Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/c0e6a2-8b20-4480-a8ab-b388c5770e04/1/TmROKYPFxQTYAPLQWCsYLrq_JIc.mft
File: TmROKYPFxQTYAPLQWCsYLrq_JIc.mft (raw, json)
Hash identifier: KqVGXbVOLuIIwQEgiJAYDrEoJgLpwG5J/fxEVm1Pcgg=
Subject key identifier: F5:2E:3C:87:75:33:98:C7:4C:26:4B:B4:9C:04:E2:61:BF:BD:72:7D
Authority key identifier: 4E:64:4E:29:83:C5:C5:04:D8:00:F2:D0:58:2B:18:2E:BA:BF:24:87
Certificate issuer: /CN=4e644e2983c5c504d800f2d0582b182ebabf2487
Certificate serial: 019A71B8786212A11110E41E4A1771C1D0D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TmROKYPFxQTYAPLQWCsYLrq_JIc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/c0e6a2-8b20-4480-a8ab-b388c5770e04/1/TmROKYPFxQTYAPLQWCsYLrq_JIc.mft
Manifest number: 09E1
Signing time: Tue 11 Nov 2025 07:01:46 +0000
Manifest this update: Tue 11 Nov 2025 07:01:46 +0000
Manifest next update: Wed 12 Nov 2025 07:01:46 +0000
Files and hashes: 1: TmROKYPFxQTYAPLQWCsYLrq_JIc.crl (hash: pbFzMCPU0qEmfTfP+EPTA9aAvgPeAC3uxLcmdf1xeDc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/c0e6a2-8b20-4480-a8ab-b388c5770e04/1/TmROKYPFxQTYAPLQWCsYLrq_JIc.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/c0e6a2-8b20-4480-a8ab-b388c5770e04/1/TmROKYPFxQTYAPLQWCsYLrq_JIc.mft
rsync://rpki.ripe.net/repository/DEFAULT/TmROKYPFxQTYAPLQWCsYLrq_JIc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:78:62:12:a1:11:10:e4:1e:4a:17:71:c1:d0:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e644e2983c5c504d800f2d0582b182ebabf2487
Validity
Not Before: Nov 11 07:01:46 2025 GMT
Not After : Nov 12 07:01:46 2025 GMT
Subject: CN=f52e3c87753398c74c264bb49c04e261bfbd727d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:c7:90:70:cf:55:ac:80:c5:f3:14:ab:5f:af:
57:63:0a:e8:11:b5:51:fe:b0:96:15:bc:fc:d1:e0:
f0:19:51:55:36:ea:6e:90:80:be:f9:de:8c:1b:fb:
93:5d:92:1c:1a:3f:7f:c9:18:2b:0e:ab:74:a9:b7:
90:e8:e8:f7:a5:7d:d6:38:5b:d1:19:8c:f9:b5:0a:
0e:52:8b:ab:a4:e1:59:09:9e:4f:f1:9a:b4:93:e3:
6b:f5:22:a0:46:d8:ab:69:11:ce:ef:2e:70:7a:72:
2a:62:1b:63:c7:24:85:5f:bf:09:2d:02:f5:fa:72:
85:fa:98:c8:77:3a:ff:e1:7b:dd:eb:9c:ed:43:70:
a9:68:92:e2:b0:41:13:cf:7b:40:6a:3d:a3:21:84:
ba:7d:a2:39:3c:c6:2f:47:70:c8:80:f2:48:63:ee:
97:54:e6:14:7f:a5:f7:d7:c7:f4:be:62:a3:07:f7:
8b:a7:60:23:f7:a0:4c:6e:ee:c3:3d:f4:3a:3c:4e:
4a:7e:8d:4e:fa:4a:bb:33:b6:69:3e:cf:dc:5d:a4:
f6:08:d6:04:ff:e5:91:7d:90:3c:37:c0:13:07:2b:
12:0c:45:1f:5f:0e:35:83:5a:9c:aa:3b:c0:8b:35:
d2:df:bc:ed:ed:16:f0:78:90:7c:fc:03:50:8f:e8:
5f:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:2E:3C:87:75:33:98:C7:4C:26:4B:B4:9C:04:E2:61:BF:BD:72:7D
X509v3 Authority Key Identifier:
keyid:4E:64:4E:29:83:C5:C5:04:D8:00:F2:D0:58:2B:18:2E:BA:BF:24:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TmROKYPFxQTYAPLQWCsYLrq_JIc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/c0e6a2-8b20-4480-a8ab-b388c5770e04/1/TmROKYPFxQTYAPLQWCsYLrq_JIc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/c0e6a2-8b20-4480-a8ab-b388c5770e04/1/TmROKYPFxQTYAPLQWCsYLrq_JIc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d7:9e:76:d1:fd:b4:c2:fa:65:26:88:40:b7:bb:ec:9b:b4:d5:
fe:ab:88:78:53:b4:d3:c9:79:91:f6:b1:0b:bc:67:94:00:94:
92:02:f3:03:63:c3:a1:68:72:06:48:2c:b6:a3:25:8e:fa:bf:
19:d9:28:db:77:d2:40:97:9e:5f:c2:8b:31:43:61:4a:27:c4:
27:7e:3d:4d:b0:e6:3c:c8:ab:85:b7:af:a2:60:02:39:35:57:
40:13:60:54:08:6d:54:f2:30:e6:61:72:bc:2e:c9:21:06:58:
aa:fc:84:b9:b5:e8:b8:61:dc:b8:80:74:c1:65:bd:6a:65:7d:
c2:20:8e:a7:07:d6:9f:cf:8f:70:fd:a9:f0:8b:a1:d2:6e:12:
a7:c7:25:b7:26:89:b3:e0:9f:33:43:cf:a9:7e:f9:09:3c:c9:
97:07:76:fa:66:1a:4a:fe:69:f9:3b:5c:b4:ae:d0:3c:40:86:
d7:88:df:4b:83:80:ec:77:5e:a7:40:b1:cb:56:ae:2f:ee:60:
ce:fc:2d:25:1d:d2:54:0c:14:b7:39:3b:0e:6d:ee:e7:a7:d7:
91:8c:fe:05:1a:43:53:7b:1e:63:79:24:6b:ea:e9:2c:db:36:
4f:58:73:f1:00:98:8c:6c:42:90:35:38:a3:e6:e4:e9:56:45:
d2:57:c4:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:32:39 2025 by rpki-client