Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/ec1721-75c5-40f5-9345-c2fd0f958d4b/1/Tl67mwUa1ex6Npifw_zJTByrzHQ.mft
File: Tl67mwUa1ex6Npifw_zJTByrzHQ.mft (raw, json)
Hash identifier: 0BRmVmLN8Cnk2LyNJjbSjHJe6zrQstF64W+UgTUHSfQ=
Subject key identifier: 9E:1C:8A:E2:F8:AE:76:F1:F9:09:3C:7B:BE:2F:EC:AD:B5:1F:F5:EC
Authority key identifier: 4E:5E:BB:9B:05:1A:D5:EC:7A:36:98:9F:C3:FC:C9:4C:1C:AB:CC:74
Certificate issuer: /CN=4e5ebb9b051ad5ec7a36989fc3fcc94c1cabcc74
Certificate serial: 019A71EEFF92D01EB43A1455F0828035FA0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tl67mwUa1ex6Npifw_zJTByrzHQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/ec1721-75c5-40f5-9345-c2fd0f958d4b/1/Tl67mwUa1ex6Npifw_zJTByrzHQ.mft
Manifest number: 1738
Signing time: Tue 11 Nov 2025 08:01:19 +0000
Manifest this update: Tue 11 Nov 2025 08:01:19 +0000
Manifest next update: Wed 12 Nov 2025 08:01:19 +0000
Files and hashes: 1: Tl67mwUa1ex6Npifw_zJTByrzHQ.crl (hash: tSxMOQexLMzJAUzEOQBbZmj3P0x6udQJ3R8L0FEdmKg=)
2: sPL5rUlzKx5_eiK0H41Atshaecg.roa (hash: gZZ6IxCmuB2B723uD8tUyKBaH66Mb5llFLuK/jyTEBM=)
3: wgOqnnsWlsLcY-e3U904w3g_rl0.roa (hash: Ww7qe8WtK5P+D80awiXawU9bPGz6ArE4FuPa1FSF2jU=)
4: wub3ojVvtYVNr5_D3zKLLbWF2_M.roa (hash: 0Ivv/JEf+s+UoAgsprFNMguw897KPBdxp9YKz2VJrNg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/ec1721-75c5-40f5-9345-c2fd0f958d4b/1/Tl67mwUa1ex6Npifw_zJTByrzHQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/ec1721-75c5-40f5-9345-c2fd0f958d4b/1/Tl67mwUa1ex6Npifw_zJTByrzHQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Tl67mwUa1ex6Npifw_zJTByrzHQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:ff:92:d0:1e:b4:3a:14:55:f0:82:80:35:fa:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e5ebb9b051ad5ec7a36989fc3fcc94c1cabcc74
Validity
Not Before: Nov 11 08:01:19 2025 GMT
Not After : Nov 12 08:01:19 2025 GMT
Subject: CN=9e1c8ae2f8ae76f1f9093c7bbe2fecadb51ff5ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:52:20:a5:f8:98:44:6e:2b:92:46:19:77:57:
48:38:07:11:b6:d6:9c:da:d4:8e:27:79:7f:23:64:
6b:84:2c:7d:af:e0:e8:20:f9:28:a6:8c:e7:24:64:
ab:d5:e2:b8:2d:d8:17:a4:1d:22:9f:d4:3a:80:bc:
2d:dd:97:82:30:0d:2b:eb:ce:e3:43:ef:2a:d2:36:
de:8d:01:52:df:f4:d0:cd:07:07:ba:cc:4f:4c:d4:
1c:3f:5e:c5:d1:d2:bc:1d:5f:3e:20:7e:c6:9a:12:
36:4f:cf:ea:c9:b7:e3:d5:85:d0:78:7c:51:04:89:
90:48:66:e9:f8:e2:9c:75:61:55:eb:c7:61:1e:5f:
61:8b:19:5a:a1:2f:26:68:4e:9e:40:ee:9b:17:c7:
c2:73:91:4d:b1:2f:89:d4:c0:23:4f:d4:14:5d:62:
77:ae:e9:fd:de:cb:c0:28:a5:0c:63:50:10:4c:14:
11:09:b7:92:a7:c9:5f:54:91:0c:71:68:1d:3b:9b:
84:07:90:a9:7e:98:b5:08:e4:c7:8f:93:eb:79:03:
67:75:7c:92:e8:6e:2c:dc:56:7f:76:64:b6:05:53:
79:60:ea:c6:6e:ec:9f:55:9f:45:36:2b:be:54:50:
07:01:37:e3:33:53:a5:17:8a:80:16:86:31:01:f7:
d2:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:1C:8A:E2:F8:AE:76:F1:F9:09:3C:7B:BE:2F:EC:AD:B5:1F:F5:EC
X509v3 Authority Key Identifier:
keyid:4E:5E:BB:9B:05:1A:D5:EC:7A:36:98:9F:C3:FC:C9:4C:1C:AB:CC:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tl67mwUa1ex6Npifw_zJTByrzHQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/ec1721-75c5-40f5-9345-c2fd0f958d4b/1/Tl67mwUa1ex6Npifw_zJTByrzHQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/ec1721-75c5-40f5-9345-c2fd0f958d4b/1/Tl67mwUa1ex6Npifw_zJTByrzHQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:57:7a:17:66:30:e0:cc:98:1c:b1:ab:98:b8:b9:76:91:73:
fd:70:4d:fc:e6:f4:7f:76:04:b1:24:eb:32:5c:5b:2c:60:bd:
87:1d:ed:88:87:28:b5:d4:11:1d:c1:b2:7e:2e:c3:3f:51:e3:
17:59:3e:32:b6:70:5b:13:19:95:bf:8f:32:50:da:0e:31:32:
e1:0c:09:64:fb:42:ea:f9:ca:9b:f6:86:4e:b8:d0:8c:7b:61:
12:d1:d0:b0:f5:db:1a:83:96:d0:14:5c:88:18:25:b4:9c:8d:
d4:b1:6c:42:9d:ad:82:e4:02:91:af:42:97:38:1e:3c:d4:0e:
dc:9f:bb:6e:e8:6e:98:b1:99:75:e4:29:c1:51:b1:48:c7:66:
e4:07:7e:a4:f0:f4:16:d3:05:b1:0f:df:61:df:8a:bd:31:60:
f5:b2:06:f6:e2:dc:59:75:51:c7:1b:63:0c:20:8d:bf:a0:a0:
85:83:d6:a8:44:6a:7d:9f:ba:e6:b8:44:dc:ef:e9:a2:9f:20:
58:40:fa:a9:70:0f:76:1e:bd:88:d8:cc:eb:94:91:89:ed:18:
4a:2c:1f:b6:67:de:a9:f3:15:8d:f0:bc:52:3c:65:fc:86:a6:
98:4d:90:f5:66:69:8c:62:5e:89:b8:4e:66:86:c5:3f:3b:3f:
80:41:55:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:45:25 2025 by rpki-client