Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/9b2fc1-ba58-4957-8540-eb1ed0b487b1/1/TSE3TacxMU8KBRddJbDYmnb24IE.mft
File: TSE3TacxMU8KBRddJbDYmnb24IE.mft (raw, json)
Hash identifier: UMl9Y4a27/s8je+keuX0R6Rzfi8dVjy7n09fmorAZJ4=
Subject key identifier: EC:5A:22:19:F4:4C:8A:50:4C:CE:0A:63:BA:E0:4E:73:4B:1A:6A:2E
Authority key identifier: 4D:21:37:4D:A7:31:31:4F:0A:05:17:5D:25:B0:D8:9A:76:F6:E0:81
Certificate issuer: /CN=4d21374da731314f0a05175d25b0d89a76f6e081
Certificate serial: 019A725C90FD5D6120C148463B80ADCFD34D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TSE3TacxMU8KBRddJbDYmnb24IE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/9b2fc1-ba58-4957-8540-eb1ed0b487b1/1/TSE3TacxMU8KBRddJbDYmnb24IE.mft
Manifest number: 068E
Signing time: Tue 11 Nov 2025 10:01:00 +0000
Manifest this update: Tue 11 Nov 2025 10:01:00 +0000
Manifest next update: Wed 12 Nov 2025 10:01:00 +0000
Files and hashes: 1: TSE3TacxMU8KBRddJbDYmnb24IE.crl (hash: 56BhldQlpCS1KAlN/BhCdDXtBuw73z0L5t1vcRavMxc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/9b2fc1-ba58-4957-8540-eb1ed0b487b1/1/TSE3TacxMU8KBRddJbDYmnb24IE.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/9b2fc1-ba58-4957-8540-eb1ed0b487b1/1/TSE3TacxMU8KBRddJbDYmnb24IE.mft
rsync://rpki.ripe.net/repository/DEFAULT/TSE3TacxMU8KBRddJbDYmnb24IE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:90:fd:5d:61:20:c1:48:46:3b:80:ad:cf:d3:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d21374da731314f0a05175d25b0d89a76f6e081
Validity
Not Before: Nov 11 10:01:00 2025 GMT
Not After : Nov 12 10:01:00 2025 GMT
Subject: CN=ec5a2219f44c8a504cce0a63bae04e734b1a6a2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:ce:5b:c8:97:f2:3f:d3:33:a8:23:85:37:9e:
65:21:ed:76:68:85:aa:12:54:51:7b:87:cb:54:af:
89:2c:90:0e:3e:1f:95:4b:f0:03:20:00:97:06:b6:
68:03:9b:cb:6c:99:9e:7f:0e:f1:d6:5a:49:8b:ce:
be:64:93:a0:86:d1:b7:ec:37:2d:60:98:15:37:a0:
fb:08:ef:71:2e:02:e3:49:be:37:d8:fb:5a:7d:3c:
6d:9c:ef:35:45:0c:eb:28:6f:fe:1d:24:f3:b5:21:
b1:54:12:31:a6:a1:ab:43:82:de:d6:83:37:59:b3:
22:d7:20:34:a6:79:58:59:24:2d:35:68:61:7e:22:
8b:d0:91:58:6b:75:c2:b0:71:e8:d3:12:ce:b4:41:
fe:0d:81:94:ff:08:1c:61:52:80:17:61:22:93:45:
ba:49:cc:39:41:46:25:3a:d6:5a:ac:73:3d:bb:c3:
01:d7:00:05:d4:91:bf:7b:10:d0:97:fe:77:0b:40:
51:71:3c:0f:db:32:02:1e:55:98:07:86:60:b0:2c:
10:35:31:68:6f:cc:40:e2:92:1f:3d:e3:73:fc:73:
6f:ae:72:31:f8:c4:46:9d:95:17:9a:8d:fe:05:be:
78:1c:79:d4:31:46:7d:70:4e:08:0e:2c:88:11:cd:
e3:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:5A:22:19:F4:4C:8A:50:4C:CE:0A:63:BA:E0:4E:73:4B:1A:6A:2E
X509v3 Authority Key Identifier:
keyid:4D:21:37:4D:A7:31:31:4F:0A:05:17:5D:25:B0:D8:9A:76:F6:E0:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TSE3TacxMU8KBRddJbDYmnb24IE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/9b2fc1-ba58-4957-8540-eb1ed0b487b1/1/TSE3TacxMU8KBRddJbDYmnb24IE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/9b2fc1-ba58-4957-8540-eb1ed0b487b1/1/TSE3TacxMU8KBRddJbDYmnb24IE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:23:44:6f:12:bb:df:61:55:f6:5e:57:6e:1e:2c:a5:68:64:
8a:8a:06:34:33:7e:bd:d0:11:04:8c:d3:b6:c6:d2:08:02:5c:
fa:4e:c2:04:68:5b:b1:4b:29:6e:c1:c1:44:78:7a:4d:30:0d:
39:d7:6f:bf:a5:24:38:b4:be:95:d8:1a:12:d1:b5:33:ef:d3:
16:ae:cb:72:3c:cf:f3:9d:4b:53:84:7f:64:82:8b:f7:c9:65:
4d:83:5c:e4:85:e4:d8:8d:30:ba:cf:da:f8:5c:91:28:ba:15:
90:24:d3:fa:20:2b:94:8b:16:29:dd:59:bf:82:47:30:10:91:
06:f9:d0:4d:54:4b:58:0d:42:33:11:97:03:ca:96:30:17:82:
ec:f8:9b:2b:2b:21:5d:64:3c:e4:13:02:14:42:93:4f:86:84:
f3:4f:0b:99:79:e1:7c:7e:8b:30:80:9e:d4:7e:dc:11:a5:8b:
86:05:89:8e:ff:d2:0b:ec:f8:a5:91:16:99:46:99:ba:65:4b:
a6:28:94:33:57:3f:3f:71:1a:0d:e5:7d:43:49:13:b4:53:78:
6a:f7:c4:65:e1:cb:c5:fc:ae:c8:f3:54:cd:8e:97:84:12:6a:
ef:f0:ac:7a:c0:92:d6:55:bc:1d:f4:40:e0:29:09:2b:9d:3b:
f2:b6:92:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:19:45 2025 by rpki-client