Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/7a011b-31a4-499f-a391-0329c78a4cfa/1/TvJo4UPX5E0UNk0dKOhtw-VQqrc.mft
File: TvJo4UPX5E0UNk0dKOhtw-VQqrc.mft (raw, json)
Hash identifier: j2nzS5dGDJPFjxIs3B0tQxeSkZdWL3BBAjPEQnPWf/o=
Subject key identifier: 57:33:F9:FB:42:94:9E:F2:97:A8:84:4A:9B:2F:94:BE:CE:B1:A3:4B
Authority key identifier: 4E:F2:68:E1:43:D7:E4:4D:14:36:4D:1D:28:E8:6D:C3:E5:50:AA:B7
Certificate issuer: /CN=4ef268e143d7e44d14364d1d28e86dc3e550aab7
Certificate serial: 0199FBEC14C87843615C4504A388909CD2B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TvJo4UPX5E0UNk0dKOhtw-VQqrc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/7a011b-31a4-499f-a391-0329c78a4cfa/1/TvJo4UPX5E0UNk0dKOhtw-VQqrc.mft
Manifest number: 16DE
Signing time: Sun 19 Oct 2025 10:02:56 +0000
Manifest this update: Sun 19 Oct 2025 10:02:56 +0000
Manifest next update: Mon 20 Oct 2025 10:02:56 +0000
Files and hashes: 1: TvJo4UPX5E0UNk0dKOhtw-VQqrc.crl (hash: 48XtTqWt4LLoqPcnw9R0vcjpbMOav4+2cYFBvDfLUto=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/7a011b-31a4-499f-a391-0329c78a4cfa/1/TvJo4UPX5E0UNk0dKOhtw-VQqrc.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/7a011b-31a4-499f-a391-0329c78a4cfa/1/TvJo4UPX5E0UNk0dKOhtw-VQqrc.mft
rsync://rpki.ripe.net/repository/DEFAULT/TvJo4UPX5E0UNk0dKOhtw-VQqrc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:02:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ec:14:c8:78:43:61:5c:45:04:a3:88:90:9c:d2:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ef268e143d7e44d14364d1d28e86dc3e550aab7
Validity
Not Before: Oct 19 10:02:56 2025 GMT
Not After : Oct 20 10:02:56 2025 GMT
Subject: CN=5733f9fb42949ef297a8844a9b2f94beceb1a34b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:0a:f8:61:6b:f7:25:5a:f4:e8:a4:bc:5c:ea:
3d:04:f0:5e:cf:d7:cc:5e:af:d0:c5:78:40:14:fc:
1b:e9:68:a8:3a:f6:17:58:03:73:d3:29:64:24:e1:
99:0a:2f:07:c4:b8:2a:95:1a:a1:59:1d:b0:a4:7b:
38:51:2a:15:ed:ed:0f:87:22:53:2c:6d:b2:b7:7e:
74:c0:17:35:d8:6f:3c:af:39:cd:ea:80:99:ff:33:
c9:8c:40:e9:e3:c2:52:6e:c4:b3:79:21:16:9a:72:
35:e9:89:6e:96:4c:ca:a3:bb:3a:5c:c5:a1:b3:16:
b6:f6:8a:5c:23:9f:07:30:27:95:c7:78:b8:c7:a6:
e1:81:35:60:19:7b:80:63:e5:fe:01:13:61:66:52:
68:8f:31:0d:ae:e0:85:a6:eb:60:18:bb:15:00:b9:
f7:e0:09:3a:ed:08:83:57:61:71:08:3a:ea:1e:47:
83:d8:44:21:e0:1f:17:27:f1:ec:96:63:2a:f8:f6:
a3:2b:82:20:7f:28:4d:45:94:f7:33:93:36:dc:75:
3e:1b:4e:f5:1f:b2:23:be:1d:3c:20:cd:60:d7:e8:
06:f3:dc:66:0b:5d:ef:e0:71:d8:d0:af:73:2b:d3:
a1:bb:df:3f:c0:07:8d:b1:16:df:58:9a:1a:88:26:
ea:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:33:F9:FB:42:94:9E:F2:97:A8:84:4A:9B:2F:94:BE:CE:B1:A3:4B
X509v3 Authority Key Identifier:
keyid:4E:F2:68:E1:43:D7:E4:4D:14:36:4D:1D:28:E8:6D:C3:E5:50:AA:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TvJo4UPX5E0UNk0dKOhtw-VQqrc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/7a011b-31a4-499f-a391-0329c78a4cfa/1/TvJo4UPX5E0UNk0dKOhtw-VQqrc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/7a011b-31a4-499f-a391-0329c78a4cfa/1/TvJo4UPX5E0UNk0dKOhtw-VQqrc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:d4:b7:aa:68:6d:f8:af:81:ad:62:b3:87:51:59:4e:58:11:
6d:d8:dc:df:f6:19:3c:04:3b:52:85:bf:60:56:75:0c:34:8a:
d3:65:83:94:1b:44:52:97:1c:9e:27:23:31:8f:4c:50:3e:d2:
22:3f:95:2c:29:d4:64:e3:8f:80:7d:1a:d1:4a:6a:86:e5:8c:
66:a3:e0:5a:d2:d9:2d:cf:af:7f:98:af:dc:c3:08:c1:dd:e4:
e4:70:5f:0e:58:5d:88:f7:b8:85:8d:af:14:40:4d:7b:15:f8:
40:9c:e8:6d:3d:01:7c:e0:68:4a:48:64:9e:76:fa:7a:62:bd:
e3:7b:7b:c0:8e:43:82:70:16:2b:85:5a:27:20:70:41:6d:c6:
90:fc:03:01:ec:29:2c:e9:78:50:b8:b8:30:73:7a:85:25:48:
26:b8:6b:11:4a:c5:95:c3:65:20:ac:23:37:18:3e:7b:e7:c3:
04:f8:3f:4c:f5:68:bd:5f:ce:b6:35:f5:3f:40:7d:a5:02:b4:
c5:ed:cc:a8:96:c4:f3:a4:28:de:96:83:0b:72:51:fd:31:a8:
03:49:8e:28:02:56:e6:90:ea:91:4a:a7:72:33:ad:b2:31:db:
8a:2c:b1:62:ac:8a:27:68:80:11:bc:c6:eb:93:2d:16:4f:21:
97:9b:82:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:20:25 2025 by rpki-client