Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/b828fb-737c-478e-8a9f-b9c116f75df1/1/tbU9N1ctag--wt36NciFiLsbKSg.mft
File: tbU9N1ctag--wt36NciFiLsbKSg.mft (raw, json)
Hash identifier: RMtwWmahd1oVrTJO8Oi4STuSBZfYcM647o1triDeNl4=
Subject key identifier: 83:48:9A:C3:7C:91:47:B8:CB:5E:D4:0A:7E:7C:C3:F9:FF:81:76:67
Authority key identifier: B5:B5:3D:37:57:2D:6A:0F:BE:C2:DD:FA:35:C8:85:88:BB:1B:29:28
Certificate issuer: /CN=b5b53d37572d6a0fbec2ddfa35c88588bb1b2928
Certificate serial: 019A725CAE3DFF69DD37FD6B08422A852E19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tbU9N1ctag--wt36NciFiLsbKSg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/b828fb-737c-478e-8a9f-b9c116f75df1/1/tbU9N1ctag--wt36NciFiLsbKSg.mft
Manifest number: 0273
Signing time: Tue 11 Nov 2025 10:01:07 +0000
Manifest this update: Tue 11 Nov 2025 10:01:07 +0000
Manifest next update: Wed 12 Nov 2025 10:01:07 +0000
Files and hashes: 1: tbU9N1ctag--wt36NciFiLsbKSg.crl (hash: +yzmgexX7bgNroks1nEpQGVniBcETK3af5oK/tJ/9nM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/b828fb-737c-478e-8a9f-b9c116f75df1/1/tbU9N1ctag--wt36NciFiLsbKSg.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/b828fb-737c-478e-8a9f-b9c116f75df1/1/tbU9N1ctag--wt36NciFiLsbKSg.mft
rsync://rpki.ripe.net/repository/DEFAULT/tbU9N1ctag--wt36NciFiLsbKSg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:ae:3d:ff:69:dd:37:fd:6b:08:42:2a:85:2e:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5b53d37572d6a0fbec2ddfa35c88588bb1b2928
Validity
Not Before: Nov 11 10:01:07 2025 GMT
Not After : Nov 12 10:01:07 2025 GMT
Subject: CN=83489ac37c9147b8cb5ed40a7e7cc3f9ff817667
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:62:be:35:99:9e:cb:e9:78:a6:0a:a8:2b:22:
30:cb:b5:6f:89:72:d1:fc:f5:ed:14:65:da:9b:0e:
82:d7:c3:42:33:a2:c1:64:4a:8a:81:40:ee:3d:4f:
7a:dc:1e:b1:e6:c5:e9:37:0a:0b:10:e6:23:76:e2:
be:c7:f5:3b:f1:3f:11:ad:eb:66:85:f3:7e:f0:47:
12:d5:54:a3:68:ac:06:2b:72:bf:98:91:16:b9:80:
7b:63:78:1c:49:a7:a1:26:eb:9c:4d:57:88:43:ea:
3f:4d:33:1c:58:57:c4:74:16:dc:04:de:6d:7f:64:
c1:b7:4f:a4:97:89:f7:1e:bd:4f:f1:23:4e:b4:fd:
06:7a:0e:86:2c:8d:62:f7:7c:3b:21:61:56:0c:0a:
a1:7b:1b:91:cb:1c:b3:e0:74:2d:8f:82:7b:fc:42:
97:68:4f:13:bb:cf:7b:cc:d5:61:52:75:48:04:8d:
85:94:0e:1c:2a:66:43:21:bb:a1:c0:e5:78:20:38:
68:3f:af:d4:f0:bb:73:de:b1:e7:fd:b9:07:d1:0d:
8d:2e:10:d9:59:3c:6a:68:3a:2a:cb:20:4c:af:57:
c5:fa:57:ae:31:77:00:ad:67:d1:01:95:b7:13:fe:
f5:cf:f0:4f:80:d2:e4:f3:c4:23:a7:b9:22:39:a7:
b6:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:48:9A:C3:7C:91:47:B8:CB:5E:D4:0A:7E:7C:C3:F9:FF:81:76:67
X509v3 Authority Key Identifier:
keyid:B5:B5:3D:37:57:2D:6A:0F:BE:C2:DD:FA:35:C8:85:88:BB:1B:29:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tbU9N1ctag--wt36NciFiLsbKSg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/b828fb-737c-478e-8a9f-b9c116f75df1/1/tbU9N1ctag--wt36NciFiLsbKSg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/b828fb-737c-478e-8a9f-b9c116f75df1/1/tbU9N1ctag--wt36NciFiLsbKSg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:c8:e7:55:a0:22:0c:32:8e:ae:2b:f4:ff:b9:3f:63:cd:92:
58:4d:ae:f8:22:7e:b4:ed:77:e8:e7:e7:e6:4b:7b:72:9a:b9:
e1:c7:34:28:ce:65:7b:0d:5f:56:5b:f4:6b:d1:55:04:99:02:
70:f5:8e:db:06:4c:4c:93:9e:f2:9c:71:dd:7a:1d:6d:3e:82:
e0:9f:d7:97:73:ed:da:5c:98:ff:81:63:6a:25:f4:95:0c:f5:
90:6f:9d:02:c5:44:66:0a:e1:2a:8c:ab:0d:11:25:d6:51:56:
93:20:14:03:60:88:46:1f:a7:57:8c:11:0c:d5:88:08:a5:d6:
36:1e:ca:61:4b:8f:a7:0a:7f:41:15:29:4e:00:6d:f8:96:f0:
93:4b:fa:c4:73:3c:cd:6e:16:aa:6d:09:73:d2:d3:62:4b:1d:
39:e1:23:2b:8e:db:a3:8d:9d:dc:13:08:d6:21:cd:be:a8:06:
58:2e:be:65:55:69:2f:7f:70:b9:7e:26:63:10:56:8c:40:82:
aa:3d:e1:fc:3a:ca:76:a1:17:96:33:da:f7:b0:28:66:a4:c0:
c5:7e:d4:18:6a:e5:62:70:78:ee:29:25:f7:03:d7:52:ff:35:
a2:a7:d9:de:5f:f2:bf:68:54:35:01:cf:9b:5a:43:71:82:c5:
b1:98:cc:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:02:36 2025 by rpki-client