Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/577a7b-5dcc-43a7-a89c-e3bc6b499e7b/1/tsaaSiFb3h0yk03chd6vj9nJRHk.mft
File: tsaaSiFb3h0yk03chd6vj9nJRHk.mft (raw, json)
Hash identifier: KY/TK9fxj74KOknOn4So1OlhTj5f9hnqm0tv2uyAYCs=
Subject key identifier: E9:D5:A4:26:1D:C0:F8:36:E4:28:64:E7:6B:A0:A8:54:47:30:0A:8B
Authority key identifier: B6:C6:9A:4A:21:5B:DE:1D:32:93:4D:DC:85:DE:AF:8F:D9:C9:44:79
Certificate issuer: /CN=b6c69a4a215bde1d32934ddc85deaf8fd9c94479
Certificate serial: 019A72266A4E83B898A386D1EA9616212B16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tsaaSiFb3h0yk03chd6vj9nJRHk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/577a7b-5dcc-43a7-a89c-e3bc6b499e7b/1/tsaaSiFb3h0yk03chd6vj9nJRHk.mft
Manifest number: 0ECB
Signing time: Tue 11 Nov 2025 09:01:51 +0000
Manifest this update: Tue 11 Nov 2025 09:01:51 +0000
Manifest next update: Wed 12 Nov 2025 09:01:51 +0000
Files and hashes: 1: tsaaSiFb3h0yk03chd6vj9nJRHk.crl (hash: 2Bk8AxlVWPD40i/X/aNTWRmcgna0nO1WzlvVIHtn1yA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/577a7b-5dcc-43a7-a89c-e3bc6b499e7b/1/tsaaSiFb3h0yk03chd6vj9nJRHk.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/577a7b-5dcc-43a7-a89c-e3bc6b499e7b/1/tsaaSiFb3h0yk03chd6vj9nJRHk.mft
rsync://rpki.ripe.net/repository/DEFAULT/tsaaSiFb3h0yk03chd6vj9nJRHk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:26:6a:4e:83:b8:98:a3:86:d1:ea:96:16:21:2b:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b6c69a4a215bde1d32934ddc85deaf8fd9c94479
Validity
Not Before: Nov 11 09:01:51 2025 GMT
Not After : Nov 12 09:01:51 2025 GMT
Subject: CN=e9d5a4261dc0f836e42864e76ba0a85447300a8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:5b:d4:12:45:08:3d:d5:7b:fb:3e:61:61:b2:
fb:b6:35:62:9b:ca:3d:41:c4:b7:8f:9e:ef:37:07:
90:78:0a:85:7d:95:79:5f:07:29:44:c8:15:30:6b:
7d:33:c8:f9:eb:4b:7b:d0:19:95:6a:3a:2c:5a:88:
c6:f8:8e:a6:40:43:d1:ff:67:c3:b4:16:6d:8f:ee:
d3:42:73:1d:d4:35:2b:0e:5f:aa:fd:37:1a:ac:bc:
a7:5f:f6:30:1e:0d:39:c6:d6:ec:10:16:45:8d:7a:
69:72:f9:05:0f:b7:38:b2:c4:85:f7:49:dc:16:8c:
cc:2c:a5:d5:a7:30:a5:f0:3d:09:c3:fc:05:78:07:
77:e6:a5:6a:5f:99:5c:4f:7e:ee:17:20:c4:99:76:
fd:0a:a2:c1:0f:ea:12:6e:30:d8:73:11:4e:ba:76:
23:32:57:67:e8:c0:46:f3:13:b8:cf:9b:34:1d:16:
5b:31:54:12:26:dd:b4:b3:cc:ba:73:a4:0d:cc:11:
69:53:04:49:3d:ac:35:e6:ba:43:68:dd:e4:a5:c4:
77:f4:67:ed:fe:c2:f7:30:23:39:57:c6:11:93:43:
b4:74:6f:3b:aa:18:83:78:1b:3d:8f:97:19:d9:9e:
72:ce:00:42:5c:21:b9:ed:22:a1:00:23:16:c8:17:
01:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:D5:A4:26:1D:C0:F8:36:E4:28:64:E7:6B:A0:A8:54:47:30:0A:8B
X509v3 Authority Key Identifier:
keyid:B6:C6:9A:4A:21:5B:DE:1D:32:93:4D:DC:85:DE:AF:8F:D9:C9:44:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tsaaSiFb3h0yk03chd6vj9nJRHk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/577a7b-5dcc-43a7-a89c-e3bc6b499e7b/1/tsaaSiFb3h0yk03chd6vj9nJRHk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/577a7b-5dcc-43a7-a89c-e3bc6b499e7b/1/tsaaSiFb3h0yk03chd6vj9nJRHk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:36:80:67:f7:fb:b2:ed:26:cc:dd:d6:9b:2f:28:3a:35:48:
7e:b6:b7:d9:7b:e5:ca:25:b8:02:ab:bf:a4:ff:1c:0e:91:dd:
38:7e:4c:25:31:c7:25:23:30:36:db:a3:de:98:9a:e4:75:89:
a6:ff:25:c3:7d:b4:11:7b:ae:8c:83:3f:14:58:66:f7:b6:a2:
ed:2b:04:07:69:b6:a0:37:32:23:e5:62:0f:ee:53:36:6b:e1:
c8:ad:0c:51:60:29:ff:ae:3b:c2:4e:b3:73:c2:39:be:9c:89:
48:af:f4:a2:de:6b:52:fd:71:08:7b:2b:3f:ce:7e:0e:2a:b0:
05:d8:21:52:10:bb:fd:71:81:9d:97:03:d5:54:34:18:3d:58:
34:6a:52:0d:71:8f:55:e6:c7:f7:53:37:a4:6c:67:ac:77:12:
91:7b:83:27:7f:71:59:39:21:39:50:8b:99:37:ea:6a:9e:14:
7a:d4:ac:f0:e8:d6:70:15:2d:37:3d:29:e2:be:f6:45:f4:a3:
bf:58:2b:22:3f:a0:b5:0e:52:f4:02:6f:6b:d2:67:76:f5:48:
ee:99:24:41:af:5e:49:af:1c:c7:2b:e4:17:05:de:7c:e8:d6:
60:9c:78:47:a2:00:e2:b4:9e:be:cb:45:e3:ea:d3:f4:59:38:
75:03:8d:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:39:13 2025 by rpki-client