Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/54f602-c712-4d72-a46a-208565bb2d63/1/TF_Sw94QWTTPD_SdJtnciFjOXdE.mft
File: TF_Sw94QWTTPD_SdJtnciFjOXdE.mft (raw, json)
Hash identifier: 9f9E/GQ0s+SBqIt04MEzKE00z9crWrJNwyVz8BpNqDs=
Subject key identifier: A9:9F:39:6D:23:D1:9F:C4:6B:4B:E6:39:D7:6E:37:56:11:3B:E0:DD
Authority key identifier: 4C:5F:D2:C3:DE:10:59:34:CF:0F:F4:9D:26:D9:DC:88:58:CE:5D:D1
Certificate issuer: /CN=4c5fd2c3de105934cf0ff49d26d9dc8858ce5dd1
Certificate serial: 019A71B804A99094BE8CE012CE9FE634D8C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TF_Sw94QWTTPD_SdJtnciFjOXdE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/54f602-c712-4d72-a46a-208565bb2d63/1/TF_Sw94QWTTPD_SdJtnciFjOXdE.mft
Manifest number: 10DC
Signing time: Tue 11 Nov 2025 07:01:16 +0000
Manifest this update: Tue 11 Nov 2025 07:01:16 +0000
Manifest next update: Wed 12 Nov 2025 07:01:16 +0000
Files and hashes: 1: TF_Sw94QWTTPD_SdJtnciFjOXdE.crl (hash: A+RKElYoXG7I61Z2SegVkuNFhsLySvKU33YiMroYREc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/54f602-c712-4d72-a46a-208565bb2d63/1/TF_Sw94QWTTPD_SdJtnciFjOXdE.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/54f602-c712-4d72-a46a-208565bb2d63/1/TF_Sw94QWTTPD_SdJtnciFjOXdE.mft
rsync://rpki.ripe.net/repository/DEFAULT/TF_Sw94QWTTPD_SdJtnciFjOXdE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:04:a9:90:94:be:8c:e0:12:ce:9f:e6:34:d8:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c5fd2c3de105934cf0ff49d26d9dc8858ce5dd1
Validity
Not Before: Nov 11 07:01:16 2025 GMT
Not After : Nov 12 07:01:16 2025 GMT
Subject: CN=a99f396d23d19fc46b4be639d76e3756113be0dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:d8:a9:36:73:49:2e:35:13:aa:c6:5c:73:75:
68:2b:5f:6f:f8:c7:c9:c0:0f:a7:3d:ee:23:47:a8:
7c:e7:5e:f7:e8:7b:70:60:68:d1:b9:60:57:97:a9:
23:2e:66:3f:7e:b3:f2:74:45:fc:1f:e4:11:22:83:
c6:63:94:54:9d:ac:74:a4:6e:9b:02:e7:14:a2:a8:
0b:ab:dd:f9:ac:97:9e:86:aa:04:b6:0a:7a:c5:5c:
25:00:9d:71:fa:d5:d8:2d:c8:96:03:8f:98:0e:b2:
7d:e6:6c:dc:e4:6d:b8:79:32:7c:35:65:a4:49:97:
01:29:47:3e:ac:fa:8e:7e:89:c9:f6:bb:77:f6:f2:
88:ef:af:2f:dd:ec:10:93:a6:13:4f:d2:39:86:de:
ac:68:3b:93:7d:4e:b2:ba:57:6c:93:2d:f2:30:8c:
00:1e:c3:f9:b0:a7:43:b5:1b:e3:1a:6f:e0:c4:31:
0a:9a:c4:4b:f8:b4:63:d9:3d:f3:eb:92:ec:0a:13:
35:85:31:59:3e:93:b0:e8:67:7b:1f:f1:bb:37:72:
53:53:56:b0:15:83:23:74:42:19:93:f2:de:14:16:
74:40:45:4f:f0:91:5b:d4:2e:a4:c8:30:b7:82:a7:
d6:89:8e:a7:76:b0:d9:bd:b5:df:05:9d:d1:d9:0d:
57:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:9F:39:6D:23:D1:9F:C4:6B:4B:E6:39:D7:6E:37:56:11:3B:E0:DD
X509v3 Authority Key Identifier:
keyid:4C:5F:D2:C3:DE:10:59:34:CF:0F:F4:9D:26:D9:DC:88:58:CE:5D:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TF_Sw94QWTTPD_SdJtnciFjOXdE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/54f602-c712-4d72-a46a-208565bb2d63/1/TF_Sw94QWTTPD_SdJtnciFjOXdE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/54f602-c712-4d72-a46a-208565bb2d63/1/TF_Sw94QWTTPD_SdJtnciFjOXdE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:c8:a0:a4:4f:85:fb:56:8d:7f:f9:8f:09:9f:62:ab:7b:16:
78:c6:a7:e3:99:99:3b:9e:7f:7a:f6:db:da:db:1c:64:bb:32:
b6:f0:9c:43:06:aa:8c:c1:82:9c:ff:88:f8:f8:cd:a5:e6:fc:
1b:6e:7b:f0:b9:bf:d1:46:28:94:de:b9:b4:72:74:90:be:1c:
6e:67:d0:44:bb:35:e4:82:f0:b4:0a:de:0a:38:90:a2:5c:27:
bb:bc:18:c8:03:24:ed:6e:f5:e0:bb:5e:28:fe:7b:df:eb:29:
e6:9f:91:3f:22:2b:c6:40:76:72:24:5a:c5:8b:a0:b8:94:b1:
3a:28:c0:30:3f:68:72:d3:bc:0d:c5:f3:f5:72:1d:00:05:1e:
bf:a9:fe:ac:b0:62:45:c1:a0:1a:bc:87:40:68:d1:b5:40:52:
40:6d:8e:54:75:ef:9d:e2:85:eb:e1:af:32:85:6f:cd:bf:9e:
e8:f9:c5:bb:bd:82:25:1a:aa:20:d2:cc:e0:f6:79:6e:96:5f:
2f:65:4b:92:a0:da:ef:46:b1:7c:a0:9e:86:82:b8:0a:30:eb:
8c:b0:75:8e:b8:a5:9c:83:5d:82:fd:71:c0:e8:4f:64:cd:42:
87:f0:0d:aa:a3:29:46:6b:e4:73:fa:85:d2:b2:d9:3d:eb:3b:
80:19:f8:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 17:16:12 2025 by rpki-client