Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/16e2aa-ddbd-4ee1-ae60-08bc640aed67/1/tWqJV8zDCqTsLUeOU_OHJsmVWjE.mft
File: tWqJV8zDCqTsLUeOU_OHJsmVWjE.mft (raw, json)
Hash identifier: 0thxUFWBAnyYe6KInpwONnOJ2Nr9/Y5aiWcwAljX8K4=
Subject key identifier: A9:E9:CB:B8:B3:F7:3C:8D:CF:31:F6:05:ED:73:59:CC:5F:4C:E1:1C
Authority key identifier: B5:6A:89:57:CC:C3:0A:A4:EC:2D:47:8E:53:F3:87:26:C9:95:5A:31
Certificate issuer: /CN=b56a8957ccc30aa4ec2d478e53f38726c9955a31
Certificate serial: 019A71B7C8417A646ED811FD63C786694830
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tWqJV8zDCqTsLUeOU_OHJsmVWjE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/16e2aa-ddbd-4ee1-ae60-08bc640aed67/1/tWqJV8zDCqTsLUeOU_OHJsmVWjE.mft
Manifest number: 1719
Signing time: Tue 11 Nov 2025 07:01:00 +0000
Manifest this update: Tue 11 Nov 2025 07:01:00 +0000
Manifest next update: Wed 12 Nov 2025 07:01:00 +0000
Files and hashes: 1: tWqJV8zDCqTsLUeOU_OHJsmVWjE.crl (hash: qMtyYuRaHfdPdZFC4DNaCcrdYnHih/pMlOoQccHmWZY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/16e2aa-ddbd-4ee1-ae60-08bc640aed67/1/tWqJV8zDCqTsLUeOU_OHJsmVWjE.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/16e2aa-ddbd-4ee1-ae60-08bc640aed67/1/tWqJV8zDCqTsLUeOU_OHJsmVWjE.mft
rsync://rpki.ripe.net/repository/DEFAULT/tWqJV8zDCqTsLUeOU_OHJsmVWjE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b7:c8:41:7a:64:6e:d8:11:fd:63:c7:86:69:48:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b56a8957ccc30aa4ec2d478e53f38726c9955a31
Validity
Not Before: Nov 11 07:01:00 2025 GMT
Not After : Nov 12 07:01:00 2025 GMT
Subject: CN=a9e9cbb8b3f73c8dcf31f605ed7359cc5f4ce11c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:32:9e:85:d0:e9:b2:d2:59:83:ae:6a:07:7c:
06:86:4d:6b:21:88:dc:65:f2:1f:fb:78:b1:a4:ab:
4e:ac:cf:de:d1:e1:b9:6d:a4:7c:e4:cb:93:f8:4e:
c9:ba:50:f3:34:cb:60:e3:50:29:76:a4:f1:59:5e:
c0:bc:fe:46:3e:9b:76:a5:c3:3b:a7:9a:fe:70:d6:
9d:d0:47:48:81:e4:5f:5f:1c:aa:56:a1:49:f2:f2:
79:0d:cd:db:bf:72:93:fe:b6:ce:25:79:9f:38:17:
77:63:5f:b5:5b:23:9e:f7:4b:0a:fb:6c:b0:58:df:
4f:fd:28:45:73:2c:63:d7:63:6a:a1:99:0f:dd:db:
42:ca:76:35:e6:85:a2:59:2e:5f:1a:02:1d:f4:da:
3d:7d:ac:f8:cf:52:2b:89:7d:cc:f4:05:fe:a3:4a:
d0:9b:02:6a:4d:66:67:66:0d:23:62:48:13:eb:b5:
ed:99:77:2b:b8:aa:e1:a5:56:0d:af:0b:7f:ab:dc:
ef:aa:d7:b9:13:4c:13:5c:ef:f8:c6:ba:1a:17:ec:
e7:a2:cb:e9:a3:14:0e:2b:3a:32:74:0a:ee:ee:8d:
65:b8:2e:46:0f:35:d3:25:5a:0c:76:dd:a1:14:1c:
30:d9:ac:ed:59:6d:13:82:bb:b4:84:c4:26:35:a8:
4b:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:E9:CB:B8:B3:F7:3C:8D:CF:31:F6:05:ED:73:59:CC:5F:4C:E1:1C
X509v3 Authority Key Identifier:
keyid:B5:6A:89:57:CC:C3:0A:A4:EC:2D:47:8E:53:F3:87:26:C9:95:5A:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tWqJV8zDCqTsLUeOU_OHJsmVWjE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/16e2aa-ddbd-4ee1-ae60-08bc640aed67/1/tWqJV8zDCqTsLUeOU_OHJsmVWjE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/16e2aa-ddbd-4ee1-ae60-08bc640aed67/1/tWqJV8zDCqTsLUeOU_OHJsmVWjE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:99:a9:c3:11:85:6a:13:93:ba:bb:de:1b:03:0b:36:2f:f0:
27:c7:9c:84:46:97:f4:d9:92:2b:7b:44:00:42:1a:b0:c1:cd:
48:a2:87:b8:a9:15:f9:ca:1b:3c:db:94:40:d2:8b:a8:81:2f:
4b:64:2b:a5:33:1f:9e:cd:42:74:d9:63:3f:7f:b2:73:92:25:
4f:3f:12:53:7a:3b:02:49:93:f1:c0:54:0b:b6:94:1b:29:f7:
de:4b:24:db:2e:f1:4f:23:33:0f:05:4a:95:97:e2:89:02:26:
af:90:58:44:1f:48:0f:6b:0c:92:2a:77:df:db:e6:90:46:c6:
68:4c:59:07:db:c6:34:0e:63:3e:a7:c2:a8:cc:8a:ce:a5:a2:
3b:1d:1e:5b:9a:5a:49:a0:e7:7f:ea:b4:39:81:d9:fd:12:96:
d6:06:2a:ca:8b:f8:36:9e:55:d5:1a:05:d7:87:39:8d:7a:1a:
e9:21:f8:01:9c:b3:32:a5:d1:67:c2:ed:f0:49:53:6e:67:ba:
dd:02:6a:8a:9f:b5:96:20:42:f6:bc:85:e9:06:33:40:9f:90:
bb:57:cf:33:38:4d:16:9d:7e:3f:5b:d2:d2:8d:2b:14:75:36:
89:84:1e:e0:1c:08:27:fa:0b:f6:ff:01:c5:1f:7a:f8:1d:17:
83:55:69:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:43:22 2025 by rpki-client