Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/f6f752-c04b-4ea8-857d-8a8744e45417/1/tajyyiPhAtTTVxE2LSSr1HsJ6eU.mft
File: tajyyiPhAtTTVxE2LSSr1HsJ6eU.mft (raw, json)
Hash identifier: nlWM5z2lW60fCL/MEasvbPWxoFCFIxabWNrcoX+NgWE=
Subject key identifier: 1A:6D:A4:FA:07:6F:7D:B0:C1:BB:CD:BF:28:BA:B2:69:F0:AA:5C:9C
Authority key identifier: B5:A8:F2:CA:23:E1:02:D4:D3:57:11:36:2D:24:AB:D4:7B:09:E9:E5
Certificate issuer: /CN=b5a8f2ca23e102d4d35711362d24abd47b09e9e5
Certificate serial: 019A71B79593EABFB2067F17A093C02011B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tajyyiPhAtTTVxE2LSSr1HsJ6eU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/f6f752-c04b-4ea8-857d-8a8744e45417/1/tajyyiPhAtTTVxE2LSSr1HsJ6eU.mft
Manifest number: 08AC
Signing time: Tue 11 Nov 2025 07:00:48 +0000
Manifest this update: Tue 11 Nov 2025 07:00:48 +0000
Manifest next update: Wed 12 Nov 2025 07:00:48 +0000
Files and hashes: 1: tajyyiPhAtTTVxE2LSSr1HsJ6eU.crl (hash: ACKDFaLjSyXfbSPCn7DinzgcNHvbSb5s+dtCnZUrldc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/f6f752-c04b-4ea8-857d-8a8744e45417/1/tajyyiPhAtTTVxE2LSSr1HsJ6eU.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/f6f752-c04b-4ea8-857d-8a8744e45417/1/tajyyiPhAtTTVxE2LSSr1HsJ6eU.mft
rsync://rpki.ripe.net/repository/DEFAULT/tajyyiPhAtTTVxE2LSSr1HsJ6eU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b7:95:93:ea:bf:b2:06:7f:17:a0:93:c0:20:11:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5a8f2ca23e102d4d35711362d24abd47b09e9e5
Validity
Not Before: Nov 11 07:00:48 2025 GMT
Not After : Nov 12 07:00:48 2025 GMT
Subject: CN=1a6da4fa076f7db0c1bbcdbf28bab269f0aa5c9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:69:06:23:d7:c3:37:c1:84:70:92:7e:f5:c8:
6b:98:5c:90:23:8a:57:6d:a5:c4:81:12:8e:03:0d:
26:85:d5:14:58:57:ec:8b:91:2b:f9:f4:45:ff:ff:
87:b4:f3:df:4a:90:a4:a0:0a:00:44:38:95:17:22:
c4:0f:90:fd:d5:00:74:14:f7:2d:4b:54:f7:64:2a:
69:71:11:2e:c3:e9:4a:c0:59:02:ac:94:71:72:c5:
31:7f:f2:2a:0b:be:57:89:2c:0d:e3:15:25:c6:43:
5b:6a:65:28:eb:78:2e:19:23:5b:a5:64:ba:e1:1a:
7a:5d:7b:34:b6:2e:e4:74:e3:57:28:ce:15:43:ea:
09:1d:4b:cb:7a:1c:75:86:a8:cc:d6:12:d5:25:1b:
f5:0b:3e:7b:44:2f:ee:60:e6:2e:8a:c9:2b:a8:a0:
e7:ea:dc:68:12:a4:3c:88:a0:b6:a3:89:52:1d:63:
46:ef:57:e0:7d:e5:af:83:ef:ff:d4:01:ae:e1:c6:
c6:09:87:b9:08:9c:0e:9b:05:c0:fa:fd:bd:7a:01:
46:c3:42:19:e9:a0:46:f5:05:a1:1f:2d:21:2c:4d:
13:c1:c2:b8:70:af:34:21:11:a8:7b:cb:c8:0e:3e:
da:91:59:2a:cd:d3:02:4e:49:6d:cc:c0:6f:d2:45:
03:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:6D:A4:FA:07:6F:7D:B0:C1:BB:CD:BF:28:BA:B2:69:F0:AA:5C:9C
X509v3 Authority Key Identifier:
keyid:B5:A8:F2:CA:23:E1:02:D4:D3:57:11:36:2D:24:AB:D4:7B:09:E9:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tajyyiPhAtTTVxE2LSSr1HsJ6eU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/f6f752-c04b-4ea8-857d-8a8744e45417/1/tajyyiPhAtTTVxE2LSSr1HsJ6eU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/f6f752-c04b-4ea8-857d-8a8744e45417/1/tajyyiPhAtTTVxE2LSSr1HsJ6eU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:6b:f2:19:2d:04:22:9e:99:3c:d7:23:08:fd:08:80:99:39:
ea:27:dd:b1:f2:9e:ef:31:2a:bb:08:b9:91:70:a6:3a:f4:0d:
33:8c:56:07:40:50:e0:f4:1d:2a:57:3a:61:44:c1:30:bd:2b:
3f:94:cc:37:20:19:a2:af:28:a0:00:f4:16:3d:37:58:d4:e6:
0f:05:22:c3:77:bd:46:93:89:34:ec:82:d2:7c:7b:7c:e9:5c:
c4:5a:f7:67:f2:3b:04:a4:ca:9a:5e:52:88:ad:e0:82:73:94:
31:e8:65:76:d4:1e:e4:24:62:4e:fb:3b:16:f0:b8:99:95:6f:
bd:1b:f5:7b:c5:d3:0f:06:68:6b:fe:21:12:98:e5:91:fb:70:
28:12:1d:c7:93:31:95:9b:dc:4f:74:a5:3e:6e:f3:59:42:fa:
a4:f1:e0:42:73:63:b9:9c:60:41:78:1e:2e:39:16:4b:30:9d:
b7:5d:2b:66:23:7e:de:91:0f:b3:6b:38:ca:89:20:0d:39:45:
1d:28:7f:51:84:48:88:33:de:1b:8f:1d:ed:16:d2:b9:d8:24:
d7:7e:18:68:8b:4d:68:40:35:aa:cd:02:91:9b:24:f4:65:21:
51:d7:9d:05:dd:9c:6e:d5:63:93:af:17:af:d0:3c:40:d5:46:
17:2b:02:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 13:13:58 2025 by rpki-client