Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/901607-b1ee-49f0-bde2-7cba35cb6b81/1/tPtrTEeRZokREVxp4mlk89XsovQ.mft
File: tPtrTEeRZokREVxp4mlk89XsovQ.mft (raw, json)
Hash identifier: VQntK4EKOG762VMqL02I3LR/uD2ytNbotszUk6h1bBE=
Subject key identifier: B0:4E:BB:89:18:B9:45:C7:52:74:86:1E:F6:BE:E4:06:7C:DF:FE:9F
Authority key identifier: B4:FB:6B:4C:47:91:66:89:11:11:5C:69:E2:69:64:F3:D5:EC:A2:F4
Certificate issuer: /CN=b4fb6b4c4791668911115c69e26964f3d5eca2f4
Certificate serial: 0199FF59B7DC4856ECF47184DCF82BEC1EEF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tPtrTEeRZokREVxp4mlk89XsovQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/901607-b1ee-49f0-bde2-7cba35cb6b81/1/tPtrTEeRZokREVxp4mlk89XsovQ.mft
Manifest number: 043E
Signing time: Mon 20 Oct 2025 02:01:33 +0000
Manifest this update: Mon 20 Oct 2025 02:01:33 +0000
Manifest next update: Tue 21 Oct 2025 02:01:33 +0000
Files and hashes: 1: tPtrTEeRZokREVxp4mlk89XsovQ.crl (hash: wu+dzVIf0W3DwNeFQIANxDxTvuPClso2eV/e/Ajokio=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/901607-b1ee-49f0-bde2-7cba35cb6b81/1/tPtrTEeRZokREVxp4mlk89XsovQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/901607-b1ee-49f0-bde2-7cba35cb6b81/1/tPtrTEeRZokREVxp4mlk89XsovQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/tPtrTEeRZokREVxp4mlk89XsovQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:59:b7:dc:48:56:ec:f4:71:84:dc:f8:2b:ec:1e:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4fb6b4c4791668911115c69e26964f3d5eca2f4
Validity
Not Before: Oct 20 02:01:33 2025 GMT
Not After : Oct 21 02:01:33 2025 GMT
Subject: CN=b04ebb8918b945c75274861ef6bee4067cdffe9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:09:84:61:94:30:34:47:7b:48:ed:88:34:c8:
da:50:28:b6:1d:8f:76:a8:31:a3:40:3c:b1:e5:c7:
fa:81:fc:f9:63:6d:01:53:33:e5:bd:53:e7:ea:57:
1b:8c:dc:31:ea:d4:ef:eb:57:7a:2e:bf:8c:d4:e3:
0e:61:8a:bb:eb:f5:7c:ce:7c:58:a2:50:2a:d0:53:
23:08:8f:ee:35:9e:ea:4b:ef:5f:dd:7f:c3:d9:f9:
ac:01:31:6d:f3:66:98:cf:2f:3d:58:eb:7f:de:8f:
f2:f1:37:3c:a6:27:fc:0f:2c:30:61:dc:fe:c8:62:
1a:a8:89:cb:42:dd:e0:f3:b8:e4:10:a2:4b:c2:4f:
8f:0b:a8:c7:ff:e4:f3:f2:09:5e:0b:60:6f:77:2d:
e6:27:46:c7:e9:f7:eb:09:51:6e:e8:7a:05:26:04:
3f:30:af:b6:05:67:82:30:53:ba:34:c6:fb:93:1a:
81:aa:85:4e:de:0c:3a:fe:28:7e:84:44:38:25:88:
4b:e9:3c:f4:7d:ef:99:3b:b7:65:18:dd:05:ae:bc:
8e:40:ec:ae:80:a3:a4:93:79:ca:5c:97:59:81:85:
20:44:bb:f4:1d:94:ae:c3:e1:46:e4:3f:73:1e:3d:
75:3b:84:df:7c:37:61:5d:b6:a9:1e:34:8c:5c:13:
16:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:4E:BB:89:18:B9:45:C7:52:74:86:1E:F6:BE:E4:06:7C:DF:FE:9F
X509v3 Authority Key Identifier:
keyid:B4:FB:6B:4C:47:91:66:89:11:11:5C:69:E2:69:64:F3:D5:EC:A2:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tPtrTEeRZokREVxp4mlk89XsovQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/901607-b1ee-49f0-bde2-7cba35cb6b81/1/tPtrTEeRZokREVxp4mlk89XsovQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/901607-b1ee-49f0-bde2-7cba35cb6b81/1/tPtrTEeRZokREVxp4mlk89XsovQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:6a:58:2a:83:e6:58:9d:1e:4f:8d:a8:0b:d5:3f:b0:39:3c:
36:d0:5e:fb:16:5a:45:6c:11:7d:53:28:89:78:d3:04:a3:fa:
c5:34:a5:03:30:a8:55:a6:4f:9c:76:f5:62:09:1a:56:ea:29:
c7:18:97:0a:ac:74:ba:39:83:3e:37:f9:a1:cc:7b:67:f6:64:
cf:03:d0:cd:fe:66:f1:3c:4a:f0:6b:e0:23:89:e1:c1:86:b9:
1e:f5:40:34:33:89:89:ef:d5:f9:40:ff:be:d1:5e:d6:66:6a:
31:3d:27:61:4a:a6:ce:9d:e1:e3:47:ad:a0:4b:57:01:1b:2a:
8e:d2:d6:38:09:b2:45:cd:46:98:4d:af:4c:14:35:3b:10:9c:
65:08:7a:35:fe:db:5f:e0:b5:1a:0d:dc:30:ef:73:da:e8:8d:
99:5e:73:33:f2:e8:01:21:63:97:82:bb:ba:fd:b4:89:11:40:
e5:ca:ce:a1:69:42:06:1c:67:3e:63:b1:1c:7e:e2:fe:a6:d4:
be:1c:3a:52:5f:4b:50:59:b5:56:e7:a0:9b:11:1a:1f:91:b7:
30:9a:9c:3a:86:e5:66:45:a0:b1:c3:ab:6a:cd:5f:3a:a2:83:
8a:3d:6a:a9:8d:3f:5e:4a:a8:cb:90:06:c5:cc:08:92:78:68:
93:fc:99:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 05:24:52 2025 by rpki-client