Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/3e775d-b117-40dd-ae6a-2d502e956c04/1/TJ1sVb4b6KhK0t_Vp_-lhI9U1Ak.mft
File: TJ1sVb4b6KhK0t_Vp_-lhI9U1Ak.mft (raw, json)
Hash identifier: ZjENk3xzNjzfglAC8F79QrsncU0VQfFW9b66+9/aH6Y=
Subject key identifier: 88:C3:8E:A0:F5:94:DA:94:BE:DF:F8:50:F8:6B:37:68:1E:29:96:3A
Authority key identifier: 4C:9D:6C:55:BE:1B:E8:A8:4A:D2:DF:D5:A7:FF:A5:84:8F:54:D4:09
Certificate issuer: /CN=4c9d6c55be1be8a84ad2dfd5a7ffa5848f54d409
Certificate serial: 019A4F2B9A25B9BCC0AECE50B96FB6BF02A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TJ1sVb4b6KhK0t_Vp_-lhI9U1Ak.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/3e775d-b117-40dd-ae6a-2d502e956c04/1/TJ1sVb4b6KhK0t_Vp_-lhI9U1Ak.mft
Manifest number: 16E8
Signing time: Tue 04 Nov 2025 14:00:48 +0000
Manifest this update: Tue 04 Nov 2025 14:00:48 +0000
Manifest next update: Wed 05 Nov 2025 14:00:48 +0000
Files and hashes: 1: PHU8bveJ4V86SqIQTMnWW43DqBE.roa (hash: 3OhBnf8f8HGM5ArwPPNt9UU72cQZdAdKTbSA4Z11k2Y=)
2: TJ1sVb4b6KhK0t_Vp_-lhI9U1Ak.crl (hash: 8EMrNeE2/hgGLnNy8PObWWPD+r5qoOrSKlLmWCCiQzg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/3e775d-b117-40dd-ae6a-2d502e956c04/1/TJ1sVb4b6KhK0t_Vp_-lhI9U1Ak.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/3e775d-b117-40dd-ae6a-2d502e956c04/1/TJ1sVb4b6KhK0t_Vp_-lhI9U1Ak.mft
rsync://rpki.ripe.net/repository/DEFAULT/TJ1sVb4b6KhK0t_Vp_-lhI9U1Ak.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 14:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:2b:9a:25:b9:bc:c0:ae:ce:50:b9:6f:b6:bf:02:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c9d6c55be1be8a84ad2dfd5a7ffa5848f54d409
Validity
Not Before: Nov 4 14:00:48 2025 GMT
Not After : Nov 5 14:00:48 2025 GMT
Subject: CN=88c38ea0f594da94bedff850f86b37681e29963a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:da:af:1e:f4:71:cb:7a:86:46:89:26:67:62:
b2:4c:76:21:c5:b5:a0:7a:e1:a7:70:bd:6b:f1:26:
cb:47:f9:f5:62:0f:cc:b4:c1:4c:6d:70:a7:d9:03:
2e:d0:69:9c:e8:29:c3:3e:18:36:38:6e:58:67:5a:
e9:52:21:36:6b:9b:6d:14:26:4f:85:1b:4d:0c:56:
8a:48:c5:49:8d:3f:a2:4a:0f:4b:01:2f:18:35:f3:
8b:33:8a:f6:8a:a3:83:bb:9d:46:39:de:16:df:2e:
c5:ef:01:18:4e:75:c9:9d:a7:1a:5b:e2:04:f7:97:
43:2c:09:e3:6c:fa:b6:9f:12:46:43:bc:c1:95:07:
1b:b4:ca:ee:62:e6:61:76:9a:e0:19:3c:cf:a0:28:
81:72:52:75:62:d5:be:d7:a7:87:b2:5e:99:ec:b2:
e4:1c:0a:0e:0f:ac:1d:43:03:2f:46:99:b0:07:3d:
30:dd:68:e9:bb:7e:4a:c1:6d:21:d5:43:ac:f0:2f:
fc:a4:4c:88:f4:59:16:73:5a:40:9e:ff:86:40:5c:
2c:e3:ff:52:5a:84:f7:d2:07:f3:53:97:c8:39:79:
40:0b:b1:05:82:bf:9b:fa:98:93:33:3a:d4:83:8f:
e4:36:2e:9a:c8:1a:b5:1a:0a:f4:ef:f4:80:17:dc:
14:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:C3:8E:A0:F5:94:DA:94:BE:DF:F8:50:F8:6B:37:68:1E:29:96:3A
X509v3 Authority Key Identifier:
keyid:4C:9D:6C:55:BE:1B:E8:A8:4A:D2:DF:D5:A7:FF:A5:84:8F:54:D4:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TJ1sVb4b6KhK0t_Vp_-lhI9U1Ak.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/3e775d-b117-40dd-ae6a-2d502e956c04/1/TJ1sVb4b6KhK0t_Vp_-lhI9U1Ak.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/3e775d-b117-40dd-ae6a-2d502e956c04/1/TJ1sVb4b6KhK0t_Vp_-lhI9U1Ak.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:62:ff:3d:ec:cf:2e:aa:41:ce:11:7c:49:a8:f3:8b:11:1d:
7f:c8:b8:9f:be:9b:32:83:ad:0d:0f:fc:44:10:eb:ae:c2:78:
56:bd:58:60:5d:e9:f9:94:98:6e:9f:d2:ec:07:8d:75:2f:d6:
5d:23:a8:08:12:f7:53:6d:7e:0e:d4:52:1a:34:a4:ec:0e:29:
b0:a5:e6:e4:b2:d1:41:f2:a5:a2:5c:26:56:30:7b:d2:c5:af:
9a:6f:9f:7c:78:f6:3d:de:1e:31:28:77:4f:e5:3d:ca:ae:2c:
45:0b:79:a8:5a:7a:99:4a:ad:45:ee:57:56:8a:75:b1:d4:70:
ca:fa:23:51:f6:55:1a:4e:75:4c:73:1b:d3:77:9f:0a:4c:af:
4a:35:87:fa:a7:e0:5e:54:bd:8e:19:bf:4c:e9:16:fe:40:08:
fe:d7:7c:1b:6d:3c:41:e7:3d:33:a4:2d:0c:3f:45:2d:58:46:
a3:6b:4a:69:99:41:05:0d:cf:21:e3:e1:bc:2a:1f:d4:13:42:
bd:a5:dc:0f:6d:0f:5f:b1:a1:b1:d2:1f:37:69:1c:74:e6:71:
32:00:54:66:fd:44:6d:08:2d:f1:9c:2f:40:40:b1:f3:01:b2:
33:a3:7b:3f:a2:59:cb:5b:14:59:29:9b:53:f2:b0:df:c1:44:
3e:b1:d7:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 22:48:13 2025 by rpki-client