Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/33bc07-9c3d-4606-b7f5-d3812e616485/1/TTz66pjQdmF8HqrOk0fi1Kc81E8.mft
File: TTz66pjQdmF8HqrOk0fi1Kc81E8.mft (raw, json)
Hash identifier: qr4yMk6R7nMC8L6QB8sXAsmY6nk0yWmMimuCtqKczBw=
Subject key identifier: D4:E4:54:47:65:75:EC:59:C1:EC:1E:3C:11:A2:CA:E6:AD:FC:4F:6D
Authority key identifier: 4D:3C:FA:EA:98:D0:76:61:7C:1E:AA:CE:93:47:E2:D4:A7:3C:D4:4F
Certificate issuer: /CN=4d3cfaea98d076617c1eaace9347e2d4a73cd44f
Certificate serial: 019A71B7C11B9C266032F9D306C2A75207C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TTz66pjQdmF8HqrOk0fi1Kc81E8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/33bc07-9c3d-4606-b7f5-d3812e616485/1/TTz66pjQdmF8HqrOk0fi1Kc81E8.mft
Manifest number: 0258
Signing time: Tue 11 Nov 2025 07:00:59 +0000
Manifest this update: Tue 11 Nov 2025 07:00:59 +0000
Manifest next update: Wed 12 Nov 2025 07:00:59 +0000
Files and hashes: 1: TTz66pjQdmF8HqrOk0fi1Kc81E8.crl (hash: IKpLyW6HttIyQzA/Y1grR2uHQSwm6XI+0mOiNtnRmfc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/33bc07-9c3d-4606-b7f5-d3812e616485/1/TTz66pjQdmF8HqrOk0fi1Kc81E8.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/33bc07-9c3d-4606-b7f5-d3812e616485/1/TTz66pjQdmF8HqrOk0fi1Kc81E8.mft
rsync://rpki.ripe.net/repository/DEFAULT/TTz66pjQdmF8HqrOk0fi1Kc81E8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b7:c1:1b:9c:26:60:32:f9:d3:06:c2:a7:52:07:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d3cfaea98d076617c1eaace9347e2d4a73cd44f
Validity
Not Before: Nov 11 07:00:59 2025 GMT
Not After : Nov 12 07:00:59 2025 GMT
Subject: CN=d4e454476575ec59c1ec1e3c11a2cae6adfc4f6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:6b:e7:4c:c2:e5:92:20:5d:54:b4:fa:16:f5:
5a:ac:1b:90:be:52:d7:46:d8:1a:be:8e:a4:1a:36:
2d:57:82:30:38:86:c3:12:ab:c6:c6:86:27:d6:cf:
ef:e2:44:9c:26:f6:6c:7b:f2:25:90:bc:4e:a7:be:
b7:5e:91:dc:9a:8b:f5:42:78:88:28:b5:22:09:ed:
78:1e:02:60:7e:99:78:1b:8a:04:6c:ac:ae:df:b9:
0d:29:b1:8d:6f:61:6c:eb:4a:19:0f:27:de:2e:37:
35:54:8c:9b:ff:a6:fe:b2:c6:27:0c:44:e9:7e:d8:
70:a2:8e:7f:82:24:48:88:a4:53:2f:4b:43:7b:4e:
0f:5e:7a:0a:27:65:c0:31:03:4a:b1:97:e5:71:31:
fd:e3:fa:50:09:28:33:0e:bf:86:57:d2:bf:fc:e0:
84:fb:6e:15:c0:cc:3d:98:0a:be:5a:01:3d:64:49:
38:80:c2:18:20:6f:e5:41:7c:3c:50:b2:60:6a:31:
3c:58:a2:77:7f:bd:7b:f5:d6:22:56:31:2d:df:ed:
25:f8:80:ef:2f:8a:d2:80:3d:19:27:0f:da:a1:05:
ba:55:46:48:0a:50:67:0d:ff:74:d9:8e:8c:49:c6:
47:a5:53:bb:88:b2:9b:b1:b6:29:3e:55:41:a3:27:
a5:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:E4:54:47:65:75:EC:59:C1:EC:1E:3C:11:A2:CA:E6:AD:FC:4F:6D
X509v3 Authority Key Identifier:
keyid:4D:3C:FA:EA:98:D0:76:61:7C:1E:AA:CE:93:47:E2:D4:A7:3C:D4:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TTz66pjQdmF8HqrOk0fi1Kc81E8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/33bc07-9c3d-4606-b7f5-d3812e616485/1/TTz66pjQdmF8HqrOk0fi1Kc81E8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/33bc07-9c3d-4606-b7f5-d3812e616485/1/TTz66pjQdmF8HqrOk0fi1Kc81E8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:52:91:30:3a:45:32:cf:e7:af:9c:49:2f:f8:07:97:9b:13:
e6:0e:f0:05:66:99:28:25:e8:c5:05:90:16:aa:1f:ec:51:82:
8b:43:89:ca:71:df:61:23:2e:d3:fe:33:6e:cf:f3:56:0c:ff:
a1:3e:1c:7b:6f:f0:2e:bf:1a:0c:ec:07:35:00:52:68:55:80:
86:4b:2e:c2:30:cf:6e:b6:e2:c8:94:67:4b:89:5a:08:28:78:
91:18:06:b8:89:12:55:b7:25:6d:4d:0f:13:1f:58:ea:c5:27:
76:c9:d5:54:e3:2a:4e:c6:19:60:d5:cc:75:8b:b1:3e:d1:01:
79:1c:fb:ce:59:70:a2:e6:1c:97:90:63:e7:e7:8d:72:13:fd:
da:34:9d:5b:c5:c1:c3:8a:1d:fe:f6:2f:72:78:2f:44:e4:01:
21:3b:f4:0c:ae:fd:04:1f:bb:69:87:d9:81:10:9e:2e:f5:ca:
4a:1f:d6:3a:10:e8:46:2a:f6:60:2f:49:92:30:13:fc:7b:da:
bc:59:51:1f:e9:50:0a:f1:8a:29:bc:db:65:b4:d7:88:63:9a:
af:bd:63:00:68:08:06:63:7f:0f:23:c0:3d:10:3a:4e:f5:3f:
d5:a2:7c:3e:8e:f7:d8:9f:eb:26:92:65:a1:4f:25:e6:31:10:
ce:4b:68:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 17:16:58 2025 by rpki-client