Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/887501-4d8e-4beb-9590-65079b75868a/1/TTpxp39MqbpTb5hhKpxW1AwMO50.mft
File: TTpxp39MqbpTb5hhKpxW1AwMO50.mft (raw, json)
Hash identifier: FcTgwJhVoO3NSUvFqSN/e0E7WiH1wyJnslUkxOrQMeI=
Subject key identifier: 80:46:9D:16:DA:71:5D:74:63:BF:56:D4:92:A6:23:53:6D:79:29:52
Authority key identifier: 4D:3A:71:A7:7F:4C:A9:BA:53:6F:98:61:2A:9C:56:D4:0C:0C:3B:9D
Certificate issuer: /CN=4d3a71a77f4ca9ba536f98612a9c56d40c0c3b9d
Certificate serial: 019A71B779A4D697F454A5941BBC13D27509
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TTpxp39MqbpTb5hhKpxW1AwMO50.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/887501-4d8e-4beb-9590-65079b75868a/1/TTpxp39MqbpTb5hhKpxW1AwMO50.mft
Manifest number: 171C
Signing time: Tue 11 Nov 2025 07:00:40 +0000
Manifest this update: Tue 11 Nov 2025 07:00:40 +0000
Manifest next update: Wed 12 Nov 2025 07:00:40 +0000
Files and hashes: 1: TTpxp39MqbpTb5hhKpxW1AwMO50.crl (hash: fxFx8w5zESHtklM/QCCFqKkN1X+phQV/OvGSTeMnv20=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/887501-4d8e-4beb-9590-65079b75868a/1/TTpxp39MqbpTb5hhKpxW1AwMO50.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/887501-4d8e-4beb-9590-65079b75868a/1/TTpxp39MqbpTb5hhKpxW1AwMO50.mft
rsync://rpki.ripe.net/repository/DEFAULT/TTpxp39MqbpTb5hhKpxW1AwMO50.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b7:79:a4:d6:97:f4:54:a5:94:1b:bc:13:d2:75:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d3a71a77f4ca9ba536f98612a9c56d40c0c3b9d
Validity
Not Before: Nov 11 07:00:40 2025 GMT
Not After : Nov 12 07:00:40 2025 GMT
Subject: CN=80469d16da715d7463bf56d492a623536d792952
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:30:fc:b6:5e:dd:d2:73:90:68:2a:01:0a:32:
f3:19:28:1c:50:a0:0b:98:93:d8:9e:f9:b0:e7:29:
57:a3:b4:63:5a:3a:c2:65:33:ba:dc:05:11:5a:d9:
7b:b3:89:9d:ef:0f:69:0a:f5:f7:84:5d:b7:9c:2e:
28:b4:95:2c:96:7f:3e:16:12:93:40:73:16:a0:d2:
8c:aa:94:6d:65:a0:18:a3:16:cd:89:12:62:f0:ed:
90:4f:ee:2c:83:17:ff:e8:46:aa:1f:24:38:6e:49:
39:50:6a:dd:72:51:9c:6b:e2:8f:99:9d:dc:16:3b:
88:02:62:84:cd:2b:e7:b9:7f:78:e9:aa:cd:e6:8b:
8f:44:97:9b:21:ed:f1:14:27:56:3d:81:07:f2:a5:
a7:e3:ac:9c:63:3f:27:94:f5:51:ce:93:72:64:1c:
7f:94:6c:a1:ce:76:16:74:d7:3d:99:11:73:fe:97:
9b:03:79:28:37:15:53:5c:75:de:b1:eb:7e:d4:61:
ff:4d:58:e3:c6:d7:ec:ab:69:7a:8e:70:ef:52:4a:
cd:f0:50:10:fd:ac:0b:f5:81:e0:3a:60:a6:e0:4e:
12:a9:68:94:2a:73:fc:a4:00:c4:b4:09:b6:f0:b8:
68:5c:99:b9:09:53:1b:d0:34:8e:27:3c:c8:dd:8a:
04:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:46:9D:16:DA:71:5D:74:63:BF:56:D4:92:A6:23:53:6D:79:29:52
X509v3 Authority Key Identifier:
keyid:4D:3A:71:A7:7F:4C:A9:BA:53:6F:98:61:2A:9C:56:D4:0C:0C:3B:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TTpxp39MqbpTb5hhKpxW1AwMO50.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/887501-4d8e-4beb-9590-65079b75868a/1/TTpxp39MqbpTb5hhKpxW1AwMO50.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/887501-4d8e-4beb-9590-65079b75868a/1/TTpxp39MqbpTb5hhKpxW1AwMO50.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:45:26:46:23:26:c8:f8:8a:16:97:e1:c0:3e:a6:59:a7:d5:
25:00:25:fc:0d:90:ce:f2:fe:63:1f:f3:ad:2d:8f:2d:35:ad:
a5:d2:bf:81:88:fd:a9:68:16:cf:fa:07:59:4e:87:c6:6b:a8:
0d:1d:0f:82:93:30:54:ec:65:29:cc:1d:42:b4:8e:dc:a5:7a:
fb:41:71:8e:b4:45:fe:dd:6d:77:c8:80:b3:85:34:e9:e4:d0:
8a:68:8d:e6:ad:fa:c9:9d:87:32:0f:3d:9b:02:03:c1:f5:4e:
57:d7:c7:ba:93:5f:51:af:4d:79:df:34:4a:d9:e6:44:ea:5a:
8a:ab:cd:c8:ca:fc:ca:6b:14:c6:aa:c7:2f:3a:73:ae:73:08:
35:36:2b:a6:df:87:54:b2:d0:a4:58:d7:08:b0:6d:b4:5d:16:
f1:12:a6:66:3f:50:3b:1a:2a:21:31:dc:60:1a:d3:30:7c:14:
0e:e6:37:19:f3:0a:8d:b3:bb:48:68:1a:32:60:ed:ca:22:02:
60:1b:d1:b4:43:f8:fc:59:bc:49:26:fc:d7:26:3f:06:70:84:
cc:4a:20:b4:fe:27:bb:75:98:aa:76:a2:7d:f6:27:32:6f:ca:
67:29:d0:c9:8b:a3:d0:71:a1:2a:25:77:e4:36:6e:b4:fb:4e:
4f:d1:06:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:18:43 2025 by rpki-client