Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/278398-7339-44b2-b0b0-73a01ae5de8f/1/TNcfWgBQ-K5kRMY4dpujdf3bzhk.mft
File: TNcfWgBQ-K5kRMY4dpujdf3bzhk.mft (raw, json)
Hash identifier: HV8XmgOBmwmrUjp76eH0KZTMQi9of02l5Zrz3oSXYzA=
Subject key identifier: C8:D9:63:81:AC:80:58:EF:79:AC:4C:17:06:C0:55:C6:6F:49:83:CF
Authority key identifier: 4C:D7:1F:5A:00:50:F8:AE:64:44:C6:38:76:9B:A3:75:FD:DB:CE:19
Certificate issuer: /CN=4cd71f5a0050f8ae6444c638769ba375fddbce19
Certificate serial: 019A503DA52AF7DA76964351E09559D81857
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TNcfWgBQ-K5kRMY4dpujdf3bzhk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/278398-7339-44b2-b0b0-73a01ae5de8f/1/TNcfWgBQ-K5kRMY4dpujdf3bzhk.mft
Manifest number: 13F9
Signing time: Tue 04 Nov 2025 19:00:08 +0000
Manifest this update: Tue 04 Nov 2025 19:00:08 +0000
Manifest next update: Wed 05 Nov 2025 19:00:08 +0000
Files and hashes: 1: R8OfYueHd1P1AWWtdGiixwllIMs.roa (hash: ZKzgreBUlCJXbuPQDDLtfbqfZaf5YaZJohzFfYmemPA=)
2: TNcfWgBQ-K5kRMY4dpujdf3bzhk.crl (hash: fImL1UsNshrVlxp/2rjWWCJAtrfaxF1d0PubQnM7wfM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/278398-7339-44b2-b0b0-73a01ae5de8f/1/TNcfWgBQ-K5kRMY4dpujdf3bzhk.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/278398-7339-44b2-b0b0-73a01ae5de8f/1/TNcfWgBQ-K5kRMY4dpujdf3bzhk.mft
rsync://rpki.ripe.net/repository/DEFAULT/TNcfWgBQ-K5kRMY4dpujdf3bzhk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:3d:a5:2a:f7:da:76:96:43:51:e0:95:59:d8:18:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4cd71f5a0050f8ae6444c638769ba375fddbce19
Validity
Not Before: Nov 4 19:00:08 2025 GMT
Not After : Nov 5 19:00:08 2025 GMT
Subject: CN=c8d96381ac8058ef79ac4c1706c055c66f4983cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:92:cf:c0:59:54:6c:9c:ca:bd:1b:3b:f4:20:
3e:49:2b:a5:90:e9:d7:8a:fa:b5:26:69:70:c2:a9:
86:0e:c8:79:1f:f2:94:6a:87:a0:e8:87:d2:f7:5e:
b5:c0:d0:08:1a:af:a8:9d:db:72:90:54:31:e7:03:
39:30:85:61:20:1e:52:15:97:89:38:24:f5:c8:e4:
77:b0:20:3d:8c:f8:1e:92:fc:c1:3a:16:c4:8b:7e:
da:70:99:d1:34:f0:cd:18:e3:1e:7f:7a:cc:5d:1f:
5c:7c:2e:61:ce:c0:6a:b9:29:15:c2:2e:5a:38:75:
67:9b:39:29:50:89:bc:b1:24:28:a5:6f:b7:9f:0e:
da:b5:dc:ab:2e:f9:70:4d:ab:81:43:7e:2e:32:5f:
47:1a:14:75:ec:0f:b0:01:39:19:b5:54:0a:1b:f9:
0e:76:55:6d:43:cd:13:a6:00:9d:8d:cb:83:a4:1b:
0a:fe:05:7d:e6:8c:62:5f:4f:d5:4a:fc:92:da:ed:
91:fb:90:85:7c:66:c7:cd:54:5a:e7:ea:40:db:7b:
74:70:84:89:a8:6c:da:d8:70:c7:2b:f7:9b:35:a3:
b3:ba:ef:ab:bb:5c:6d:70:66:69:f6:d2:0c:0c:cf:
73:70:46:5c:e6:4f:f5:64:ae:34:9f:6a:8a:96:9b:
c0:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:D9:63:81:AC:80:58:EF:79:AC:4C:17:06:C0:55:C6:6F:49:83:CF
X509v3 Authority Key Identifier:
keyid:4C:D7:1F:5A:00:50:F8:AE:64:44:C6:38:76:9B:A3:75:FD:DB:CE:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TNcfWgBQ-K5kRMY4dpujdf3bzhk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/278398-7339-44b2-b0b0-73a01ae5de8f/1/TNcfWgBQ-K5kRMY4dpujdf3bzhk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/278398-7339-44b2-b0b0-73a01ae5de8f/1/TNcfWgBQ-K5kRMY4dpujdf3bzhk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:8b:31:6d:d6:29:b8:01:62:15:45:0f:b9:6f:35:68:4d:11:
69:08:a4:4b:31:92:52:5b:34:3d:1a:eb:71:e6:ed:c3:a1:96:
d7:ec:94:e8:df:0a:80:07:ba:7a:5c:83:dd:9d:8e:57:57:8d:
4b:16:72:a3:c8:e2:c1:d9:d4:8b:2e:22:50:89:6a:59:46:25:
30:16:5e:91:87:3f:05:21:e0:41:6e:7b:a3:36:02:1a:b1:c2:
8d:46:d9:c6:c5:19:a3:80:a7:23:eb:53:14:55:1e:7c:de:94:
ee:38:a3:9f:19:80:e2:3d:d0:ad:3f:12:c6:fd:28:48:d1:30:
aa:79:96:f9:98:e4:5a:6f:ec:34:c6:19:ec:b2:a8:b9:44:95:
03:67:35:79:4a:0b:93:ca:ae:64:93:73:9b:06:67:03:0e:f0:
68:0c:80:5e:f0:4b:1f:51:be:76:13:1c:f2:e1:e0:6f:09:30:
2a:25:15:eb:53:b2:f4:6d:5e:f6:73:ae:d4:e1:6a:1c:80:5a:
68:cc:42:ce:37:3a:4e:3b:57:07:4e:b5:c1:bc:47:21:c9:cd:
c2:47:67:fd:a7:01:e2:16:9e:26:1d:9d:99:58:5b:2f:fe:1c:
1a:a9:16:63:8d:9c:ae:f6:81:41:fc:11:43:25:86:b8:b0:30:
6f:89:32:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 22:47:45 2025 by rpki-client