Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/37d3ee-640f-471f-a9b7-ac5a297f9ba4/1/Tb6Htwra566IC0Zwv6B46QmE1mA.mft
File: Tb6Htwra566IC0Zwv6B46QmE1mA.mft (raw, json)
Hash identifier: gocmV/EzTsrDTk/ElVjNbPizpB02P7ceAXqJ8k5Ku90=
Subject key identifier: 10:43:0E:50:B5:78:F2:6A:DB:0E:8A:A5:11:16:CE:96:AA:1A:59:44
Authority key identifier: 4D:BE:87:B7:0A:DA:E7:AE:88:0B:46:70:BF:A0:78:E9:09:84:D6:60
Certificate issuer: /CN=4dbe87b70adae7ae880b4670bfa078e90984d660
Certificate serial: 0199FC8F77A63DEF630A5E301AB8101A5FC0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tb6Htwra566IC0Zwv6B46QmE1mA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/37d3ee-640f-471f-a9b7-ac5a297f9ba4/1/Tb6Htwra566IC0Zwv6B46QmE1mA.mft
Manifest number: 1109
Signing time: Sun 19 Oct 2025 13:01:24 +0000
Manifest this update: Sun 19 Oct 2025 13:01:24 +0000
Manifest next update: Mon 20 Oct 2025 13:01:24 +0000
Files and hashes: 1: Tb6Htwra566IC0Zwv6B46QmE1mA.crl (hash: kVg+LMqRX6DkRBMkQkIeEOVAduB5A4qq0WLG9s/GSms=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/37d3ee-640f-471f-a9b7-ac5a297f9ba4/1/Tb6Htwra566IC0Zwv6B46QmE1mA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/37d3ee-640f-471f-a9b7-ac5a297f9ba4/1/Tb6Htwra566IC0Zwv6B46QmE1mA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Tb6Htwra566IC0Zwv6B46QmE1mA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 13:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:77:a6:3d:ef:63:0a:5e:30:1a:b8:10:1a:5f:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4dbe87b70adae7ae880b4670bfa078e90984d660
Validity
Not Before: Oct 19 13:01:24 2025 GMT
Not After : Oct 20 13:01:24 2025 GMT
Subject: CN=10430e50b578f26adb0e8aa51116ce96aa1a5944
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:93:83:61:b7:d7:82:d8:07:f0:46:2c:3c:f5:
5f:8b:a8:2c:20:27:47:0d:6f:79:3e:ba:14:00:78:
c1:f5:7c:ee:d0:3e:47:d5:7c:60:c2:d5:81:ec:a3:
e2:d1:9b:b3:2d:af:87:de:a2:8a:c7:6b:fe:00:21:
3b:4f:9a:e4:d6:9a:c0:9b:66:7f:ca:d7:30:13:a0:
d6:51:15:ab:a5:a6:6e:5f:4e:82:56:67:fd:d8:f4:
62:47:55:08:34:6c:e9:b8:58:70:ab:91:16:54:d1:
4b:06:27:12:71:65:17:5f:9d:93:af:c4:c6:9e:11:
22:5c:01:08:c2:99:e3:df:15:fe:61:b7:66:ee:ab:
d6:82:32:a3:bf:00:39:7f:77:14:a3:81:eb:b6:7f:
23:73:b5:2b:7e:e5:6b:32:c9:ab:53:95:47:46:6c:
4e:bd:28:b1:ec:57:ac:14:1d:20:12:1e:4c:03:f7:
36:73:4a:a8:b4:bb:b3:1e:5d:6e:94:e9:3c:ac:0e:
29:3c:3b:5f:17:d5:bf:01:04:af:ca:eb:dc:7e:cd:
65:5f:24:e4:7b:bc:8b:f8:d4:1e:e7:05:b8:c6:5d:
6c:f9:3a:b6:18:d2:27:db:26:f4:27:9b:a2:7e:9b:
38:7b:75:f9:a8:b9:74:71:00:ff:d5:7c:30:9b:ec:
94:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:43:0E:50:B5:78:F2:6A:DB:0E:8A:A5:11:16:CE:96:AA:1A:59:44
X509v3 Authority Key Identifier:
keyid:4D:BE:87:B7:0A:DA:E7:AE:88:0B:46:70:BF:A0:78:E9:09:84:D6:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tb6Htwra566IC0Zwv6B46QmE1mA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/37d3ee-640f-471f-a9b7-ac5a297f9ba4/1/Tb6Htwra566IC0Zwv6B46QmE1mA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/37d3ee-640f-471f-a9b7-ac5a297f9ba4/1/Tb6Htwra566IC0Zwv6B46QmE1mA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:86:c7:f7:f1:7f:86:b7:06:f1:12:8c:7e:4a:5f:74:46:ba:
d8:c1:d6:5a:76:85:9c:3f:73:41:9f:f8:4c:41:43:f9:3a:09:
ea:41:fc:8c:39:c9:1c:15:5b:31:04:a4:3e:32:4e:dd:8f:19:
b8:7f:18:56:38:69:eb:9b:dd:35:9a:ec:77:ce:97:f0:da:16:
30:99:8c:b2:67:32:1f:53:af:c9:bb:4f:7c:7a:ae:6b:2e:28:
ad:71:7b:c4:a4:71:ab:ac:80:a9:6d:26:ea:9c:8e:87:d3:0f:
1a:54:91:bc:4b:be:2d:43:e4:fa:42:2b:51:9e:2f:0b:c2:7a:
c7:b9:89:9c:bd:94:28:22:08:5a:3d:3c:a8:31:bb:55:e1:c1:
ed:53:83:75:65:a1:78:3a:25:e5:02:1d:0d:e9:b6:c4:12:82:
40:16:ef:fd:fb:f7:15:6e:69:e5:7b:3f:c0:1b:65:20:1d:3f:
c9:cc:84:a7:45:a8:b7:53:db:ae:0c:c2:5d:af:0a:11:74:27:
d1:86:c5:75:92:3a:22:1d:21:86:b9:d1:64:51:b3:8d:a4:bf:
1c:c4:23:1e:52:36:16:5e:e2:9a:e5:21:61:66:6e:a7:2d:e8:
2f:4d:c1:49:05:7c:b2:b4:7f:fd:a9:c5:01:2e:91:57:2f:06:
1a:06:d9:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:02:06 2025 by rpki-client