Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/a1adf5-7642-4e90-a07e-1f1b24118d85/1/Tx097mN940sTx0umz7TSBb5VYn4.mft
File: Tx097mN940sTx0umz7TSBb5VYn4.mft (raw, json)
Hash identifier: aBiFBPxZtfJQB0qLT7AuhAtU1at7XN3/9lqRgFkyR1w=
Subject key identifier: E9:04:9C:10:F9:88:A6:35:D5:7B:B5:8F:1E:CD:1F:79:87:17:FD:1C
Authority key identifier: 4F:1D:3D:EE:63:7D:E3:4B:13:C7:4B:A6:CF:B4:D2:05:BE:55:62:7E
Certificate issuer: /CN=4f1d3dee637de34b13c74ba6cfb4d205be55627e
Certificate serial: 019A70A4DACB199DA8264A1734204AE6B597
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tx097mN940sTx0umz7TSBb5VYn4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/a1adf5-7642-4e90-a07e-1f1b24118d85/1/Tx097mN940sTx0umz7TSBb5VYn4.mft
Manifest number: 171A
Signing time: Tue 11 Nov 2025 02:00:43 +0000
Manifest this update: Tue 11 Nov 2025 02:00:43 +0000
Manifest next update: Wed 12 Nov 2025 02:00:43 +0000
Files and hashes: 1: Tx097mN940sTx0umz7TSBb5VYn4.crl (hash: GS/pdWsHKjXsHnDLg7wTJ2223j+ycBOF1uM6XSiohbM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/a1adf5-7642-4e90-a07e-1f1b24118d85/1/Tx097mN940sTx0umz7TSBb5VYn4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/a1adf5-7642-4e90-a07e-1f1b24118d85/1/Tx097mN940sTx0umz7TSBb5VYn4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Tx097mN940sTx0umz7TSBb5VYn4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 02:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:a4:da:cb:19:9d:a8:26:4a:17:34:20:4a:e6:b5:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1d3dee637de34b13c74ba6cfb4d205be55627e
Validity
Not Before: Nov 11 02:00:43 2025 GMT
Not After : Nov 12 02:00:43 2025 GMT
Subject: CN=e9049c10f988a635d57bb58f1ecd1f798717fd1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:80:d5:57:49:6e:e8:09:a2:cf:f5:62:e0:b5:
5e:1f:89:d0:53:c4:23:4f:c2:31:a9:6e:6a:ce:c2:
82:82:09:b4:63:c5:66:65:81:40:49:8d:80:a4:8a:
1a:a9:50:a2:91:dd:b7:ec:c1:92:ea:66:71:71:3a:
e0:be:9f:e2:73:c5:d9:f5:24:63:8a:42:22:50:98:
75:8b:20:2d:43:0a:68:8d:ce:47:75:44:77:e9:d2:
0a:60:5f:31:66:bd:93:f3:9a:02:f5:d5:8e:d2:54:
da:3d:bb:47:4a:d6:cf:43:69:70:39:37:34:a7:03:
e5:82:d2:57:14:3d:15:6d:47:00:a3:00:8a:00:30:
f0:6d:ab:52:52:99:6f:f7:11:b3:82:52:fd:df:7c:
69:fd:67:93:e4:7b:fd:a2:f2:30:24:5d:64:c9:18:
98:a9:3e:95:8a:2e:1e:6a:da:16:71:bf:f2:bc:e8:
70:d8:15:80:17:2e:fe:75:72:1e:c9:45:ab:18:9d:
06:85:88:cc:2a:a9:bf:ae:b6:b9:02:fc:e5:56:2c:
0a:bc:d7:54:19:e2:ec:7e:d1:ea:69:1c:ee:6e:c0:
17:6e:da:bc:08:73:d0:89:6f:d9:4b:46:e3:d4:70:
b9:8a:bf:e3:7b:97:08:a6:c5:99:35:8c:1b:c1:64:
83:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:04:9C:10:F9:88:A6:35:D5:7B:B5:8F:1E:CD:1F:79:87:17:FD:1C
X509v3 Authority Key Identifier:
keyid:4F:1D:3D:EE:63:7D:E3:4B:13:C7:4B:A6:CF:B4:D2:05:BE:55:62:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tx097mN940sTx0umz7TSBb5VYn4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/a1adf5-7642-4e90-a07e-1f1b24118d85/1/Tx097mN940sTx0umz7TSBb5VYn4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/a1adf5-7642-4e90-a07e-1f1b24118d85/1/Tx097mN940sTx0umz7TSBb5VYn4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cf:4a:45:31:25:6b:74:e2:a6:e8:e0:bf:10:aa:9e:b3:a5:7d:
40:47:0b:43:9a:19:e5:8c:a9:27:07:41:e1:da:d2:59:94:06:
51:73:ef:27:95:46:46:57:a6:38:7d:7e:37:e2:85:b7:a9:a3:
c9:90:ae:b8:6f:f6:6d:39:26:61:4b:5d:22:cc:8e:fd:0e:63:
95:e3:1f:ba:94:e9:80:ae:e6:0f:b4:bd:a6:75:b8:fa:cc:f7:
0a:86:e7:77:e4:06:ad:d0:27:a2:0a:63:a9:dd:1c:67:6e:b2:
0d:6a:da:a4:50:38:aa:80:e2:f4:e2:fc:e1:fd:be:5f:e9:b7:
2d:63:73:c5:1c:35:4e:69:e3:9b:cb:b5:a6:79:9d:a2:bc:c3:
0e:38:c4:af:74:f1:73:9f:a0:34:6b:1c:ee:f7:92:fe:08:1a:
0a:76:d7:2a:50:16:4c:f5:f6:bc:bb:ac:2c:f1:bc:35:ee:0d:
24:f9:64:38:2a:42:3f:25:67:87:34:03:66:ba:50:f8:4d:4f:
d6:98:1d:96:a5:e4:3c:7c:ec:7a:8f:83:01:e2:ca:c2:e7:51:
28:9f:e8:9a:77:0a:b3:cc:b6:00:db:fe:82:ac:0d:70:3a:34:
b0:82:a3:d8:6b:93:2b:aa:72:a6:29:79:25:c3:ea:ac:b5:43:
a7:68:e1:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:33:09 2025 by rpki-client