Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/c521e5-f543-4027-9dc8-8f9e23c60606/1/tLw_AjIwP1sDd0XsU6Zsc4JWv0M.mft
File: tLw_AjIwP1sDd0XsU6Zsc4JWv0M.mft (raw, json)
Hash identifier: DjKBO/KIE2MzT4lluDD8loi81ue7D5LC7Z83w3TBShA=
Subject key identifier: C6:C5:2A:A5:AC:99:E9:10:69:93:81:16:EC:BA:2D:6E:2A:9E:7D:32
Authority key identifier: B4:BC:3F:02:32:30:3F:5B:03:77:45:EC:53:A6:6C:73:82:56:BF:43
Certificate issuer: /CN=b4bc3f0232303f5b037745ec53a66c738256bf43
Certificate serial: 019A71B7B6FE6FF2E75AD13D2E978508A391
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tLw_AjIwP1sDd0XsU6Zsc4JWv0M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/c521e5-f543-4027-9dc8-8f9e23c60606/1/tLw_AjIwP1sDd0XsU6Zsc4JWv0M.mft
Manifest number: 109B
Signing time: Tue 11 Nov 2025 07:00:56 +0000
Manifest this update: Tue 11 Nov 2025 07:00:56 +0000
Manifest next update: Wed 12 Nov 2025 07:00:56 +0000
Files and hashes: 1: tLw_AjIwP1sDd0XsU6Zsc4JWv0M.crl (hash: mdj5VqnARLcpq2jyV9cwgKyKMkdOiyHUoi7+agS5JQE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/c521e5-f543-4027-9dc8-8f9e23c60606/1/tLw_AjIwP1sDd0XsU6Zsc4JWv0M.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/c521e5-f543-4027-9dc8-8f9e23c60606/1/tLw_AjIwP1sDd0XsU6Zsc4JWv0M.mft
rsync://rpki.ripe.net/repository/DEFAULT/tLw_AjIwP1sDd0XsU6Zsc4JWv0M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b7:b6:fe:6f:f2:e7:5a:d1:3d:2e:97:85:08:a3:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4bc3f0232303f5b037745ec53a66c738256bf43
Validity
Not Before: Nov 11 07:00:56 2025 GMT
Not After : Nov 12 07:00:56 2025 GMT
Subject: CN=c6c52aa5ac99e91069938116ecba2d6e2a9e7d32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:26:38:9c:5a:95:f9:6b:7c:f3:63:92:88:8f:
04:2c:74:95:bf:d0:87:31:91:6d:a5:7c:4e:50:bc:
34:31:1f:ce:4c:cf:81:3e:ca:24:e9:31:26:59:f4:
fa:32:85:46:f7:4c:f6:35:f3:0f:a7:f1:aa:a4:5e:
88:75:a0:9c:6e:d6:07:34:80:26:51:63:7f:61:5b:
7f:8b:88:4f:3d:f4:36:c4:12:0e:de:78:6c:da:45:
74:0c:2c:2b:aa:56:e4:f8:ef:33:96:87:71:f5:70:
38:9a:84:43:a4:dc:9e:82:6f:6c:de:91:a6:73:6e:
5b:f7:09:8c:85:bb:a5:37:0f:7d:e2:c9:58:f5:0c:
1d:d7:34:5d:e8:72:6f:5b:c5:3e:a1:f1:98:8f:46:
69:1f:4a:45:ed:b2:a3:40:db:e1:71:23:ad:e1:6e:
43:c6:62:7a:c8:e2:7a:51:8a:57:69:24:73:dc:b3:
e7:9d:f9:3d:f8:60:c3:49:8d:93:f2:0c:0a:a9:35:
0e:ee:84:43:92:35:1f:12:8b:c7:9b:fc:a2:2a:4f:
a1:b8:5f:4f:16:3f:0d:a8:1c:f8:6d:fe:86:6b:22:
6f:0c:f2:91:f4:7a:4b:41:e2:51:79:8c:b2:dc:e2:
fe:97:18:ed:a4:2f:10:f9:49:4d:5e:c6:11:60:74:
86:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:C5:2A:A5:AC:99:E9:10:69:93:81:16:EC:BA:2D:6E:2A:9E:7D:32
X509v3 Authority Key Identifier:
keyid:B4:BC:3F:02:32:30:3F:5B:03:77:45:EC:53:A6:6C:73:82:56:BF:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tLw_AjIwP1sDd0XsU6Zsc4JWv0M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/c521e5-f543-4027-9dc8-8f9e23c60606/1/tLw_AjIwP1sDd0XsU6Zsc4JWv0M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/c521e5-f543-4027-9dc8-8f9e23c60606/1/tLw_AjIwP1sDd0XsU6Zsc4JWv0M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:a8:f5:78:c5:51:0f:59:92:cb:81:31:dc:ae:27:70:25:51:
b3:74:7d:79:a4:f7:40:87:db:7b:65:84:9e:19:e4:9b:5a:97:
2c:c0:a9:f7:3c:05:ba:58:e3:49:74:e7:f0:85:3f:03:89:9d:
a1:8e:62:eb:21:87:a0:db:21:74:6a:7c:58:ac:86:af:9b:b8:
78:3a:6e:70:74:cd:f7:08:97:d3:9d:6f:82:1a:a5:39:eb:39:
2b:6c:86:2b:ed:4f:c0:48:ef:b0:3b:e1:69:4a:06:24:f7:38:
8a:a0:11:74:8e:92:58:9e:ce:4c:91:b0:ee:24:ed:8a:11:d8:
55:41:49:72:06:61:5b:a3:50:98:40:c0:17:fb:42:cb:4d:18:
f9:46:ec:52:28:ae:fa:87:ac:ab:8d:77:d2:e2:7c:c3:a5:a4:
77:da:9f:4f:40:62:96:ce:48:c3:43:cc:ac:d1:41:43:0e:64:
f2:00:22:f2:c2:42:2e:ff:69:46:92:dc:9a:fa:cc:9c:e6:06:
91:f1:12:0a:ec:22:64:06:7d:2d:4d:c4:fc:db:54:b8:90:58:
4c:53:14:83:b3:01:d5:57:4b:f4:f0:85:06:d1:73:e6:8b:20:
d0:8c:8a:1e:42:4c:07:02:62:31:11:93:55:cc:bd:cf:d3:47:
11:f3:ac:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:41:03 2025 by rpki-client