Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/651421-3300-4886-bbe5-84abcfbcdf5e/1/tKbCB0KCIvY_ycuoOdDb2aaVCzE.mft
File: tKbCB0KCIvY_ycuoOdDb2aaVCzE.mft (raw, json)
Hash identifier: 91LxQj+DRjcXYcxTgqTgRi7+Ebd2pCJME62u5/KmzQo=
Subject key identifier: AE:B6:F1:90:17:88:0F:57:07:F5:BE:75:6C:10:F1:2E:98:4B:15:A2
Authority key identifier: B4:A6:C2:07:42:82:22:F6:3F:C9:CB:A8:39:D0:DB:D9:A6:95:0B:31
Certificate issuer: /CN=b4a6c207428222f63fc9cba839d0dbd9a6950b31
Certificate serial: 019A71B8CD891739905B38CD7F07C96E5398
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tKbCB0KCIvY_ycuoOdDb2aaVCzE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/651421-3300-4886-bbe5-84abcfbcdf5e/1/tKbCB0KCIvY_ycuoOdDb2aaVCzE.mft
Manifest number: 01D3
Signing time: Tue 11 Nov 2025 07:02:07 +0000
Manifest this update: Tue 11 Nov 2025 07:02:07 +0000
Manifest next update: Wed 12 Nov 2025 07:02:07 +0000
Files and hashes: 1: tKbCB0KCIvY_ycuoOdDb2aaVCzE.crl (hash: Dnkle+sDnmThRvC1UntxFg8CDz3lnJf+CnPPUzC/6pQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/651421-3300-4886-bbe5-84abcfbcdf5e/1/tKbCB0KCIvY_ycuoOdDb2aaVCzE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/651421-3300-4886-bbe5-84abcfbcdf5e/1/tKbCB0KCIvY_ycuoOdDb2aaVCzE.mft
rsync://rpki.ripe.net/repository/DEFAULT/tKbCB0KCIvY_ycuoOdDb2aaVCzE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:cd:89:17:39:90:5b:38:cd:7f:07:c9:6e:53:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4a6c207428222f63fc9cba839d0dbd9a6950b31
Validity
Not Before: Nov 11 07:02:07 2025 GMT
Not After : Nov 12 07:02:07 2025 GMT
Subject: CN=aeb6f19017880f5707f5be756c10f12e984b15a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:b9:9d:7b:ed:c1:34:15:c0:79:39:a1:bc:c8:
e1:a8:3a:0b:a6:cf:57:f5:dd:5a:89:35:72:29:8e:
78:06:2f:fe:6d:f3:ab:c9:3a:78:c7:09:0e:cf:80:
b1:12:7a:bb:36:75:5e:91:c7:f8:04:6f:29:fc:1c:
7c:7e:cf:e2:df:0a:77:c6:ce:e8:0a:f1:1d:72:69:
b7:81:ec:ba:80:25:c5:49:5a:e6:dd:76:b7:17:64:
cc:d5:a7:49:7a:7a:a4:75:bf:c9:4d:69:c0:fe:3e:
cc:95:e9:63:1b:ec:58:51:d2:e8:57:04:d2:d2:56:
04:d4:0f:e7:5d:e8:48:69:52:b8:ad:b8:68:ae:3e:
be:ae:02:89:dc:a1:e6:50:69:ad:0b:30:98:3d:fe:
e4:a6:3b:a0:eb:6b:28:bf:d2:6b:67:31:96:61:83:
ed:8a:bf:90:1e:fb:01:c7:b8:3c:28:86:e7:0a:fd:
83:82:31:ca:7b:89:38:7e:14:05:66:8f:ed:1c:f1:
63:11:00:82:64:f1:cd:93:ff:76:46:79:12:79:83:
26:c5:90:cf:69:ef:c9:34:1a:8c:d9:c3:37:39:bb:
8d:fb:0e:e0:25:da:03:cd:6c:c6:58:a0:a6:0f:5c:
e3:13:1d:3e:82:79:d6:88:84:e0:73:1c:2e:b4:bb:
4a:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:B6:F1:90:17:88:0F:57:07:F5:BE:75:6C:10:F1:2E:98:4B:15:A2
X509v3 Authority Key Identifier:
keyid:B4:A6:C2:07:42:82:22:F6:3F:C9:CB:A8:39:D0:DB:D9:A6:95:0B:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tKbCB0KCIvY_ycuoOdDb2aaVCzE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/651421-3300-4886-bbe5-84abcfbcdf5e/1/tKbCB0KCIvY_ycuoOdDb2aaVCzE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/651421-3300-4886-bbe5-84abcfbcdf5e/1/tKbCB0KCIvY_ycuoOdDb2aaVCzE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:b0:f6:89:b6:34:e0:3c:e8:98:58:e2:ce:90:fd:e0:50:3d:
07:4e:7c:bc:61:ed:d9:c3:a6:10:2b:8a:62:55:1f:bc:47:eb:
c3:1d:fd:b7:b7:74:eb:fd:b6:24:53:50:c5:65:55:0f:c0:e2:
53:b5:08:a7:3b:7e:8f:02:0b:96:83:b3:e5:86:5c:35:bf:4c:
fe:08:b1:4e:63:a6:2a:ad:98:c7:12:36:db:42:3c:d3:9a:4f:
4f:a7:a6:3f:8f:2f:1d:a7:c6:52:0f:20:be:d2:ef:68:34:6a:
80:c9:02:8e:9e:62:41:c5:86:3a:60:4f:88:49:a6:37:7e:58:
29:fd:eb:34:5f:24:1f:47:86:3c:a9:98:07:a1:c1:05:fa:4a:
4e:bf:77:b7:af:a6:48:03:8a:4c:4f:a2:a9:1c:f5:1e:45:9c:
6e:fd:4a:1d:8d:de:88:20:e6:bf:89:13:b9:98:34:b0:f8:ac:
36:e5:29:5a:d9:af:f8:2c:b0:54:59:aa:65:f0:01:38:ca:3a:
a9:a2:1e:5b:cc:05:ed:00:33:8d:f4:d7:16:9c:c3:b4:e3:7f:
48:b1:26:88:d8:e8:47:12:dc:f5:71:ae:c8:65:d6:b1:06:65:
9f:e8:47:3a:9e:7b:82:8c:74:c8:f8:59:6a:de:3e:00:b0:ea:
87:4b:e1:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 16:48:47 2025 by rpki-client