Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/18c7dd-241b-4b92-8ebf-77794fbfd2e4/1/TIEnPcsDw0V7eSUL4Qnhml508P0.mft
File: TIEnPcsDw0V7eSUL4Qnhml508P0.mft (raw, json)
Hash identifier: /SCkDR/Uc+lnTPOFSKWN2D6dykiZjZH8A7qAg32K32Q=
Subject key identifier: C1:51:CF:9B:CF:7A:60:06:36:29:B4:AB:A6:AE:7B:D9:E3:8C:38:7A
Authority key identifier: 4C:81:27:3D:CB:03:C3:45:7B:79:25:0B:E1:09:E1:9A:5E:74:F0:FD
Certificate issuer: /CN=4c81273dcb03c3457b79250be109e19a5e74f0fd
Certificate serial: 019A4F621EF019A01323D49DABA19C5D6432
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TIEnPcsDw0V7eSUL4Qnhml508P0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/18c7dd-241b-4b92-8ebf-77794fbfd2e4/1/TIEnPcsDw0V7eSUL4Qnhml508P0.mft
Manifest number: 0907
Signing time: Tue 04 Nov 2025 15:00:21 +0000
Manifest this update: Tue 04 Nov 2025 15:00:21 +0000
Manifest next update: Wed 05 Nov 2025 15:00:21 +0000
Files and hashes: 1: 09h3HegSzHCmBBBWGcTWBjEqm-k.roa (hash: e2MlTegDWzHw8Qc0vpcn4p75pDoA+fAb45rhwd6sZ2c=)
2: 2H-bW8UZI3iJgi7-SD7ICzn-6yE.roa (hash: 6BFAD/kuUp8ggYQ5Z6VEt8Ffgu906xvZpM65LYf/A40=)
3: Nrmj7OZr3VRqV-mPGEt59p2belk.roa (hash: qKP+VMvb5X+LyJaWae51YmN4HE54Q3kw6hy8LaIxSiU=)
4: TIEnPcsDw0V7eSUL4Qnhml508P0.crl (hash: yyF17t31mtKcUV/7d7dgE6WdBcy1APGxLg1DSd+BUyE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/18c7dd-241b-4b92-8ebf-77794fbfd2e4/1/TIEnPcsDw0V7eSUL4Qnhml508P0.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/18c7dd-241b-4b92-8ebf-77794fbfd2e4/1/TIEnPcsDw0V7eSUL4Qnhml508P0.mft
rsync://rpki.ripe.net/repository/DEFAULT/TIEnPcsDw0V7eSUL4Qnhml508P0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 15:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:62:1e:f0:19:a0:13:23:d4:9d:ab:a1:9c:5d:64:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c81273dcb03c3457b79250be109e19a5e74f0fd
Validity
Not Before: Nov 4 15:00:21 2025 GMT
Not After : Nov 5 15:00:21 2025 GMT
Subject: CN=c151cf9bcf7a60063629b4aba6ae7bd9e38c387a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:96:20:a4:a5:ea:8a:f8:38:8e:f4:74:e8:87:
be:68:70:23:11:ac:ec:f9:6e:f6:d0:a5:ed:92:f6:
0b:ea:0b:4b:52:fb:f9:59:1e:44:86:e6:54:60:9c:
6e:98:83:0a:9f:58:e6:1b:e3:4c:e9:39:88:58:88:
d9:31:d5:ef:c2:7a:4e:d3:c1:1e:89:c8:90:6a:c6:
c4:79:1d:63:6b:cb:d1:e5:eb:7c:d5:41:83:b0:8c:
06:99:8d:b8:3e:ee:e8:52:f6:79:6a:44:78:1c:a2:
b3:97:92:e8:cd:aa:a4:c1:75:0f:f2:23:ea:e6:3b:
41:45:9a:0d:c2:10:93:35:ef:00:43:7a:e3:ea:4a:
1c:79:cb:64:d5:5e:68:57:de:18:11:f4:77:11:5e:
a1:83:2a:e3:64:f2:6f:3e:f7:3c:04:a7:2b:f5:38:
c6:f3:75:da:4d:6b:63:49:ed:0a:e0:42:91:b3:ce:
2c:64:01:75:d7:4a:00:5c:fd:a1:76:fe:af:ad:a7:
e9:31:37:3d:ae:58:b4:29:26:66:c5:b7:a2:74:af:
d8:22:a0:f6:b1:e9:98:8d:39:c0:9a:e9:62:dc:d3:
c8:fc:3f:54:44:a4:70:e6:08:81:04:5d:92:b5:f4:
6e:ea:38:b0:88:ec:99:a4:6a:be:bc:8a:73:1b:cb:
b9:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:51:CF:9B:CF:7A:60:06:36:29:B4:AB:A6:AE:7B:D9:E3:8C:38:7A
X509v3 Authority Key Identifier:
keyid:4C:81:27:3D:CB:03:C3:45:7B:79:25:0B:E1:09:E1:9A:5E:74:F0:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TIEnPcsDw0V7eSUL4Qnhml508P0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/18c7dd-241b-4b92-8ebf-77794fbfd2e4/1/TIEnPcsDw0V7eSUL4Qnhml508P0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/18c7dd-241b-4b92-8ebf-77794fbfd2e4/1/TIEnPcsDw0V7eSUL4Qnhml508P0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:9c:90:95:3b:a1:ed:7e:6a:37:43:db:4c:6c:37:71:94:53:
01:fd:e4:90:65:15:3f:d3:68:1d:01:cb:a1:a3:49:d3:a6:12:
94:75:c0:62:e3:dd:f8:fd:c0:da:1a:d6:42:7b:2a:f4:14:57:
60:04:4b:8f:2a:ad:a6:b2:e5:a8:da:f7:00:50:c4:a6:6b:5f:
2d:62:8b:00:e9:ba:d0:88:c4:d3:87:da:97:91:fd:28:00:9b:
e5:c2:27:2b:7d:5a:28:80:b7:02:be:d9:af:fd:ed:46:c8:b6:
da:45:9a:46:79:21:2e:14:f6:c8:4a:6b:ac:f5:73:6c:5c:98:
0c:a1:c8:ea:8a:7f:7b:fd:62:ea:54:f4:14:1d:c8:d4:42:62:
3c:15:75:84:14:04:95:5f:f0:ca:cf:9e:4c:84:7d:c5:8b:cb:
85:50:ab:42:63:17:cc:32:57:ad:18:25:f5:29:09:3b:8c:8b:
08:c5:8f:f9:68:b3:39:5c:c1:e3:fa:f4:29:c9:2c:48:b1:ac:
88:49:ee:10:a7:40:06:c4:71:03:05:0b:54:db:0e:91:f4:e2:
5f:35:8b:a6:28:04:70:a9:23:34:69:d1:1b:40:b9:60:cd:9a:
b1:0e:47:cd:09:19:62:17:0f:97:01:77:2c:38:c5:2b:54:d4:
2b:c4:47:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 00:51:04 2025 by rpki-client