Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/639e5f-0797-4473-aeff-52f5753fc3be/1/TvYP_RC7937OmKeBY1mERCd9v6Q.mft
File: TvYP_RC7937OmKeBY1mERCd9v6Q.mft (raw, json)
Hash identifier: i3tj8FpcQKK4shUr4A6JPeBqVp7UX+EZTV9Enb5vCvI=
Subject key identifier: 94:C7:4F:A7:55:AE:CA:68:FD:84:FD:79:1C:14:CA:38:A1:5D:66:69
Authority key identifier: 4E:F6:0F:FD:10:BB:F7:7E:CE:98:A7:81:63:59:84:44:27:7D:BF:A4
Certificate issuer: /CN=4ef60ffd10bbf77ece98a78163598444277dbfa4
Certificate serial: 019A71B960BF63ED3892EB391B3764EE0CA4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TvYP_RC7937OmKeBY1mERCd9v6Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/639e5f-0797-4473-aeff-52f5753fc3be/1/TvYP_RC7937OmKeBY1mERCd9v6Q.mft
Manifest number: 171B
Signing time: Tue 11 Nov 2025 07:02:45 +0000
Manifest this update: Tue 11 Nov 2025 07:02:45 +0000
Manifest next update: Wed 12 Nov 2025 07:02:45 +0000
Files and hashes: 1: TvYP_RC7937OmKeBY1mERCd9v6Q.crl (hash: dMe/Tc5isHH63bQkIpExwgA9KkZBhj+mgM84m7EhZbU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/639e5f-0797-4473-aeff-52f5753fc3be/1/TvYP_RC7937OmKeBY1mERCd9v6Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/639e5f-0797-4473-aeff-52f5753fc3be/1/TvYP_RC7937OmKeBY1mERCd9v6Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/TvYP_RC7937OmKeBY1mERCd9v6Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b9:60:bf:63:ed:38:92:eb:39:1b:37:64:ee:0c:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ef60ffd10bbf77ece98a78163598444277dbfa4
Validity
Not Before: Nov 11 07:02:45 2025 GMT
Not After : Nov 12 07:02:45 2025 GMT
Subject: CN=94c74fa755aeca68fd84fd791c14ca38a15d6669
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:e6:7b:5f:d9:7e:ec:d6:5f:a6:f9:b8:99:7c:
08:35:ca:06:a4:ac:ba:18:04:d5:fd:ba:c2:67:68:
59:73:c7:5e:3f:bb:83:7b:83:fe:19:4c:7d:dd:90:
0f:36:d0:93:f2:bf:94:68:68:fd:ea:a9:6a:6e:c4:
cc:1c:7f:f2:44:bb:c5:39:33:40:92:ac:6c:fc:6e:
69:9f:30:33:b3:b7:f9:6c:21:1e:53:55:95:5d:65:
8f:33:85:09:ed:09:cb:21:f5:ec:77:ad:60:d6:69:
ac:38:90:37:b9:2a:e1:db:46:40:11:7b:75:2c:12:
eb:05:11:e3:cc:60:80:c2:e2:df:01:c0:f4:60:cd:
88:0e:7d:36:c0:80:54:5e:87:84:1f:fc:18:a0:8e:
b1:58:32:7e:51:39:b4:7b:4e:11:ed:ff:b1:a8:e1:
2c:fd:1e:18:86:b7:09:58:4e:05:c4:84:74:4e:3f:
88:1c:0e:70:d1:c9:ce:b7:63:8f:91:c7:47:e8:ef:
14:5b:da:a6:c6:6f:cd:9e:ca:80:23:af:12:20:f7:
fc:78:4b:e6:3b:3c:01:78:7a:b9:ec:c0:6b:34:8b:
c1:3a:2b:51:67:06:33:bf:f7:b4:dd:11:fd:d8:03:
22:74:fe:32:6a:4f:d1:e7:40:04:5c:df:2f:79:c7:
c1:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:C7:4F:A7:55:AE:CA:68:FD:84:FD:79:1C:14:CA:38:A1:5D:66:69
X509v3 Authority Key Identifier:
keyid:4E:F6:0F:FD:10:BB:F7:7E:CE:98:A7:81:63:59:84:44:27:7D:BF:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TvYP_RC7937OmKeBY1mERCd9v6Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/639e5f-0797-4473-aeff-52f5753fc3be/1/TvYP_RC7937OmKeBY1mERCd9v6Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/639e5f-0797-4473-aeff-52f5753fc3be/1/TvYP_RC7937OmKeBY1mERCd9v6Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:0b:a5:a3:7f:c8:2c:4b:36:6e:2b:c2:7d:88:be:0d:30:10:
02:1f:07:e1:f7:69:88:56:48:52:b9:da:44:2b:c0:f4:f1:21:
3a:2f:f7:a0:49:4f:04:0b:5b:21:41:10:ac:c9:2c:3e:6e:ff:
96:07:a3:32:d5:3d:b9:39:9f:90:bb:32:d3:4a:fc:18:16:d0:
21:c3:39:18:d8:cb:24:36:c9:95:ce:bc:4f:fc:3e:21:ae:aa:
61:5e:4e:99:7a:62:1e:6a:c2:1f:20:1f:4a:ec:11:e0:9a:50:
40:7c:1d:d0:39:49:9e:cc:b6:1c:66:da:45:2f:ce:ec:11:1d:
73:8d:0b:38:5d:7d:8f:43:d6:38:e7:62:03:41:6e:26:d4:72:
63:27:7e:96:6a:40:e4:41:54:d7:d6:df:2c:c7:5b:0b:2b:75:
29:71:e3:c0:c0:ef:b4:5f:5e:c6:67:e8:73:be:ce:f0:aa:ca:
64:fc:9b:46:89:59:b2:cd:81:4b:12:c7:85:7f:10:59:14:8c:
7f:17:52:19:14:bd:74:22:52:16:28:51:dc:d5:6f:68:ea:05:
7b:04:b6:9e:73:e7:4d:6a:4d:02:ed:18:c6:65:09:a4:0e:75:
30:0b:31:06:d0:07:e1:c6:b1:b9:8c:b8:87:9d:c3:ea:7f:87:
2f:fb:8a:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 13:58:33 2025 by rpki-client