Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/356552-312a-44ce-8677-405505fc460e/1/TkB_fq2BapVV9HrxCQPvRcgXC4I.mft
File: TkB_fq2BapVV9HrxCQPvRcgXC4I.mft (raw, json)
Hash identifier: +ET34IEuSWrRmNoHbC/AUpKXiKKOJNRPD40YyniGWkc=
Subject key identifier: 28:0C:0D:E5:4A:78:88:5F:48:8B:81:83:C7:CB:29:C4:FB:92:25:AD
Authority key identifier: 4E:40:7F:7E:AD:81:6A:95:55:F4:7A:F1:09:03:EF:45:C8:17:0B:82
Certificate issuer: /CN=4e407f7ead816a9555f47af10903ef45c8170b82
Certificate serial: 019A72939DC4DD76F1CE803AC43658BE34E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TkB_fq2BapVV9HrxCQPvRcgXC4I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/356552-312a-44ce-8677-405505fc460e/1/TkB_fq2BapVV9HrxCQPvRcgXC4I.mft
Manifest number: 0804
Signing time: Tue 11 Nov 2025 11:01:08 +0000
Manifest this update: Tue 11 Nov 2025 11:01:08 +0000
Manifest next update: Wed 12 Nov 2025 11:01:08 +0000
Files and hashes: 1: TkB_fq2BapVV9HrxCQPvRcgXC4I.crl (hash: D6GQamA7BPs6pIVSSgzLsIjDGThtQF1vr/g9nOuu79E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/356552-312a-44ce-8677-405505fc460e/1/TkB_fq2BapVV9HrxCQPvRcgXC4I.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/356552-312a-44ce-8677-405505fc460e/1/TkB_fq2BapVV9HrxCQPvRcgXC4I.mft
rsync://rpki.ripe.net/repository/DEFAULT/TkB_fq2BapVV9HrxCQPvRcgXC4I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:93:9d:c4:dd:76:f1:ce:80:3a:c4:36:58:be:34:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e407f7ead816a9555f47af10903ef45c8170b82
Validity
Not Before: Nov 11 11:01:08 2025 GMT
Not After : Nov 12 11:01:08 2025 GMT
Subject: CN=280c0de54a78885f488b8183c7cb29c4fb9225ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:90:de:45:e1:a6:12:a6:59:b3:00:b8:e6:6c:
79:b0:a2:16:87:54:9e:51:a6:64:af:6c:d2:d9:90:
fd:d4:55:f3:30:93:4e:b7:13:66:6a:77:c8:c8:bd:
cc:dc:1a:00:b4:94:73:ea:7f:83:42:7c:9b:1e:2f:
20:ad:c8:a1:7e:37:81:0d:ee:7c:70:f0:c3:4e:6d:
4a:00:65:cc:db:e0:70:f3:0c:4c:78:35:ea:15:06:
73:f9:39:c8:22:aa:ed:98:a7:7e:2c:90:71:89:5d:
1c:35:91:60:15:fd:59:4e:f3:72:d7:20:8a:51:a8:
41:08:3e:5b:e9:b7:9a:f3:57:33:e6:24:9a:9f:80:
ac:70:d0:c7:ee:aa:51:48:19:42:bb:34:6e:86:14:
32:2d:fe:43:2f:15:f8:83:2b:9b:d8:08:af:a1:53:
04:6b:00:f6:96:de:bc:25:75:c4:49:c1:64:ac:17:
2d:47:90:96:7b:31:de:a3:eb:07:3b:ba:f6:31:41:
ba:e5:ec:93:db:0f:fb:27:98:79:27:91:06:d0:f6:
12:91:9f:93:c4:af:35:65:b0:ed:88:32:39:d7:ba:
5a:fc:21:46:c9:85:57:60:bb:ba:cd:8f:8b:4f:8a:
a6:18:af:86:94:3d:4b:b1:5e:15:d9:ac:eb:a3:70:
74:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:0C:0D:E5:4A:78:88:5F:48:8B:81:83:C7:CB:29:C4:FB:92:25:AD
X509v3 Authority Key Identifier:
keyid:4E:40:7F:7E:AD:81:6A:95:55:F4:7A:F1:09:03:EF:45:C8:17:0B:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TkB_fq2BapVV9HrxCQPvRcgXC4I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/356552-312a-44ce-8677-405505fc460e/1/TkB_fq2BapVV9HrxCQPvRcgXC4I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/356552-312a-44ce-8677-405505fc460e/1/TkB_fq2BapVV9HrxCQPvRcgXC4I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:51:1e:c7:10:8d:1b:a2:e2:71:83:07:b5:c2:9f:99:05:56:
94:b9:ae:a2:f5:c7:14:53:dd:0a:db:1c:79:5a:9b:21:73:ce:
44:68:ae:f3:a4:0b:32:47:5c:71:13:2b:a9:15:71:ae:99:03:
19:b4:51:71:cf:7d:70:62:82:2c:bb:87:57:9e:8e:79:79:f7:
4b:ce:15:46:44:96:13:f1:e0:74:bb:df:f0:5c:eb:7f:45:3b:
95:e0:e2:d2:ee:f9:9b:2d:ad:fd:a1:34:9c:42:b3:61:46:a9:
83:0a:0c:b8:b2:b8:89:56:1e:f2:1d:d7:be:e3:1a:95:06:02:
78:9d:a9:cb:de:e5:f6:f0:8c:25:ab:51:a1:f8:74:12:6e:3d:
82:38:99:7d:53:f5:36:4b:11:d8:6c:fb:f6:3f:5b:98:d1:fc:
e5:a2:fb:9c:54:9e:cf:52:c0:2c:a6:03:38:57:0f:ef:e1:64:
f1:e2:31:10:f6:43:a9:0d:84:68:39:36:91:17:d5:e1:bd:b7:
12:64:8f:ba:f2:0d:c7:64:0a:bf:bb:62:f8:f1:de:02:44:22:
bf:ce:d2:f3:c6:90:9e:28:94:5e:da:d6:d9:aa:85:5e:1d:20:
9a:81:76:88:b8:c7:d1:db:e1:96:10:04:b5:8d:8e:c8:61:71:
3d:37:42:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:54:51 2025 by rpki-client