Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/e2451c-e31c-4c30-86f2-0e516f9c4d45/1/_tvrNJcjK29ayaJodTchEBWihxA.mft
File: _tvrNJcjK29ayaJodTchEBWihxA.mft (raw, json)
Hash identifier: zqeDVsUNZG/TdCx3mqbgz+9zo1kGvb5UBunc5vsDbbA=
Subject key identifier: ED:FF:51:75:49:24:27:C6:BF:32:75:EC:76:06:04:3F:50:1D:21:C3
Authority key identifier: FE:DB:EB:34:97:23:2B:6F:5A:C9:A2:68:75:37:21:10:15:A2:87:10
Certificate issuer: /CN=fedbeb3497232b6f5ac9a2687537211015a28710
Certificate serial: 019A73A680EC1CAB2611F5DE0FC87BAAB607
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_tvrNJcjK29ayaJodTchEBWihxA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/e2451c-e31c-4c30-86f2-0e516f9c4d45/1/_tvrNJcjK29ayaJodTchEBWihxA.mft
Manifest number: 171E
Signing time: Tue 11 Nov 2025 16:01:23 +0000
Manifest this update: Tue 11 Nov 2025 16:01:23 +0000
Manifest next update: Wed 12 Nov 2025 16:01:23 +0000
Files and hashes: 1: _tvrNJcjK29ayaJodTchEBWihxA.crl (hash: 1+7c+YRDBSECF/A+u/MVzudX531Zai1Nb3bOla0oxvQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/e2451c-e31c-4c30-86f2-0e516f9c4d45/1/_tvrNJcjK29ayaJodTchEBWihxA.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/e2451c-e31c-4c30-86f2-0e516f9c4d45/1/_tvrNJcjK29ayaJodTchEBWihxA.mft
rsync://rpki.ripe.net/repository/DEFAULT/_tvrNJcjK29ayaJodTchEBWihxA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:73:a6:80:ec:1c:ab:26:11:f5:de:0f:c8:7b:aa:b6:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fedbeb3497232b6f5ac9a2687537211015a28710
Validity
Not Before: Nov 11 16:01:23 2025 GMT
Not After : Nov 12 16:01:23 2025 GMT
Subject: CN=edff5175492427c6bf3275ec7606043f501d21c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:26:20:44:1c:49:99:19:3f:43:af:13:8c:a5:
6b:30:11:1d:68:60:9b:7d:52:d8:da:8b:e1:4e:70:
53:ea:77:62:10:eb:3d:51:3d:7e:bc:f1:c8:42:25:
d1:95:5f:09:e3:34:5d:08:1b:fe:c4:73:ee:71:9f:
94:4d:f6:28:53:df:9a:ab:fb:bd:dd:24:b3:16:0f:
7a:b9:c0:0e:dd:19:92:dd:a7:2f:b6:b6:c9:2e:de:
eb:00:28:6f:25:b9:42:25:45:8e:ae:1e:a1:d2:1c:
36:27:3d:c6:aa:c2:df:a5:4e:b0:37:61:19:09:38:
e1:78:71:58:28:e5:64:ad:9e:76:6f:f3:17:44:11:
63:d9:73:f6:04:34:38:3c:0b:30:ef:0e:d4:1e:ff:
96:d9:61:de:c8:db:9b:aa:50:b8:71:ee:ee:b4:3b:
94:82:b6:39:1a:8f:22:36:ba:a4:2c:ba:93:3b:16:
72:52:cc:26:a5:9b:bc:9e:74:e3:35:2a:d0:4c:2d:
b8:a1:ed:e4:49:ca:01:61:3c:8f:e9:95:cb:2b:19:
00:ac:4f:f6:22:7b:52:59:4f:e7:df:76:d0:d1:e6:
46:a4:33:f6:27:f2:cc:81:8e:e3:6b:11:29:00:b4:
3d:7d:af:0f:ae:fc:fc:17:36:75:46:3d:d0:3f:b2:
7f:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:FF:51:75:49:24:27:C6:BF:32:75:EC:76:06:04:3F:50:1D:21:C3
X509v3 Authority Key Identifier:
keyid:FE:DB:EB:34:97:23:2B:6F:5A:C9:A2:68:75:37:21:10:15:A2:87:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_tvrNJcjK29ayaJodTchEBWihxA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/e2451c-e31c-4c30-86f2-0e516f9c4d45/1/_tvrNJcjK29ayaJodTchEBWihxA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/e2451c-e31c-4c30-86f2-0e516f9c4d45/1/_tvrNJcjK29ayaJodTchEBWihxA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:e3:98:c3:24:5a:04:06:0e:c7:a1:c9:0b:c0:bb:6e:6a:26:
bf:5f:37:7a:f9:da:c2:bb:91:53:f6:69:e2:33:e6:c9:ca:c2:
14:a1:3f:c2:91:61:2d:2c:09:c6:cb:46:c5:e6:fe:2f:51:23:
39:be:9c:50:16:a3:1f:9d:75:f4:b6:47:46:7e:de:f6:d8:2f:
04:2e:f4:01:6f:a6:31:64:c5:78:83:6f:bd:c5:4c:cc:66:9e:
40:6b:84:58:94:ba:3f:80:c3:df:1d:6f:5a:75:25:7a:d5:a3:
8f:16:0d:dd:ec:d1:bb:43:99:40:78:88:e8:35:6d:9f:49:c8:
9a:4f:2a:55:92:a5:96:8b:18:c6:34:92:d7:5e:f3:73:56:ac:
5e:3f:3a:ea:05:ae:2f:3c:a1:bc:9a:71:07:75:4a:73:57:63:
13:c4:00:b0:f0:68:63:be:e1:a5:a6:d1:e4:c3:b8:75:be:b1:
8c:ed:c3:7c:0c:a9:f6:82:75:8f:55:05:b8:23:1c:59:bf:44:
9b:af:fa:8f:09:0d:cf:8e:1b:3a:dc:53:ff:ae:2f:f3:41:58:
f8:a4:db:ca:4e:0b:5d:4e:49:69:7b:27:37:89:1f:11:fb:2f:
f2:f0:d2:92:f8:16:12:e2:cc:4a:2a:95:16:a0:f7:53:c3:ef:
79:51:a9:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 18:36:46 2025 by rpki-client