Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/e85418-64b3-444b-913a-63c2ba4c996c/1/t4Xsc9wYH5k1ZZ9YrtIIUyosKmo.mft
File: t4Xsc9wYH5k1ZZ9YrtIIUyosKmo.mft (raw, json)
Hash identifier: 8Rwh94TFZ+u8NlPazis4YAco0/16mqq4R9ishYWFzCg=
Subject key identifier: EE:35:CD:F6:73:CA:D3:DB:4F:F2:3E:4B:14:4F:B6:11:2B:FD:0E:4E
Authority key identifier: B7:85:EC:73:DC:18:1F:99:35:65:9F:58:AE:D2:08:53:2A:2C:2A:6A
Certificate issuer: /CN=b785ec73dc181f9935659f58aed208532a2c2a6a
Certificate serial: 019A71B86EDEBE490188E61E0BE5DC44D599
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t4Xsc9wYH5k1ZZ9YrtIIUyosKmo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/e85418-64b3-444b-913a-63c2ba4c996c/1/t4Xsc9wYH5k1ZZ9YrtIIUyosKmo.mft
Manifest number: 02AB
Signing time: Tue 11 Nov 2025 07:01:43 +0000
Manifest this update: Tue 11 Nov 2025 07:01:43 +0000
Manifest next update: Wed 12 Nov 2025 07:01:43 +0000
Files and hashes: 1: t4Xsc9wYH5k1ZZ9YrtIIUyosKmo.crl (hash: RiyxrGjNZxU2RCE9NXQYVokfU853o/3EZN63vhjQYx0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/e85418-64b3-444b-913a-63c2ba4c996c/1/t4Xsc9wYH5k1ZZ9YrtIIUyosKmo.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/e85418-64b3-444b-913a-63c2ba4c996c/1/t4Xsc9wYH5k1ZZ9YrtIIUyosKmo.mft
rsync://rpki.ripe.net/repository/DEFAULT/t4Xsc9wYH5k1ZZ9YrtIIUyosKmo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:6e:de:be:49:01:88:e6:1e:0b:e5:dc:44:d5:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b785ec73dc181f9935659f58aed208532a2c2a6a
Validity
Not Before: Nov 11 07:01:43 2025 GMT
Not After : Nov 12 07:01:43 2025 GMT
Subject: CN=ee35cdf673cad3db4ff23e4b144fb6112bfd0e4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:f6:58:48:4a:2c:3b:7b:eb:d5:29:a7:7a:b8:
12:5c:f4:5f:a3:6f:e4:6f:cc:90:10:51:4c:65:ee:
fb:fc:dd:9a:08:23:9e:de:c7:e9:f0:2a:7d:c7:e1:
96:62:ff:c5:25:d9:09:4f:2b:5a:10:6d:4a:d2:ed:
97:cf:04:91:8e:bd:f8:b9:9c:e3:a9:e2:e5:52:03:
69:70:d8:57:38:3e:cd:a7:4b:32:d7:a6:90:96:33:
b9:ba:a1:e7:b3:c7:5f:ad:bd:c4:f3:c6:65:d8:db:
dc:56:8a:90:10:a5:23:a8:e1:6c:a0:c6:67:3d:2c:
d7:93:6c:f9:cd:b0:50:22:af:b7:8f:76:45:29:ff:
73:a0:73:c4:35:99:25:0e:32:a5:23:8c:fb:10:f5:
f3:04:c4:5e:28:20:a0:e8:cf:e9:7b:27:79:d7:d1:
81:bc:2f:fc:af:cc:c5:4a:dd:5c:48:9c:e1:a3:33:
1f:c4:fa:fe:9c:28:16:5f:69:8b:5e:64:4f:f4:84:
70:84:8d:a0:43:76:84:ce:d7:ea:ff:d2:10:23:8d:
ba:0c:14:4c:c1:dc:b4:e6:1d:e5:e5:18:e9:cf:63:
b7:ee:2b:0a:f0:fc:d3:87:41:cf:5e:97:0e:2e:7f:
07:4a:68:17:f3:bb:81:bb:fd:c8:d9:a7:9a:fd:d5:
4c:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:35:CD:F6:73:CA:D3:DB:4F:F2:3E:4B:14:4F:B6:11:2B:FD:0E:4E
X509v3 Authority Key Identifier:
keyid:B7:85:EC:73:DC:18:1F:99:35:65:9F:58:AE:D2:08:53:2A:2C:2A:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t4Xsc9wYH5k1ZZ9YrtIIUyosKmo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/e85418-64b3-444b-913a-63c2ba4c996c/1/t4Xsc9wYH5k1ZZ9YrtIIUyosKmo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/e85418-64b3-444b-913a-63c2ba4c996c/1/t4Xsc9wYH5k1ZZ9YrtIIUyosKmo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:a1:a2:ac:bb:f1:24:8b:d5:6c:9d:63:e3:bb:ff:fb:34:45:
08:5a:d7:3d:4f:cd:f0:61:8e:a2:e0:4a:93:8a:2e:70:eb:4b:
96:a0:04:ee:24:e7:13:31:c8:e5:f3:86:a2:0d:54:58:b9:74:
e9:1d:3f:bc:05:53:ab:43:5c:b1:d7:e0:d3:af:93:ce:8a:76:
36:7f:a7:7b:f3:74:2f:ef:8f:17:93:8b:83:be:67:4b:51:22:
27:e8:17:89:bc:e3:fb:3d:1b:f4:97:17:18:82:ec:83:4f:16:
0e:d9:b4:e9:7d:31:36:35:01:f5:e9:2a:9c:5f:d8:f2:75:39:
7e:84:7e:16:fa:d5:9f:b2:80:8d:9f:13:30:16:81:06:59:25:
ce:f0:6b:38:c5:70:c4:32:3a:6b:08:5c:8f:74:9b:64:64:68:
8c:3d:d1:26:ea:3c:8b:1c:3f:bc:21:e1:77:b2:f8:41:2b:3b:
17:62:a7:48:f6:70:95:48:3a:5d:68:67:96:0a:09:0c:78:ef:
7b:6e:8b:8f:ba:c2:8c:6a:6c:d6:fb:7b:6c:1a:a0:89:7e:a8:
d4:98:1b:65:f9:2c:f0:30:7d:b5:ed:6d:6c:72:d2:c3:da:92:
43:a9:91:c7:45:cc:c9:1b:df:f5:53:d2:af:8f:12:73:6e:0d:
1b:e0:00:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:54:10 2025 by rpki-client