Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/4c1f59-0c12-4153-a15c-715f9cd63086/1/TJiLk6t6KZmjJV7q5OGKsjsuDz4.mft
File: TJiLk6t6KZmjJV7q5OGKsjsuDz4.mft (raw, json)
Hash identifier: QDvcoEUkWaoh5ldHtQ+kkO0y1A+SUmKLRBcaspmjW6o=
Subject key identifier: 4A:3F:44:84:F5:E8:01:C6:BE:D0:AB:EC:56:C2:B4:D4:4D:46:22:CE
Authority key identifier: 4C:98:8B:93:AB:7A:29:99:A3:25:5E:EA:E4:E1:8A:B2:3B:2E:0F:3E
Certificate issuer: /CN=4c988b93ab7a2999a3255eeae4e18ab23b2e0f3e
Certificate serial: 019A4EF45278A4D84D2B016D3D18A89B3F2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TJiLk6t6KZmjJV7q5OGKsjsuDz4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/4c1f59-0c12-4153-a15c-715f9cd63086/1/TJiLk6t6KZmjJV7q5OGKsjsuDz4.mft
Manifest number: 170F
Signing time: Tue 04 Nov 2025 13:00:25 +0000
Manifest this update: Tue 04 Nov 2025 13:00:25 +0000
Manifest next update: Wed 05 Nov 2025 13:00:25 +0000
Files and hashes: 1: 5XqYz3igdHBUJOarhV6UCk20p4g.roa (hash: OiTQYPv4ItBCPhGaoL4ocDwYxXkvxpj8Eo+XMn3YAwI=)
2: BWzUAYzWxehGB0sc7Hoq3s64-5A.roa (hash: Y2Cmk2o0Bi2v58k/tp8mbuKNOVbGQJJqiMnQXIqfVfA=)
3: TJiLk6t6KZmjJV7q5OGKsjsuDz4.crl (hash: fGSf1vCx7KBJl6LVYf8HJs0dQccXgvl70c/Xiu3+OWc=)
4: uJBF8l1YNTX1rQwpWIP4iAOZYes.roa (hash: W5zW790ApNcbjg521YyvqbQ8pFLrwOkcD0CU1yoVHdc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/4c1f59-0c12-4153-a15c-715f9cd63086/1/TJiLk6t6KZmjJV7q5OGKsjsuDz4.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/4c1f59-0c12-4153-a15c-715f9cd63086/1/TJiLk6t6KZmjJV7q5OGKsjsuDz4.mft
rsync://rpki.ripe.net/repository/DEFAULT/TJiLk6t6KZmjJV7q5OGKsjsuDz4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 13:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:52:78:a4:d8:4d:2b:01:6d:3d:18:a8:9b:3f:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c988b93ab7a2999a3255eeae4e18ab23b2e0f3e
Validity
Not Before: Nov 4 13:00:25 2025 GMT
Not After : Nov 5 13:00:25 2025 GMT
Subject: CN=4a3f4484f5e801c6bed0abec56c2b4d44d4622ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:61:ac:d7:06:28:70:a6:81:f6:b5:7b:ea:2f:
c6:c4:d0:31:24:8b:21:61:24:f6:5b:5b:17:37:86:
16:b6:97:7b:8f:74:28:76:dd:d0:5b:af:9d:49:e7:
0c:08:e3:5a:42:05:26:48:b5:5e:8e:24:1d:0b:9a:
49:ef:15:d1:4e:de:fd:04:ba:80:fd:af:68:ee:11:
b3:bd:22:bd:fa:aa:4a:1a:6e:d8:d8:3f:c8:5f:be:
4a:61:09:ed:70:d2:f8:27:eb:7b:53:07:6d:16:e7:
df:60:e0:e5:14:73:46:c2:d1:e1:d4:94:e0:0a:97:
dc:03:16:ba:b6:70:13:db:f1:9e:0d:35:c3:8e:d6:
21:58:b1:c3:2a:d4:a8:0d:99:ec:d5:1e:f9:55:e1:
88:b7:41:ce:3b:c0:e4:20:ac:53:74:87:ff:8c:d3:
3c:5d:a0:e6:59:d1:94:f4:a5:5d:90:58:23:af:9c:
7a:ed:4c:5d:1d:a1:25:75:e7:a7:e7:ea:dc:6b:31:
61:46:52:45:3f:e1:09:70:56:e5:af:dc:eb:87:00:
40:22:16:6f:dc:85:91:13:e1:89:1e:18:3d:cb:b4:
c4:98:8c:53:d4:a1:60:fc:c3:2f:61:66:92:5a:ca:
f2:05:02:cf:52:a7:ea:c1:30:de:74:88:de:f1:c7:
02:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:3F:44:84:F5:E8:01:C6:BE:D0:AB:EC:56:C2:B4:D4:4D:46:22:CE
X509v3 Authority Key Identifier:
keyid:4C:98:8B:93:AB:7A:29:99:A3:25:5E:EA:E4:E1:8A:B2:3B:2E:0F:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TJiLk6t6KZmjJV7q5OGKsjsuDz4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/4c1f59-0c12-4153-a15c-715f9cd63086/1/TJiLk6t6KZmjJV7q5OGKsjsuDz4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/4c1f59-0c12-4153-a15c-715f9cd63086/1/TJiLk6t6KZmjJV7q5OGKsjsuDz4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:29:3b:4c:7a:ad:80:a2:66:7b:c8:19:18:18:5e:1c:07:53:
31:7d:6d:7b:2d:62:e4:0e:19:de:3c:0e:43:c1:35:dc:54:ba:
f8:85:84:1b:04:cd:6a:53:25:34:7a:ee:97:93:50:15:ba:85:
94:57:63:72:77:3b:8d:0b:7b:d7:ca:bd:1d:fa:f4:5b:89:d1:
2e:d0:ed:8c:5e:d9:30:8f:4c:d6:7c:3c:ac:db:6a:bf:20:40:
65:57:eb:a5:ba:b8:3c:a3:fd:4f:26:e5:f2:13:0c:62:ab:2a:
10:04:ec:fe:5a:5c:35:19:0a:98:59:65:69:02:0e:14:f4:d6:
eb:b3:3e:cb:09:5d:b8:71:4b:8c:a0:b9:de:84:b8:11:ea:da:
bf:39:54:21:c7:d4:ce:81:66:e6:9b:3a:bd:76:a3:c6:ea:62:
c1:0b:ab:a8:9e:2f:b5:41:d3:ce:c5:0d:fa:1d:ad:96:4b:85:
e4:26:6a:63:da:f2:57:18:97:42:84:6e:1c:95:64:45:04:1a:
65:89:10:e5:d1:bf:11:c4:03:c8:dc:d0:c3:51:a9:9e:d9:17:
12:47:15:c2:b6:b9:aa:1d:bb:d4:b9:0c:ba:13:1b:3a:59:3e:
86:d4:7b:91:ad:11:27:bd:6d:66:54:ca:8c:e5:39:17:cb:93:
1a:be:34:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 22:16:37 2025 by rpki-client