Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/e94ce1-0d7b-431b-9143-fc3f5ec14a5b/1/TsRiBLT4hZI6pKl4btWsr7HACd4.mft
File: TsRiBLT4hZI6pKl4btWsr7HACd4.mft (raw, json)
Hash identifier: qdx1yHzS/mKAI+265Z0kLkT/a74uSQuj5jEWiW8apK4=
Subject key identifier: F6:D4:A6:D6:1D:2C:44:02:14:06:48:DF:A3:50:39:F6:85:A1:06:90
Authority key identifier: 4E:C4:62:04:B4:F8:85:92:3A:A4:A9:78:6E:D5:AC:AF:B1:C0:09:DE
Certificate issuer: /CN=4ec46204b4f885923aa4a9786ed5acafb1c009de
Certificate serial: 019A7112DEFF9337BE6D4048BD0125CD1B38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TsRiBLT4hZI6pKl4btWsr7HACd4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/e94ce1-0d7b-431b-9143-fc3f5ec14a5b/1/TsRiBLT4hZI6pKl4btWsr7HACd4.mft
Manifest number: 0BEE
Signing time: Tue 11 Nov 2025 04:00:53 +0000
Manifest this update: Tue 11 Nov 2025 04:00:53 +0000
Manifest next update: Wed 12 Nov 2025 04:00:53 +0000
Files and hashes: 1: TsRiBLT4hZI6pKl4btWsr7HACd4.crl (hash: GZHmPWOzLIPuswgerP5H59OXwuGDWWrRjY1k3XwLaNg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/e94ce1-0d7b-431b-9143-fc3f5ec14a5b/1/TsRiBLT4hZI6pKl4btWsr7HACd4.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/e94ce1-0d7b-431b-9143-fc3f5ec14a5b/1/TsRiBLT4hZI6pKl4btWsr7HACd4.mft
rsync://rpki.ripe.net/repository/DEFAULT/TsRiBLT4hZI6pKl4btWsr7HACd4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:12:de:ff:93:37:be:6d:40:48:bd:01:25:cd:1b:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ec46204b4f885923aa4a9786ed5acafb1c009de
Validity
Not Before: Nov 11 04:00:53 2025 GMT
Not After : Nov 12 04:00:53 2025 GMT
Subject: CN=f6d4a6d61d2c4402140648dfa35039f685a10690
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:a3:25:bb:62:d1:29:1e:17:b7:2b:67:ca:b8:
43:78:f4:98:d3:9f:bc:c2:12:09:10:7c:15:50:8a:
a6:35:ea:80:9e:60:f1:22:21:d6:3e:6d:16:7c:20:
77:8f:fc:3d:f9:25:89:db:85:1b:b3:78:7e:83:87:
3c:2c:8f:fd:e0:ad:62:fd:02:8d:6f:23:4c:a0:50:
24:cc:f5:39:85:cc:8e:a2:3b:aa:c5:2b:dc:fc:a4:
61:a0:13:a4:61:cc:b4:bc:7d:90:49:ca:05:28:fc:
fd:4a:db:be:50:63:84:00:97:d5:57:cd:42:e6:0a:
6a:47:6d:07:2b:e0:8f:10:38:f9:4c:0c:dd:a4:5d:
2a:39:8c:30:0d:05:4b:12:4e:e9:f3:be:51:40:0e:
70:39:4d:d4:90:40:ff:d6:d4:29:04:41:28:a7:98:
a6:08:7b:ba:92:87:23:5c:50:8f:ee:e0:02:2b:2b:
a0:e1:81:99:d5:81:59:12:a3:c6:64:95:d9:d6:1b:
9c:14:fd:32:4e:93:f9:8c:a2:0c:b8:b7:ec:2d:7a:
26:1f:41:e9:39:70:fd:a3:8e:9f:4e:fc:bf:7a:46:
d4:b2:de:8c:f8:4b:88:c9:26:c3:17:58:92:db:be:
7b:70:23:f9:97:89:26:c1:f4:d7:92:f9:fd:1b:dc:
46:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:D4:A6:D6:1D:2C:44:02:14:06:48:DF:A3:50:39:F6:85:A1:06:90
X509v3 Authority Key Identifier:
keyid:4E:C4:62:04:B4:F8:85:92:3A:A4:A9:78:6E:D5:AC:AF:B1:C0:09:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TsRiBLT4hZI6pKl4btWsr7HACd4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/e94ce1-0d7b-431b-9143-fc3f5ec14a5b/1/TsRiBLT4hZI6pKl4btWsr7HACd4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/e94ce1-0d7b-431b-9143-fc3f5ec14a5b/1/TsRiBLT4hZI6pKl4btWsr7HACd4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:33:a0:15:84:e4:7a:50:ef:d6:8a:9e:17:cd:2f:06:13:bd:
8f:ac:d8:e3:7d:57:9c:03:f6:2c:83:76:3b:a3:2b:75:b2:58:
55:36:17:72:98:a5:7d:42:d0:64:63:e6:fc:b7:6b:cf:a3:2c:
d3:ea:88:6f:3c:33:e8:8c:01:fa:31:f3:f2:96:8c:ed:ad:6d:
b0:e9:20:60:67:07:50:95:99:f0:44:4c:44:85:e5:b4:60:fb:
70:e9:2e:3e:7d:bc:3a:70:41:8e:47:1f:f0:68:6e:0d:80:dc:
6f:f8:ba:3f:8d:0a:b0:3a:e2:b0:a1:75:36:89:25:be:fd:09:
fb:97:c3:01:ce:6c:80:2c:b5:4d:9e:5c:29:e7:aa:de:b7:14:
46:aa:fd:f4:92:c8:1f:d8:7f:c8:af:61:48:49:c6:9a:9f:fc:
96:72:73:3f:4f:11:18:da:f7:5e:44:44:76:5e:07:7a:61:c7:
42:61:25:fa:7a:7d:cc:c4:a0:a6:28:75:8b:7c:f2:23:50:68:
22:cb:4f:06:fd:05:96:65:b0:14:b4:03:2e:a9:5c:85:6b:b5:
a9:6b:3e:d3:ea:a7:3f:38:6d:06:f2:68:79:dd:d5:d1:b9:a0:
7d:49:82:9d:67:22:c5:31:7d:9b:ad:36:71:f7:59:11:0b:ba:
5c:5c:e1:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:46:13 2025 by rpki-client