Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/02b7d6-269b-4bb2-b455-391768573496/1/TjS6bj4mlMezjkZRr-4GGwsh3q4.mft
File: TjS6bj4mlMezjkZRr-4GGwsh3q4.mft (raw, json)
Hash identifier: uJ6CK9DfihnxAwYseY5WcqrTMnauOhjrnRp4Y2ZRPT8=
Subject key identifier: 76:15:5C:7F:99:BD:06:04:A8:26:A5:6F:08:D0:F3:BA:A9:62:93:07
Authority key identifier: 4E:34:BA:6E:3E:26:94:C7:B3:8E:46:51:AF:EE:06:1B:0B:21:DE:AE
Certificate issuer: /CN=4e34ba6e3e2694c7b38e4651afee061b0b21deae
Certificate serial: 019A71B857142B34390255DC5806BB4DE0D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TjS6bj4mlMezjkZRr-4GGwsh3q4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/02b7d6-269b-4bb2-b455-391768573496/1/TjS6bj4mlMezjkZRr-4GGwsh3q4.mft
Manifest number: 0240
Signing time: Tue 11 Nov 2025 07:01:37 +0000
Manifest this update: Tue 11 Nov 2025 07:01:37 +0000
Manifest next update: Wed 12 Nov 2025 07:01:37 +0000
Files and hashes: 1: TjS6bj4mlMezjkZRr-4GGwsh3q4.crl (hash: 1WOVlkYa6PS+buVPtDxtsObRQNVjQ2fQYCkUjK+jCX8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/02b7d6-269b-4bb2-b455-391768573496/1/TjS6bj4mlMezjkZRr-4GGwsh3q4.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/02b7d6-269b-4bb2-b455-391768573496/1/TjS6bj4mlMezjkZRr-4GGwsh3q4.mft
rsync://rpki.ripe.net/repository/DEFAULT/TjS6bj4mlMezjkZRr-4GGwsh3q4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:57:14:2b:34:39:02:55:dc:58:06:bb:4d:e0:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e34ba6e3e2694c7b38e4651afee061b0b21deae
Validity
Not Before: Nov 11 07:01:37 2025 GMT
Not After : Nov 12 07:01:37 2025 GMT
Subject: CN=76155c7f99bd0604a826a56f08d0f3baa9629307
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:5f:0e:dc:b6:06:e2:7c:47:1c:dd:60:f4:eb:
6c:1d:ef:07:ad:ae:29:ac:55:ef:e4:15:13:fd:17:
bb:90:a3:44:66:f4:16:fc:aa:8f:eb:0d:09:47:84:
e4:16:cb:80:2d:b3:90:49:3f:9b:37:7d:2e:09:6e:
bf:91:0e:d1:1e:60:56:64:f8:54:31:94:70:00:33:
31:fb:dc:9a:30:59:7b:90:0a:aa:fb:c4:4b:63:59:
71:ad:3e:95:4e:d7:8a:8e:e8:0b:6f:5b:ab:9c:1c:
48:25:d7:d5:e3:7b:b9:9f:2a:b8:5d:4d:00:ee:06:
53:88:6a:95:de:b5:19:55:90:ef:eb:9f:5d:9a:eb:
f5:ff:ff:7a:03:1e:3a:dd:27:a2:f3:b7:c7:8b:15:
50:45:54:7c:e7:15:a3:48:eb:86:19:dd:c7:e8:17:
6c:df:22:d3:ba:eb:de:fe:b7:3f:88:49:b2:0c:ed:
67:67:c1:e2:cb:7b:b3:29:7b:8c:38:54:1e:28:ea:
10:63:c8:00:c5:26:6a:5f:98:02:55:dc:a7:c8:5c:
b1:e1:3b:55:37:90:7d:a7:93:86:c8:bb:c7:ed:9f:
83:3b:c2:e4:79:eb:78:b2:74:70:36:81:07:ab:23:
84:bc:43:c3:5d:ef:aa:09:2a:8c:69:43:5a:bf:24:
3b:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:15:5C:7F:99:BD:06:04:A8:26:A5:6F:08:D0:F3:BA:A9:62:93:07
X509v3 Authority Key Identifier:
keyid:4E:34:BA:6E:3E:26:94:C7:B3:8E:46:51:AF:EE:06:1B:0B:21:DE:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TjS6bj4mlMezjkZRr-4GGwsh3q4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/02b7d6-269b-4bb2-b455-391768573496/1/TjS6bj4mlMezjkZRr-4GGwsh3q4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/02b7d6-269b-4bb2-b455-391768573496/1/TjS6bj4mlMezjkZRr-4GGwsh3q4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:83:9e:bd:a0:4d:20:a7:64:fb:86:50:0a:70:41:70:8a:90:
fd:12:a7:3a:14:25:c8:0e:7f:4a:55:87:dc:99:74:6c:ea:a6:
04:1a:a2:a7:cd:1f:bf:44:c0:17:bf:7e:8b:d0:b4:b4:b5:f5:
a0:66:0d:d0:34:1a:1f:59:3f:60:0e:9d:39:86:87:4e:2c:02:
62:f4:88:9c:5f:47:cb:fb:c5:9d:40:06:7f:5f:51:e2:0b:88:
ad:f1:28:57:fa:de:1e:df:72:5b:2d:c3:68:1e:68:45:7a:00:
f7:6c:54:e5:26:4a:df:3a:e0:a7:9b:07:30:10:22:9c:33:ec:
d2:29:18:b7:b2:2e:41:50:29:5b:dc:af:af:0e:2a:cd:ca:95:
22:d8:f6:0f:a6:cf:98:18:74:09:2e:3b:08:ba:17:bb:63:55:
e4:7a:75:dd:d0:46:ce:70:08:3b:3b:fe:b3:f9:9a:e8:25:cd:
f2:07:9b:99:f3:55:e0:66:e4:4f:97:6b:eb:af:c0:66:0b:bf:
c5:87:62:39:47:78:90:ab:0b:06:e0:c9:f1:02:5d:6f:40:40:
b4:18:33:a0:2b:84:58:d7:5d:10:1d:d5:69:6f:67:96:7d:b1:
28:29:5e:ef:87:90:f0:68:b5:58:23:1d:ed:3f:6c:66:ef:5a:
e5:f1:e8:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:46:22 2025 by rpki-client