Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/6e000e-e755-47e6-99a8-354871a85c7a/1/tt41SvltyILzXBLU9fpnUHY6tyA.mft
File: tt41SvltyILzXBLU9fpnUHY6tyA.mft (raw, json)
Hash identifier: BnJ7Czaz20IJ1kPUbF/htxtE4zPeBGNq+UH0CJPyxO8=
Subject key identifier: 08:DE:A6:3B:15:6A:77:4E:FD:70:77:01:0F:43:48:4D:5F:C3:45:4E
Authority key identifier: B6:DE:35:4A:F9:6D:C8:82:F3:5C:12:D4:F5:FA:67:50:76:3A:B7:20
Certificate issuer: /CN=b6de354af96dc882f35c12d4f5fa6750763ab720
Certificate serial: 019A71B8FC88CE3033A8CB48E9C68ECF79BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tt41SvltyILzXBLU9fpnUHY6tyA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/6e000e-e755-47e6-99a8-354871a85c7a/1/tt41SvltyILzXBLU9fpnUHY6tyA.mft
Manifest number: 0E45
Signing time: Tue 11 Nov 2025 07:02:19 +0000
Manifest this update: Tue 11 Nov 2025 07:02:19 +0000
Manifest next update: Wed 12 Nov 2025 07:02:19 +0000
Files and hashes: 1: tt41SvltyILzXBLU9fpnUHY6tyA.crl (hash: 5FDILHrqdzmUI6VxmqzFURWKlKmA0fusq1OrzQnsVUo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/6e000e-e755-47e6-99a8-354871a85c7a/1/tt41SvltyILzXBLU9fpnUHY6tyA.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/6e000e-e755-47e6-99a8-354871a85c7a/1/tt41SvltyILzXBLU9fpnUHY6tyA.mft
rsync://rpki.ripe.net/repository/DEFAULT/tt41SvltyILzXBLU9fpnUHY6tyA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:fc:88:ce:30:33:a8:cb:48:e9:c6:8e:cf:79:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b6de354af96dc882f35c12d4f5fa6750763ab720
Validity
Not Before: Nov 11 07:02:19 2025 GMT
Not After : Nov 12 07:02:19 2025 GMT
Subject: CN=08dea63b156a774efd7077010f43484d5fc3454e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:8d:85:83:02:7d:f9:31:30:3f:21:99:4b:b8:
2d:36:af:cb:7a:0c:e5:ff:b7:37:1a:eb:6d:4a:74:
44:25:f6:e5:b1:20:6f:15:43:63:96:c6:44:8f:9d:
19:8c:68:32:3b:19:54:dc:da:cc:2c:f1:88:30:1f:
8f:c3:12:d2:1c:fa:36:7c:cc:67:7c:87:1c:e3:6c:
74:62:f8:cc:e9:31:15:a6:f9:54:d8:45:0a:2d:95:
8e:42:79:18:f2:9c:d4:28:8f:6c:e7:e4:8b:10:13:
4f:5b:c6:47:1b:47:c6:48:4c:50:1b:00:08:74:93:
f0:a6:34:44:5b:15:27:f5:9d:2c:25:16:a0:ff:af:
02:62:32:ca:f5:83:9c:57:e0:13:fb:66:b4:eb:3d:
db:96:25:85:cc:08:51:eb:e8:b9:c5:5f:cb:25:d2:
ae:9d:e6:db:66:6f:4b:c5:9a:5d:49:4a:b0:6a:84:
6e:09:55:4f:26:5c:6a:ea:c9:35:75:c3:57:68:10:
85:f6:9c:a9:54:5b:d3:e8:3a:4a:ff:08:bd:fc:f4:
84:16:10:d8:cb:88:16:c6:b5:b2:22:c0:3b:bf:83:
9d:7e:ad:a0:8a:ec:73:27:39:fc:eb:32:fe:68:3c:
9d:73:d6:38:1e:d7:c9:51:05:e4:41:7b:e5:77:97:
fd:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:DE:A6:3B:15:6A:77:4E:FD:70:77:01:0F:43:48:4D:5F:C3:45:4E
X509v3 Authority Key Identifier:
keyid:B6:DE:35:4A:F9:6D:C8:82:F3:5C:12:D4:F5:FA:67:50:76:3A:B7:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tt41SvltyILzXBLU9fpnUHY6tyA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/6e000e-e755-47e6-99a8-354871a85c7a/1/tt41SvltyILzXBLU9fpnUHY6tyA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/6e000e-e755-47e6-99a8-354871a85c7a/1/tt41SvltyILzXBLU9fpnUHY6tyA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:7e:21:56:b0:e8:c9:d9:3b:56:08:97:32:57:72:d1:ea:1f:
a3:e9:ee:6c:81:0d:a3:e1:1b:25:c8:3e:13:bc:00:1b:77:9a:
ac:53:d5:80:00:70:26:50:9f:39:e4:ea:f7:63:b1:d8:9a:a4:
25:ad:ef:05:25:67:4d:25:2f:f9:58:39:d6:51:67:de:e9:78:
50:1c:cf:ce:09:8e:53:53:ee:b6:49:9c:39:2b:75:5b:19:09:
eb:1b:ce:3a:8c:94:88:5e:94:f2:f0:a4:5d:9c:09:99:b9:b8:
4d:92:dd:1c:17:e6:6b:12:85:0d:97:94:2c:2b:74:ae:56:85:
a0:c7:dc:82:54:8f:37:b6:e2:9c:a2:3d:6e:f0:5d:5f:a3:17:
64:f6:c0:7c:46:0d:97:8d:70:81:2a:cb:07:6e:96:9c:5e:e0:
36:82:ed:14:92:bd:87:44:94:b1:73:78:c8:f3:41:d7:84:83:
86:e8:78:dd:d8:9f:67:2d:e5:85:d2:ef:be:fa:f8:c9:ea:63:
b4:c4:e3:07:78:26:b4:f8:39:b6:69:f5:6c:31:f9:7d:f4:cb:
f0:4d:51:b0:3c:4f:22:c1:44:f8:31:50:b2:0a:1a:31:dd:78:
0e:94:43:3b:71:ba:0d:d4:b7:48:a3:ee:82:3d:77:d6:7a:01:
6f:f5:62:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:53:30 2025 by rpki-client