Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/cb3e6b-a444-49dd-9f64-17c12273c54a/1/TgoZ1Iw1R8Ktufjv_erGrZ5PnRk.mft
File: TgoZ1Iw1R8Ktufjv_erGrZ5PnRk.mft (raw, json)
Hash identifier: Y8lcLEmSlVX1zr4F1VYdqWwI0aGZ7Y54GXHiARPkO2w=
Subject key identifier: D2:BE:C5:14:8E:D1:92:24:91:DD:FD:23:AF:48:60:7E:C7:15:42:4B
Authority key identifier: 4E:0A:19:D4:8C:35:47:C2:AD:B9:F8:EF:FD:EA:C6:AD:9E:4F:9D:19
Certificate issuer: /CN=4e0a19d48c3547c2adb9f8effdeac6ad9e4f9d19
Certificate serial: 019A52D1F41384D46714D484D91F73CFD78D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TgoZ1Iw1R8Ktufjv_erGrZ5PnRk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/cb3e6b-a444-49dd-9f64-17c12273c54a/1/TgoZ1Iw1R8Ktufjv_erGrZ5PnRk.mft
Manifest number: 0D9C
Signing time: Wed 05 Nov 2025 07:01:22 +0000
Manifest this update: Wed 05 Nov 2025 07:01:22 +0000
Manifest next update: Thu 06 Nov 2025 07:01:22 +0000
Files and hashes: 1: E7on5Vfvg98I2xAlaMeiutbcdZQ.roa (hash: 52cCubbGQVWlaOLXukS3Zd4+5KnclvBfBahudlSwT/s=)
2: TgoZ1Iw1R8Ktufjv_erGrZ5PnRk.crl (hash: f57JJqe3/mNPBXZmfsr6+VbaqEH18oGuItunE01bYJw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/cb3e6b-a444-49dd-9f64-17c12273c54a/1/TgoZ1Iw1R8Ktufjv_erGrZ5PnRk.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/cb3e6b-a444-49dd-9f64-17c12273c54a/1/TgoZ1Iw1R8Ktufjv_erGrZ5PnRk.mft
rsync://rpki.ripe.net/repository/DEFAULT/TgoZ1Iw1R8Ktufjv_erGrZ5PnRk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:d1:f4:13:84:d4:67:14:d4:84:d9:1f:73:cf:d7:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e0a19d48c3547c2adb9f8effdeac6ad9e4f9d19
Validity
Not Before: Nov 5 07:01:22 2025 GMT
Not After : Nov 6 07:01:22 2025 GMT
Subject: CN=d2bec5148ed1922491ddfd23af48607ec715424b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:a3:0a:c8:71:ca:49:de:a5:36:fa:98:7f:8f:
39:97:0f:1b:1b:c0:74:a1:7a:57:29:c5:05:ee:34:
9a:01:a7:90:58:3d:51:7a:5f:3d:65:7a:79:a6:b3:
1b:1d:56:75:73:79:44:f4:da:0e:6f:3e:ca:df:d0:
c4:81:b4:44:ac:a2:f3:36:59:55:b2:9f:68:dc:d4:
26:9a:ea:68:eb:19:36:6b:ad:58:5b:69:08:5f:fd:
28:0a:93:ed:37:d3:c0:56:8a:0b:97:3d:03:81:19:
dd:c7:5a:a7:72:27:f6:f4:c2:1c:fe:dd:04:ce:58:
e7:f9:b6:fc:8b:05:89:29:44:62:17:c1:29:eb:51:
f8:38:4c:e9:68:e4:24:a7:3b:fe:0e:34:f5:df:08:
21:ec:bb:15:aa:18:85:6a:14:36:c9:1d:85:10:14:
d7:a6:95:4a:3d:53:bb:43:22:e2:c0:b2:18:03:f5:
cb:6a:94:ef:81:36:50:f6:4e:5b:d1:09:e6:87:72:
c3:03:9e:d6:37:25:21:40:f8:16:8c:c3:fd:45:7c:
fb:cc:54:b7:00:04:e3:7e:de:24:78:52:bb:c0:cf:
7b:54:a1:f8:55:a6:59:6f:14:d7:2d:ec:ed:f9:0a:
01:30:e5:3e:08:c2:77:ff:f2:f3:fe:ae:a8:6b:22:
a2:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:BE:C5:14:8E:D1:92:24:91:DD:FD:23:AF:48:60:7E:C7:15:42:4B
X509v3 Authority Key Identifier:
keyid:4E:0A:19:D4:8C:35:47:C2:AD:B9:F8:EF:FD:EA:C6:AD:9E:4F:9D:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TgoZ1Iw1R8Ktufjv_erGrZ5PnRk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/cb3e6b-a444-49dd-9f64-17c12273c54a/1/TgoZ1Iw1R8Ktufjv_erGrZ5PnRk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/cb3e6b-a444-49dd-9f64-17c12273c54a/1/TgoZ1Iw1R8Ktufjv_erGrZ5PnRk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:cd:8a:21:74:41:96:88:3f:43:90:64:c1:4e:6b:c7:80:b6:
96:1c:a2:85:4e:7b:94:ae:4d:ba:15:67:f3:88:a7:13:6e:28:
2b:0f:fc:1a:61:fc:ad:49:01:9b:0a:c9:b8:85:c4:c8:e1:c4:
60:f4:16:7b:82:be:0a:0c:43:22:39:1e:e9:09:ab:32:45:cd:
92:1b:cd:39:f4:79:b2:db:13:5c:fd:f0:43:dc:49:25:b4:5e:
db:35:ad:a0:bd:e5:b9:b0:2f:53:e2:e0:2b:fd:9a:41:54:47:
e1:4e:58:89:a4:16:17:08:3c:74:70:88:89:10:f3:4b:77:f4:
71:db:ae:b7:59:45:18:36:65:c2:6b:80:cc:89:92:79:7d:30:
d4:42:ee:08:4c:13:52:fc:84:ad:02:73:f8:15:10:3a:33:4f:
2e:e2:38:00:96:2c:1e:ab:61:65:e9:f7:6f:f8:76:e7:b6:35:
c7:59:10:68:e1:02:e0:ca:cd:27:a3:f1:6b:1f:3b:cb:fc:5f:
b2:66:9e:62:b0:ea:67:14:bd:9e:2a:ce:ec:47:0f:05:50:0f:
1b:ec:59:48:50:00:f3:72:0f:69:83:4d:f6:66:5b:05:80:4e:
d8:61:83:16:c7:bf:bb:ef:70:2d:7c:aa:9a:d4:8f:a9:fd:d8:
04:44:d8:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 09:41:30 2025 by rpki-client