Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/bf66dd-6237-48de-aed7-a7c59ddcf76b/1/TMvF4EXqpfdiqRRiRMGSSLYrqXY.mft
File: TMvF4EXqpfdiqRRiRMGSSLYrqXY.mft (raw, json)
Hash identifier: NaUNewQrZG5J/uBGIYX3SZmGk5xG6XUkNSHi/EkTiZM=
Subject key identifier: DA:D5:9B:9A:D4:DA:A3:83:FF:27:BE:99:B8:F0:2E:4C:00:64:3C:FB
Authority key identifier: 4C:CB:C5:E0:45:EA:A5:F7:62:A9:14:62:44:C1:92:48:B6:2B:A9:76
Certificate issuer: /CN=4ccbc5e045eaa5f762a9146244c19248b62ba976
Certificate serial: 019A518786D738FDBDFE1C797841884E6926
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TMvF4EXqpfdiqRRiRMGSSLYrqXY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/bf66dd-6237-48de-aed7-a7c59ddcf76b/1/TMvF4EXqpfdiqRRiRMGSSLYrqXY.mft
Manifest number: 1710
Signing time: Wed 05 Nov 2025 01:00:27 +0000
Manifest this update: Wed 05 Nov 2025 01:00:27 +0000
Manifest next update: Thu 06 Nov 2025 01:00:27 +0000
Files and hashes: 1: TMvF4EXqpfdiqRRiRMGSSLYrqXY.crl (hash: Smrst38pfPh1Z4xHyttYCzkv8y6SFMS9x1Ua2LAPEmg=)
2: bs1HYE5HpmfRDe1IWRWlAw4_YbQ.roa (hash: /9wCX+4PJTuFTnMcFlhOot3PdJrbFSkbu3ySPd314JY=)
3: kvulLtgS7l9j5cL5cr_z1UEgt1M.roa (hash: lwycUBIUeNB/fogCEgMYVAepQLASER5k8Ye40EXBAoI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/bf66dd-6237-48de-aed7-a7c59ddcf76b/1/TMvF4EXqpfdiqRRiRMGSSLYrqXY.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/bf66dd-6237-48de-aed7-a7c59ddcf76b/1/TMvF4EXqpfdiqRRiRMGSSLYrqXY.mft
rsync://rpki.ripe.net/repository/DEFAULT/TMvF4EXqpfdiqRRiRMGSSLYrqXY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 01:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:87:86:d7:38:fd:bd:fe:1c:79:78:41:88:4e:69:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ccbc5e045eaa5f762a9146244c19248b62ba976
Validity
Not Before: Nov 5 01:00:27 2025 GMT
Not After : Nov 6 01:00:27 2025 GMT
Subject: CN=dad59b9ad4daa383ff27be99b8f02e4c00643cfb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:22:79:da:68:93:cf:fd:ab:e0:cd:b0:ce:4a:
7c:e3:08:ee:5c:66:91:82:8f:f8:59:b6:69:9c:f0:
7f:7c:45:c3:17:40:c5:aa:8d:b0:5f:dc:a1:4d:8c:
79:51:3b:aa:5f:20:6b:09:ee:a8:d9:7b:d5:de:cb:
2f:c2:ee:dc:2e:bc:fb:f2:6a:b7:85:21:9a:c8:5e:
66:ca:6d:6c:d7:3a:57:6c:95:82:80:dd:9d:90:cd:
ed:2d:4d:14:a3:ca:10:ed:04:32:f8:67:34:7a:5a:
fb:67:3f:51:99:78:a0:89:de:3e:d8:00:cd:78:69:
1b:ec:1c:30:d0:05:8b:9c:b4:c6:b1:a2:f0:7e:0f:
36:86:44:b4:39:9d:41:a0:ff:b0:61:fa:89:13:32:
34:21:bf:2a:50:e4:d5:0b:a2:23:f7:d1:f0:09:88:
a3:80:ef:f6:b8:ad:d9:3c:9c:3d:69:62:d5:76:02:
a5:f6:eb:14:98:82:88:32:56:72:76:e2:92:33:1a:
bb:c9:91:9d:df:0a:de:47:46:1a:99:73:8e:0f:25:
8e:7b:0a:eb:a2:c5:c4:57:35:b7:32:c9:8e:2d:91:
e3:51:95:49:70:9a:a2:62:5f:23:cc:a8:4b:7d:63:
d3:fc:bd:ee:5f:b3:b4:98:c8:75:dd:ea:92:d1:7b:
0a:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:D5:9B:9A:D4:DA:A3:83:FF:27:BE:99:B8:F0:2E:4C:00:64:3C:FB
X509v3 Authority Key Identifier:
keyid:4C:CB:C5:E0:45:EA:A5:F7:62:A9:14:62:44:C1:92:48:B6:2B:A9:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TMvF4EXqpfdiqRRiRMGSSLYrqXY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/bf66dd-6237-48de-aed7-a7c59ddcf76b/1/TMvF4EXqpfdiqRRiRMGSSLYrqXY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/bf66dd-6237-48de-aed7-a7c59ddcf76b/1/TMvF4EXqpfdiqRRiRMGSSLYrqXY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:c6:d1:80:95:05:df:e0:d7:21:f8:97:34:92:7d:39:8c:5d:
11:5d:37:c0:3e:16:d0:8f:92:83:c9:a6:5a:e1:f2:34:0b:d2:
6b:ad:d4:46:79:64:d9:ab:86:60:3f:48:fb:8a:70:cc:da:c0:
4f:2b:7a:06:f1:ab:14:0c:82:cf:ca:4f:2c:4b:9c:13:0e:ea:
43:87:c7:f7:6c:dd:6d:a3:28:bd:da:1e:92:e6:88:e7:e4:76:
ed:5a:5e:4a:5e:ce:31:a4:fa:cb:7d:f7:0f:24:ed:d7:b9:bb:
c2:6a:5f:07:66:43:74:77:60:f7:5e:64:56:71:7c:f0:d8:78:
d1:56:df:f4:52:7e:b9:03:e3:d1:c4:cb:04:db:29:c3:d5:97:
d7:22:19:02:d6:15:2a:c6:a3:a4:84:29:5f:61:f3:db:f9:ea:
a8:5e:55:e0:df:61:38:7f:2e:e8:39:99:0e:25:40:d1:1e:c7:
b5:e5:64:39:93:df:12:78:3a:a9:15:84:74:ca:22:41:ce:e9:
98:b4:c5:fa:64:21:78:55:c6:1a:af:14:80:ea:e7:20:f6:f7:
a8:bd:84:53:67:51:f7:2b:52:2c:6d:1c:04:38:82:24:38:24:
67:a2:0e:b2:4f:31:1d:e8:ed:7d:d8:42:aa:66:ac:08:a5:00:
91:e8:93:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 10:03:28 2025 by rpki-client