Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/0355f6-270c-42b8-b264-b0d7117d794f/1/T1VxCj6EBcGv2mxj6edzZu_GHnw.mft
File: T1VxCj6EBcGv2mxj6edzZu_GHnw.mft (raw, json)
Hash identifier: fyOWH9mi8J0dWQoPt8f4nI2Rk7owJ0E58QI4TW3T5QE=
Subject key identifier: 30:89:7D:D9:AC:D8:D5:60:F5:12:69:10:25:65:A6:8E:09:A3:86:61
Authority key identifier: 4F:55:71:0A:3E:84:05:C1:AF:DA:6C:63:E9:E7:73:66:EF:C6:1E:7C
Certificate issuer: /CN=4f55710a3e8405c1afda6c63e9e77366efc61e7c
Certificate serial: 019A71EF01813178F90F7266E75C17587071
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T1VxCj6EBcGv2mxj6edzZu_GHnw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/0355f6-270c-42b8-b264-b0d7117d794f/1/T1VxCj6EBcGv2mxj6edzZu_GHnw.mft
Manifest number: 0320
Signing time: Tue 11 Nov 2025 08:01:20 +0000
Manifest this update: Tue 11 Nov 2025 08:01:20 +0000
Manifest next update: Wed 12 Nov 2025 08:01:20 +0000
Files and hashes: 1: T1VxCj6EBcGv2mxj6edzZu_GHnw.crl (hash: 8b7Z+5xQwQgyuQOw6boeCxESbBy93nQHZ+4UWDETyEo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/0355f6-270c-42b8-b264-b0d7117d794f/1/T1VxCj6EBcGv2mxj6edzZu_GHnw.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/0355f6-270c-42b8-b264-b0d7117d794f/1/T1VxCj6EBcGv2mxj6edzZu_GHnw.mft
rsync://rpki.ripe.net/repository/DEFAULT/T1VxCj6EBcGv2mxj6edzZu_GHnw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ef:01:81:31:78:f9:0f:72:66:e7:5c:17:58:70:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f55710a3e8405c1afda6c63e9e77366efc61e7c
Validity
Not Before: Nov 11 08:01:20 2025 GMT
Not After : Nov 12 08:01:20 2025 GMT
Subject: CN=30897dd9acd8d560f51269102565a68e09a38661
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:d4:c8:80:7e:4a:b8:63:98:bd:ec:f7:49:32:
0e:db:86:23:23:32:56:b1:e9:d0:5d:38:67:fe:57:
e9:2e:52:7e:4e:36:bb:86:3f:03:03:0a:8f:25:d2:
3e:7c:ef:4b:58:b5:71:b6:e8:69:4b:d6:8e:1f:1d:
f3:b0:03:f6:70:eb:ca:8f:bc:87:ce:15:d4:76:6a:
f1:04:ff:bf:91:ab:f8:aa:2f:a7:6a:45:0e:44:ef:
70:46:f7:cd:f2:ed:a4:a8:98:6b:e8:6e:92:d9:13:
dc:d4:7d:47:44:ce:95:9b:35:9d:89:1c:7a:14:a5:
4c:c7:65:d4:40:52:d2:e9:49:43:46:d6:74:b4:c0:
dc:53:29:11:29:df:41:81:9b:5d:fc:67:0b:f6:12:
f1:6e:d2:84:f0:b8:4c:3f:5f:95:22:c9:42:e2:aa:
38:33:ad:ae:20:df:2a:61:cd:c9:e0:b3:99:13:f1:
b1:98:1f:36:c6:a3:36:71:6e:57:d6:15:dd:8c:c0:
1a:69:92:32:e8:7a:f7:7a:ce:27:f5:33:9e:e5:37:
6c:85:60:7d:c0:35:a7:cf:35:e6:45:b0:24:ee:39:
b5:9a:63:cc:2b:65:75:ab:f4:5c:c8:35:6e:e7:b5:
1c:f8:4b:d1:b6:5a:27:67:aa:8b:86:04:30:2e:0b:
f2:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:89:7D:D9:AC:D8:D5:60:F5:12:69:10:25:65:A6:8E:09:A3:86:61
X509v3 Authority Key Identifier:
keyid:4F:55:71:0A:3E:84:05:C1:AF:DA:6C:63:E9:E7:73:66:EF:C6:1E:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T1VxCj6EBcGv2mxj6edzZu_GHnw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/0355f6-270c-42b8-b264-b0d7117d794f/1/T1VxCj6EBcGv2mxj6edzZu_GHnw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/0355f6-270c-42b8-b264-b0d7117d794f/1/T1VxCj6EBcGv2mxj6edzZu_GHnw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:9a:e9:1c:00:6e:d7:6d:fc:c2:ee:2b:bc:48:4b:be:86:4d:
37:da:f5:b0:3f:46:84:45:ad:6e:23:bf:79:52:1c:a7:04:b7:
cb:24:89:87:01:cb:0d:21:f3:86:b4:bf:55:14:ac:f3:70:84:
6a:02:09:b1:07:03:8d:43:3b:9e:7f:77:29:a4:2e:e1:20:2a:
e1:a9:75:17:5b:b8:8c:5e:9f:c3:91:57:89:3a:c3:25:e5:7b:
48:a4:70:a5:fc:c0:d4:31:32:31:ce:6f:d3:b4:23:24:f3:81:
58:77:a5:1f:07:64:47:02:a8:e5:99:3f:dd:1b:8d:ed:61:91:
4c:2b:85:20:7a:2d:61:58:f4:13:6a:0e:51:18:be:eb:0e:22:
20:62:ce:23:81:63:1a:6c:68:a8:27:6f:33:22:36:a6:ae:33:
a8:58:af:23:7a:f6:95:88:ef:a1:40:34:9d:4a:71:7b:89:21:
4a:03:0a:18:e7:67:f0:16:fe:0c:dc:21:5c:cf:4b:96:bc:0b:
34:e6:4c:6c:18:ca:76:41:fa:6d:ee:d2:8a:70:b4:5a:11:3a:
0d:23:2c:95:95:3f:8e:ea:42:c3:d1:16:f6:18:ea:9a:21:f6:
63:b4:05:11:3d:54:62:d1:fc:d4:af:73:f6:de:67:36:46:1b:
5a:e4:06:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 13:58:41 2025 by rpki-client