Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/975c5e-6b05-4a47-9e91-13699365c3c7/1/Ts9hevNfNyTn2oYOv75OwTiuGAA.mft
File: Ts9hevNfNyTn2oYOv75OwTiuGAA.mft (raw, json)
Hash identifier: OI2UYgonHbiFnHIZpPZ8lL0p+wO+rwfyLiZcDIuxT1o=
Subject key identifier: 95:CE:59:5C:9F:53:A1:E6:8E:17:36:79:5D:4C:81:FC:32:B0:C9:7C
Authority key identifier: 4E:CF:61:7A:F3:5F:37:24:E7:DA:86:0E:BF:BE:4E:C1:38:AE:18:00
Certificate issuer: /CN=4ecf617af35f3724e7da860ebfbe4ec138ae1800
Certificate serial: 019A503DC3D09CAEEABE11A2383459A6E143
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ts9hevNfNyTn2oYOv75OwTiuGAA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/975c5e-6b05-4a47-9e91-13699365c3c7/1/Ts9hevNfNyTn2oYOv75OwTiuGAA.mft
Manifest number: 1452
Signing time: Tue 04 Nov 2025 19:00:16 +0000
Manifest this update: Tue 04 Nov 2025 19:00:16 +0000
Manifest next update: Wed 05 Nov 2025 19:00:16 +0000
Files and hashes: 1: PhMpSawzWF4ex2C_9UJlDInR9Qw.roa (hash: 8Mwytw2cAElmiryd1WCNePGo22yW+hClbYeRH6uFgoU=)
2: Ts9hevNfNyTn2oYOv75OwTiuGAA.crl (hash: pr5akNS73q2By9ZRbpRdY7/XTEa+Ag+LrH0TbASFUQo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/975c5e-6b05-4a47-9e91-13699365c3c7/1/Ts9hevNfNyTn2oYOv75OwTiuGAA.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/975c5e-6b05-4a47-9e91-13699365c3c7/1/Ts9hevNfNyTn2oYOv75OwTiuGAA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ts9hevNfNyTn2oYOv75OwTiuGAA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:3d:c3:d0:9c:ae:ea:be:11:a2:38:34:59:a6:e1:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ecf617af35f3724e7da860ebfbe4ec138ae1800
Validity
Not Before: Nov 4 19:00:16 2025 GMT
Not After : Nov 5 19:00:16 2025 GMT
Subject: CN=95ce595c9f53a1e68e1736795d4c81fc32b0c97c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:20:03:b9:8c:a7:ea:56:20:ea:fa:8e:ce:7c:
17:00:9b:a8:9a:3e:83:5d:3e:4c:50:4a:d7:01:bd:
43:25:63:a6:9b:f7:b9:19:43:46:59:9f:5b:2e:3e:
38:92:e0:52:90:c9:0e:af:e0:f1:3d:19:0f:42:63:
2b:b1:1c:8d:cf:ce:f6:84:09:18:17:51:6d:1f:29:
aa:5f:07:51:8d:ac:2c:d4:b7:01:dc:7a:8c:55:8b:
58:2e:d4:5a:11:5d:67:d1:37:46:df:b8:d4:9c:5f:
b9:92:8f:c7:c7:51:6d:c4:bb:15:03:3a:19:8f:8d:
fe:c6:d3:4a:bc:ec:ae:1f:cc:ba:58:40:a9:79:68:
57:1a:45:de:65:61:e1:03:f9:05:bc:6a:db:b7:5a:
5c:c2:d9:8b:1b:fc:61:f8:0e:25:4c:86:55:ff:4b:
c5:9f:df:01:05:8c:73:b6:13:af:96:ba:d8:13:a5:
e2:12:38:28:bf:be:e3:76:e1:4e:45:e4:8a:95:6b:
77:2a:68:dd:69:87:d0:28:81:86:ff:60:ea:1a:e8:
91:78:cb:35:d1:47:c0:cd:8f:89:96:32:b7:2e:70:
0b:6a:71:e6:2d:f5:72:77:14:78:e5:fa:ff:16:97:
e3:81:fa:21:94:4e:b1:29:d3:a1:73:a4:e9:bb:5f:
29:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:CE:59:5C:9F:53:A1:E6:8E:17:36:79:5D:4C:81:FC:32:B0:C9:7C
X509v3 Authority Key Identifier:
keyid:4E:CF:61:7A:F3:5F:37:24:E7:DA:86:0E:BF:BE:4E:C1:38:AE:18:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ts9hevNfNyTn2oYOv75OwTiuGAA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/975c5e-6b05-4a47-9e91-13699365c3c7/1/Ts9hevNfNyTn2oYOv75OwTiuGAA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/975c5e-6b05-4a47-9e91-13699365c3c7/1/Ts9hevNfNyTn2oYOv75OwTiuGAA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:aa:8c:49:53:2b:76:2e:b6:03:5f:b1:b0:8b:cb:dd:a9:36:
58:d9:ca:61:d8:7c:de:b8:a3:0e:57:96:7c:4b:5d:19:8d:5d:
d8:4e:aa:d2:91:d2:6e:47:f2:98:c2:44:97:07:53:87:87:3b:
2f:0c:1e:fa:df:52:ec:a1:92:cb:b7:c2:90:e3:55:e5:77:c4:
c4:67:bf:fd:ed:db:c9:5f:f2:b0:a1:20:12:7a:19:b6:34:ce:
9b:e2:c1:a9:f7:30:e0:fa:04:f5:c8:68:f6:20:3a:78:a8:5d:
da:f9:fc:aa:ad:ca:e6:05:04:75:65:90:99:d4:c3:a4:d7:b5:
17:09:43:bb:35:49:cd:0c:d9:6b:44:5b:1d:37:b4:54:0b:db:
d9:9b:23:ed:e1:07:1c:0a:d7:27:24:5d:6a:61:d9:89:62:bd:
26:bb:1f:c5:04:9c:41:b7:39:f0:0a:c0:77:54:35:bf:5d:03:
f5:23:cc:ac:81:6b:06:c1:f8:f9:80:dd:80:4a:36:82:69:70:
7a:e1:75:72:a2:70:af:de:f9:9b:2b:94:47:25:2a:8a:74:55:
36:a6:05:ad:d7:6d:47:73:07:8a:bd:e3:a4:47:7a:bc:eb:fc:
67:c6:f3:21:63:93:9a:cf:88:9a:de:2e:69:39:86:0d:66:4e:
22:47:24:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 22:52:13 2025 by rpki-client