Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/32619c-76a0-4a5d-b5d8-375c6b689e2f/1/TN57OL6vPGOHn_kwlz0WPx6I5-Y.mft
File: TN57OL6vPGOHn_kwlz0WPx6I5-Y.mft (raw, json)
Hash identifier: GYc0sMYZm6UXIn8t0/2ttKSAzC48zvtlyFlzPR9+pR4=
Subject key identifier: 49:C9:3F:D6:DC:76:2B:34:7A:23:4A:FB:78:B3:86:0C:90:BC:B6:C3
Authority key identifier: 4C:DE:7B:38:BE:AF:3C:63:87:9F:F9:30:97:3D:16:3F:1E:88:E7:E6
Certificate issuer: /CN=4cde7b38beaf3c63879ff930973d163f1e88e7e6
Certificate serial: 019A725CDEF31F52DA9B171707D88C631EB8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TN57OL6vPGOHn_kwlz0WPx6I5-Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/32619c-76a0-4a5d-b5d8-375c6b689e2f/1/TN57OL6vPGOHn_kwlz0WPx6I5-Y.mft
Manifest number: 0123
Signing time: Tue 11 Nov 2025 10:01:20 +0000
Manifest this update: Tue 11 Nov 2025 10:01:20 +0000
Manifest next update: Wed 12 Nov 2025 10:01:20 +0000
Files and hashes: 1: TN57OL6vPGOHn_kwlz0WPx6I5-Y.crl (hash: 0AOxo+VkmaAC0JIrOFg9oBR/Zi/sF8KoHarcsBSp5W8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/32619c-76a0-4a5d-b5d8-375c6b689e2f/1/TN57OL6vPGOHn_kwlz0WPx6I5-Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/32619c-76a0-4a5d-b5d8-375c6b689e2f/1/TN57OL6vPGOHn_kwlz0WPx6I5-Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/TN57OL6vPGOHn_kwlz0WPx6I5-Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:de:f3:1f:52:da:9b:17:17:07:d8:8c:63:1e:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4cde7b38beaf3c63879ff930973d163f1e88e7e6
Validity
Not Before: Nov 11 10:01:20 2025 GMT
Not After : Nov 12 10:01:20 2025 GMT
Subject: CN=49c93fd6dc762b347a234afb78b3860c90bcb6c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:08:3e:18:4c:f9:a8:86:13:e4:97:c5:0b:e1:
69:4e:19:ce:41:71:b0:43:0b:6c:6e:72:88:a2:4f:
74:1d:34:0d:02:85:34:cc:62:15:c7:16:3b:08:e0:
09:1d:51:34:f5:13:e0:45:f1:b3:62:aa:32:3a:dd:
5f:0b:fb:6a:dc:9e:6c:39:92:0b:a6:d7:02:00:ad:
ef:fa:8c:dc:27:88:24:16:d0:e8:b2:ae:27:39:da:
3f:67:5e:23:1d:04:95:d4:7b:cb:3d:e7:06:71:82:
9b:9e:44:7d:49:74:01:e9:69:c3:a2:62:d5:9c:66:
42:4d:5d:20:b9:97:de:02:7f:06:e0:a0:5f:f6:9d:
7c:a6:13:5f:1f:72:4f:10:bb:91:2d:1d:44:3c:43:
78:36:be:20:48:be:39:c4:7d:ce:6f:16:aa:76:66:
c3:e1:a3:93:c1:92:f7:76:03:09:7f:00:4c:a9:ee:
61:7e:fe:c3:6d:19:a9:b3:b8:ff:a1:e4:3b:13:eb:
32:07:75:79:48:b9:c4:78:b9:a7:00:eb:64:b5:af:
85:50:b8:01:2a:9a:c6:41:d8:e6:74:8f:34:08:51:
43:45:c8:46:8a:cb:07:b2:c1:32:f5:64:bd:7f:d8:
69:0f:d0:ea:0a:d9:a4:6a:c8:60:d1:ca:2a:41:47:
65:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:C9:3F:D6:DC:76:2B:34:7A:23:4A:FB:78:B3:86:0C:90:BC:B6:C3
X509v3 Authority Key Identifier:
keyid:4C:DE:7B:38:BE:AF:3C:63:87:9F:F9:30:97:3D:16:3F:1E:88:E7:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TN57OL6vPGOHn_kwlz0WPx6I5-Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/32619c-76a0-4a5d-b5d8-375c6b689e2f/1/TN57OL6vPGOHn_kwlz0WPx6I5-Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/32619c-76a0-4a5d-b5d8-375c6b689e2f/1/TN57OL6vPGOHn_kwlz0WPx6I5-Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:30:54:1f:6f:55:07:d2:a6:4c:97:83:2e:ea:c5:5c:ed:e8:
ad:50:bc:de:b2:f3:39:ac:b2:bb:9e:27:3e:a5:7d:c7:9d:97:
59:d1:3d:90:0d:ad:38:ba:8b:a0:41:86:10:32:50:1d:2f:3e:
b1:9d:5b:5d:b8:32:79:7e:9f:7d:da:9c:ce:f9:a5:2d:7c:17:
4d:a9:74:6e:a7:81:b8:72:89:99:80:06:d2:f6:5c:2f:4b:83:
11:e6:77:50:80:29:f9:c0:e1:78:f1:a0:44:8d:74:28:8b:3a:
e3:c5:e8:2b:ad:9f:27:ad:96:29:4b:0a:f9:e3:fb:66:3a:42:
91:47:5c:bd:19:f1:25:a0:d7:f7:af:0c:ad:c0:06:05:42:52:
49:1c:1a:6a:3f:f3:cc:5e:1c:13:de:26:38:f6:50:e3:82:c5:
d2:50:5d:d9:4f:81:9c:2e:f8:87:fb:3a:00:80:f2:c9:8e:e9:
fd:f6:fd:77:4a:0d:4b:57:4e:28:70:43:a0:f1:3c:78:93:55:
4c:f6:08:12:a7:b5:a9:dd:de:64:e0:18:5e:37:2a:5f:a2:0f:
b5:ae:4d:4a:a5:e6:5b:9d:bf:f6:db:d5:a7:7a:1b:24:73:7b:
2f:17:bb:48:fa:2d:18:b9:99:9a:c0:00:11:8d:a3:2f:0f:e9:
89:15:24:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:50:40 2025 by rpki-client