Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/f21bf0-ba49-43ba-898c-539f9cba00c5/1/Tddxzuh-yov3sS4KYwbxgdKlWm0.mft
File: Tddxzuh-yov3sS4KYwbxgdKlWm0.mft (raw, json)
Hash identifier: 1rgeekR0ZsZOEaXaD3I7kq7sq6xn28DwxQmP75BW/7Q=
Subject key identifier: 79:7C:63:D5:D2:DD:23:A5:D2:9A:A7:35:33:41:99:22:A9:D4:03:46
Authority key identifier: 4D:D7:71:CE:E8:7E:CA:8B:F7:B1:2E:0A:63:06:F1:81:D2:A5:5A:6D
Certificate issuer: /CN=4dd771cee87eca8bf7b12e0a6306f181d2a55a6d
Certificate serial: 019A72CA5B65318971E2839EEE772673B5F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tddxzuh-yov3sS4KYwbxgdKlWm0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/f21bf0-ba49-43ba-898c-539f9cba00c5/1/Tddxzuh-yov3sS4KYwbxgdKlWm0.mft
Manifest number: 02E6
Signing time: Tue 11 Nov 2025 12:00:55 +0000
Manifest this update: Tue 11 Nov 2025 12:00:55 +0000
Manifest next update: Wed 12 Nov 2025 12:00:55 +0000
Files and hashes: 1: Tddxzuh-yov3sS4KYwbxgdKlWm0.crl (hash: 2a+RjHmNNiC8OvzSLj9cgOaqx3AARb9WLwqPm2NdNj4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/f21bf0-ba49-43ba-898c-539f9cba00c5/1/Tddxzuh-yov3sS4KYwbxgdKlWm0.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/f21bf0-ba49-43ba-898c-539f9cba00c5/1/Tddxzuh-yov3sS4KYwbxgdKlWm0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Tddxzuh-yov3sS4KYwbxgdKlWm0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:ca:5b:65:31:89:71:e2:83:9e:ee:77:26:73:b5:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4dd771cee87eca8bf7b12e0a6306f181d2a55a6d
Validity
Not Before: Nov 11 12:00:55 2025 GMT
Not After : Nov 12 12:00:55 2025 GMT
Subject: CN=797c63d5d2dd23a5d29aa73533419922a9d40346
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:96:3a:35:1b:31:c9:e8:cf:7f:3a:d4:0f:b8:
ea:e5:f9:ff:d9:80:90:af:35:43:61:80:24:94:30:
b5:23:18:0e:61:1f:2a:ff:4d:d2:f8:ba:ff:97:25:
7b:6f:56:8a:c7:08:c4:ed:5b:c6:14:de:d5:bc:f6:
45:a5:39:cc:9a:2b:84:0f:47:0f:de:a8:6e:39:8f:
23:cf:58:ca:a6:24:76:ef:2c:2b:0f:3e:61:2a:df:
2c:6d:f9:ef:c6:41:04:2c:e5:e9:23:da:a8:99:8f:
9c:25:90:dd:fb:b0:99:44:3a:40:f5:88:0b:50:7c:
83:50:bd:55:2d:6c:e4:29:f1:dd:52:79:c9:72:b9:
72:25:42:f2:d5:5e:f2:b3:03:64:ed:9f:00:34:8b:
31:ef:09:5d:73:e0:57:77:be:3b:6c:94:d1:09:d2:
18:e7:64:58:e8:61:ff:99:bf:1b:4d:a8:d6:3e:1f:
46:95:e5:8b:2a:d6:c6:1d:d9:e3:5a:c5:d9:a4:21:
ad:8a:c6:cd:ff:89:e6:5b:b2:7e:28:1d:e4:2c:45:
dd:39:58:e8:da:ad:e0:1b:c6:42:d6:de:92:2d:f2:
b8:4f:dc:c6:fe:40:6a:00:a7:e7:a5:01:1a:13:01:
5d:78:2a:1c:ad:f6:03:9d:b6:29:f2:7e:00:14:a7:
46:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:7C:63:D5:D2:DD:23:A5:D2:9A:A7:35:33:41:99:22:A9:D4:03:46
X509v3 Authority Key Identifier:
keyid:4D:D7:71:CE:E8:7E:CA:8B:F7:B1:2E:0A:63:06:F1:81:D2:A5:5A:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tddxzuh-yov3sS4KYwbxgdKlWm0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/f21bf0-ba49-43ba-898c-539f9cba00c5/1/Tddxzuh-yov3sS4KYwbxgdKlWm0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/f21bf0-ba49-43ba-898c-539f9cba00c5/1/Tddxzuh-yov3sS4KYwbxgdKlWm0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:df:98:a8:63:e3:48:26:c4:d8:d8:bc:74:c1:ea:82:f3:b4:
a6:a5:a3:01:28:4d:ee:4f:99:e3:31:74:c0:be:95:f7:35:2c:
eb:61:21:36:b3:62:04:dc:ee:a6:73:b3:e8:48:76:13:22:3d:
ae:60:a3:b8:4c:e0:ba:21:c6:47:1f:8b:84:e4:7f:74:45:43:
f4:5f:93:5a:76:5c:d8:7f:61:ac:35:b3:c7:b1:2d:5c:f4:dc:
42:76:7f:33:70:52:b8:58:f1:b9:da:c3:b1:7d:da:65:97:58:
98:a2:d9:0d:a5:fc:77:3a:d1:d2:5d:46:b9:69:d0:5a:70:29:
54:62:0c:7b:1a:fd:15:6b:c3:f8:e1:f0:e8:fd:c9:58:aa:f6:
9d:7e:f5:05:85:ad:2a:95:75:0e:9c:19:d5:e5:02:dd:62:98:
f1:b5:0f:6e:35:ff:65:bd:75:03:5b:54:f6:24:91:50:31:cf:
34:78:09:84:ff:3a:3f:1a:8b:f7:61:d0:e4:0e:c3:1c:d6:81:
fc:a5:89:33:a2:f6:25:9c:ef:54:dc:b8:14:66:55:92:d3:9b:
3d:90:eb:55:45:81:5a:7e:a4:b2:c0:56:ab:b2:aa:16:bc:ac:
ce:78:3f:64:6b:cf:57:84:40:8c:30:55:3d:7e:d3:0f:02:1c:
03:92:4b:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:51:45 2025 by rpki-client