Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/0196f1-4339-4bdc-8034-2eb2f2ed3029/1/_TSxP72Tgd-Exofwa80HTkp1WAM.mft
File: _TSxP72Tgd-Exofwa80HTkp1WAM.mft (raw, json)
Hash identifier: Wnzt4bvqy2zybkPQ3xkQt0UcHL5fKt3PyWEii5cxDVQ=
Subject key identifier: 2C:D9:92:52:62:6A:15:EE:9E:36:6C:E7:33:4C:8E:66:A2:A7:32:14
Authority key identifier: FD:34:B1:3F:BD:93:81:DF:84:C6:87:F0:6B:CD:07:4E:4A:75:58:03
Certificate issuer: /CN=fd34b13fbd9381df84c687f06bcd074e4a755803
Certificate serial: 019A50E2D478C574F6E434989FB3803890B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_TSxP72Tgd-Exofwa80HTkp1WAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/0196f1-4339-4bdc-8034-2eb2f2ed3029/1/_TSxP72Tgd-Exofwa80HTkp1WAM.mft
Manifest number: 170C
Signing time: Tue 04 Nov 2025 22:00:33 +0000
Manifest this update: Tue 04 Nov 2025 22:00:33 +0000
Manifest next update: Wed 05 Nov 2025 22:00:33 +0000
Files and hashes: 1: 0BpZrCwCrh0nhCnBWsTx8npHw5Y.roa (hash: dghoAHC17Ez/jlFwmLW4wwi4h/yLfo/iz9cDa/mgf8U=)
2: _TSxP72Tgd-Exofwa80HTkp1WAM.crl (hash: UYzGFJSX8cuNBOwkzjV5Q0g3Al417Yv+LK/2q9Gfq9I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/0196f1-4339-4bdc-8034-2eb2f2ed3029/1/_TSxP72Tgd-Exofwa80HTkp1WAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/0196f1-4339-4bdc-8034-2eb2f2ed3029/1/_TSxP72Tgd-Exofwa80HTkp1WAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/_TSxP72Tgd-Exofwa80HTkp1WAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:e2:d4:78:c5:74:f6:e4:34:98:9f:b3:80:38:90:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd34b13fbd9381df84c687f06bcd074e4a755803
Validity
Not Before: Nov 4 22:00:33 2025 GMT
Not After : Nov 5 22:00:33 2025 GMT
Subject: CN=2cd99252626a15ee9e366ce7334c8e66a2a73214
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:06:3e:15:e0:38:9b:9b:e4:d7:42:98:40:8d:
64:33:08:66:e0:29:06:e8:7c:b7:15:67:f6:cc:b3:
58:83:57:08:bc:f2:79:29:38:8f:8b:91:c3:99:e5:
6b:0d:5f:ec:56:bd:c6:eb:9f:05:11:e9:30:0b:b2:
48:97:84:7a:08:81:c2:50:c6:50:9a:4d:da:32:79:
1c:51:a8:9a:55:b9:3b:7c:c0:ba:eb:ec:17:c1:2c:
f5:08:65:88:c4:1f:5d:38:2b:81:ff:a5:c2:80:44:
e3:8b:2f:4b:6c:b8:c2:78:64:97:2e:36:dd:f4:1f:
95:b2:7a:d8:f0:5e:62:59:72:8b:ad:23:b1:5f:e3:
b7:95:9d:67:eb:35:78:de:6a:c1:e3:2c:b2:23:21:
b7:96:a2:3f:b6:e0:45:f6:c3:d6:c1:9f:2f:c6:ea:
4f:ef:3c:13:d4:74:e9:2d:ea:51:32:c2:fe:66:75:
47:d0:32:ae:af:ad:a8:6d:e2:71:88:3b:49:66:df:
53:27:f7:77:55:ef:fd:b3:62:8b:88:aa:65:9f:d9:
50:53:17:b5:98:e0:11:b7:4e:d3:13:ec:1a:b8:bd:
96:5e:2f:16:f7:4f:3b:8f:2f:9e:c4:81:2f:4d:4a:
dc:cb:b2:06:8e:6f:63:a1:9f:ef:66:03:89:30:78:
86:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:D9:92:52:62:6A:15:EE:9E:36:6C:E7:33:4C:8E:66:A2:A7:32:14
X509v3 Authority Key Identifier:
keyid:FD:34:B1:3F:BD:93:81:DF:84:C6:87:F0:6B:CD:07:4E:4A:75:58:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_TSxP72Tgd-Exofwa80HTkp1WAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/0196f1-4339-4bdc-8034-2eb2f2ed3029/1/_TSxP72Tgd-Exofwa80HTkp1WAM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/0196f1-4339-4bdc-8034-2eb2f2ed3029/1/_TSxP72Tgd-Exofwa80HTkp1WAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:63:eb:2e:0b:4c:d3:6c:b7:61:88:23:4e:2b:5e:5f:7a:19:
e9:de:c1:80:a7:a2:5d:ae:e5:1c:c5:95:83:22:86:93:63:a6:
7b:c3:d5:ad:0a:da:15:42:d7:1c:9f:cb:b7:76:e9:2a:c0:92:
b0:37:95:8f:2b:d7:21:db:6b:b0:d4:78:ca:ce:c6:e0:5b:40:
aa:1a:a2:12:5a:b6:3f:99:cd:14:bd:f0:de:6a:61:20:e0:40:
8a:bc:ee:44:88:a1:d7:4a:d7:72:b4:78:3f:fd:92:83:6a:ff:
63:cd:02:00:4c:5c:8e:d9:9a:f2:a0:2c:99:d5:88:43:7a:e5:
e2:b2:eb:c2:bf:01:19:80:f9:c6:5c:cd:40:60:99:a5:14:fc:
6f:4a:f0:df:7f:6e:20:cd:09:30:db:ad:81:cd:24:d3:b0:79:
c4:29:e1:c3:14:6f:ac:2d:74:f5:ab:e8:81:d8:29:04:93:f3:
64:42:62:45:71:5c:f6:3f:e0:e2:4c:87:e3:1d:4a:f7:e1:47:
a5:fb:e2:12:be:b4:01:bb:ef:1f:10:af:40:24:5b:37:e1:b7:
5f:dd:82:2f:eb:a8:14:07:bb:94:db:17:a0:b4:2a:8f:b5:2f:
12:6d:de:db:53:d8:10:15:89:48:de:a7:76:91:28:da:0d:30:
54:f3:58:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 08:26:46 2025 by rpki-client