Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/d3df26-3db5-4539-8030-f2ce77e3191e/1/TiopnxgqH9UdSwNimXr3qq4Na-k.mft
File: TiopnxgqH9UdSwNimXr3qq4Na-k.mft (raw, json)
Hash identifier: uM9EJToPThtJKzj9vRJ/gSRHQ/r0QTEyHDnDQjqwUPk=
Subject key identifier: 5D:61:BC:72:53:21:83:E5:C2:3C:D0:31:AB:27:DF:87:AC:46:80:B3
Authority key identifier: 4E:2A:29:9F:18:2A:1F:D5:1D:4B:03:62:99:7A:F7:AA:AE:0D:6B:E9
Certificate issuer: /CN=4e2a299f182a1fd51d4b0362997af7aaae0d6be9
Certificate serial: 019A53ACB110E2E04D65060B43A8C8EBCFC5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TiopnxgqH9UdSwNimXr3qq4Na-k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/d3df26-3db5-4539-8030-f2ce77e3191e/1/TiopnxgqH9UdSwNimXr3qq4Na-k.mft
Manifest number: 1712
Signing time: Wed 05 Nov 2025 11:00:17 +0000
Manifest this update: Wed 05 Nov 2025 11:00:17 +0000
Manifest next update: Thu 06 Nov 2025 11:00:17 +0000
Files and hashes: 1: 6L1wb6rk6JRmH0kdueo5VHSR6sA.roa (hash: v/vwNDFKpqZbOrt+k+dslXb31bPIeE6v/BAFBhGcR04=)
2: Q1ID3jqh-PT7k00It8t9krcFrp0.roa (hash: 53/LWfxj68LBwdUpxNq1PQF6QDcY5qwZBSFj5Skh+H4=)
3: TiopnxgqH9UdSwNimXr3qq4Na-k.crl (hash: LaqBF97J0whrFOPHk5fRtfky6WOu52YxSbjWoSIiQO8=)
4: uAwoVI3dpDeVF6OQWKoCJ5jN8xY.roa (hash: tIErXtWim6v8+5J+f3v+yr7n8hWCWnrcd2Ahi85yzJA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/d3df26-3db5-4539-8030-f2ce77e3191e/1/TiopnxgqH9UdSwNimXr3qq4Na-k.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/d3df26-3db5-4539-8030-f2ce77e3191e/1/TiopnxgqH9UdSwNimXr3qq4Na-k.mft
rsync://rpki.ripe.net/repository/DEFAULT/TiopnxgqH9UdSwNimXr3qq4Na-k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 11:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:53:ac:b1:10:e2:e0:4d:65:06:0b:43:a8:c8:eb:cf:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e2a299f182a1fd51d4b0362997af7aaae0d6be9
Validity
Not Before: Nov 5 11:00:17 2025 GMT
Not After : Nov 6 11:00:17 2025 GMT
Subject: CN=5d61bc72532183e5c23cd031ab27df87ac4680b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:67:36:73:ac:fe:99:3f:82:a2:7c:85:67:c8:
72:93:5d:64:44:9b:72:35:2e:bb:0c:1c:fe:a3:d5:
6c:71:47:35:1c:18:4d:3e:fa:5f:36:09:6a:31:38:
63:8d:4d:4e:95:60:58:77:3c:9f:13:43:80:e1:fe:
3e:c3:74:d8:49:93:8e:a7:7f:72:ae:84:6e:61:9d:
e9:95:98:69:97:fe:2f:b7:95:f2:fd:78:bd:3c:95:
40:4f:9a:d8:31:a2:ce:9d:f4:17:96:a0:2d:7d:03:
34:04:9f:e3:a6:fe:4a:bc:e9:27:cb:70:f0:15:d2:
61:d9:37:a2:14:84:05:1d:e4:d5:ff:1a:f3:ec:7c:
31:a9:a6:75:34:21:d7:6d:6d:eb:06:dc:45:f4:a5:
80:aa:b0:17:a2:82:73:89:90:a2:cd:5f:d8:0a:57:
4f:bb:bc:64:62:cf:46:fa:e5:5c:0e:f5:3e:4e:d2:
f3:3e:81:43:93:3d:8f:04:89:9c:f4:97:38:56:8d:
7b:a6:d1:29:c3:88:68:06:06:3c:b5:d8:64:be:7e:
9f:3b:12:55:97:7c:5b:a7:1a:09:8a:54:2e:ab:29:
ea:f8:43:70:98:52:4b:9c:92:5b:91:72:01:9d:88:
90:83:db:bb:fc:53:72:7d:d8:33:b4:34:4b:2f:a7:
14:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:61:BC:72:53:21:83:E5:C2:3C:D0:31:AB:27:DF:87:AC:46:80:B3
X509v3 Authority Key Identifier:
keyid:4E:2A:29:9F:18:2A:1F:D5:1D:4B:03:62:99:7A:F7:AA:AE:0D:6B:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TiopnxgqH9UdSwNimXr3qq4Na-k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d3df26-3db5-4539-8030-f2ce77e3191e/1/TiopnxgqH9UdSwNimXr3qq4Na-k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d3df26-3db5-4539-8030-f2ce77e3191e/1/TiopnxgqH9UdSwNimXr3qq4Na-k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:a0:94:92:fd:20:27:68:a0:3f:ff:d2:4f:9a:d0:25:f7:86:
f6:82:07:41:e7:71:17:45:d8:ce:3a:75:92:10:a0:a7:8b:b4:
03:69:a1:f9:be:68:43:10:9c:58:f9:a2:f8:6e:35:7d:93:2a:
42:e3:bc:84:6f:28:34:90:e0:45:db:3a:5c:15:e6:a2:16:77:
91:7f:bc:c3:d4:8f:8a:87:67:7c:ae:13:fb:2b:50:32:0b:be:
53:75:68:bc:48:3e:8f:3f:1c:46:89:f2:ef:77:65:d3:3e:67:
34:c7:28:43:e7:1c:ca:25:0e:55:10:08:da:31:4e:8c:88:56:
c9:a9:c7:1d:b2:e2:e2:88:83:a9:81:1b:be:ef:47:b2:ca:6a:
af:c1:45:d3:eb:ca:1a:82:f3:63:d0:51:f9:d6:23:65:70:83:
1e:9e:74:8b:9f:bb:7c:88:ec:08:62:ef:93:6f:38:c8:01:5d:
7b:46:0a:da:bc:10:07:f5:ba:e4:20:98:92:da:f4:11:ad:06:
c4:de:3e:34:67:c0:ad:c5:21:d1:63:44:a0:8b:10:31:2a:6d:
df:57:7f:06:91:18:49:c7:0b:54:69:74:a6:4a:54:ff:6d:67:
7b:da:e8:58:21:b1:79:19:90:d9:58:25:63:1c:ce:75:6a:6b:
40:74:47:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 15:13:54 2025 by rpki-client