Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/c6994c-a8c0-47e0-a006-b086666e2ada/1/tpGf6MvvmrMgrH4ONGh51J0YV9Y.mft
File: tpGf6MvvmrMgrH4ONGh51J0YV9Y.mft (raw, json)
Hash identifier: hv2quoKi4UX/YCC02rKHON8u5H3B5uzJHECeR24SAjs=
Subject key identifier: 28:69:7D:4A:F6:80:93:EE:B2:5B:51:F0:5B:1A:BC:F5:E5:BE:E3:B8
Authority key identifier: B6:91:9F:E8:CB:EF:9A:B3:20:AC:7E:0E:34:68:79:D4:9D:18:57:D6
Certificate issuer: /CN=b6919fe8cbef9ab320ac7e0e346879d49d1857d6
Certificate serial: 019A71B78F7AF46474F2C9498F369AC83199
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tpGf6MvvmrMgrH4ONGh51J0YV9Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/c6994c-a8c0-47e0-a006-b086666e2ada/1/tpGf6MvvmrMgrH4ONGh51J0YV9Y.mft
Manifest number: 07D6
Signing time: Tue 11 Nov 2025 07:00:46 +0000
Manifest this update: Tue 11 Nov 2025 07:00:46 +0000
Manifest next update: Wed 12 Nov 2025 07:00:46 +0000
Files and hashes: 1: tpGf6MvvmrMgrH4ONGh51J0YV9Y.crl (hash: Re5SN2TVdBujB13xcAsPHOBhD73sRqzaAulqumz/Yu4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/c6994c-a8c0-47e0-a006-b086666e2ada/1/tpGf6MvvmrMgrH4ONGh51J0YV9Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/c6994c-a8c0-47e0-a006-b086666e2ada/1/tpGf6MvvmrMgrH4ONGh51J0YV9Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/tpGf6MvvmrMgrH4ONGh51J0YV9Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b7:8f:7a:f4:64:74:f2:c9:49:8f:36:9a:c8:31:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b6919fe8cbef9ab320ac7e0e346879d49d1857d6
Validity
Not Before: Nov 11 07:00:46 2025 GMT
Not After : Nov 12 07:00:46 2025 GMT
Subject: CN=28697d4af68093eeb25b51f05b1abcf5e5bee3b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:94:6f:1b:3f:3f:e7:b3:b7:8d:9c:7d:96:87:
c7:be:da:61:fe:cb:36:44:af:d6:e0:25:0d:bf:7c:
a6:61:ed:7c:06:64:03:c6:ea:10:ab:4a:8b:98:73:
99:be:9d:62:5f:0e:97:36:44:f0:06:98:4f:94:37:
44:c8:d4:d6:f8:fb:ea:be:93:de:04:b7:e3:b1:7d:
c2:09:eb:42:5c:4f:e9:38:88:7d:17:50:2a:9b:2b:
f5:6a:1c:23:cf:1c:9f:4c:f5:ef:9b:b3:60:c5:86:
91:b6:a9:f4:82:2a:30:76:25:b9:71:bf:1d:c0:17:
d7:4c:4d:9c:ea:dc:71:6c:3f:53:c0:01:04:68:39:
33:44:90:23:0f:a7:7c:2d:13:67:16:f0:61:93:ec:
e8:44:74:84:3b:eb:50:4e:e2:1e:e5:c9:22:cb:1e:
3e:3d:f5:ca:c6:d9:9e:43:63:d7:c9:b6:11:f8:f9:
ce:d9:f0:2f:6b:85:cc:0f:fa:f3:3f:86:1a:c3:6f:
ce:a2:0d:42:23:e0:71:a5:65:ba:f1:5c:77:cb:5a:
84:70:87:07:be:60:07:34:32:94:f3:c7:4b:9b:9e:
02:6b:c8:1a:90:82:f0:53:2c:ce:4c:35:bb:bf:d2:
0d:ed:96:db:8c:1c:22:dc:18:dc:ea:9b:5e:cc:5a:
ee:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:69:7D:4A:F6:80:93:EE:B2:5B:51:F0:5B:1A:BC:F5:E5:BE:E3:B8
X509v3 Authority Key Identifier:
keyid:B6:91:9F:E8:CB:EF:9A:B3:20:AC:7E:0E:34:68:79:D4:9D:18:57:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tpGf6MvvmrMgrH4ONGh51J0YV9Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/c6994c-a8c0-47e0-a006-b086666e2ada/1/tpGf6MvvmrMgrH4ONGh51J0YV9Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/c6994c-a8c0-47e0-a006-b086666e2ada/1/tpGf6MvvmrMgrH4ONGh51J0YV9Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:c3:39:41:e5:d0:df:f7:b7:fe:3c:c6:5e:2c:a2:94:18:ef:
ff:da:29:c2:dc:d3:f1:46:0d:81:0c:8c:4f:12:fa:a6:9e:2f:
98:c3:d8:28:6b:2a:33:73:eb:68:2b:b5:33:d8:67:65:9e:35:
a0:0c:b9:87:4e:fe:31:23:a6:13:d8:93:1d:bb:b2:f8:c7:4b:
d2:67:00:59:8e:5b:c3:bc:a1:18:7f:34:d4:85:68:d1:92:8c:
74:9d:62:20:81:5d:b3:d7:f4:e6:ae:d3:e2:85:91:b0:1b:56:
27:0c:ea:4a:5c:c6:e5:c8:b8:f4:82:53:f3:37:39:0f:56:80:
e5:0d:ab:d2:52:17:52:0d:d5:21:67:6a:25:6f:9a:a3:87:06:
d6:d8:f8:8b:87:9b:8d:41:c6:d4:3b:d1:8c:e6:9b:fe:c5:07:
52:f5:d8:ad:84:69:b1:d2:aa:b9:ca:82:d0:d0:07:40:d5:7e:
aa:82:5e:41:a7:33:4a:74:c4:5a:46:d7:8a:53:2c:2d:42:45:
43:e1:c9:d4:d9:20:6a:92:fa:f8:3f:06:b0:c6:cb:7a:1a:47:
13:ab:95:37:ea:ca:50:7d:3b:6f:d3:08:96:19:29:85:65:e9:
27:b8:39:6d:7f:50:0f:ae:1b:39:59:df:e6:5d:d2:3f:9f:4d:
06:d6:3e:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:57:05 2025 by rpki-client