Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/19c93b-c9a1-494b-9bc0-0f2b540eca08/1/tz2I10aK9gGvFMXh7ZA8TzbK9fo.mft
File: tz2I10aK9gGvFMXh7ZA8TzbK9fo.mft (raw, json)
Hash identifier: bbKkHEM5FOmVrtZwc2Ib/eUpr92vnUioBKLjXc/koDA=
Subject key identifier: EF:94:01:E4:BF:AB:67:8A:A0:77:6D:03:B0:D0:F4:C6:70:CD:FA:3C
Authority key identifier: B7:3D:88:D7:46:8A:F6:01:AF:14:C5:E1:ED:90:3C:4F:36:CA:F5:FA
Certificate issuer: /CN=b73d88d7468af601af14c5e1ed903c4f36caf5fa
Certificate serial: 019A71B8D8BD18D7FEB1252229E67DB99397
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tz2I10aK9gGvFMXh7ZA8TzbK9fo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/19c93b-c9a1-494b-9bc0-0f2b540eca08/1/tz2I10aK9gGvFMXh7ZA8TzbK9fo.mft
Manifest number: 171B
Signing time: Tue 11 Nov 2025 07:02:10 +0000
Manifest this update: Tue 11 Nov 2025 07:02:10 +0000
Manifest next update: Wed 12 Nov 2025 07:02:10 +0000
Files and hashes: 1: tz2I10aK9gGvFMXh7ZA8TzbK9fo.crl (hash: YdXvLeJKFVdd5d7wwQUiU+7FxbjfBMFcncBkIIsT04I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/19c93b-c9a1-494b-9bc0-0f2b540eca08/1/tz2I10aK9gGvFMXh7ZA8TzbK9fo.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/19c93b-c9a1-494b-9bc0-0f2b540eca08/1/tz2I10aK9gGvFMXh7ZA8TzbK9fo.mft
rsync://rpki.ripe.net/repository/DEFAULT/tz2I10aK9gGvFMXh7ZA8TzbK9fo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:d8:bd:18:d7:fe:b1:25:22:29:e6:7d:b9:93:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b73d88d7468af601af14c5e1ed903c4f36caf5fa
Validity
Not Before: Nov 11 07:02:10 2025 GMT
Not After : Nov 12 07:02:10 2025 GMT
Subject: CN=ef9401e4bfab678aa0776d03b0d0f4c670cdfa3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:11:ee:c5:b6:ec:09:cd:48:e8:6b:7c:97:ea:
69:f8:01:d1:00:0a:7f:6f:11:50:86:67:99:5b:ee:
ce:79:45:67:59:07:60:55:39:07:fd:56:a6:62:04:
e3:18:00:b9:39:b5:5f:ed:7b:6a:cf:dd:a0:b0:1d:
4f:32:bb:bf:08:7f:b9:f7:8b:17:69:d2:7e:22:7b:
67:5a:39:34:b1:fa:52:1b:4f:d7:6a:dd:7b:d3:06:
40:8f:2b:7f:a2:90:83:87:44:60:d9:7f:96:4b:99:
3b:92:aa:50:89:ee:66:9a:34:4d:bd:63:3c:bd:52:
12:53:52:48:88:e5:af:ba:de:09:8d:81:b2:4b:b0:
75:6a:36:2f:6d:6a:89:7f:9b:bc:69:4f:81:09:bb:
93:2d:ea:99:2e:fc:c8:68:3d:a4:a3:35:90:dc:91:
07:f8:44:43:05:ee:e0:96:b2:eb:cb:b4:dd:f9:fa:
41:38:1a:0a:e8:6a:75:65:b6:d1:5d:13:fd:db:bf:
52:d2:1b:99:8f:e5:3e:41:5e:82:dc:50:22:4e:f4:
d9:1e:09:d6:63:fc:ed:d3:d9:27:2a:4c:f9:40:4b:
cb:60:70:b0:cc:29:fd:8c:a0:29:81:77:24:05:59:
be:71:50:6c:f3:13:d6:97:c2:a7:95:a9:49:2c:9d:
f2:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:94:01:E4:BF:AB:67:8A:A0:77:6D:03:B0:D0:F4:C6:70:CD:FA:3C
X509v3 Authority Key Identifier:
keyid:B7:3D:88:D7:46:8A:F6:01:AF:14:C5:E1:ED:90:3C:4F:36:CA:F5:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tz2I10aK9gGvFMXh7ZA8TzbK9fo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/19c93b-c9a1-494b-9bc0-0f2b540eca08/1/tz2I10aK9gGvFMXh7ZA8TzbK9fo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/19c93b-c9a1-494b-9bc0-0f2b540eca08/1/tz2I10aK9gGvFMXh7ZA8TzbK9fo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:3f:24:b1:86:c2:46:92:25:93:fb:c1:86:53:1a:6f:a3:11:
b7:5e:6f:1b:8d:7b:7e:2d:9a:c8:f4:76:92:f5:ba:44:a6:f0:
59:3c:cb:09:16:8d:f6:36:e4:79:68:5d:58:6a:cd:6b:e4:f8:
6a:18:cf:d1:52:57:49:9b:0e:ef:9a:df:ea:26:b0:c9:50:9e:
d9:98:a0:9f:24:e0:59:0d:d8:7e:59:4e:0c:62:b4:e7:74:a8:
4a:2b:b0:34:92:55:46:57:cf:bb:5d:f5:1d:bf:fe:5b:18:7a:
4a:a4:47:26:ea:b0:ae:23:9e:c6:a0:bd:a8:cb:0a:7e:8e:6c:
0d:e5:7f:2c:63:05:40:04:82:c0:64:14:3a:60:46:45:00:2f:
77:a2:c2:4f:a4:52:47:4f:15:3b:1c:9e:fc:d9:08:b9:84:3d:
5a:e2:af:8e:15:f2:68:b1:95:89:2f:36:55:73:47:73:f5:23:
b8:25:12:6f:f6:4b:aa:c8:8a:67:ab:fe:0b:cf:2b:c9:3d:66:
2c:46:3f:17:bf:69:24:3f:aa:7c:dd:c4:eb:af:61:47:6a:37:
11:8a:50:95:1e:7d:91:1e:64:b1:be:ce:f3:d3:5c:be:27:ba:
05:6b:b8:fc:f4:b7:e6:20:25:7c:25:fa:75:74:48:33:15:53:
03:df:6f:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:37:00 2025 by rpki-client