Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/6eeb5c-d251-470a-a7cd-318362004e8a/1/Tm32g40DOAFB635O5V3AXYcGHck.mft
File: Tm32g40DOAFB635O5V3AXYcGHck.mft (raw, json)
Hash identifier: r9ZDIZFdFJR7Gu82uviLaW2IjNYFX1/4gG8Fn6MS6+0=
Subject key identifier: B9:D7:B6:8C:17:A2:8A:C8:38:FE:DE:78:D6:B5:82:1D:01:27:81:85
Authority key identifier: 4E:6D:F6:83:8D:03:38:01:41:EB:7E:4E:E5:5D:C0:5D:87:06:1D:C9
Certificate issuer: /CN=4e6df6838d03380141eb7e4ee55dc05d87061dc9
Certificate serial: 019A4F997A66F0A0CBF7B34B22CBEB83C39A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tm32g40DOAFB635O5V3AXYcGHck.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/6eeb5c-d251-470a-a7cd-318362004e8a/1/Tm32g40DOAFB635O5V3AXYcGHck.mft
Manifest number: 115B
Signing time: Tue 04 Nov 2025 16:00:49 +0000
Manifest this update: Tue 04 Nov 2025 16:00:49 +0000
Manifest next update: Wed 05 Nov 2025 16:00:49 +0000
Files and hashes: 1: 6zGLvq4k5vmzCBWK5uxpgKx-SpM.roa (hash: d72RjXOy3TrPnzNgu1Y/cwJXn9F8xvKoAfaZ+LW3oR4=)
2: Tm32g40DOAFB635O5V3AXYcGHck.crl (hash: o2VXOrsvxjuZoqrMRUCO+0435l6ZOFWrHrlO6zjpl7Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/6eeb5c-d251-470a-a7cd-318362004e8a/1/Tm32g40DOAFB635O5V3AXYcGHck.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/6eeb5c-d251-470a-a7cd-318362004e8a/1/Tm32g40DOAFB635O5V3AXYcGHck.mft
rsync://rpki.ripe.net/repository/DEFAULT/Tm32g40DOAFB635O5V3AXYcGHck.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:99:7a:66:f0:a0:cb:f7:b3:4b:22:cb:eb:83:c3:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e6df6838d03380141eb7e4ee55dc05d87061dc9
Validity
Not Before: Nov 4 16:00:49 2025 GMT
Not After : Nov 5 16:00:49 2025 GMT
Subject: CN=b9d7b68c17a28ac838fede78d6b5821d01278185
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:28:d0:07:a2:20:ca:89:bf:89:8a:48:87:27:
42:e2:88:d7:06:1c:ca:58:bb:3f:c0:68:90:56:06:
ea:f4:f3:94:03:b3:fe:04:92:1c:95:17:8d:ac:11:
1d:a7:e2:a2:a7:ef:fd:8c:98:ab:2d:0a:fd:59:10:
a0:65:78:62:bd:39:c2:91:87:9e:93:bc:25:e5:69:
89:d8:47:ed:70:17:23:89:18:84:6a:43:67:53:4e:
6e:bf:66:79:ef:36:b7:b6:b8:e4:f9:db:64:04:73:
d1:7f:aa:af:c9:f7:45:55:c0:56:1e:92:d2:03:75:
58:41:e9:eb:f4:72:34:cd:1d:2a:e4:cc:12:ad:ca:
ce:be:59:95:cd:7b:db:fb:52:05:c2:b1:a2:80:22:
b3:a7:65:a2:46:ae:2b:7f:91:ba:a4:47:e4:0a:52:
48:a3:cb:aa:bb:c3:69:06:3c:d8:94:03:ed:52:b9:
77:29:12:1e:98:b6:cb:5f:e8:4d:d3:0b:a3:85:7a:
d9:d5:3d:7c:7a:f6:a4:56:1a:42:3d:f4:88:58:1a:
f0:5d:0e:28:c0:59:77:b4:68:1f:e3:84:c5:07:f5:
80:f8:ae:72:38:1d:cd:ec:18:f2:63:29:63:a3:a6:
7d:2a:67:5c:94:2a:aa:db:a2:d9:60:a1:09:0e:36:
ae:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:D7:B6:8C:17:A2:8A:C8:38:FE:DE:78:D6:B5:82:1D:01:27:81:85
X509v3 Authority Key Identifier:
keyid:4E:6D:F6:83:8D:03:38:01:41:EB:7E:4E:E5:5D:C0:5D:87:06:1D:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tm32g40DOAFB635O5V3AXYcGHck.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/6eeb5c-d251-470a-a7cd-318362004e8a/1/Tm32g40DOAFB635O5V3AXYcGHck.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/6eeb5c-d251-470a-a7cd-318362004e8a/1/Tm32g40DOAFB635O5V3AXYcGHck.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:d3:44:ce:af:11:8c:87:13:cf:1c:9b:3b:7e:eb:ca:e7:68:
a4:68:56:10:62:8f:fe:db:b5:58:3b:e8:b6:53:9c:71:c5:bb:
8c:f5:c4:5e:b7:6f:ec:01:a5:b5:d2:ef:7b:07:ca:19:7d:3f:
07:8f:f6:b7:95:18:03:4f:3e:6a:91:7a:d8:a1:e3:24:ea:f1:
47:b2:cc:a7:d7:93:db:a6:65:47:90:20:c7:41:95:f4:69:47:
94:c0:b6:e7:28:70:10:01:39:58:b3:9c:91:88:40:ec:93:cc:
01:f3:de:a9:73:ca:68:19:3b:cd:1d:f2:3d:81:06:bf:bd:28:
fd:dd:6c:a3:8d:87:cc:4b:09:c9:dd:39:78:a3:83:6b:80:f9:
aa:ee:4f:4b:02:16:97:fe:e5:4c:76:d6:bb:06:6a:58:b5:13:
88:ea:14:98:29:05:d7:ce:4a:0a:e0:6a:06:fc:f9:ce:51:8c:
be:2d:62:9a:f4:4a:6c:e5:0f:67:86:51:6e:94:d5:34:9b:11:
44:d7:a8:ee:40:b8:9e:55:bc:e9:a1:b4:6a:6c:5c:92:02:08:
b7:8c:4f:cc:58:00:02:80:7d:d5:e1:67:57:fd:71:54:0c:26:
7f:04:a1:76:48:29:d6:7b:15:fb:06:52:09:45:7f:23:1a:3f:
9c:87:c5:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:28:10 2025 by rpki-client