Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/6f40dd-4c07-405b-a042-f9250dd79fe9/1/TNcQtlNz4NkQ2nBjb8FDwGul3aw.mft
File: TNcQtlNz4NkQ2nBjb8FDwGul3aw.mft (raw, json)
Hash identifier: HsvbWF0J++AuvJoAYlWjMABLg+hVBGyVr7aibCEBNN4=
Subject key identifier: 57:76:EE:6F:E9:4B:5D:C9:95:BD:0B:C3:09:D5:26:A8:35:4D:CC:13
Authority key identifier: 4C:D7:10:B6:53:73:E0:D9:10:DA:70:63:6F:C1:43:C0:6B:A5:DD:AC
Certificate issuer: /CN=4cd710b65373e0d910da70636fc143c06ba5ddac
Certificate serial: 019A7225D93F7571D0BDE101EACBF0E27396
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TNcQtlNz4NkQ2nBjb8FDwGul3aw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/6f40dd-4c07-405b-a042-f9250dd79fe9/1/TNcQtlNz4NkQ2nBjb8FDwGul3aw.mft
Manifest number: 1675
Signing time: Tue 11 Nov 2025 09:01:14 +0000
Manifest this update: Tue 11 Nov 2025 09:01:14 +0000
Manifest next update: Wed 12 Nov 2025 09:01:14 +0000
Files and hashes: 1: TNcQtlNz4NkQ2nBjb8FDwGul3aw.crl (hash: zjSX7DOAuskvIwtIfWVVTGP2BzejvMSxta8FlN1hgkU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/6f40dd-4c07-405b-a042-f9250dd79fe9/1/TNcQtlNz4NkQ2nBjb8FDwGul3aw.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/6f40dd-4c07-405b-a042-f9250dd79fe9/1/TNcQtlNz4NkQ2nBjb8FDwGul3aw.mft
rsync://rpki.ripe.net/repository/DEFAULT/TNcQtlNz4NkQ2nBjb8FDwGul3aw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:25:d9:3f:75:71:d0:bd:e1:01:ea:cb:f0:e2:73:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4cd710b65373e0d910da70636fc143c06ba5ddac
Validity
Not Before: Nov 11 09:01:14 2025 GMT
Not After : Nov 12 09:01:14 2025 GMT
Subject: CN=5776ee6fe94b5dc995bd0bc309d526a8354dcc13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:62:da:83:dd:2f:19:61:3a:46:77:57:b2:ee:
7a:2d:f5:f1:13:1c:37:f9:06:ab:95:b5:65:44:09:
9f:c5:a2:13:0c:50:e4:ca:67:39:0c:e2:3d:a6:bf:
09:d6:b3:8b:f2:7c:4e:3d:31:a2:71:00:03:c0:07:
3e:e3:c3:21:f1:0f:c6:36:be:60:7b:f0:bf:2b:e4:
e1:23:a7:ff:4e:a6:48:38:b3:4e:68:73:d5:2e:3f:
a0:40:8e:d1:cb:a3:e5:d4:02:34:28:a9:c3:23:f5:
80:30:b1:13:fc:cb:cd:a6:f3:48:f3:b3:d1:26:6c:
7a:99:e7:f2:e1:d8:ab:a6:e8:a9:1a:b6:2c:c2:c8:
9d:37:09:f4:10:78:77:3c:b1:d6:ab:c5:b0:66:0f:
5b:e0:bd:e9:f8:3f:8b:0f:96:07:81:d3:8e:47:f5:
dc:6f:e5:73:1f:8f:60:ca:f0:68:68:8c:bc:4d:4b:
2e:87:78:8c:4c:06:24:db:6d:89:3b:84:94:8d:43:
4a:91:61:cb:8f:14:94:30:68:5e:87:90:0d:89:b6:
02:b9:c6:35:27:f3:7b:3f:f1:a9:21:d5:60:4e:79:
5b:7a:cc:30:4e:f3:3f:3f:77:7d:ab:57:f5:5e:a4:
b7:fb:c2:72:e3:e5:0f:98:22:f3:6d:3c:d4:cf:15:
8b:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:76:EE:6F:E9:4B:5D:C9:95:BD:0B:C3:09:D5:26:A8:35:4D:CC:13
X509v3 Authority Key Identifier:
keyid:4C:D7:10:B6:53:73:E0:D9:10:DA:70:63:6F:C1:43:C0:6B:A5:DD:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TNcQtlNz4NkQ2nBjb8FDwGul3aw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/6f40dd-4c07-405b-a042-f9250dd79fe9/1/TNcQtlNz4NkQ2nBjb8FDwGul3aw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/6f40dd-4c07-405b-a042-f9250dd79fe9/1/TNcQtlNz4NkQ2nBjb8FDwGul3aw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:e8:14:99:ad:b4:98:03:36:78:ad:0f:14:49:77:75:1c:cf:
2e:a4:22:78:57:39:60:e2:fa:2b:88:1e:c1:e9:d8:a4:4f:45:
46:d4:a4:a6:b3:9d:2a:4c:aa:c3:a7:30:4c:42:f5:6a:53:34:
24:09:c7:4a:b2:ef:3b:1e:2f:d2:1d:1d:30:83:4a:74:93:bc:
59:e8:d3:3f:b5:b8:ef:83:16:77:08:fc:66:8e:86:88:33:51:
70:17:78:95:fc:5f:13:4f:f1:96:6f:b6:d5:2c:e3:92:51:50:
96:f7:d0:ac:58:0d:11:bc:58:b6:0d:4b:d9:a7:14:2c:cd:f5:
6a:b6:d2:60:27:b0:ad:e1:42:66:6c:58:a5:80:d7:63:dc:dc:
20:27:1a:56:bc:7e:b6:c9:40:f4:6f:09:d5:da:3e:d4:9b:41:
d3:17:96:eb:36:6c:f2:ac:2e:60:18:9a:42:59:74:26:f4:e1:
5d:1a:81:d2:00:54:08:e3:60:b5:57:e0:6d:60:9e:aa:1c:f6:
a4:68:f3:0e:95:cd:11:57:2e:86:91:ca:45:b3:2b:ee:38:6e:
8f:18:dc:dc:c4:09:dd:92:b4:c7:bf:f0:40:3b:0d:69:df:6c:
98:91:61:b2:3f:66:13:6a:3a:9f:ff:d6:38:ee:64:af:73:93:
3c:d9:92:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:43:02 2025 by rpki-client