:E3:10:BE:96:21:57:B0:F4:CE:D3:1A:0B
Authority key identifier: FE:DB:EB:34:97:23:2B:6F:5A:C9:A2:68:75:37:21:10:15:A2:87:10
Certificate issuer: /CN=fedbeb3497232b6f5ac9a2687537211015a28710
Certificate serial: 0199FDD9BFE2CE536C32354BE5587D17D248
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_tvrNJcjK29ayaJodTchEBWihxA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/e2451c-e31c-4c30-86f2-0e516f9c4d45/1/_tvrNJcjK29ayaJodTchEBWihxA.mft
Manifest number: 16E1
Signing time: Sun 19 Oct 2025 19:02:10 +0000
Manifest this update: Sun 19 Oct 2025 19:02:10 +0000
Manifest next update: Mon 20 Oct 2025 19:02:10 +0000
Files and hashes: 1: _tvrNJcjK29ayaJodTchEBWihxA.crl (hash: C+gjcbKvUjjWSNO4mJOPmAmx1vVVyw9x478QH1sgLVg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/e2451c-e31c-4c30-86f2-0e516f9c4d45/1/_tvrNJcjK29ayaJodTchEBWihxA.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/e2451c-e31c-4c30-86f2-0e516f9c4d45/1/_tvrNJcjK29ayaJodTchEBWihxA.mft
rsync://rpki.ripe.net/repository/DEFAULT/_tvrNJcjK29ayaJodTchEBWihxA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d9:bf:e2:ce:53:6c:32:35:4b:e5:58:7d:17:d2:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fedbeb3497232b6f5ac9a2687537211015a28710
Validity
Not Before: Oct 19 19:02:10 2025 GMT
Not After : Oct 20 19:02:10 2025 GMT
Subject: CN=b4d1e0da13879b3ee310be962157b0f4ced31a0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:6c:a0:d3:dc:8e:cf:3d:ce:d4:df:d0:09:2b:
18:19:c8:8a:c3:57:97:15:f3:e8:88:d5:7e:20:4a:
40:49:6d:5e:87:61:52:cd:8b:5d:bd:53:28:f8:c2:
61:f0:0c:97:2c:9b:33:ef:91:4b:cf:65:92:c2:76:
2c:19:5d:95:32:8d:f5:8d:cc:f3:9b:1a:e2:64:82:
e9:11:c2:1d:e5:86:b3:81:d0:20:9f:d8:9c:e7:58:
93:ca:e4:7d:d8:17:9c:85:ed:c8:f0:f0:79:ce:ee:
37:16:6a:e5:51:5f:6e:5c:75:5e:15:38:09:7f:7d:
1a:53:56:47:e1:d5:15:4c:ff:13:04:91:52:b7:07:
44:7f:59:3e:a4:a5:b3:46:d4:b7:72:60:ad:65:52:
7e:97:c7:de:2e:23:6a:29:b9:25:3e:47:a7:71:79:
a1:1e:f8:be:34:d0:10:05:04:4d:b0:5b:8e:be:2e:
88:e4:44:a5:cc:28:c7:3a:c1:6e:64:2d:e2:03:00:
93:15:4c:d6:98:a2:1c:3c:1f:bf:bf:b5:fc:c4:a0:
96:9f:8c:a5:11:1a:6f:a2:68:85:b5:95:55:2b:a7:
f2:38:66:bc:d2:f1:50:b7:7c:60:26:94:a9:7e:03:
f0:94:4d:66:3d:8e:65:14:30:90:bf:54:78:ba:15:
b2:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:D1:E0:DA:13:87:9B:3E:E3:10:BE:96:21:57:B0:F4:CE:D3:1A:0B
X509v3 Authority Key Identifier:
keyid:FE:DB:EB:34:97:23:2B:6F:5A:C9:A2:68:75:37:21:10:15:A2:87:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_tvrNJcjK29ayaJodTchEBWihxA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/e2451c-e31c-4c30-86f2-0e516f9c4d45/1/_tvrNJcjK29ayaJodTchEBWihxA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/e2451c-e31c-4c30-86f2-0e516f9c4d45/1/_tvrNJcjK29ayaJodTchEBWihxA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:67:85:48:1b:e0:e4:1b:4b:e2:59:3d:05:02:fe:32:59:ac:
bf:f9:ce:e3:0a:fd:c4:32:8d:fc:ca:ad:0f:79:a7:16:4b:e6:
89:78:76:e5:7d:4a:8d:44:a0:88:64:07:ea:77:f0:4a:57:9a:
b6:11:ec:89:5d:0d:bc:1d:6e:0e:f3:2f:51:6d:f9:06:f0:8a:
a1:e7:cf:2b:7f:10:67:7e:5c:e1:e4:13:28:22:e3:0f:b5:de:
17:a8:69:24:10:6e:a2:08:d6:2c:c5:24:ad:f7:d1:1e:33:d1:
b1:4e:b3:42:41:98:e3:e6:bc:43:9e:a1:dc:17:a5:ad:47:59:
72:ee:99:36:cf:11:2e:b7:1f:4a:cb:ca:33:4c:a8:c0:db:cc:
3d:7d:c8:09:0d:8f:6f:c2:c5:7d:f1:9b:b9:2a:39:d1:57:2a:
c5:11:19:47:b7:e5:c9:24:90:1e:81:4d:e1:c0:47:cc:6a:d3:
6d:0e:cf:7a:b8:7d:ed:6d:41:93:f3:0c:b5:8c:7d:3e:9f:40:
a1:0a:e4:ca:ab:f8:63:d5:e0:27:dc:19:e9:06:fb:23:67:b4:
10:b8:48:5a:7b:73:7b:3d:56:72:5e:cb:d1:da:7b:e9:3e:64:
f3:1c:fe:96:8b:b1:5f:83:09:63:a0:0d:97:f1:3c:57:6a:21:
bb:4d:38:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:50:37 2025 by rpki-client