Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/7104d4-7414-49d2-9b84-8b1a093c8c5c/1/TVP4paBndE6P43yXwcxLiH7axyA.mft
File: TVP4paBndE6P43yXwcxLiH7axyA.mft (raw, json)
Hash identifier: KZFHaBjLDb92E02F8Er9bgNNhRhpx0z3m7JZIv5KUaE=
Subject key identifier: E0:A3:75:89:23:20:1B:47:30:A5:08:6C:13:82:6D:FD:4E:45:0E:BF
Authority key identifier: 4D:53:F8:A5:A0:67:74:4E:8F:E3:7C:97:C1:CC:4B:88:7E:DA:C7:20
Certificate issuer: /CN=4d53f8a5a067744e8fe37c97c1cc4b887edac720
Certificate serial: 019A7225C444CB7D7EA628025EA0FC920728
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TVP4paBndE6P43yXwcxLiH7axyA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/7104d4-7414-49d2-9b84-8b1a093c8c5c/1/TVP4paBndE6P43yXwcxLiH7axyA.mft
Manifest number: 165F
Signing time: Tue 11 Nov 2025 09:01:08 +0000
Manifest this update: Tue 11 Nov 2025 09:01:08 +0000
Manifest next update: Wed 12 Nov 2025 09:01:08 +0000
Files and hashes: 1: TVP4paBndE6P43yXwcxLiH7axyA.crl (hash: p8K9wngG/R50ik2j4+H6u7IBYb0h1Xfx/MQ0iBZttGc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/7104d4-7414-49d2-9b84-8b1a093c8c5c/1/TVP4paBndE6P43yXwcxLiH7axyA.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/7104d4-7414-49d2-9b84-8b1a093c8c5c/1/TVP4paBndE6P43yXwcxLiH7axyA.mft
rsync://rpki.ripe.net/repository/DEFAULT/TVP4paBndE6P43yXwcxLiH7axyA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:25:c4:44:cb:7d:7e:a6:28:02:5e:a0:fc:92:07:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d53f8a5a067744e8fe37c97c1cc4b887edac720
Validity
Not Before: Nov 11 09:01:08 2025 GMT
Not After : Nov 12 09:01:08 2025 GMT
Subject: CN=e0a3758923201b4730a5086c13826dfd4e450ebf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:07:6d:e2:07:c0:34:7d:81:ce:22:af:bb:df:
63:3d:f6:98:b7:68:5b:a7:71:0b:78:bf:71:5f:be:
32:1e:94:6f:7e:ea:b2:70:24:46:82:09:29:50:20:
52:dd:43:ff:d8:d7:61:90:1d:d3:96:20:89:c8:74:
27:ea:9c:1a:3a:e0:60:89:ec:00:f6:a7:2d:b5:a4:
ac:c5:fd:f9:18:03:bd:2d:b7:cc:95:45:6c:c8:af:
42:ad:ec:b7:2e:ab:9b:94:15:ba:43:27:48:94:13:
82:24:1a:63:83:bd:d9:ee:95:61:55:f2:ee:18:0b:
80:72:35:98:04:71:7d:14:77:b4:b6:42:5a:e2:02:
50:15:9f:f3:f1:a7:b0:5a:ee:d9:5d:42:9a:08:e1:
c6:43:dd:bc:cd:5b:6c:7b:0b:a8:5e:15:e5:47:af:
34:da:bf:62:72:42:b1:64:ee:a4:d6:bd:a1:d0:6c:
da:53:fe:b8:58:57:74:fd:53:df:07:74:cb:1a:6e:
7a:a1:06:f4:61:06:20:55:1f:16:45:dd:73:45:7f:
5d:e8:79:17:e3:ee:cd:02:84:9b:15:fe:f6:c4:bd:
9b:2d:a2:4d:44:f3:c7:70:8c:6a:d9:89:2e:73:a3:
e2:75:b2:94:38:1e:80:18:82:dd:4e:28:d7:3b:45:
34:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:A3:75:89:23:20:1B:47:30:A5:08:6C:13:82:6D:FD:4E:45:0E:BF
X509v3 Authority Key Identifier:
keyid:4D:53:F8:A5:A0:67:74:4E:8F:E3:7C:97:C1:CC:4B:88:7E:DA:C7:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TVP4paBndE6P43yXwcxLiH7axyA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/7104d4-7414-49d2-9b84-8b1a093c8c5c/1/TVP4paBndE6P43yXwcxLiH7axyA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/7104d4-7414-49d2-9b84-8b1a093c8c5c/1/TVP4paBndE6P43yXwcxLiH7axyA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d3:57:95:cd:52:c4:49:05:fc:2e:82:e6:a5:26:f1:e6:de:9d:
a2:63:0e:c7:ed:ca:62:b5:85:88:3c:df:20:53:62:21:17:b8:
ca:0b:31:65:3a:29:b4:b9:59:87:cd:b9:6f:0b:79:55:63:ac:
4c:5e:ed:ae:90:89:b8:a8:ea:40:50:38:71:7d:35:f8:93:b4:
57:df:9c:6e:6c:04:9a:39:40:21:3e:db:aa:ed:00:08:55:72:
b2:7c:3c:82:60:9f:68:db:8f:e7:66:f0:6d:fa:73:02:2e:e8:
da:95:25:e9:bf:88:c1:4c:5c:4b:71:24:62:c6:47:7a:a9:9f:
82:bd:8b:de:1b:b7:d6:4c:af:f3:da:3d:30:45:61:60:47:b1:
49:44:db:82:78:7f:1b:9d:ce:9c:26:68:06:89:16:c5:5a:ae:
4c:79:da:b2:48:bb:46:7b:f7:7c:8a:d5:07:32:76:b3:9b:49:
5a:3b:39:09:92:7e:e5:f2:e0:d1:fb:d5:8e:c1:99:40:77:fc:
82:27:95:e9:c2:20:80:de:fa:dd:7b:2a:22:54:7a:a2:69:57:
8f:41:b4:90:dc:4c:a3:42:1c:4c:26:a1:30:d3:0b:94:3e:54:
2f:b1:73:3c:25:60:40:dd:69:78:14:49:ed:50:b0:68:8b:93:
dc:2e:14:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:33:15 2025 by rpki-client