Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/ce876c-2c02-4775-8095-78d4a64d22d9/1/Ti0g8t5NV-G8ZFy2KH_4END1pL8.mft
File: Ti0g8t5NV-G8ZFy2KH_4END1pL8.mft (raw, json)
Hash identifier: FnmtSIV6NWuisOXrkMc4CGgez482rzBuniWTH3/ledY=
Subject key identifier: 83:1B:32:6B:8A:1C:D7:AD:9B:40:79:FD:A6:22:E1:C8:8B:7F:DE:E6
Authority key identifier: 4E:2D:20:F2:DE:4D:57:E1:BC:64:5C:B6:28:7F:F8:10:D0:F5:A4:BF
Certificate issuer: /CN=4e2d20f2de4d57e1bc645cb6287ff810d0f5a4bf
Certificate serial: 019A51BE901349AEADE9545BB3F95F65F5F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ti0g8t5NV-G8ZFy2KH_4END1pL8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/ce876c-2c02-4775-8095-78d4a64d22d9/1/Ti0g8t5NV-G8ZFy2KH_4END1pL8.mft
Manifest number: 05C1
Signing time: Wed 05 Nov 2025 02:00:34 +0000
Manifest this update: Wed 05 Nov 2025 02:00:34 +0000
Manifest next update: Thu 06 Nov 2025 02:00:34 +0000
Files and hashes: 1: Ti0g8t5NV-G8ZFy2KH_4END1pL8.crl (hash: 0CVnY7dpDZwXByqioxkfm9ewUdGicCVi2ANqh+bK8yw=)
2: Zx7o0NJ7lPcPWusoEu-hir0u3sI.roa (hash: RaHzV4CwJ05D0LodvMcl63WAfLK7uU2RzT47rVSSlwM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/ce876c-2c02-4775-8095-78d4a64d22d9/1/Ti0g8t5NV-G8ZFy2KH_4END1pL8.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/ce876c-2c02-4775-8095-78d4a64d22d9/1/Ti0g8t5NV-G8ZFy2KH_4END1pL8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ti0g8t5NV-G8ZFy2KH_4END1pL8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 02:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:be:90:13:49:ae:ad:e9:54:5b:b3:f9:5f:65:f5:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e2d20f2de4d57e1bc645cb6287ff810d0f5a4bf
Validity
Not Before: Nov 5 02:00:34 2025 GMT
Not After : Nov 6 02:00:34 2025 GMT
Subject: CN=831b326b8a1cd7ad9b4079fda622e1c88b7fdee6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:71:16:c4:43:7b:5b:ba:09:19:9b:ee:07:b5:
58:92:ac:11:d0:c9:78:ed:65:e1:13:bb:43:fa:cc:
fc:20:56:10:81:fb:27:a7:1f:4f:2e:c1:74:24:e6:
e1:67:7a:be:54:7a:c5:68:33:f3:9b:23:5e:ea:87:
81:b5:31:26:ab:0e:a2:40:47:38:e2:3c:7d:c3:bb:
9e:95:cc:98:b8:61:3a:71:32:21:d8:6c:11:c1:b0:
69:d1:6d:cd:f8:21:d5:3a:d7:e7:cc:ee:36:16:ac:
3f:d0:44:87:98:49:e6:43:fe:81:dd:f4:ea:66:99:
56:92:89:47:de:98:40:d2:52:64:5f:b0:c3:38:82:
0c:59:17:c8:94:c7:75:eb:d8:94:5a:7c:9d:05:da:
13:12:75:25:e4:08:67:20:58:46:b5:09:1d:d3:1b:
fd:f4:13:91:44:f6:4e:d1:2d:42:05:e9:48:47:5c:
8c:4c:2c:2f:b1:8e:62:40:86:95:68:b4:24:58:73:
67:c3:2b:9c:71:0a:b1:76:35:51:8c:6d:33:d7:d0:
c5:60:f1:05:02:fa:cd:4b:2d:63:f3:e7:69:6f:43:
ea:4a:92:a1:bd:c4:8d:a6:92:e7:ae:41:b0:02:59:
27:fd:81:09:7c:db:bb:25:b3:17:83:53:f3:f2:e7:
07:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:1B:32:6B:8A:1C:D7:AD:9B:40:79:FD:A6:22:E1:C8:8B:7F:DE:E6
X509v3 Authority Key Identifier:
keyid:4E:2D:20:F2:DE:4D:57:E1:BC:64:5C:B6:28:7F:F8:10:D0:F5:A4:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ti0g8t5NV-G8ZFy2KH_4END1pL8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/ce876c-2c02-4775-8095-78d4a64d22d9/1/Ti0g8t5NV-G8ZFy2KH_4END1pL8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/ce876c-2c02-4775-8095-78d4a64d22d9/1/Ti0g8t5NV-G8ZFy2KH_4END1pL8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:1c:21:be:86:77:4e:8d:59:25:31:ae:a1:b4:a3:9a:ce:29:
24:fc:d0:13:ad:6c:31:05:c5:82:fa:bb:b0:20:37:1b:1d:7a:
dd:48:f9:04:9a:69:ef:c5:a1:e9:c6:30:c6:95:e9:ae:6e:f5:
9e:84:56:3f:1b:f1:7a:37:d6:44:93:f5:97:c6:6a:fb:5f:5e:
90:de:e2:29:3b:7a:d7:ce:10:10:64:56:de:52:ba:b6:c5:8b:
21:03:dc:22:3b:77:8c:13:ad:0f:1a:29:9f:e8:99:97:6e:0c:
59:a6:a4:2b:de:4a:52:b1:ce:ac:5f:74:77:ac:9e:2d:4b:89:
46:3b:3e:de:46:f2:7b:04:51:01:b6:91:d6:fb:45:ed:ae:a6:
e2:14:93:2f:16:c5:98:13:51:cf:e8:ee:78:f9:99:e2:3c:90:
8a:08:64:32:27:1a:ce:06:cd:4b:6f:c9:ec:ef:1b:65:b2:07:
0b:72:d8:dd:66:80:14:23:b1:ec:61:62:07:d7:c1:7c:a9:ed:
40:2a:73:06:60:5a:64:21:12:f6:93:49:b9:a5:28:43:4a:a1:
29:6a:fe:60:bf:07:97:09:d8:53:d9:ba:2a:fb:a7:cc:fe:76:
98:0c:8f:df:27:29:26:2f:2e:d2:88:82:5f:89:91:cd:12:f9:
e0:58:ae:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 09:55:49 2025 by rpki-client