Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/c4f2e2-0188-4a43-8503-d2601cc12377/1/TblS7RzXo4A89Nv9NA6nSWMmi6A.mft
File: TblS7RzXo4A89Nv9NA6nSWMmi6A.mft (raw, json)
Hash identifier: piK/kaFxf1PX/ArsIel153B5lEiNilEguNje7xOdEwY=
Subject key identifier: E1:3B:3C:AA:B4:D9:BB:48:8A:17:F3:10:A4:81:FE:DD:E8:48:0A:6C
Authority key identifier: 4D:B9:52:ED:1C:D7:A3:80:3C:F4:DB:FD:34:0E:A7:49:63:26:8B:A0
Certificate issuer: /CN=4db952ed1cd7a3803cf4dbfd340ea74963268ba0
Certificate serial: 019A70A5737B381CFEE6CC5EB9A88B3D42D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TblS7RzXo4A89Nv9NA6nSWMmi6A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/c4f2e2-0188-4a43-8503-d2601cc12377/1/TblS7RzXo4A89Nv9NA6nSWMmi6A.mft
Manifest number: 1469
Signing time: Tue 11 Nov 2025 02:01:22 +0000
Manifest this update: Tue 11 Nov 2025 02:01:22 +0000
Manifest next update: Wed 12 Nov 2025 02:01:22 +0000
Files and hashes: 1: TblS7RzXo4A89Nv9NA6nSWMmi6A.crl (hash: Yt1tHFbUQc/ucdIO95GkHNijNOxyQLrLQC6GLZlU1vM=)
2: j5Ft5Wy8JxIF_GoPXz22l_KXIjU.roa (hash: mypsPRsnwnV3Yo/ZoSy7EsoVz4ps6Bh9fIm4sESstXw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/c4f2e2-0188-4a43-8503-d2601cc12377/1/TblS7RzXo4A89Nv9NA6nSWMmi6A.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/c4f2e2-0188-4a43-8503-d2601cc12377/1/TblS7RzXo4A89Nv9NA6nSWMmi6A.mft
rsync://rpki.ripe.net/repository/DEFAULT/TblS7RzXo4A89Nv9NA6nSWMmi6A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 02:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:a5:73:7b:38:1c:fe:e6:cc:5e:b9:a8:8b:3d:42:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4db952ed1cd7a3803cf4dbfd340ea74963268ba0
Validity
Not Before: Nov 11 02:01:22 2025 GMT
Not After : Nov 12 02:01:22 2025 GMT
Subject: CN=e13b3caab4d9bb488a17f310a481fedde8480a6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:e8:7f:58:9e:8c:d9:cd:f9:22:6e:25:b9:bb:
ac:9c:70:1a:e3:b6:b9:3a:9f:e0:dc:e2:f1:74:f1:
8e:e3:fc:26:33:1e:31:0a:cc:41:bf:96:04:a3:3a:
3e:ec:42:00:0d:08:58:88:62:2a:41:1e:39:0c:1d:
d3:dd:54:15:47:24:ff:4a:b8:d5:8a:64:0c:90:43:
29:ee:d3:2d:05:cc:f5:2e:3a:01:ba:d2:f2:4d:0e:
91:3b:8f:03:ec:55:f5:89:f5:c4:ac:42:a7:6b:f4:
51:41:49:95:1f:e3:c3:a0:db:e3:cf:73:90:a3:2f:
ba:87:0e:bc:30:f4:39:bb:01:e9:98:aa:8c:18:a8:
53:ab:1a:cd:5d:a8:5a:aa:bb:e3:33:72:d8:8e:b7:
e0:a3:d1:f0:b7:67:9c:80:a0:c8:31:f6:34:23:c9:
44:44:ae:8c:98:c7:62:cb:59:fa:68:cc:fc:3a:4d:
a6:dc:82:83:c5:b8:6c:ff:e0:64:86:a1:ef:48:8f:
08:28:7d:e4:03:62:4b:d7:e7:85:b7:3a:49:4f:34:
dc:0c:b8:b0:d9:ab:1c:dc:5f:21:0f:89:93:92:c7:
cc:53:37:75:0f:9f:10:e1:10:47:14:36:da:47:0b:
11:bd:05:05:e7:a4:f0:de:78:54:ff:97:eb:9e:0d:
60:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:3B:3C:AA:B4:D9:BB:48:8A:17:F3:10:A4:81:FE:DD:E8:48:0A:6C
X509v3 Authority Key Identifier:
keyid:4D:B9:52:ED:1C:D7:A3:80:3C:F4:DB:FD:34:0E:A7:49:63:26:8B:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TblS7RzXo4A89Nv9NA6nSWMmi6A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/c4f2e2-0188-4a43-8503-d2601cc12377/1/TblS7RzXo4A89Nv9NA6nSWMmi6A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/c4f2e2-0188-4a43-8503-d2601cc12377/1/TblS7RzXo4A89Nv9NA6nSWMmi6A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:17:37:82:4f:93:cd:01:ee:31:a9:2c:37:93:3f:9b:b8:34:
c5:cb:0f:49:af:da:62:e8:a3:2a:b2:46:c7:56:2a:fc:d6:39:
f5:49:2c:37:a4:b2:2d:6e:e7:51:4c:45:fa:93:b6:6c:a8:aa:
58:81:f0:3f:07:06:75:26:48:dc:3b:94:fb:84:38:49:6c:ed:
20:97:f4:49:07:7c:17:df:f6:f8:e5:b5:e3:fe:9c:c7:3c:5a:
d4:ee:a7:61:15:ac:9b:53:46:a1:77:a0:2c:ce:1b:b3:f9:03:
37:b3:94:ee:c9:9a:88:fc:9f:38:45:08:1f:18:86:25:a9:76:
54:d4:57:39:10:cd:a1:48:3e:05:d3:df:ce:91:58:04:b8:79:
c0:1e:c8:7e:e7:ae:04:d7:be:ba:e2:51:37:91:49:1c:2c:72:
6b:a1:df:fc:47:19:a5:82:35:d2:f4:f3:f7:85:d6:5e:3e:2d:
84:b0:80:4e:64:7f:3d:16:4d:c5:51:19:87:41:f9:68:3f:51:
6d:07:b9:40:18:ea:3b:32:6a:5a:53:17:eb:92:36:43:2d:0c:
d5:3c:0b:68:bf:c2:da:92:74:be:df:b7:2e:5d:ea:1a:f9:2d:
26:91:d7:a6:47:7a:40:6e:d3:23:75:87:6b:9a:5e:8d:bd:38:
a2:f0:d1:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:46:32 2025 by rpki-client