Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/4448a7-1ac1-46ad-a727-d96393af2f20/1/TGtjcblFo16d8wj_Q4A-JheFEGk.mft
File: TGtjcblFo16d8wj_Q4A-JheFEGk.mft (raw, json)
Hash identifier: HsQKgaS/i1aOgLzr6yOE5txeDNuAPh0oJNCJmDQ/CM4=
Subject key identifier: 00:58:EE:27:BD:E3:44:DF:6A:94:C9:D6:59:F7:91:B7:62:AB:9A:31
Authority key identifier: 4C:6B:63:71:B9:45:A3:5E:9D:F3:08:FF:43:80:3E:26:17:85:10:69
Certificate issuer: /CN=4c6b6371b945a35e9df308ff43803e2617851069
Certificate serial: 019A518774824F52AE2A3A67E781077BECB0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TGtjcblFo16d8wj_Q4A-JheFEGk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/4448a7-1ac1-46ad-a727-d96393af2f20/1/TGtjcblFo16d8wj_Q4A-JheFEGk.mft
Manifest number: 11C4
Signing time: Wed 05 Nov 2025 01:00:22 +0000
Manifest this update: Wed 05 Nov 2025 01:00:22 +0000
Manifest next update: Thu 06 Nov 2025 01:00:22 +0000
Files and hashes: 1: NETt5LyS--lV9_ycDBmp9TmpxP4.roa (hash: rz60bepxWIT7kbaafyZ48rHU8Vmg6Vvtzt7Ebp5hgDU=)
2: TGtjcblFo16d8wj_Q4A-JheFEGk.crl (hash: 1u34QGmP2kBsw01hmi/224ei2klN+r3nhPSGBcrFz3Q=)
3: YU0ymXaczDxniPQtB_xa4RTEU2Q.roa (hash: +3YrNwFP0+tuTgevzTw2FGRwOLOaLfupz3GSxL5OXLE=)
4: e99v7pEfrFm4Dg1SnIaNO39I8Ws.roa (hash: GWy1k4OaIi0pC/Ap0hgLnIy0Gp664zirmOTGWdfBTaE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/4448a7-1ac1-46ad-a727-d96393af2f20/1/TGtjcblFo16d8wj_Q4A-JheFEGk.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/4448a7-1ac1-46ad-a727-d96393af2f20/1/TGtjcblFo16d8wj_Q4A-JheFEGk.mft
rsync://rpki.ripe.net/repository/DEFAULT/TGtjcblFo16d8wj_Q4A-JheFEGk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 01:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:87:74:82:4f:52:ae:2a:3a:67:e7:81:07:7b:ec:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c6b6371b945a35e9df308ff43803e2617851069
Validity
Not Before: Nov 5 01:00:22 2025 GMT
Not After : Nov 6 01:00:22 2025 GMT
Subject: CN=0058ee27bde344df6a94c9d659f791b762ab9a31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:06:10:78:b4:dc:1d:61:19:ac:a4:7a:a8:1e:
ec:3d:e0:10:91:df:78:77:53:b0:ab:2b:5d:3e:e1:
ec:7f:a9:63:07:0e:a2:07:1f:2c:eb:e3:22:b3:44:
35:f0:12:28:aa:42:cc:96:2c:90:c2:a6:77:0c:7a:
e4:c6:e0:a9:8e:38:73:6b:82:0f:ce:84:55:e0:d8:
0e:9d:96:81:a2:05:ac:f7:d0:bb:6e:77:1f:b0:4d:
3a:91:ad:08:92:d5:3f:b1:a9:b8:34:30:e4:ee:4f:
53:76:eb:0f:51:1f:b8:38:4d:48:1c:d3:24:29:95:
7c:5e:40:da:ae:e8:da:63:8c:d4:8c:9f:0e:09:27:
e6:41:79:ed:3a:0f:26:94:e5:59:0f:0c:9a:cb:ea:
d5:f5:19:b9:69:86:47:5b:c4:ae:e6:2f:62:a6:a4:
1d:37:98:28:4c:b2:9a:66:fa:73:09:d8:7a:de:8e:
b9:e9:ba:f9:2c:e6:8b:e2:8a:71:9c:b5:ef:25:1b:
dc:89:7a:89:00:d7:55:05:d5:fa:02:63:d2:ea:de:
3c:7b:f7:9b:50:ac:87:21:99:31:71:d2:da:df:8f:
62:77:ce:e8:13:8d:08:cb:08:df:ad:dc:c3:11:57:
5f:2b:68:29:76:7d:38:41:a8:05:35:23:88:d7:2a:
d6:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:58:EE:27:BD:E3:44:DF:6A:94:C9:D6:59:F7:91:B7:62:AB:9A:31
X509v3 Authority Key Identifier:
keyid:4C:6B:63:71:B9:45:A3:5E:9D:F3:08:FF:43:80:3E:26:17:85:10:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TGtjcblFo16d8wj_Q4A-JheFEGk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/4448a7-1ac1-46ad-a727-d96393af2f20/1/TGtjcblFo16d8wj_Q4A-JheFEGk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/4448a7-1ac1-46ad-a727-d96393af2f20/1/TGtjcblFo16d8wj_Q4A-JheFEGk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:50:7e:0c:e5:dc:bf:77:59:af:b7:67:ce:e1:49:d5:c3:bd:
a8:15:02:ca:fa:90:ba:77:d8:cd:51:de:fd:72:0e:ea:53:cf:
77:dc:8c:71:3e:7d:d3:df:af:e2:13:9a:5b:38:26:ad:b9:df:
f2:9b:94:a0:b6:a5:ed:17:62:e0:5e:b4:dc:32:2e:6c:25:2a:
c2:ed:62:0d:b9:70:5c:20:b2:44:40:18:29:70:86:a5:dd:3e:
44:84:96:7a:af:e6:bb:ac:df:58:19:06:1f:0a:4f:64:3f:14:
df:b4:a8:31:ce:dc:f9:f5:ce:0a:42:9b:8b:3b:ba:f7:1e:11:
58:c7:76:96:8e:7f:ff:62:45:c2:d7:f0:14:ba:a7:c7:95:99:
d9:7a:08:85:03:d5:64:6f:a9:d0:c0:78:19:e8:3f:bd:dd:9f:
c5:75:0b:16:b1:1c:5e:0c:f2:9e:5c:6b:fc:51:94:74:3d:e5:
d8:c0:0c:d0:28:74:d5:ff:e0:d6:f7:36:d2:4f:5b:a7:b4:17:
42:c3:a3:28:5a:e4:2c:49:4f:2b:75:8a:03:ac:cc:9d:09:95:
d4:c3:2b:66:df:10:d3:fa:0f:ef:c9:42:ab:4a:0b:ef:9d:2f:
94:51:13:09:50:3f:97:47:07:0f:d2:6b:5e:da:bd:d0:98:17:
aa:de:d3:3a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpRh3SCT1KuKjpn54EHe+ywMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRjNmI2MzcxYjk0NWEzNWU5ZGYzMDhmZjQzODAzZTI2MTc4
NTEwNjkwHhcNMjUxMTA1MDEwMDIyWhcNMjUxMTA2MDEwMDIyWjAzMTEwLwYDVQQD
EygwMDU4ZWUyN2JkZTM0NGRmNmE5NGM5ZDY1OWY3OTFiNzYyYWI5YTMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2wYQeLTcHWEZrKR6qB7sPeAQkd94
d1OwqytdPuHsf6ljBw6iBx8s6+Mis0Q18BIoqkLMliyQwqZ3DHrkxuCpjjhza4IP
zoRV4NgOnZaBogWs99C7bncfsE06ka0IktU/sam4NDDk7k9TdusPUR+4OE1IHNMk
KZV8XkDarujaY4zUjJ8OCSfmQXntOg8mlOVZDwyay+rV9Rm5aYZHW8Su5i9ipqQd
N5goTLKaZvpzCdh63o656br5LOaL4opxnLXvJRvciXqJANdVBdX6AmPS6t48e/eb
UKyHIZkxcdLa349id87oE40IywjfrdzDEVdfK2gpdn04QagFNSOI1yrWiwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFABY7ie940TfapTJ1ln3kbdiq5oxMB8GA1UdIwQY
MBaAFExrY3G5RaNenfMI/0OAPiYXhRBpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVEd0amNibEZvMTZkOHdqX1E0QS1KaGVGRUdrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS80NDQ4YTctMWFjMS00NmFkLWE3Mjct
ZDk2MzkzYWYyZjIwLzEvVEd0amNibEZvMTZkOHdqX1E0QS1KaGVGRUdrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYS80NDQ4YTctMWFjMS00NmFkLWE3MjctZDk2MzkzYWYyZjIw
LzEvVEd0amNibEZvMTZkOHdqX1E0QS1KaGVGRUdrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAClB+DOXc
v3dZr7dnzuFJ1cO9qBUCyvqQunfYzVHe/XIO6lPPd9yMcT5909+v4hOaWzgmrbnf
8puUoLal7Rdi4F603DIubCUqwu1iDblwXCCyREAYKXCGpd0+RISWeq/mu6zfWBkG
HwpPZD8U37SoMc7c+fXOCkKbizu69x4RWMd2lo5//2JFwtfwFLqnx5WZ2XoIhQPV
ZG+p0MB4Geg/vd2fxXULFrEcXgzynlxr/FGUdD3l2MAM0Ch01f/g1vc20k9bp7QX
QsOjKFrkLElPK3WKA6zMnQmV1MMrZt8Q0/oP78lCq0oL750vlFETCVA/l0cHD9Jr
Xtq90JgXqt7TOg==
-----END CERTIFICATE-----
Generated at Wed Nov 5 08:58:25 2025 by rpki-client