Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/1f889b-4445-4770-a95e-f8063230e183/1/tT1dyv8VkDIr61fsPrrvYlBBKVU.mft
File: tT1dyv8VkDIr61fsPrrvYlBBKVU.mft (raw, json)
Hash identifier: KpyT1YZIXWN37Wanq+gRRX9lhdTkQWSZ++TRx53Ag30=
Subject key identifier: 59:CF:8B:7D:52:B6:ED:6F:71:F1:94:3A:B6:08:E3:98:17:74:80:20
Authority key identifier: B5:3D:5D:CA:FF:15:90:32:2B:EB:57:EC:3E:BA:EF:62:50:41:29:55
Certificate issuer: /CN=b53d5dcaff1590322beb57ec3ebaef6250412955
Certificate serial: 019A71B8BEFA5886A56F17D5C5289478C3EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tT1dyv8VkDIr61fsPrrvYlBBKVU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/1f889b-4445-4770-a95e-f8063230e183/1/tT1dyv8VkDIr61fsPrrvYlBBKVU.mft
Manifest number: 09E5
Signing time: Tue 11 Nov 2025 07:02:04 +0000
Manifest this update: Tue 11 Nov 2025 07:02:04 +0000
Manifest next update: Wed 12 Nov 2025 07:02:04 +0000
Files and hashes: 1: tT1dyv8VkDIr61fsPrrvYlBBKVU.crl (hash: ZEUcaj3YiUhsCUO8HcccOJHitWbU1MmtNe0TALaliRw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/1f889b-4445-4770-a95e-f8063230e183/1/tT1dyv8VkDIr61fsPrrvYlBBKVU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/1f889b-4445-4770-a95e-f8063230e183/1/tT1dyv8VkDIr61fsPrrvYlBBKVU.mft
rsync://rpki.ripe.net/repository/DEFAULT/tT1dyv8VkDIr61fsPrrvYlBBKVU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:be:fa:58:86:a5:6f:17:d5:c5:28:94:78:c3:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b53d5dcaff1590322beb57ec3ebaef6250412955
Validity
Not Before: Nov 11 07:02:04 2025 GMT
Not After : Nov 12 07:02:04 2025 GMT
Subject: CN=59cf8b7d52b6ed6f71f1943ab608e39817748020
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:a6:96:45:19:1a:cb:3a:a4:2c:e0:a6:e1:f8:
16:02:fd:58:26:c6:8a:43:d1:56:7f:c6:18:81:72:
74:ea:6e:8b:d1:e7:a5:6b:24:36:e4:58:2f:e7:4d:
51:23:85:80:eb:78:52:db:1b:c8:a4:e1:50:59:3e:
86:c8:cb:cf:9a:c4:47:8e:d9:55:1d:56:45:7a:d1:
b0:ce:06:91:ee:df:ea:b0:d7:11:43:65:84:c3:04:
bd:05:5e:5b:14:21:1e:93:a8:0c:00:db:b7:e7:e3:
39:16:73:eb:2d:64:b3:50:bc:cf:d1:4f:90:92:7a:
a3:ab:5a:8a:71:33:07:7b:cb:9d:57:64:7d:09:f0:
13:86:9c:78:c6:87:0f:10:55:be:ec:3f:54:05:f8:
57:36:88:b0:a9:6d:51:1d:cf:b7:97:34:cd:46:f5:
1a:2e:25:22:de:fc:f5:16:8c:e9:12:7b:e4:6f:83:
a0:73:ba:02:a5:48:0b:32:ce:b3:a3:12:3d:1b:a9:
f0:68:ca:41:3c:f7:1d:f2:2c:ed:a5:26:d7:34:41:
0a:6b:bb:38:73:cf:9c:4c:8c:d7:6f:6d:08:57:b6:
0e:9d:f5:dd:53:d1:fd:9a:20:a7:bd:47:fd:66:e8:
a5:91:38:7b:0e:14:84:0a:bf:30:a6:d9:83:94:fb:
34:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:CF:8B:7D:52:B6:ED:6F:71:F1:94:3A:B6:08:E3:98:17:74:80:20
X509v3 Authority Key Identifier:
keyid:B5:3D:5D:CA:FF:15:90:32:2B:EB:57:EC:3E:BA:EF:62:50:41:29:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tT1dyv8VkDIr61fsPrrvYlBBKVU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/1f889b-4445-4770-a95e-f8063230e183/1/tT1dyv8VkDIr61fsPrrvYlBBKVU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/1f889b-4445-4770-a95e-f8063230e183/1/tT1dyv8VkDIr61fsPrrvYlBBKVU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:9b:58:5d:1a:96:b3:ab:fa:36:4e:d8:98:4e:42:bb:e9:84:
47:50:9f:8a:27:e6:50:f5:59:5f:4a:3a:02:33:22:40:4d:e9:
3a:e8:1b:34:f0:63:e7:70:bd:71:63:d2:4b:56:fc:51:8e:dd:
e4:42:88:43:62:3b:73:cb:13:d1:3d:39:ec:98:36:f9:73:24:
d5:0c:1c:e8:55:a9:53:4d:83:b6:7c:d0:43:89:9a:67:1b:66:
55:0f:52:28:05:0e:c3:e8:7b:2b:c8:7c:c4:5d:6e:af:12:93:
66:97:33:5a:6d:ef:d0:f1:28:5d:59:15:ca:77:c9:c8:c7:c3:
c2:2c:b7:76:77:95:0e:07:f5:32:14:94:9b:4e:71:49:2f:80:
73:fa:a7:88:2a:64:1e:08:03:6b:bd:6b:c3:b0:61:d7:fb:d3:
d9:f5:b9:8c:e9:1f:9d:6b:69:a5:5e:db:01:0e:c3:2a:fb:7d:
6f:ea:a5:bd:c3:2d:c7:df:04:fd:10:b7:55:62:7c:bf:41:53:
14:c8:4d:03:4b:07:bb:cb:05:f8:28:5d:b4:e1:3a:44:87:a9:
ef:4f:2a:43:f2:dc:ec:ae:6a:6f:44:4e:8b:99:48:e5:1e:76:
c8:ae:ac:d9:a1:cc:65:68:6b:b2:f5:e0:04:b0:3e:67:bc:d6:
cd:9d:8e:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:44:46 2025 by rpki-client