Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/c3a85d-9d0b-4562-9238-46ee0cd7fcba/1/TsoQXOSvbCHNQp6ZLQbqfQbYpW0.mft
File: TsoQXOSvbCHNQp6ZLQbqfQbYpW0.mft (raw, json)
Hash identifier: uWTSkgyRFgq1ioJTn71QoWDdIlUQyrax9tMM0lPzg34=
Subject key identifier: 15:82:F5:0D:74:3D:4A:53:D3:E7:59:50:0B:9F:82:D8:66:5C:0B:C7
Authority key identifier: 4E:CA:10:5C:E4:AF:6C:21:CD:42:9E:99:2D:06:EA:7D:06:D8:A5:6D
Certificate issuer: /CN=4eca105ce4af6c21cd429e992d06ea7d06d8a56d
Certificate serial: 019A4EBD4584EFC64C5B559C868008E07513
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TsoQXOSvbCHNQp6ZLQbqfQbYpW0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/c3a85d-9d0b-4562-9238-46ee0cd7fcba/1/TsoQXOSvbCHNQp6ZLQbqfQbYpW0.mft
Manifest number: 1710
Signing time: Tue 04 Nov 2025 12:00:17 +0000
Manifest this update: Tue 04 Nov 2025 12:00:17 +0000
Manifest next update: Wed 05 Nov 2025 12:00:17 +0000
Files and hashes: 1: AuQnPlvYaXKRlM4K_qYnSQH8XhU.roa (hash: qvJ/L4CGhxXYThfrwcSRz9uge4t0blzZ120bzRELDv8=)
2: F7DtnHMe2aPaEVwgJdRXETJ3B3E.roa (hash: MXWzMDDGEU1JVdMLECcVtcWDfSvCJBYg9H2NNF7s8es=)
3: NT96ZXytZXeLYG8nYXbccb_AzMM.roa (hash: jF7i9U0X2AT56VYqylel02ci97XBnH5+7EoAI42ntOM=)
4: TsoQXOSvbCHNQp6ZLQbqfQbYpW0.crl (hash: Co/B8I1T9e0Ynhgm1WrUt15TlxX9qOgDlTbadTD3iG8=)
5: dZ8FONS7KKnXtPOWC1aUQDIHQr4.roa (hash: eYi/BgNAuN/BBQLuz4zrndBhjJKwJ84q4OAoqSVG8XI=)
6: kw0uZTx7n5NT55NNgp7YJmoV9Go.roa (hash: 8XlRvDMZFDhRr5qjjN+VGMeejBbNLMwpbYD6/C4LFwY=)
7: mLDvK3-bwZrItlCvgdik3bR3f2M.roa (hash: YyM0oKefpsy5Jzp3sMVhcN2qGFNdHn75iID1HMnlHcs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/c3a85d-9d0b-4562-9238-46ee0cd7fcba/1/TsoQXOSvbCHNQp6ZLQbqfQbYpW0.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/c3a85d-9d0b-4562-9238-46ee0cd7fcba/1/TsoQXOSvbCHNQp6ZLQbqfQbYpW0.mft
rsync://rpki.ripe.net/repository/DEFAULT/TsoQXOSvbCHNQp6ZLQbqfQbYpW0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:bd:45:84:ef:c6:4c:5b:55:9c:86:80:08:e0:75:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4eca105ce4af6c21cd429e992d06ea7d06d8a56d
Validity
Not Before: Nov 4 12:00:17 2025 GMT
Not After : Nov 5 12:00:17 2025 GMT
Subject: CN=1582f50d743d4a53d3e759500b9f82d8665c0bc7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:41:ea:18:e1:3e:7f:05:32:72:62:e7:56:6c:
09:66:28:e5:0a:87:04:91:90:1b:b0:4f:8b:87:44:
27:b7:d2:fa:2d:10:db:f2:94:ca:63:a0:72:4e:82:
31:6f:c5:f3:f1:5c:10:75:2d:66:a7:2d:00:48:5b:
c4:f3:99:38:90:52:5d:70:81:33:b2:5b:81:ef:13:
52:83:54:e2:c5:cb:d5:2c:dc:8d:ef:f1:31:bb:76:
8e:9d:1c:6a:1d:3e:44:98:22:7c:29:b4:b8:5c:e0:
43:1e:df:51:c4:bc:3e:47:3f:d0:21:d2:be:05:22:
af:20:c9:d3:b1:2f:34:13:31:ac:34:07:71:25:d7:
b5:0c:b3:1b:fe:1a:dd:e3:fd:be:35:02:aa:35:12:
26:79:5d:f8:ab:d2:ab:6e:bc:ca:7c:68:52:9f:da:
06:2f:b2:dc:eb:cb:b8:e4:fa:12:5b:4f:d2:c1:8e:
f0:ae:39:fe:e8:92:64:31:9c:a9:e9:38:8d:11:48:
51:c8:85:05:dc:07:c4:44:25:59:d6:b8:d3:e4:80:
26:14:7a:36:83:2a:80:8f:0c:31:5f:6c:db:50:c5:
2a:42:a2:31:b2:d8:38:d4:b5:5d:8b:1e:cf:68:c9:
49:91:33:a9:d2:1d:9a:c5:61:c0:df:a9:13:6b:c9:
8e:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:82:F5:0D:74:3D:4A:53:D3:E7:59:50:0B:9F:82:D8:66:5C:0B:C7
X509v3 Authority Key Identifier:
keyid:4E:CA:10:5C:E4:AF:6C:21:CD:42:9E:99:2D:06:EA:7D:06:D8:A5:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TsoQXOSvbCHNQp6ZLQbqfQbYpW0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/c3a85d-9d0b-4562-9238-46ee0cd7fcba/1/TsoQXOSvbCHNQp6ZLQbqfQbYpW0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/c3a85d-9d0b-4562-9238-46ee0cd7fcba/1/TsoQXOSvbCHNQp6ZLQbqfQbYpW0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:c6:08:0d:79:10:b9:5b:ea:7b:17:7f:14:1c:38:29:f0:c2:
ed:f6:01:87:59:ac:78:36:fa:a0:ec:46:88:a1:ee:b5:67:e2:
38:2a:88:fc:2d:17:2e:16:6b:c1:f6:aa:39:2b:5f:a3:90:77:
d9:35:de:5c:01:dd:87:5a:77:12:2d:16:41:db:d8:85:c0:44:
4f:9a:5b:62:cb:94:ee:59:57:a7:4e:58:76:14:44:cc:17:89:
eb:83:f9:c0:d8:ca:65:18:21:9c:85:56:53:fd:72:bd:a0:42:
97:17:0c:04:47:7c:c6:28:01:19:d2:cb:5a:c0:4a:37:1f:ec:
f6:22:3c:14:65:47:b7:dc:8b:26:d2:5d:7a:5b:89:0e:18:9d:
9f:38:f4:3c:94:51:cd:8c:fd:4a:02:3d:b9:01:38:01:93:67:
89:3e:9e:5b:15:bc:09:07:b1:34:91:01:86:3b:c0:12:58:44:
65:7c:4e:d3:89:8a:5f:ca:47:54:81:5d:c2:4a:42:3e:cd:a5:
51:87:db:44:32:55:61:d5:c5:eb:0f:56:4f:45:ca:c9:19:b7:
de:05:90:65:71:86:81:7f:27:83:61:70:a4:d3:4d:10:a1:51:
fb:06:45:bc:7f:5a:27:b3:10:7e:3d:33:79:f3:f4:85:de:85:
cc:91:9a:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:28:21 2025 by rpki-client