Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/76d6f1-7ffb-4301-9310-160cde88ed3f/1/TO1MeGdCnuAvXNwa--qlunEzYAg.mft
File: TO1MeGdCnuAvXNwa--qlunEzYAg.mft (raw, json)
Hash identifier: nnNIjfqs1qjCRTxR7a+JuM1leXb7rZw608uZcHcGwsI=
Subject key identifier: AD:92:35:6D:58:30:8D:DA:EC:0D:9F:E2:A2:01:43:8F:D1:A4:82:FC
Authority key identifier: 4C:ED:4C:78:67:42:9E:E0:2F:5C:DC:1A:FB:EA:A5:BA:71:33:60:08
Certificate issuer: /CN=4ced4c7867429ee02f5cdc1afbeaa5ba71336008
Certificate serial: 019A71B8513AD619A5C6185E29ABE99922AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TO1MeGdCnuAvXNwa--qlunEzYAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/76d6f1-7ffb-4301-9310-160cde88ed3f/1/TO1MeGdCnuAvXNwa--qlunEzYAg.mft
Manifest number: 171B
Signing time: Tue 11 Nov 2025 07:01:36 +0000
Manifest this update: Tue 11 Nov 2025 07:01:36 +0000
Manifest next update: Wed 12 Nov 2025 07:01:36 +0000
Files and hashes: 1: TO1MeGdCnuAvXNwa--qlunEzYAg.crl (hash: X1sUkvhqkpnE4UUiaTOd20K8fVO8xIy4H3bBFLRqHwE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/76d6f1-7ffb-4301-9310-160cde88ed3f/1/TO1MeGdCnuAvXNwa--qlunEzYAg.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/76d6f1-7ffb-4301-9310-160cde88ed3f/1/TO1MeGdCnuAvXNwa--qlunEzYAg.mft
rsync://rpki.ripe.net/repository/DEFAULT/TO1MeGdCnuAvXNwa--qlunEzYAg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:51:3a:d6:19:a5:c6:18:5e:29:ab:e9:99:22:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ced4c7867429ee02f5cdc1afbeaa5ba71336008
Validity
Not Before: Nov 11 07:01:36 2025 GMT
Not After : Nov 12 07:01:36 2025 GMT
Subject: CN=ad92356d58308ddaec0d9fe2a201438fd1a482fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:23:a6:e0:0f:e1:47:f8:f3:06:39:3c:26:c1:
20:3f:81:79:79:bc:b3:26:6f:6c:74:1c:85:ee:89:
48:50:92:b0:65:c5:b2:90:cd:c1:15:65:96:97:2b:
bd:de:1f:65:82:cb:63:5a:ad:32:21:b2:14:94:59:
9a:0f:45:1d:b4:73:41:51:68:85:a5:47:73:6b:b6:
8d:0e:3b:6b:7f:8d:55:e5:1b:66:f6:fa:fc:dd:e3:
74:80:b9:0b:bd:4f:34:0b:d0:75:6c:4d:24:bb:b7:
94:fe:67:0f:47:a0:35:4f:22:f3:6c:58:18:e6:60:
de:41:ff:06:57:1f:43:ed:cf:dc:04:c2:72:87:5e:
19:e4:51:13:a5:57:92:c0:27:bd:74:de:ef:ae:41:
72:f1:5b:82:e3:54:60:83:64:03:8f:e2:2b:0a:2a:
ca:64:81:39:6b:28:85:b1:5d:d3:17:f8:fd:01:cf:
27:42:4b:b3:5b:d5:9b:e8:3e:14:30:b7:c7:8b:94:
c8:59:2b:54:8a:15:ad:64:0e:af:fe:c3:be:0c:3c:
59:7b:03:c9:d8:ec:ed:45:b5:75:a0:79:22:d8:2c:
82:54:65:c5:11:8b:4a:88:41:86:ba:71:35:9d:77:
f5:bf:11:b4:e3:bd:df:57:b3:b8:84:04:51:09:b3:
82:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:92:35:6D:58:30:8D:DA:EC:0D:9F:E2:A2:01:43:8F:D1:A4:82:FC
X509v3 Authority Key Identifier:
keyid:4C:ED:4C:78:67:42:9E:E0:2F:5C:DC:1A:FB:EA:A5:BA:71:33:60:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TO1MeGdCnuAvXNwa--qlunEzYAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/76d6f1-7ffb-4301-9310-160cde88ed3f/1/TO1MeGdCnuAvXNwa--qlunEzYAg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/76d6f1-7ffb-4301-9310-160cde88ed3f/1/TO1MeGdCnuAvXNwa--qlunEzYAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:a5:d8:7f:7c:d6:9b:c0:b7:71:01:1f:41:47:21:c3:ec:0e:
21:65:27:44:ab:f2:28:c7:de:ca:6b:12:69:89:bc:b1:f0:5c:
24:bd:81:86:64:75:d9:0d:df:6e:12:73:96:01:74:79:8f:34:
cb:17:6a:82:36:60:74:14:54:a9:b9:01:48:94:5b:2d:da:34:
d7:96:cc:64:69:fb:82:cc:8d:bf:05:b6:8a:cc:a2:ec:37:c0:
0a:d8:63:72:03:2b:2c:a8:dc:22:ce:67:0d:ab:d6:de:f4:2e:
06:3d:b2:07:95:15:cb:c6:32:69:09:74:40:90:71:e3:e0:a8:
af:2b:75:c5:c9:cb:17:23:5e:3c:f4:df:cf:e7:10:0f:51:36:
0e:f7:e9:7e:f8:ff:93:e2:1b:32:77:34:26:2d:3a:24:8b:9d:
a4:2d:74:f1:b1:cc:51:55:4d:37:da:3f:bd:a8:66:25:df:30:
a9:77:e2:8b:81:4f:6e:33:e9:35:aa:d7:6a:58:c6:cf:8d:aa:
b7:44:c4:b8:9b:6c:3d:35:04:84:21:40:37:c2:1e:83:94:50:
ab:1b:0a:62:eb:cd:89:89:b3:24:36:30:47:e8:08:07:81:27:
b4:45:cc:80:06:90:48:a5:9f:c3:1a:48:ab:19:36:eb:ed:59:
14:bb:be:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:47:41 2025 by rpki-client