Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/cb8339-cee3-4037-bacc-dc8b52e3ea0a/1/TV8MsGpaR7TdrH9Nbf1Eq6TTHy4.mft
File: TV8MsGpaR7TdrH9Nbf1Eq6TTHy4.mft (raw, json)
Hash identifier: 9C5fdqE+J33YcQoVkQryftGIz9v3/sBMBKLI3He5DeU=
Subject key identifier: 0A:A8:B1:3B:A9:60:72:5E:AE:E7:E0:2B:20:4E:D3:89:77:E4:07:8B
Authority key identifier: 4D:5F:0C:B0:6A:5A:47:B4:DD:AC:7F:4D:6D:FD:44:AB:A4:D3:1F:2E
Certificate issuer: /CN=4d5f0cb06a5a47b4ddac7f4d6dfd44aba4d31f2e
Certificate serial: 019A533F67FB8C16FC78F3C4FD5884CE81FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TV8MsGpaR7TdrH9Nbf1Eq6TTHy4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/cb8339-cee3-4037-bacc-dc8b52e3ea0a/1/TV8MsGpaR7TdrH9Nbf1Eq6TTHy4.mft
Manifest number: 171B
Signing time: Wed 05 Nov 2025 09:00:55 +0000
Manifest this update: Wed 05 Nov 2025 09:00:55 +0000
Manifest next update: Thu 06 Nov 2025 09:00:55 +0000
Files and hashes: 1: TV8MsGpaR7TdrH9Nbf1Eq6TTHy4.crl (hash: ZpPaBo/uFrOXCJroeW88w7gYGFxm6H/nCkJ56W50eyo=)
2: YDDERAGfQG_P54V0MZVSyMjIVyk.roa (hash: C7Lh2t1ISlqhYDOs1dQ1HUfrAnVeSgApqdOD+isddQ8=)
3: kjjmj3_M89wAaSRBkczk1njDNSI.roa (hash: dWOfnCb6lmXwSX8QD5pO5gwpjqkbkqa9qW8b5CDCAF4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/cb8339-cee3-4037-bacc-dc8b52e3ea0a/1/TV8MsGpaR7TdrH9Nbf1Eq6TTHy4.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/cb8339-cee3-4037-bacc-dc8b52e3ea0a/1/TV8MsGpaR7TdrH9Nbf1Eq6TTHy4.mft
rsync://rpki.ripe.net/repository/DEFAULT/TV8MsGpaR7TdrH9Nbf1Eq6TTHy4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 09:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:53:3f:67:fb:8c:16:fc:78:f3:c4:fd:58:84:ce:81:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d5f0cb06a5a47b4ddac7f4d6dfd44aba4d31f2e
Validity
Not Before: Nov 5 09:00:55 2025 GMT
Not After : Nov 6 09:00:55 2025 GMT
Subject: CN=0aa8b13ba960725eaee7e02b204ed38977e4078b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:ad:30:0f:e4:b9:3d:38:40:a7:8a:b3:f7:cf:
d0:bd:0b:df:42:76:77:65:44:3a:d9:9f:db:af:04:
c6:6a:78:aa:b4:b1:5c:19:fa:e0:9d:d6:b0:7e:52:
f3:e9:ca:ed:80:ee:e2:8c:9f:fb:9c:c4:e1:5b:83:
c9:f3:11:a1:03:2d:86:9c:74:8a:94:a9:45:9a:ca:
77:c6:c9:72:67:fc:69:ca:a7:db:84:47:2d:cc:0c:
84:e4:f1:2f:64:42:d7:e8:6e:85:fa:bc:6a:4f:6d:
d6:09:f0:6e:d9:e7:ae:ba:46:b8:db:03:31:2a:69:
bb:a4:af:cc:67:75:25:fc:b5:0d:ee:0d:fa:83:a1:
76:ae:8a:a1:5c:43:e5:e6:98:01:f1:6d:76:72:8d:
8b:a1:f4:1f:c7:39:98:a9:09:a6:52:0f:61:95:ef:
09:dc:38:d4:c7:ac:56:00:2f:b5:b2:69:0e:42:90:
a3:4e:47:06:c4:23:b0:df:08:a1:46:a0:1e:83:ac:
1c:62:88:c2:ba:71:28:1f:8d:45:37:3e:7f:0e:82:
0e:db:e2:a2:ec:50:ca:cd:3b:f9:1b:d5:07:1b:8b:
92:86:c3:cb:4b:da:ee:49:a7:f0:c4:a6:c0:63:4a:
13:12:78:ce:9a:c6:c7:20:5e:25:f9:05:f1:d5:36:
e8:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:A8:B1:3B:A9:60:72:5E:AE:E7:E0:2B:20:4E:D3:89:77:E4:07:8B
X509v3 Authority Key Identifier:
keyid:4D:5F:0C:B0:6A:5A:47:B4:DD:AC:7F:4D:6D:FD:44:AB:A4:D3:1F:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TV8MsGpaR7TdrH9Nbf1Eq6TTHy4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/cb8339-cee3-4037-bacc-dc8b52e3ea0a/1/TV8MsGpaR7TdrH9Nbf1Eq6TTHy4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/cb8339-cee3-4037-bacc-dc8b52e3ea0a/1/TV8MsGpaR7TdrH9Nbf1Eq6TTHy4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:2b:c0:ec:4e:20:74:3d:62:b9:2a:e8:05:cb:97:6c:da:f9:
65:e2:8c:d2:1e:e6:81:e5:1b:aa:7c:24:20:6c:00:9a:a2:e4:
ac:99:76:98:b0:5a:30:a1:73:a4:0e:2a:01:1a:e8:3f:68:cd:
86:49:47:80:ff:64:ac:fc:32:3c:4f:80:8a:76:5c:29:02:8a:
9a:f3:df:07:d6:1a:88:fe:88:46:7c:b6:d5:74:a4:05:5c:f8:
2c:65:65:fc:72:e6:48:80:d7:8e:71:82:03:2d:4c:b1:57:16:
d2:5e:0a:47:ed:37:05:80:a8:99:d0:9c:a1:bd:8f:16:bb:59:
98:1d:3d:e4:d6:29:e3:81:5e:7d:f5:60:cf:54:67:23:40:7b:
d3:50:2a:6c:ac:bb:03:2d:9e:52:22:41:64:e9:f8:79:00:3b:
17:ca:2e:17:8f:7d:15:10:da:f3:47:22:ca:35:16:df:a5:6f:
cd:ee:a6:08:87:6a:7a:33:92:29:3d:bd:a9:78:37:a3:56:35:
7b:90:46:b4:16:f6:04:fc:95:58:b6:7b:17:c7:03:af:fb:d5:
91:29:9a:23:72:b3:f4:41:25:50:60:ed:46:37:eb:fc:82:a4:
97:7e:cc:e8:b1:5e:8f:cd:6c:d5:82:45:1a:8b:5e:74:d5:02:
d6:3e:a9:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 16:30:43 2025 by rpki-client