Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/d3df26-3db5-4539-8030-f2ce77e3191e/1/TiopnxgqH9UdSwNimXr3qq4Na-k.mft
File: TiopnxgqH9UdSwNimXr3qq4Na-k.mft (raw, json)
Hash identifier: 7+6cA+9vJBd+Qg38eRWb8fCbLxfKEenJccG4I5MJrBk=
Subject key identifier: C9:AF:8E:F1:6F:AD:B7:05:12:3A:76:D9:80:44:61:4E:97:A8:42:8D
Authority key identifier: 4E:2A:29:9F:18:2A:1F:D5:1D:4B:03:62:99:7A:F7:AA:AE:0D:6B:E9
Certificate issuer: /CN=4e2a299f182a1fd51d4b0362997af7aaae0d6be9
Certificate serial: 019A559B11F6DDC71A627B53781D6BEA7AC7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TiopnxgqH9UdSwNimXr3qq4Na-k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/d3df26-3db5-4539-8030-f2ce77e3191e/1/TiopnxgqH9UdSwNimXr3qq4Na-k.mft
Manifest number: 1713
Signing time: Wed 05 Nov 2025 20:00:17 +0000
Manifest this update: Wed 05 Nov 2025 20:00:17 +0000
Manifest next update: Thu 06 Nov 2025 20:00:17 +0000
Files and hashes: 1: 6L1wb6rk6JRmH0kdueo5VHSR6sA.roa (hash: v/vwNDFKpqZbOrt+k+dslXb31bPIeE6v/BAFBhGcR04=)
2: Q1ID3jqh-PT7k00It8t9krcFrp0.roa (hash: 53/LWfxj68LBwdUpxNq1PQF6QDcY5qwZBSFj5Skh+H4=)
3: TiopnxgqH9UdSwNimXr3qq4Na-k.crl (hash: Eh4YYMVSpBPLhMVfCeLDDM5Du793P3ra2t0J+/qMxiE=)
4: uAwoVI3dpDeVF6OQWKoCJ5jN8xY.roa (hash: tIErXtWim6v8+5J+f3v+yr7n8hWCWnrcd2Ahi85yzJA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/d3df26-3db5-4539-8030-f2ce77e3191e/1/TiopnxgqH9UdSwNimXr3qq4Na-k.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/d3df26-3db5-4539-8030-f2ce77e3191e/1/TiopnxgqH9UdSwNimXr3qq4Na-k.mft
rsync://rpki.ripe.net/repository/DEFAULT/TiopnxgqH9UdSwNimXr3qq4Na-k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 20:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:55:9b:11:f6:dd:c7:1a:62:7b:53:78:1d:6b:ea:7a:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e2a299f182a1fd51d4b0362997af7aaae0d6be9
Validity
Not Before: Nov 5 20:00:17 2025 GMT
Not After : Nov 6 20:00:17 2025 GMT
Subject: CN=c9af8ef16fadb705123a76d98044614e97a8428d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:36:92:85:c7:21:d0:8e:a4:85:0f:20:18:49:
80:24:7d:f8:17:ba:7b:b8:eb:36:10:98:c3:16:14:
35:6c:db:87:45:75:e8:d8:34:15:67:a1:88:c8:d4:
72:91:46:96:31:51:40:87:2c:85:a1:69:44:d6:57:
aa:73:82:74:32:10:d3:0d:a4:70:86:c4:b3:93:91:
03:22:5a:ca:ee:48:91:20:eb:1f:13:c2:df:f0:33:
44:cd:fa:c7:85:8f:56:ee:19:82:2a:61:31:87:fc:
e9:4f:ec:f5:26:60:15:0c:e1:40:91:e2:a3:44:2e:
ff:11:24:5d:0f:59:54:e4:4e:dd:c8:01:3c:0f:84:
a4:6e:61:62:ff:65:5f:e2:2c:b0:5f:38:46:f9:a3:
ee:8c:0d:ac:02:7a:df:f4:4f:df:55:7e:65:32:02:
b5:b3:10:16:2c:c2:09:fc:12:94:89:c3:d0:71:fe:
d9:78:ca:5d:38:f4:3c:31:18:70:12:18:64:5a:99:
e6:f0:f9:f8:7c:5b:2f:f2:34:34:46:5f:41:3f:e7:
f6:34:28:c6:cd:c1:dc:66:be:26:f2:41:87:07:c6:
b2:8f:ec:d7:ee:cd:72:29:7b:03:96:11:87:00:e9:
7b:d1:34:2e:4e:8a:46:5a:cd:58:96:04:00:0d:8e:
fb:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:AF:8E:F1:6F:AD:B7:05:12:3A:76:D9:80:44:61:4E:97:A8:42:8D
X509v3 Authority Key Identifier:
keyid:4E:2A:29:9F:18:2A:1F:D5:1D:4B:03:62:99:7A:F7:AA:AE:0D:6B:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TiopnxgqH9UdSwNimXr3qq4Na-k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d3df26-3db5-4539-8030-f2ce77e3191e/1/TiopnxgqH9UdSwNimXr3qq4Na-k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d3df26-3db5-4539-8030-f2ce77e3191e/1/TiopnxgqH9UdSwNimXr3qq4Na-k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:78:f5:b1:e8:f3:71:e6:c7:0d:2c:52:99:e4:44:95:95:30:
2b:87:79:8e:9c:06:fc:0c:6e:bb:50:63:ab:9c:e1:57:2e:32:
fc:f4:39:69:b0:f5:47:a5:9e:79:b0:4a:6e:8b:81:a9:c2:3d:
2c:3e:1d:d8:61:63:48:20:58:06:91:ab:d7:29:68:88:e7:f9:
2e:20:5c:b8:61:21:84:ed:7d:db:a6:48:56:7f:42:18:1b:d5:
d7:6a:a8:b3:ed:6f:8c:f2:ff:d7:21:23:33:14:df:47:ea:18:
37:bb:b7:cd:7c:ed:90:cf:13:7e:4e:e3:3f:c0:26:70:4e:ad:
a9:9d:c1:f9:74:41:b1:81:9c:0d:ba:79:e0:fb:fc:03:d7:eb:
63:14:73:ce:b9:dd:fd:38:87:10:e4:74:2f:0f:8a:32:69:d2:
89:af:3a:d9:a5:88:61:b7:df:e6:f6:fe:ec:53:31:22:7a:d7:
46:33:c6:89:8f:38:e4:04:90:8a:00:12:83:3a:f3:b1:80:6d:
9c:fd:c2:6c:c8:7a:1a:cc:ce:db:1a:59:0a:e4:20:96:20:99:
26:bd:52:91:34:f8:27:32:8f:99:bc:5c:b6:fb:e8:52:25:ec:
2c:30:11:39:de:e1:53:fd:c3:b5:09:b5:a7:97:97:bf:40:de:
2d:ba:45:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 6 06:08:54 2025 by rpki-client