Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/3737f7-1871-442a-8dba-dc2aaaa12003/1/TSwkU9AHkc_xMy-nHPtdo2qgCgo.mft
File: TSwkU9AHkc_xMy-nHPtdo2qgCgo.mft (raw, json)
Hash identifier: 590BWaN/3jCk/nqigPRmyGBDjDLhMEY2RvPyDKcNuWk=
Subject key identifier: F8:7B:EE:56:74:B4:CF:33:5D:33:C0:C5:87:6D:60:79:A9:8A:1C:35
Authority key identifier: 4D:2C:24:53:D0:07:91:CF:F1:33:2F:A7:1C:FB:5D:A3:6A:A0:0A:0A
Certificate issuer: /CN=4d2c2453d00791cff1332fa71cfb5da36aa00a0a
Certificate serial: 019A71499FE49873FA908AE5BEA6CE09D120
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TSwkU9AHkc_xMy-nHPtdo2qgCgo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/3737f7-1871-442a-8dba-dc2aaaa12003/1/TSwkU9AHkc_xMy-nHPtdo2qgCgo.mft
Manifest number: C5
Signing time: Tue 11 Nov 2025 05:00:41 +0000
Manifest this update: Tue 11 Nov 2025 05:00:41 +0000
Manifest next update: Wed 12 Nov 2025 05:00:41 +0000
Files and hashes: 1: TSwkU9AHkc_xMy-nHPtdo2qgCgo.crl (hash: VSsNei+7OIrksJT9UQ6JlkgT0BTOwSz9iw5r/Hn4F/E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/3737f7-1871-442a-8dba-dc2aaaa12003/1/TSwkU9AHkc_xMy-nHPtdo2qgCgo.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/3737f7-1871-442a-8dba-dc2aaaa12003/1/TSwkU9AHkc_xMy-nHPtdo2qgCgo.mft
rsync://rpki.ripe.net/repository/DEFAULT/TSwkU9AHkc_xMy-nHPtdo2qgCgo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 05:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:49:9f:e4:98:73:fa:90:8a:e5:be:a6:ce:09:d1:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d2c2453d00791cff1332fa71cfb5da36aa00a0a
Validity
Not Before: Nov 11 05:00:41 2025 GMT
Not After : Nov 12 05:00:41 2025 GMT
Subject: CN=f87bee5674b4cf335d33c0c5876d6079a98a1c35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:18:79:30:8a:0f:06:51:88:fa:da:34:51:06:
57:c2:9a:e5:99:63:f3:90:77:a9:6a:b6:eb:c6:c8:
0b:35:0e:f9:7d:79:6a:08:4c:a1:c8:a5:a9:04:72:
82:ae:70:d9:29:8b:93:ed:98:c5:8a:c6:9e:55:15:
25:92:1c:84:68:4b:fe:5d:0f:ef:7c:0c:ec:65:28:
a7:a1:8d:2a:70:95:32:f1:7f:de:e8:cd:6e:68:5a:
e3:bf:f4:d6:66:87:04:cf:7e:27:3f:d9:1d:29:88:
ac:ba:3d:90:e6:4e:b9:45:d0:f7:b6:78:83:c2:44:
24:35:a3:5c:77:49:b2:ec:bc:aa:de:93:56:6c:32:
a5:15:d7:6c:2f:5b:d1:2e:2b:25:a0:56:4c:f2:9d:
29:a1:55:60:c2:1b:95:3d:ff:7c:ac:46:da:7b:10:
a6:2f:19:bb:cf:07:8f:35:38:30:1c:cb:70:b6:e0:
b4:fd:49:c0:02:b0:51:f6:00:01:51:00:45:ca:17:
49:74:d9:16:4f:a8:ed:ff:1c:ff:2d:4a:24:d7:0b:
66:59:a1:43:af:78:a6:1d:05:cc:d6:34:66:99:6e:
40:60:73:fe:d7:2b:63:7c:11:f7:bb:2b:96:b3:51:
8d:64:78:e3:02:8b:14:7d:31:8e:96:20:b9:fb:13:
55:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:7B:EE:56:74:B4:CF:33:5D:33:C0:C5:87:6D:60:79:A9:8A:1C:35
X509v3 Authority Key Identifier:
keyid:4D:2C:24:53:D0:07:91:CF:F1:33:2F:A7:1C:FB:5D:A3:6A:A0:0A:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TSwkU9AHkc_xMy-nHPtdo2qgCgo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/3737f7-1871-442a-8dba-dc2aaaa12003/1/TSwkU9AHkc_xMy-nHPtdo2qgCgo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/3737f7-1871-442a-8dba-dc2aaaa12003/1/TSwkU9AHkc_xMy-nHPtdo2qgCgo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:e0:2b:d1:11:c2:8b:8f:d8:e3:9d:aa:25:b6:54:a1:8d:f6:
4d:30:23:7e:18:db:54:33:f4:f8:6d:4a:92:fa:4e:f9:af:a4:
e2:b5:27:42:59:9f:0a:0e:84:c8:c6:18:61:6b:52:a1:89:b6:
20:77:8e:c6:86:e8:d7:0d:cb:80:5a:75:ca:39:a4:e0:b7:13:
0d:9b:60:85:91:70:10:2e:16:2c:85:63:67:dc:0b:47:01:0f:
70:66:8d:91:4b:9c:a3:fe:1d:45:12:0d:18:2b:04:51:d0:28:
65:89:d1:dd:35:cb:ac:87:ff:b1:b0:ae:3f:e9:d0:67:f6:91:
bf:95:d0:65:2b:3d:5f:54:16:5d:3d:9e:88:68:74:d1:c7:e9:
93:d3:17:ea:74:0f:b4:26:49:fe:c5:53:97:66:98:61:14:ae:
dc:9f:f1:82:e9:ca:65:32:39:24:7d:18:93:6f:74:21:c6:89:
84:48:ba:dd:c1:04:2b:7f:9c:6a:66:45:92:55:16:80:59:79:
c8:eb:2b:c4:df:69:40:52:4d:77:9e:c5:8c:6a:0f:76:dc:f9:
ae:29:37:7c:60:2b:76:57:e0:bc:e4:bc:5a:b0:2b:b7:45:ef:
76:29:c4:dd:9d:1f:9f:3f:31:f4:ba:74:4f:f9:dc:48:0f:1c:
0f:bf:7a:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:19:53 2025 by rpki-client