Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/74f43e-bbfe-4960-8f33-c1e6c1b3191d/1/TnCtvlP18oWwVz3yRuJdUWUdeEk.mft
File: TnCtvlP18oWwVz3yRuJdUWUdeEk.mft (raw, json)
Hash identifier: bIy8Lg4o+0Sih3N+oFvlnfi02Zy31cvx8/syxxt5ZyA=
Subject key identifier: 1C:D8:55:EB:DC:A8:7D:56:2F:4D:A5:A2:78:B7:75:10:13:52:71:DC
Authority key identifier: 4E:70:AD:BE:53:F5:F2:85:B0:57:3D:F2:46:E2:5D:51:65:1D:78:49
Certificate issuer: /CN=4e70adbe53f5f285b0573df246e25d51651d7849
Certificate serial: 019A71B91B573815C36FFC69BBB55ED84651
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TnCtvlP18oWwVz3yRuJdUWUdeEk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/74f43e-bbfe-4960-8f33-c1e6c1b3191d/1/TnCtvlP18oWwVz3yRuJdUWUdeEk.mft
Manifest number: 01D3
Signing time: Tue 11 Nov 2025 07:02:27 +0000
Manifest this update: Tue 11 Nov 2025 07:02:27 +0000
Manifest next update: Wed 12 Nov 2025 07:02:27 +0000
Files and hashes: 1: TnCtvlP18oWwVz3yRuJdUWUdeEk.crl (hash: M/+0rjh4fnfrZ31cDTFNripshT3kmvPl9/CGTxfNuDw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/74f43e-bbfe-4960-8f33-c1e6c1b3191d/1/TnCtvlP18oWwVz3yRuJdUWUdeEk.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/74f43e-bbfe-4960-8f33-c1e6c1b3191d/1/TnCtvlP18oWwVz3yRuJdUWUdeEk.mft
rsync://rpki.ripe.net/repository/DEFAULT/TnCtvlP18oWwVz3yRuJdUWUdeEk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b9:1b:57:38:15:c3:6f:fc:69:bb:b5:5e:d8:46:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e70adbe53f5f285b0573df246e25d51651d7849
Validity
Not Before: Nov 11 07:02:27 2025 GMT
Not After : Nov 12 07:02:27 2025 GMT
Subject: CN=1cd855ebdca87d562f4da5a278b77510135271dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:35:c3:5e:42:50:9d:15:f5:33:bc:6f:75:da:
1e:55:80:17:61:29:d6:94:d2:26:2a:d3:6a:b8:61:
54:31:14:11:59:83:60:56:b3:8d:19:fe:81:75:33:
52:8c:e5:31:30:fe:69:16:a0:1d:5b:2f:94:a2:54:
18:06:40:d4:6b:e9:7f:e8:96:d2:2c:43:ad:00:db:
c4:81:27:df:34:5a:63:f2:3d:3d:55:4f:42:fe:ad:
97:d1:f1:5f:b7:a1:36:79:d2:6d:be:92:32:2a:3b:
84:60:ee:a8:bf:2f:23:0f:40:e9:ca:31:b0:40:9e:
12:83:56:55:ac:a4:0c:66:ec:3b:94:43:ab:ee:51:
85:ca:b1:72:54:c2:67:a4:98:1a:6d:09:2a:a5:34:
ab:89:f6:da:d9:b8:96:c7:65:fd:d6:10:07:bd:63:
0a:aa:5e:3c:5d:b3:62:70:ce:e7:3c:6a:8e:4c:56:
cb:98:c5:70:47:5f:fd:d7:cd:99:53:67:4b:37:6d:
a2:71:4a:11:12:cb:a9:4f:c5:a7:84:44:41:86:20:
5a:7f:e5:ab:eb:93:c1:e0:c5:d1:b4:82:7f:c7:29:
6c:0c:e0:eb:59:1a:4b:a3:6e:80:8c:46:d1:58:85:
4d:a3:6b:0b:4d:16:9d:a7:b4:e9:f6:0a:44:fd:cf:
bc:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:D8:55:EB:DC:A8:7D:56:2F:4D:A5:A2:78:B7:75:10:13:52:71:DC
X509v3 Authority Key Identifier:
keyid:4E:70:AD:BE:53:F5:F2:85:B0:57:3D:F2:46:E2:5D:51:65:1D:78:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TnCtvlP18oWwVz3yRuJdUWUdeEk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/74f43e-bbfe-4960-8f33-c1e6c1b3191d/1/TnCtvlP18oWwVz3yRuJdUWUdeEk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/74f43e-bbfe-4960-8f33-c1e6c1b3191d/1/TnCtvlP18oWwVz3yRuJdUWUdeEk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:cb:15:b6:60:bc:14:bd:da:ed:25:26:dc:e3:75:04:e1:25:
fa:d6:d4:68:50:5e:e0:6e:39:63:80:68:31:16:6f:16:ef:2a:
fe:86:7c:21:a0:0f:26:1c:52:37:b6:0d:a5:b4:70:69:7b:d4:
40:a4:94:9f:70:d8:2b:90:4d:76:2b:57:fa:35:d5:65:dc:e4:
ae:c2:1b:9c:d4:61:fc:9e:fe:cd:6c:76:b2:7d:46:39:76:5d:
dc:d2:01:d9:9e:dd:5c:fe:ed:bd:d0:cf:76:ee:99:e4:4d:7c:
49:c2:97:fa:4d:bd:8b:5d:a9:5d:78:3b:39:f8:13:f0:5c:a8:
de:ca:7c:9d:c2:d4:ed:f7:fb:03:3a:bf:84:89:6e:7e:a3:d1:
4e:46:56:7a:f8:f9:c7:29:07:35:8b:10:7c:0b:15:e4:db:1d:
9c:af:2d:a7:75:82:35:8f:fb:70:a9:be:f4:ef:30:da:aa:68:
0b:45:4b:2f:fb:6d:cc:6b:e9:7c:4c:26:f8:fc:c4:56:ad:eb:
e6:cf:58:95:fc:e3:4a:55:01:da:11:9d:74:af:4a:cc:bf:84:
19:eb:08:0b:ad:27:09:bb:e8:e0:2c:8b:85:a7:c9:42:ad:19:
13:78:3c:8f:52:b9:3a:3c:0d:7a:f9:47:0a:d4:63:07:e8:84:
96:ac:4f:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:27:01 2025 by rpki-client