Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/8e1198-e50f-416f-9d6b-1e9bff5e4021/1/TfCXBITrJrxZ_Y-o1b98PHIS0BE.mft
File: TfCXBITrJrxZ_Y-o1b98PHIS0BE.mft (raw, json)
Hash identifier: k0q/Im3HK2Rdl1o9/ncQuz1Vl0hHfYXSqeB2Tgk80Hg=
Subject key identifier: 37:FC:FD:8A:0D:FA:13:37:BC:D2:7D:DB:F5:10:2F:35:E9:22:71:5A
Authority key identifier: 4D:F0:97:04:84:EB:26:BC:59:FD:8F:A8:D5:BF:7C:3C:72:12:D0:11
Certificate issuer: /CN=4df0970484eb26bc59fd8fa8d5bf7c3c7212d011
Certificate serial: 019A52D1A9B040D0F15434460CF689C3C222
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TfCXBITrJrxZ_Y-o1b98PHIS0BE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/8e1198-e50f-416f-9d6b-1e9bff5e4021/1/TfCXBITrJrxZ_Y-o1b98PHIS0BE.mft
Manifest number: 0CB0
Signing time: Wed 05 Nov 2025 07:01:03 +0000
Manifest this update: Wed 05 Nov 2025 07:01:03 +0000
Manifest next update: Thu 06 Nov 2025 07:01:03 +0000
Files and hashes: 1: 2uYjtWwrEGy8RjTZ7XkVPtKNY1o.roa (hash: Q+J34jzVVf5yX7UskA0nUE436owKoCvouyp2C9nIn84=)
2: 8bYh9KTQNyhUoZK5Xa3Zu-_BqQk.roa (hash: Ckdj62IcP39fMv9cL87VgjiYlT1GoMjuC5C5dI+N2jA=)
3: TfCXBITrJrxZ_Y-o1b98PHIS0BE.crl (hash: P5lPXuz3Zb8HsQGXg7qsxttkYXDhlz0dK2v0oXySebA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/8e1198-e50f-416f-9d6b-1e9bff5e4021/1/TfCXBITrJrxZ_Y-o1b98PHIS0BE.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/8e1198-e50f-416f-9d6b-1e9bff5e4021/1/TfCXBITrJrxZ_Y-o1b98PHIS0BE.mft
rsync://rpki.ripe.net/repository/DEFAULT/TfCXBITrJrxZ_Y-o1b98PHIS0BE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:d1:a9:b0:40:d0:f1:54:34:46:0c:f6:89:c3:c2:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4df0970484eb26bc59fd8fa8d5bf7c3c7212d011
Validity
Not Before: Nov 5 07:01:03 2025 GMT
Not After : Nov 6 07:01:03 2025 GMT
Subject: CN=37fcfd8a0dfa1337bcd27ddbf5102f35e922715a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:ed:5a:15:27:cb:21:9a:b5:19:f2:1b:1f:28:
cb:cc:37:af:38:89:5a:d7:f7:68:62:9c:3a:89:3c:
2f:2d:51:1b:7f:99:1f:f0:d9:2b:d1:84:7b:e4:02:
4e:29:14:9d:07:f8:b7:57:55:6c:72:ca:b3:15:a7:
be:35:97:36:05:49:3a:75:7f:b1:83:7f:33:2a:90:
64:39:d8:0f:9c:0d:4b:08:f2:69:08:5f:e7:a3:90:
1a:2a:73:f9:f0:80:dd:ab:66:15:ea:95:aa:1f:a9:
30:3f:cc:f0:66:a8:4e:c8:2d:25:61:76:84:19:c3:
2d:85:ef:7a:81:c9:7d:a9:8d:69:d0:97:d8:10:55:
82:14:74:06:12:4f:76:af:f5:79:49:57:9c:a0:c0:
6c:81:18:f1:4b:92:9a:88:2c:5e:09:bc:3c:51:39:
fa:79:68:f8:a4:5b:49:c7:71:fb:87:7d:82:fe:9a:
e2:6d:d6:58:a5:f7:0c:b3:c6:68:6f:b8:3e:48:a2:
c9:e3:0a:bd:ef:92:4a:ea:8f:3f:ce:ed:8f:e4:14:
e6:40:c1:dc:9b:1f:c2:ee:85:88:4f:87:33:8a:27:
1a:d8:4a:77:8f:18:f6:51:c5:e8:eb:f3:09:ed:fa:
a2:52:56:53:bf:95:9a:52:3a:8e:18:ef:fc:23:18:
de:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:FC:FD:8A:0D:FA:13:37:BC:D2:7D:DB:F5:10:2F:35:E9:22:71:5A
X509v3 Authority Key Identifier:
keyid:4D:F0:97:04:84:EB:26:BC:59:FD:8F:A8:D5:BF:7C:3C:72:12:D0:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TfCXBITrJrxZ_Y-o1b98PHIS0BE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/8e1198-e50f-416f-9d6b-1e9bff5e4021/1/TfCXBITrJrxZ_Y-o1b98PHIS0BE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/8e1198-e50f-416f-9d6b-1e9bff5e4021/1/TfCXBITrJrxZ_Y-o1b98PHIS0BE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:1b:1c:30:0d:50:f1:24:1b:d2:c8:2b:15:56:ba:e3:37:48:
4c:1d:c5:87:32:1d:9c:e6:02:e5:09:b7:b1:04:64:06:75:60:
27:63:e3:ac:4b:8f:12:52:5c:a6:d6:0f:10:f7:cb:d6:2f:36:
9e:b2:77:ce:27:9e:26:23:1b:2c:00:65:e6:c5:d4:d2:22:0e:
8f:9b:2d:52:1f:3d:bc:53:71:e3:4a:51:b2:e8:16:88:95:4a:
94:bb:b2:bb:63:46:1b:6f:31:34:65:20:16:3b:49:fa:38:a8:
67:9d:56:13:41:a2:51:e3:01:d3:d2:ad:3c:cd:76:74:98:a0:
fb:ec:c0:75:61:b6:ef:68:0c:bc:a5:14:eb:81:53:2b:6b:08:
ad:21:b2:5f:c6:a9:99:6f:8a:5a:ab:74:b5:35:19:e2:da:3f:
75:a1:24:4f:a0:8a:15:ac:38:b4:5b:23:8f:f0:e4:a4:61:9d:
44:06:78:56:cb:7f:56:89:b5:27:6c:f2:08:35:6f:68:03:27:
d9:98:29:05:0e:30:f0:98:d2:f0:cb:b2:bd:8f:15:06:91:13:
d1:c5:fa:05:14:7f:33:5a:f7:06:73:73:9a:88:0a:ef:8e:3d:
ab:67:66:9f:f0:19:1f:7a:96:61:4f:d4:c0:63:13:03:64:40:
14:e3:23:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 10:40:41 2025 by rpki-client