Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/778af2-b2c0-4704-9fa2-2841013bccb4/1/TCowVuYlkkn0ZvAFW7Ebg6ajCkI.mft
File: TCowVuYlkkn0ZvAFW7Ebg6ajCkI.mft (raw, json)
Hash identifier: JgBwrLhXCZYIQvpfk/9xofbcFtfCCfU9+09Z9OkJqSA=
Subject key identifier: 33:46:23:ED:1C:DC:36:55:11:6B:37:C5:69:56:83:09:CC:3E:E4:7D
Authority key identifier: 4C:2A:30:56:E6:25:92:49:F4:66:F0:05:5B:B1:1B:83:A6:A3:0A:42
Certificate issuer: /CN=4c2a3056e6259249f466f0055bb11b83a6a30a42
Certificate serial: 019A4E8630DC02A2B93735B2EF974F7380B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TCowVuYlkkn0ZvAFW7Ebg6ajCkI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/778af2-b2c0-4704-9fa2-2841013bccb4/1/TCowVuYlkkn0ZvAFW7Ebg6ajCkI.mft
Manifest number: 065B
Signing time: Tue 04 Nov 2025 11:00:08 +0000
Manifest this update: Tue 04 Nov 2025 11:00:08 +0000
Manifest next update: Wed 05 Nov 2025 11:00:08 +0000
Files and hashes: 1: TCowVuYlkkn0ZvAFW7Ebg6ajCkI.crl (hash: vWxLlvMo7I0uOKqFQrC347B1PfEZmFP/1eGHHBDDoCY=)
2: ypWsWp3lqcgm3orp5hClVetL1gs.roa (hash: gAI+ZENNE355QZzW1lVcF9M6FT+OGK0PoiiTAc8yFHM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/778af2-b2c0-4704-9fa2-2841013bccb4/1/TCowVuYlkkn0ZvAFW7Ebg6ajCkI.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/778af2-b2c0-4704-9fa2-2841013bccb4/1/TCowVuYlkkn0ZvAFW7Ebg6ajCkI.mft
rsync://rpki.ripe.net/repository/DEFAULT/TCowVuYlkkn0ZvAFW7Ebg6ajCkI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:86:30:dc:02:a2:b9:37:35:b2:ef:97:4f:73:80:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c2a3056e6259249f466f0055bb11b83a6a30a42
Validity
Not Before: Nov 4 11:00:08 2025 GMT
Not After : Nov 5 11:00:08 2025 GMT
Subject: CN=334623ed1cdc3655116b37c569568309cc3ee47d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:63:e9:92:cc:a8:11:f7:4e:13:c4:d4:d1:43:
cc:f5:a8:27:64:e0:c5:2b:6e:b2:33:93:15:4e:57:
dd:14:cc:ac:d8:48:04:7b:a9:9f:4e:6b:9a:60:a0:
b5:49:36:41:b3:21:55:53:56:68:5e:b2:5b:08:01:
a9:a3:3f:f2:d9:60:45:4f:bf:cd:fc:c7:94:91:27:
2b:08:73:6a:35:49:24:a0:8e:ce:35:78:93:27:ce:
9b:7b:67:b1:13:8c:46:d5:15:f3:f6:12:94:5b:bc:
5e:57:dc:e6:b4:fe:67:39:6b:e6:03:d4:01:3b:67:
2b:97:4e:10:8f:62:1e:47:1f:59:64:4a:30:82:60:
90:6d:a4:33:a2:b5:d0:84:fe:c5:d0:a9:8b:4c:ad:
b2:f7:0f:f3:08:f0:33:22:e6:87:d3:7e:26:77:89:
a7:61:a9:1f:66:1a:bd:80:50:f9:c4:09:c4:0d:30:
4e:fd:ec:99:a7:2f:55:96:8b:c9:ef:f2:79:16:de:
da:7c:53:f4:97:50:c2:bf:f1:d7:a0:03:52:bc:30:
bc:0c:ea:4d:ce:da:f2:ea:eb:7a:11:c4:a5:b5:3c:
e2:95:7a:5d:28:49:e4:42:71:58:94:81:27:82:d1:
cc:c2:68:da:6b:68:0e:31:fd:21:6a:eb:b9:96:a8:
53:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:46:23:ED:1C:DC:36:55:11:6B:37:C5:69:56:83:09:CC:3E:E4:7D
X509v3 Authority Key Identifier:
keyid:4C:2A:30:56:E6:25:92:49:F4:66:F0:05:5B:B1:1B:83:A6:A3:0A:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TCowVuYlkkn0ZvAFW7Ebg6ajCkI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/778af2-b2c0-4704-9fa2-2841013bccb4/1/TCowVuYlkkn0ZvAFW7Ebg6ajCkI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/778af2-b2c0-4704-9fa2-2841013bccb4/1/TCowVuYlkkn0ZvAFW7Ebg6ajCkI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:e1:6e:92:f2:45:6a:cf:f8:4b:3c:fa:03:ec:9a:c7:94:14:
f1:48:2c:b9:34:62:79:14:46:0e:63:eb:79:a5:67:49:49:3e:
37:8d:1b:20:8f:ba:70:11:64:e9:df:51:bb:93:3a:d8:39:16:
b1:0a:d4:59:33:86:51:95:cb:82:ce:80:43:ad:bd:ef:17:f2:
a5:e2:c5:2f:5f:32:04:20:ff:e6:cd:83:18:31:dc:dc:1d:c8:
17:2a:20:9b:d5:cb:d6:68:c8:dd:83:93:a2:13:c6:c6:4d:8f:
73:a3:63:9e:c0:0a:1e:6a:ee:05:0d:50:11:bb:b9:73:37:16:
97:bd:52:22:46:16:92:3f:88:f8:e7:29:ca:ad:9b:a3:e1:8a:
e2:48:be:71:3b:c6:ba:b1:72:fc:74:13:9a:32:03:0e:58:89:
e8:ff:97:ce:db:f1:a7:79:2e:65:e0:41:ef:cb:14:40:b2:d8:
e8:94:84:43:04:66:eb:8d:d0:e1:e1:0e:ca:8a:e2:45:74:ae:
9a:f2:b4:97:fc:b3:18:95:ae:90:5e:fb:8e:43:3a:b2:29:00:
e7:aa:46:14:7e:8e:bf:27:e8:71:11:a8:43:61:52:23:cd:a4:
0c:a0:67:31:3c:e4:4b:9e:b5:8e:0c:5e:9f:34:f2:69:0a:a9:
95:1e:9f:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:58:33 2025 by rpki-client