Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/061506-edf0-48d7-be7d-6f1b037ba6e2/1/1-tpaqmyZRi_rFZ9WscCvLdP0Yls.mft
File: 1-tpaqmyZRi_rFZ9WscCvLdP0Yls.mft (raw, json)
Hash identifier: UkgTVgX4DP9ayV0FDLJUFYgf37duz8X1j0uRGbG3fnY=
Subject key identifier: 89:40:01:43:CA:41:6E:8B:92:C3:36:3E:F2:E6:DB:A4:E4:6E:99:1A
Authority key identifier: FA:DA:5A:AA:6C:99:46:2F:EB:15:9F:56:B1:C0:AF:2D:D3:F4:62:5B
Certificate issuer: /CN=fada5aaa6c99462feb159f56b1c0af2dd3f4625b
Certificate serial: 019A729395CE84B29275604636C69C31455B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-tpaqmyZRi_rFZ9WscCvLdP0Yls.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/061506-edf0-48d7-be7d-6f1b037ba6e2/1/1-tpaqmyZRi_rFZ9WscCvLdP0Yls.mft
Manifest number: 171C
Signing time: Tue 11 Nov 2025 11:01:05 +0000
Manifest this update: Tue 11 Nov 2025 11:01:05 +0000
Manifest next update: Wed 12 Nov 2025 11:01:05 +0000
Files and hashes: 1: 1-tpaqmyZRi_rFZ9WscCvLdP0Yls.crl (hash: 7w4JlC0tHmc8myQl7AC1NXi+MMK3CiCzxRbj000ShNE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/061506-edf0-48d7-be7d-6f1b037ba6e2/1/1-tpaqmyZRi_rFZ9WscCvLdP0Yls.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/061506-edf0-48d7-be7d-6f1b037ba6e2/1/1-tpaqmyZRi_rFZ9WscCvLdP0Yls.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-tpaqmyZRi_rFZ9WscCvLdP0Yls.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:93:95:ce:84:b2:92:75:60:46:36:c6:9c:31:45:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fada5aaa6c99462feb159f56b1c0af2dd3f4625b
Validity
Not Before: Nov 11 11:01:05 2025 GMT
Not After : Nov 12 11:01:05 2025 GMT
Subject: CN=89400143ca416e8b92c3363ef2e6dba4e46e991a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:8f:21:04:df:1f:ab:b6:b1:72:19:06:35:4b:
5a:65:c8:06:dd:34:21:a4:fe:35:50:44:99:23:9b:
c8:36:7a:21:7b:1d:6b:7f:55:96:93:8d:86:64:48:
30:ff:60:8a:30:57:b5:06:8c:90:55:36:4a:cf:fa:
0e:3d:25:dd:03:9d:2d:68:e3:4f:8f:f3:47:62:37:
6d:87:2b:84:7b:ce:59:5b:cf:fd:8e:0c:4b:57:e4:
0e:e0:f8:79:6f:23:25:fc:34:2c:de:96:3d:70:45:
89:b9:01:62:78:d5:aa:2d:4a:a6:f4:e7:6b:5a:dd:
5e:1c:a1:f8:01:8d:01:58:2b:77:d5:64:5d:47:a1:
4d:df:d2:4f:50:e1:e2:6a:11:d7:f7:68:42:89:2c:
2f:87:5a:eb:cc:7f:b7:41:13:c4:20:58:e6:4b:b6:
8e:ef:9f:63:d2:74:c7:6b:19:c6:9b:05:65:fe:73:
78:b3:4a:02:55:9a:23:4a:1a:2c:13:60:cf:0d:e6:
d8:50:87:dd:e8:e0:86:db:01:45:c3:6e:66:e4:67:
56:ca:a3:b3:ba:ba:2a:c5:18:e4:be:d3:4e:58:da:
77:b3:f8:84:ba:71:6b:bf:9e:08:ba:d9:33:3b:22:
52:65:3c:60:97:3a:f2:64:7c:b8:e9:04:c5:8c:85:
81:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:40:01:43:CA:41:6E:8B:92:C3:36:3E:F2:E6:DB:A4:E4:6E:99:1A
X509v3 Authority Key Identifier:
keyid:FA:DA:5A:AA:6C:99:46:2F:EB:15:9F:56:B1:C0:AF:2D:D3:F4:62:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-tpaqmyZRi_rFZ9WscCvLdP0Yls.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/061506-edf0-48d7-be7d-6f1b037ba6e2/1/1-tpaqmyZRi_rFZ9WscCvLdP0Yls.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/061506-edf0-48d7-be7d-6f1b037ba6e2/1/1-tpaqmyZRi_rFZ9WscCvLdP0Yls.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:5f:98:27:4b:7e:aa:98:6a:d0:76:19:e9:86:44:e0:b0:bd:
ab:3e:ff:20:c5:5c:80:f8:e6:6d:bf:97:dd:12:a2:99:d1:be:
5a:56:3b:e8:d8:3a:7c:da:cc:b5:c7:88:9d:62:0d:b2:6b:0f:
af:fe:9f:b1:61:57:9c:4b:49:f0:5c:e7:bb:8f:98:7d:e5:2d:
e2:34:fb:44:b2:62:5e:a5:81:b5:79:08:f1:20:9a:61:a3:0c:
c1:b0:6d:9a:3c:f2:f7:f1:fe:de:b8:8b:8e:05:35:b6:fc:18:
7a:65:ff:21:cb:65:a0:46:89:d3:13:a1:a9:a8:fb:bd:c7:da:
36:53:e7:88:0b:e1:a6:17:f2:f0:e3:9a:4c:44:ff:bc:83:8a:
e4:4b:c4:0d:83:e1:2d:a9:20:4d:fe:ac:25:6d:1d:df:0b:c2:
63:09:4a:27:7a:68:72:2a:ad:2c:22:5e:65:bb:4e:3e:13:b5:
ad:77:07:28:09:e6:aa:62:a0:a6:8a:24:a3:96:64:af:14:0d:
0a:06:b3:85:98:dc:1a:65:83:66:27:af:b6:bc:4b:9f:1a:07:
32:a1:fb:23:a6:37:30:3a:7f:2b:5a:e4:8b:52:35:3f:35:34:
33:35:25:95:81:11:c6:00:32:6f:53:65:45:ca:23:e3:92:d3:
01:99:b6:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:45:25 2025 by rpki-client