Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/f7baf4-d266-4fe5-a6ff-a00667f4cf71/1/TON2ekBU9IaN4L2fsjpcx2kP_tU.mft
File: TON2ekBU9IaN4L2fsjpcx2kP_tU.mft (raw, json)
Hash identifier: BjSOxDGIhk+lEYEFGc2Pz4NLJICt+leJKrPw1+jHy4I=
Subject key identifier: 99:ED:69:36:5D:9C:68:A9:F2:1B:E9:54:47:85:8D:DF:08:39:7C:AB
Authority key identifier: 4C:E3:76:7A:40:54:F4:86:8D:E0:BD:9F:B2:3A:5C:C7:69:0F:FE:D5
Certificate issuer: /CN=4ce3767a4054f4868de0bd9fb23a5cc7690ffed5
Certificate serial: 019A70DBE022FFA0A2E4B6190F85548A9BFD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TON2ekBU9IaN4L2fsjpcx2kP_tU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/f7baf4-d266-4fe5-a6ff-a00667f4cf71/1/TON2ekBU9IaN4L2fsjpcx2kP_tU.mft
Manifest number: 0EBD
Signing time: Tue 11 Nov 2025 03:00:49 +0000
Manifest this update: Tue 11 Nov 2025 03:00:49 +0000
Manifest next update: Wed 12 Nov 2025 03:00:49 +0000
Files and hashes: 1: TON2ekBU9IaN4L2fsjpcx2kP_tU.crl (hash: /Lu0KNfiXiwcKO5TJ5VwcnqGyY9Jrf2+6z3P6BfZOpc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/f7baf4-d266-4fe5-a6ff-a00667f4cf71/1/TON2ekBU9IaN4L2fsjpcx2kP_tU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/f7baf4-d266-4fe5-a6ff-a00667f4cf71/1/TON2ekBU9IaN4L2fsjpcx2kP_tU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TON2ekBU9IaN4L2fsjpcx2kP_tU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 03:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:db:e0:22:ff:a0:a2:e4:b6:19:0f:85:54:8a:9b:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ce3767a4054f4868de0bd9fb23a5cc7690ffed5
Validity
Not Before: Nov 11 03:00:49 2025 GMT
Not After : Nov 12 03:00:49 2025 GMT
Subject: CN=99ed69365d9c68a9f21be95447858ddf08397cab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:b0:24:3b:97:b4:cd:06:33:f8:0e:5f:3a:fb:
b4:d6:79:0b:57:45:a8:dc:c3:dd:a9:b6:8b:1b:0f:
b5:08:d6:19:1c:e6:49:fb:c7:e0:87:8b:8e:55:dd:
26:a7:bf:4a:92:37:61:23:a7:bc:ee:b2:c9:83:bd:
ab:4d:cf:d6:8c:de:d0:36:1f:31:64:fe:f8:a4:03:
4c:7f:1c:9b:77:f2:0b:df:c7:14:a9:03:ed:6f:bc:
06:76:7a:fc:d5:2e:88:d8:20:81:94:88:86:a8:5e:
61:d3:07:6b:12:da:97:4f:e8:a2:64:42:e2:ed:e4:
fe:d8:fb:75:48:dc:85:a3:fd:a7:5b:e8:d2:88:ed:
1a:6f:73:af:08:5e:a8:d0:12:82:41:28:67:fe:94:
59:2f:8e:b0:72:60:f5:75:40:e9:19:0c:4b:58:e5:
23:a5:21:2c:10:9d:0a:3e:ca:44:1e:38:de:87:85:
87:c2:d7:f3:02:e7:90:bb:c5:58:a6:59:bd:57:32:
bb:77:6a:9f:27:83:ac:b3:47:c9:f5:77:eb:87:22:
a9:82:42:8a:0f:e1:3a:9f:e0:ec:e0:b3:8e:77:bb:
3e:bb:cc:e7:0a:28:e9:75:ba:8a:75:b7:96:21:35:
54:b6:e8:63:d2:ac:e4:34:d8:06:82:9e:02:37:7e:
a3:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:ED:69:36:5D:9C:68:A9:F2:1B:E9:54:47:85:8D:DF:08:39:7C:AB
X509v3 Authority Key Identifier:
keyid:4C:E3:76:7A:40:54:F4:86:8D:E0:BD:9F:B2:3A:5C:C7:69:0F:FE:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TON2ekBU9IaN4L2fsjpcx2kP_tU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/f7baf4-d266-4fe5-a6ff-a00667f4cf71/1/TON2ekBU9IaN4L2fsjpcx2kP_tU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/f7baf4-d266-4fe5-a6ff-a00667f4cf71/1/TON2ekBU9IaN4L2fsjpcx2kP_tU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:aa:b8:cf:b2:f5:22:66:28:95:db:73:fc:7b:86:6e:18:e2:
54:78:71:a3:de:f1:b8:aa:80:2f:29:52:14:95:51:72:42:68:
09:55:75:5c:37:28:0a:3c:c6:65:09:2a:c3:3c:81:0e:14:ad:
c9:d1:17:17:ed:f0:d7:99:9c:1e:be:5f:47:a3:aa:41:f7:b6:
0c:90:cd:22:6d:fa:22:0f:90:b4:5c:6f:ef:f8:e4:34:71:73:
76:a3:e5:a3:ea:5b:f6:36:4c:57:0b:93:ba:37:87:6d:ab:56:
9a:51:38:33:dc:c0:5b:e6:e9:67:d0:df:fc:bb:61:12:e1:a0:
95:f4:f7:ed:b0:b9:c1:5a:4a:ed:f0:c4:7f:65:2f:63:46:bf:
d2:fa:2c:dd:60:1e:34:82:c3:42:aa:fb:a0:98:99:1b:f8:58:
52:7c:16:4f:17:30:f0:79:9c:0f:b0:59:f0:4f:62:ea:29:4e:
c5:03:d5:9e:fb:d8:b5:83:5a:0a:1f:8b:9c:87:24:07:5d:0a:
e1:74:ef:93:f1:82:79:de:88:89:9a:7f:72:ca:2c:81:a4:f6:
89:f7:88:18:fa:f3:1a:32:20:6c:af:43:ee:a0:73:68:b3:60:
31:b0:44:32:29:2a:75:4a:13:e0:29:30:ae:49:5d:af:05:aa:
a7:d8:ca:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:08:57 2025 by rpki-client