Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/bf8b0e-beda-4a56-baf0-82ad11626eed/1/TEz85gybDy1Hs2KGTY_rsiW7UkQ.mft
File: TEz85gybDy1Hs2KGTY_rsiW7UkQ.mft (raw, json)
Hash identifier: tyo1Y6BJJG4F3thlsgGIH7h+yIGkcnbIVlQn+ZautLA=
Subject key identifier: 4E:3B:5D:56:90:01:86:63:37:80:FA:A8:B0:57:2E:9F:AB:C4:47:70
Authority key identifier: 4C:4C:FC:E6:0C:9B:0F:2D:47:B3:62:86:4D:8F:EB:B2:25:BB:52:44
Certificate issuer: /CN=4c4cfce60c9b0f2d47b362864d8febb225bb5244
Certificate serial: 019A71EE91CF3DFE97AAEBCE3E692E50FD2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TEz85gybDy1Hs2KGTY_rsiW7UkQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/bf8b0e-beda-4a56-baf0-82ad11626eed/1/TEz85gybDy1Hs2KGTY_rsiW7UkQ.mft
Manifest number: 171C
Signing time: Tue 11 Nov 2025 08:00:51 +0000
Manifest this update: Tue 11 Nov 2025 08:00:51 +0000
Manifest next update: Wed 12 Nov 2025 08:00:51 +0000
Files and hashes: 1: TEz85gybDy1Hs2KGTY_rsiW7UkQ.crl (hash: +ehS7EpaK8gazLIQrowa2sw4lY8TCNCc1rM7URkyA1Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/bf8b0e-beda-4a56-baf0-82ad11626eed/1/TEz85gybDy1Hs2KGTY_rsiW7UkQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/bf8b0e-beda-4a56-baf0-82ad11626eed/1/TEz85gybDy1Hs2KGTY_rsiW7UkQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/TEz85gybDy1Hs2KGTY_rsiW7UkQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:91:cf:3d:fe:97:aa:eb:ce:3e:69:2e:50:fd:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c4cfce60c9b0f2d47b362864d8febb225bb5244
Validity
Not Before: Nov 11 08:00:51 2025 GMT
Not After : Nov 12 08:00:51 2025 GMT
Subject: CN=4e3b5d56900186633780faa8b0572e9fabc44770
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:fc:be:bd:19:8a:c9:d1:23:7e:19:8c:c3:39:
8c:90:b8:7b:8f:68:bf:be:d9:00:6e:ec:65:36:e3:
df:44:89:a1:53:c4:2c:b6:70:14:4a:71:74:ae:d6:
d8:37:37:bc:34:89:da:01:63:19:08:37:d0:e5:9d:
4e:26:84:0d:7e:d7:5c:17:98:c5:d2:e0:f7:f9:5c:
24:4d:78:32:dd:f4:99:6c:23:5e:cf:2f:46:77:65:
28:0f:fa:cf:e6:b6:a7:0b:35:b8:aa:51:09:d2:fb:
bb:ca:52:7a:ab:e5:62:8a:0d:da:fe:8d:21:78:42:
a9:72:09:bd:e8:b2:49:eb:7d:f0:d1:2f:75:b8:80:
2e:69:d0:72:b0:dd:d2:90:6b:9b:6b:bf:71:55:ec:
51:ce:34:db:df:b2:9e:be:20:51:ff:a4:0b:48:6d:
40:85:70:32:3f:2d:76:ee:62:de:e1:99:b8:d2:3f:
e9:ab:6b:49:83:6e:a2:df:97:b4:f8:51:eb:e2:81:
f4:a4:38:80:b3:2c:07:bb:64:60:0a:d7:69:ac:9e:
e8:17:9d:45:5a:04:f6:e7:e9:a0:33:d7:17:d7:49:
a3:cd:92:fa:12:d8:67:7e:d6:50:a3:25:27:a9:25:
13:e9:8a:07:1a:e4:f0:8f:1d:01:dd:06:ff:c5:db:
27:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:3B:5D:56:90:01:86:63:37:80:FA:A8:B0:57:2E:9F:AB:C4:47:70
X509v3 Authority Key Identifier:
keyid:4C:4C:FC:E6:0C:9B:0F:2D:47:B3:62:86:4D:8F:EB:B2:25:BB:52:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TEz85gybDy1Hs2KGTY_rsiW7UkQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/bf8b0e-beda-4a56-baf0-82ad11626eed/1/TEz85gybDy1Hs2KGTY_rsiW7UkQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/bf8b0e-beda-4a56-baf0-82ad11626eed/1/TEz85gybDy1Hs2KGTY_rsiW7UkQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:44:e8:bd:7f:5d:5e:53:cd:80:b1:ac:a2:fd:cf:ab:c9:af:
3a:0c:7d:be:2c:6b:ac:a4:b0:78:e5:cb:7e:8a:4a:73:56:f8:
dd:d2:be:7f:63:18:a4:85:e3:fc:56:05:df:4f:9f:54:56:cf:
16:4a:1d:93:35:08:64:14:f8:04:f5:91:0d:8a:8a:3b:23:38:
f2:e3:0e:4f:6f:b6:65:92:03:64:c2:3d:d2:a8:53:e7:a7:bd:
12:8b:48:42:cd:c4:2d:a0:ba:32:8d:a0:6f:00:4b:13:9e:6a:
97:19:95:d0:0f:22:e3:60:4c:9a:88:dd:4a:7d:9b:24:d7:37:
21:77:8a:ae:25:2d:0d:4c:ad:a5:aa:36:1d:cd:30:a7:19:d8:
bb:78:69:e5:9e:03:25:9f:63:e1:0f:9b:25:dc:b7:07:ab:78:
a4:73:4d:e4:ea:01:ab:cd:fd:1c:4e:9a:a6:a4:61:a8:1c:0a:
83:4d:af:87:0d:7e:3d:09:91:26:8b:68:12:f6:7a:43:7a:44:
49:b9:58:f5:d9:76:eb:e4:6e:6b:13:88:6b:32:85:d5:f2:b3:
4c:60:3c:2a:5e:dc:57:d1:61:5c:69:2f:3d:3d:fa:68:db:fd:
db:0b:7b:9c:28:b5:67:50:82:6f:c6:d8:59:ce:b5:01:8a:83:
bc:1f:ba:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:34:55 2025 by rpki-client