Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/b39e52-87e6-44fa-a566-89fcaf69acc7/1/TgyY_GY_7jZUpy9MCBRhxBYc84E.mft
File: TgyY_GY_7jZUpy9MCBRhxBYc84E.mft (raw, json)
Hash identifier: 1CKQ6YrkpQg5WxGWXX3X038QXMFg0mwFMMmnxTGYI3M=
Subject key identifier: F5:DA:34:B6:F1:28:CF:D8:37:ED:41:E7:8F:AC:B3:F8:A5:28:81:1A
Authority key identifier: 4E:0C:98:FC:66:3F:EE:36:54:A7:2F:4C:08:14:61:C4:16:1C:F3:81
Certificate issuer: /CN=4e0c98fc663fee3654a72f4c081461c4161cf381
Certificate serial: 019A7112B06FA83CE84F15E29488BA6071C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TgyY_GY_7jZUpy9MCBRhxBYc84E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/b39e52-87e6-44fa-a566-89fcaf69acc7/1/TgyY_GY_7jZUpy9MCBRhxBYc84E.mft
Manifest number: 14DC
Signing time: Tue 11 Nov 2025 04:00:41 +0000
Manifest this update: Tue 11 Nov 2025 04:00:41 +0000
Manifest next update: Wed 12 Nov 2025 04:00:41 +0000
Files and hashes: 1: TgyY_GY_7jZUpy9MCBRhxBYc84E.crl (hash: vLwlwvsa9dnDXqGjqSAaT//teUIzYUCvJ+VanlICcmA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/b39e52-87e6-44fa-a566-89fcaf69acc7/1/TgyY_GY_7jZUpy9MCBRhxBYc84E.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/b39e52-87e6-44fa-a566-89fcaf69acc7/1/TgyY_GY_7jZUpy9MCBRhxBYc84E.mft
rsync://rpki.ripe.net/repository/DEFAULT/TgyY_GY_7jZUpy9MCBRhxBYc84E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:12:b0:6f:a8:3c:e8:4f:15:e2:94:88:ba:60:71:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e0c98fc663fee3654a72f4c081461c4161cf381
Validity
Not Before: Nov 11 04:00:41 2025 GMT
Not After : Nov 12 04:00:41 2025 GMT
Subject: CN=f5da34b6f128cfd837ed41e78facb3f8a528811a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:cc:77:13:0a:a4:4f:e2:5d:82:1c:88:d9:ed:
58:19:c3:0a:36:6a:75:59:ed:73:50:69:f9:0a:fa:
1b:88:f2:f0:14:92:6b:bc:d9:6a:4d:fd:4a:35:e9:
4c:e9:95:ad:94:a8:5c:31:ff:7c:69:c7:fb:2c:c6:
ba:9d:b4:5b:3d:b2:2b:fa:81:5d:81:f7:a7:02:f5:
f0:29:ba:a6:aa:79:de:48:b1:1c:7a:a5:aa:1f:6e:
56:0d:98:cb:91:22:a7:c2:59:08:3e:e0:d5:1a:91:
b8:2c:2f:92:bb:a6:a5:63:cb:93:f7:75:09:d0:f7:
2a:4e:fa:46:52:97:9c:66:fd:a1:55:08:7b:76:38:
21:e4:76:41:d3:89:96:9a:b7:e7:68:eb:24:a9:b2:
a0:4f:c4:2f:f8:7d:07:7c:f3:93:ff:75:08:dc:58:
78:25:5a:8f:59:ea:07:f5:e8:03:5a:ae:bf:5e:87:
36:1b:2d:d3:f8:60:e4:c6:d4:02:9b:51:ac:1b:c0:
ea:8f:39:26:94:71:d6:c5:99:4c:32:d4:7f:35:0f:
c5:f9:33:61:bd:e3:c5:ad:32:ba:f3:aa:3c:d8:8c:
4c:35:fb:56:79:a5:27:f0:d4:5d:f9:94:8f:16:c0:
ac:66:55:61:46:27:b1:8e:94:19:5b:c6:cb:56:e2:
89:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:DA:34:B6:F1:28:CF:D8:37:ED:41:E7:8F:AC:B3:F8:A5:28:81:1A
X509v3 Authority Key Identifier:
keyid:4E:0C:98:FC:66:3F:EE:36:54:A7:2F:4C:08:14:61:C4:16:1C:F3:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TgyY_GY_7jZUpy9MCBRhxBYc84E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/b39e52-87e6-44fa-a566-89fcaf69acc7/1/TgyY_GY_7jZUpy9MCBRhxBYc84E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/b39e52-87e6-44fa-a566-89fcaf69acc7/1/TgyY_GY_7jZUpy9MCBRhxBYc84E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:a4:47:9f:4b:a4:73:bd:25:4c:17:9a:a3:cc:14:69:77:84:
ab:18:d3:7e:a7:d9:45:0d:47:91:07:1b:f9:c9:9a:84:f7:7e:
1d:7d:b6:cb:82:a4:48:f1:b6:ab:b8:5a:61:cf:da:19:05:eb:
97:ce:3f:10:ca:0a:7d:51:67:54:ee:3a:58:28:2b:d2:76:7d:
1a:9a:50:e1:70:f9:04:87:15:d6:ef:92:97:7c:dd:5e:77:3a:
c3:2b:04:8b:b4:f0:e2:67:c0:71:ca:15:a6:b4:16:c3:23:7a:
46:4c:47:bf:d5:d2:f8:cf:05:2d:ea:30:73:ea:6f:b9:4d:4d:
45:2d:21:6e:78:27:59:4d:ef:4d:48:f7:50:07:57:a7:ca:fb:
89:68:3c:f0:59:5e:45:aa:72:84:9e:37:dd:7f:6d:e1:fd:47:
1d:41:7e:db:f8:6e:56:50:77:4d:83:58:b0:67:e6:63:e0:05:
1a:2b:35:c1:94:76:58:61:9d:26:56:1a:09:5d:bb:85:49:9c:
3b:57:bc:4d:1c:b2:11:d8:c2:10:e5:26:f7:11:26:b8:46:1b:
4d:37:4b:9b:84:1e:06:39:a7:25:ee:86:c6:1e:b5:fe:34:dd:
55:c7:95:0f:fc:15:33:90:8b:79:62:42:50:61:75:9b:0d:69:
61:e1:24:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:47:25 2025 by rpki-client