Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/8fa354-4bd5-454d-b2d8-03f604324fcf/1/TLbePNkQ87_3_4Xe1FLEMbHopSA.mft
File: TLbePNkQ87_3_4Xe1FLEMbHopSA.mft (raw, json)
Hash identifier: BbVuzXumR7/1qq7ILRfCTS0EOEDeziV2HKGXE/PdA1s=
Subject key identifier: CC:C5:85:79:A7:67:25:29:78:88:CA:D1:94:49:08:AB:F5:CF:5B:A1
Authority key identifier: 4C:B6:DE:3C:D9:10:F3:BF:F7:FF:85:DE:D4:52:C4:31:B1:E8:A5:20
Certificate issuer: /CN=4cb6de3cd910f3bff7ff85ded452c431b1e8a520
Certificate serial: 019A7301C1697E7A39E24F1CB0A0AF6B932A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TLbePNkQ87_3_4Xe1FLEMbHopSA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/8fa354-4bd5-454d-b2d8-03f604324fcf/1/TLbePNkQ87_3_4Xe1FLEMbHopSA.mft
Manifest number: 1721
Signing time: Tue 11 Nov 2025 13:01:26 +0000
Manifest this update: Tue 11 Nov 2025 13:01:26 +0000
Manifest next update: Wed 12 Nov 2025 13:01:26 +0000
Files and hashes: 1: TLbePNkQ87_3_4Xe1FLEMbHopSA.crl (hash: Z61nUyQZrGmapN4Ww+azCXFgYzsFwT8LMNacxjqQkrA=)
2: kE8LdGAFW614HUcjN1MoZxFokJs.roa (hash: XYMGtkKoA87TX5nzm+UQ3ylduTU9EvUGKlmdAtXqyu4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/8fa354-4bd5-454d-b2d8-03f604324fcf/1/TLbePNkQ87_3_4Xe1FLEMbHopSA.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/8fa354-4bd5-454d-b2d8-03f604324fcf/1/TLbePNkQ87_3_4Xe1FLEMbHopSA.mft
rsync://rpki.ripe.net/repository/DEFAULT/TLbePNkQ87_3_4Xe1FLEMbHopSA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:73:01:c1:69:7e:7a:39:e2:4f:1c:b0:a0:af:6b:93:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4cb6de3cd910f3bff7ff85ded452c431b1e8a520
Validity
Not Before: Nov 11 13:01:26 2025 GMT
Not After : Nov 12 13:01:26 2025 GMT
Subject: CN=ccc58579a76725297888cad1944908abf5cf5ba1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:86:78:1e:e6:c5:64:e6:c2:4c:27:94:43:d0:
b0:a8:70:2c:c2:42:c4:14:da:b3:ec:df:5a:90:d3:
fd:22:89:de:69:49:c3:b3:82:3f:42:73:44:a9:8e:
1c:aa:53:81:97:8f:fb:24:45:17:1c:fa:71:14:92:
97:1f:28:d6:88:3c:0b:89:71:e9:e2:d2:3b:fc:3e:
d2:66:ff:39:c5:57:1f:ec:21:f5:37:5b:bc:2f:7b:
60:34:d5:c9:4c:e2:cd:bf:66:89:b5:70:36:b5:5e:
70:00:3c:2e:4e:3a:05:c8:e4:6f:b6:02:1b:74:05:
7c:3b:bb:78:a9:08:c3:d3:07:13:eb:78:ee:3f:4b:
ff:9f:54:1f:a9:bc:80:e3:c6:41:27:2b:12:a3:94:
9e:e6:79:e9:2b:e2:94:03:60:45:c1:e9:3b:2d:a9:
00:d0:a7:01:6e:90:fd:b6:e2:e6:6f:ee:9d:a4:07:
a0:a5:be:fb:19:13:9a:73:18:9d:85:77:91:22:50:
58:ae:09:d4:82:29:a7:5e:8c:05:17:77:2e:75:09:
22:d6:c5:cb:51:72:e3:fa:01:dd:29:91:59:67:79:
c9:07:d2:1e:46:d4:d9:58:65:5d:bf:78:b2:3b:7c:
83:df:4e:be:08:8a:b9:25:c0:69:0d:f4:16:70:24:
7f:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:C5:85:79:A7:67:25:29:78:88:CA:D1:94:49:08:AB:F5:CF:5B:A1
X509v3 Authority Key Identifier:
keyid:4C:B6:DE:3C:D9:10:F3:BF:F7:FF:85:DE:D4:52:C4:31:B1:E8:A5:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TLbePNkQ87_3_4Xe1FLEMbHopSA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/8fa354-4bd5-454d-b2d8-03f604324fcf/1/TLbePNkQ87_3_4Xe1FLEMbHopSA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/8fa354-4bd5-454d-b2d8-03f604324fcf/1/TLbePNkQ87_3_4Xe1FLEMbHopSA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d7:fe:95:81:b9:cd:7c:8e:b6:7b:61:bc:25:e0:f3:c7:9e:6d:
3d:78:c2:0a:a8:b3:8d:db:38:51:70:09:e5:2e:c0:dc:ca:46:
07:69:6e:51:7c:49:da:db:59:64:4a:0a:7c:61:8e:9b:90:1c:
24:47:a1:83:a7:2d:48:a0:01:48:d5:e4:fe:c5:a9:53:19:5f:
3f:70:e6:86:7f:18:92:9c:4d:1e:f1:68:28:6a:dc:ff:67:e5:
77:a9:72:e2:85:8f:2f:e8:4d:89:21:a3:3f:36:ac:e4:86:58:
84:a8:18:07:8f:9d:bd:8d:e6:4b:f8:7c:73:ba:6e:76:2a:ee:
dc:99:fc:65:f4:a2:99:85:0e:75:6b:b1:1e:8d:cf:2b:c4:a8:
c0:7e:45:33:79:2f:bb:6d:fe:48:85:eb:c7:89:1f:e7:a7:78:
1d:0f:98:c6:57:01:79:1b:ef:5b:a7:d5:6c:c9:6c:68:2b:7a:
aa:e6:b7:7f:54:45:b7:59:2c:f7:62:dc:54:5d:6b:59:dc:4a:
77:ec:4c:15:f2:66:13:da:2f:65:41:49:78:f1:1e:1a:2c:92:
a6:70:d4:b2:de:e9:f9:36:75:25:17:b5:10:08:30:23:76:51:
b6:d4:6f:4c:6e:18:5b:a5:51:a5:c7:0f:49:70:1f:cb:2d:bf:
05:69:2c:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:22:13 2025 by rpki-client