Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/4f943f-d16a-48da-b93a-1487c6020c46/1/Tj_pDw-taiXUa9fDNbki2gMbLHg.mft
File: Tj_pDw-taiXUa9fDNbki2gMbLHg.mft (raw, json)
Hash identifier: 4Dwy0HwkcgmhpjV8G3r6wWZ9Ierkd3CPNZDLUS2pAik=
Subject key identifier: 8F:CB:5A:0E:36:4A:D2:60:50:09:6B:6C:D5:7C:DC:E4:9F:AD:EE:5E
Authority key identifier: 4E:3F:E9:0F:0F:AD:6A:25:D4:6B:D7:C3:35:B9:22:DA:03:1B:2C:78
Certificate issuer: /CN=4e3fe90f0fad6a25d46bd7c335b922da031b2c78
Certificate serial: 019A5119EFD5CE494B084EDA1D7DDCC6535A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tj_pDw-taiXUa9fDNbki2gMbLHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/4f943f-d16a-48da-b93a-1487c6020c46/1/Tj_pDw-taiXUa9fDNbki2gMbLHg.mft
Manifest number: 0BB6
Signing time: Tue 04 Nov 2025 23:00:45 +0000
Manifest this update: Tue 04 Nov 2025 23:00:45 +0000
Manifest next update: Wed 05 Nov 2025 23:00:45 +0000
Files and hashes: 1: A8YDmTBK0K140SrVGjKT4rgJaBs.roa (hash: dZ2I5la+5OGaL56JsGr6ibfQkik4DvtIbwTHLacKDFU=)
2: Tj_pDw-taiXUa9fDNbki2gMbLHg.crl (hash: HkI7khxdd0chO4lP6I+aWtkRtX0z8gzTHGwXHKVDQgM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/4f943f-d16a-48da-b93a-1487c6020c46/1/Tj_pDw-taiXUa9fDNbki2gMbLHg.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/4f943f-d16a-48da-b93a-1487c6020c46/1/Tj_pDw-taiXUa9fDNbki2gMbLHg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Tj_pDw-taiXUa9fDNbki2gMbLHg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:19:ef:d5:ce:49:4b:08:4e:da:1d:7d:dc:c6:53:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e3fe90f0fad6a25d46bd7c335b922da031b2c78
Validity
Not Before: Nov 4 23:00:45 2025 GMT
Not After : Nov 5 23:00:45 2025 GMT
Subject: CN=8fcb5a0e364ad26050096b6cd57cdce49fadee5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:43:0c:a6:88:bf:5a:b8:b0:57:3d:29:1f:2f:
7d:64:69:b8:d0:37:e4:35:e3:f3:af:9b:f5:aa:3e:
86:73:33:98:9a:a4:f9:cc:30:1d:a4:61:75:cb:4e:
fc:77:53:36:e0:1a:fc:af:b4:33:be:aa:f8:bd:cf:
39:1a:11:ac:af:2f:29:5d:ff:aa:5c:08:a1:37:89:
e6:d9:6c:f5:6e:55:01:44:14:31:7e:aa:e5:d5:a2:
34:90:28:fd:93:3b:b9:7f:58:a3:fb:5a:d5:43:90:
14:99:39:1c:f4:c0:79:25:db:5f:ea:4a:d9:7c:0a:
d7:0b:9d:04:0c:64:cb:7f:72:0c:61:36:53:89:90:
13:83:12:97:55:19:41:a5:bd:2c:4e:1b:56:4e:06:
20:d0:70:f5:31:db:10:eb:b1:5b:d1:dc:06:0e:ae:
03:7c:00:42:8d:fb:1f:64:ef:18:28:57:1b:11:94:
c1:15:d9:31:b9:38:18:90:08:8b:b3:ae:b1:7e:c4:
fd:b9:92:73:52:54:6e:d7:71:2f:32:25:b1:33:85:
9a:82:38:ef:76:46:aa:30:3d:72:35:3b:54:a3:54:
cf:4d:a3:b5:04:7e:85:46:5a:4e:02:00:94:a5:f8:
de:09:4b:8b:f0:be:48:29:16:f9:89:a6:20:4f:f9:
58:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:CB:5A:0E:36:4A:D2:60:50:09:6B:6C:D5:7C:DC:E4:9F:AD:EE:5E
X509v3 Authority Key Identifier:
keyid:4E:3F:E9:0F:0F:AD:6A:25:D4:6B:D7:C3:35:B9:22:DA:03:1B:2C:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tj_pDw-taiXUa9fDNbki2gMbLHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/4f943f-d16a-48da-b93a-1487c6020c46/1/Tj_pDw-taiXUa9fDNbki2gMbLHg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/4f943f-d16a-48da-b93a-1487c6020c46/1/Tj_pDw-taiXUa9fDNbki2gMbLHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:74:55:82:0f:7c:9f:76:f0:56:76:55:5e:a4:3a:e1:43:30:
9e:37:82:90:4f:97:a2:47:0f:1c:72:39:d7:7b:d2:f5:7f:41:
b7:89:e8:b5:e2:83:37:ef:bb:0e:f4:b8:75:c3:6d:f7:d9:27:
95:21:28:b2:5e:59:af:1a:c1:a8:27:77:1a:dd:9a:9f:8f:99:
fa:23:32:a6:24:9a:c7:c2:7b:cc:7f:98:71:b3:50:f2:3d:c5:
a7:cd:b9:fa:a5:e5:61:75:be:ef:09:a7:03:61:10:ce:d5:15:
dc:f5:5e:48:f0:26:71:66:dd:c5:cc:8d:b0:af:ab:b0:43:e3:
e9:c0:3d:79:2d:d3:39:cb:06:cb:31:f9:d3:01:87:50:70:f7:
15:74:cd:42:16:d1:6d:52:41:54:13:6d:ab:0e:bd:ed:33:c3:
09:83:8d:8b:ba:5f:1b:6c:d3:c6:3b:03:54:07:80:00:f3:48:
98:b5:9a:41:ad:af:75:c0:a9:09:ea:78:d1:c7:cd:b2:ed:5e:
93:42:96:9c:c0:48:d9:01:aa:93:5d:7e:c4:a7:28:37:7f:8c:
5d:0e:3c:b1:c0:5a:9b:14:e2:b1:bb:3e:61:b4:7b:25:73:0a:
30:5c:62:31:e7:aa:aa:43:40:dd:51:88:0f:e3:17:fd:53:3f:
76:41:62:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 03:34:48 2025 by rpki-client