Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/c27eec-7141-4575-9a6f-c45728c56f3b/1/TE6QpGzZL4_8sZJLk7cdG60xMBI.mft
File: TE6QpGzZL4_8sZJLk7cdG60xMBI.mft (raw, json)
Hash identifier: PO7lMETK0if3WN9GJfNSpTBPTim9O2I7XWvWIVe7kGM=
Subject key identifier: D9:7C:2F:B0:D8:3F:CE:BA:EC:75:28:91:CB:29:5E:05:AB:4D:E0:EC
Authority key identifier: 4C:4E:90:A4:6C:D9:2F:8F:FC:B1:92:4B:93:B7:1D:1B:AD:31:30:12
Certificate issuer: /CN=4c4e90a46cd92f8ffcb1924b93b71d1bad313012
Certificate serial: 019A70A4D63F08400B30715483BFB909074B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TE6QpGzZL4_8sZJLk7cdG60xMBI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/c27eec-7141-4575-9a6f-c45728c56f3b/1/TE6QpGzZL4_8sZJLk7cdG60xMBI.mft
Manifest number: 0F1C
Signing time: Tue 11 Nov 2025 02:00:42 +0000
Manifest this update: Tue 11 Nov 2025 02:00:42 +0000
Manifest next update: Wed 12 Nov 2025 02:00:42 +0000
Files and hashes: 1: TE6QpGzZL4_8sZJLk7cdG60xMBI.crl (hash: qz7Ih+8i8IcgwnZE5ir/agBzhberyi4RfwVvqp+4KZ8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/c27eec-7141-4575-9a6f-c45728c56f3b/1/TE6QpGzZL4_8sZJLk7cdG60xMBI.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/c27eec-7141-4575-9a6f-c45728c56f3b/1/TE6QpGzZL4_8sZJLk7cdG60xMBI.mft
rsync://rpki.ripe.net/repository/DEFAULT/TE6QpGzZL4_8sZJLk7cdG60xMBI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 02:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:a4:d6:3f:08:40:0b:30:71:54:83:bf:b9:09:07:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c4e90a46cd92f8ffcb1924b93b71d1bad313012
Validity
Not Before: Nov 11 02:00:42 2025 GMT
Not After : Nov 12 02:00:42 2025 GMT
Subject: CN=d97c2fb0d83fcebaec752891cb295e05ab4de0ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:eb:c1:1e:44:42:9b:a9:8a:45:6c:45:b6:50:
e3:41:80:61:5f:e2:90:be:a9:36:74:08:19:7c:9d:
3c:08:e4:79:64:6c:4b:c8:83:82:ec:a6:5c:b1:ec:
15:82:df:cd:ab:bb:5d:c2:96:66:73:64:bf:92:53:
d4:f8:24:dd:ce:a5:c0:0f:7e:8c:0c:aa:cd:4c:a2:
f1:87:da:e9:97:b4:0f:8d:90:c8:6e:2e:f6:f0:7c:
99:b3:5c:9d:15:c9:e3:cf:5f:ee:2c:b1:8b:76:d0:
07:66:fa:9a:7a:9e:37:6a:22:e0:fe:f4:a6:8a:93:
2a:64:37:1b:1b:d0:cf:53:db:38:b9:bf:57:e5:fd:
ed:1b:32:37:60:9f:b4:0a:ff:53:a4:32:c7:12:a3:
ec:6c:aa:22:0c:e8:6f:e7:02:93:1a:b1:1d:24:54:
3b:d2:e9:ac:f6:9e:c3:f6:81:0f:d6:60:94:91:1e:
30:8d:32:34:80:67:37:bd:c6:c4:48:68:4c:b4:a0:
df:69:64:51:d1:2e:21:e2:ba:0a:85:72:89:c8:32:
6b:5b:a1:74:9f:f9:de:09:54:43:a7:49:08:31:40:
75:a1:d9:c9:1c:e0:ef:6b:e3:72:38:b3:af:bc:7f:
09:69:87:39:69:8c:ab:51:2d:9c:0f:2f:74:f3:00:
8b:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:7C:2F:B0:D8:3F:CE:BA:EC:75:28:91:CB:29:5E:05:AB:4D:E0:EC
X509v3 Authority Key Identifier:
keyid:4C:4E:90:A4:6C:D9:2F:8F:FC:B1:92:4B:93:B7:1D:1B:AD:31:30:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TE6QpGzZL4_8sZJLk7cdG60xMBI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/c27eec-7141-4575-9a6f-c45728c56f3b/1/TE6QpGzZL4_8sZJLk7cdG60xMBI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/c27eec-7141-4575-9a6f-c45728c56f3b/1/TE6QpGzZL4_8sZJLk7cdG60xMBI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
da:dd:3b:65:63:db:d1:51:7b:bb:35:49:e2:85:9b:34:95:63:
8d:be:7b:1c:d2:67:e1:73:3d:28:f1:f8:82:53:62:b1:16:42:
93:fa:52:ef:b3:5b:f8:1a:d2:43:4a:90:d6:0d:0d:14:da:0d:
64:68:53:15:e8:11:8a:48:eb:1f:8f:50:bc:22:96:cb:19:fe:
ca:61:1b:ba:a6:49:27:1e:ac:3b:b5:48:a1:fd:2b:75:42:f7:
3d:68:37:cf:03:32:b5:c5:ec:77:91:46:62:9d:f5:34:f2:36:
2e:0b:04:78:70:01:65:00:97:89:2d:6c:bc:5c:0d:0d:ce:d3:
0c:e6:b6:af:56:2d:87:da:95:3b:66:8b:f9:16:80:d4:10:d9:
6d:77:dd:0a:2d:6d:6a:0a:95:3e:15:4c:0c:ef:bb:eb:29:45:
f3:68:99:1d:d1:64:04:92:40:16:69:0e:a9:f4:5f:cf:f6:1b:
b9:c0:bc:a1:8b:9e:d3:f3:be:e4:a6:61:c1:6e:af:9b:86:ea:
4a:ba:9c:93:7e:69:34:08:c6:0d:54:95:f3:71:3b:99:af:f6:
ae:b1:f3:9e:90:2c:c4:54:d8:9f:0f:a9:c4:38:bd:02:c2:a5:
cf:8e:8a:60:ca:5b:8a:b9:ae:60:30:97:ab:2c:0f:eb:99:ee:
24:7a:8b:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:40:27 2025 by rpki-client