Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/961f64-837c-4811-aa42-58f215bca53a/1/TjQBh8D85f_wN87ZplCCQ-QE2nE.mft
File: TjQBh8D85f_wN87ZplCCQ-QE2nE.mft (raw, json)
Hash identifier: btQnKBsBKe4oCERYLhsPcICfYWeSpn1M/b27/L14sHY=
Subject key identifier: FD:89:A6:78:EF:CA:6B:EC:90:D0:8A:69:0A:4A:9C:75:6A:61:E2:73
Authority key identifier: 4E:34:01:87:C0:FC:E5:FF:F0:37:CE:D9:A6:50:82:43:E4:04:DA:71
Certificate issuer: /CN=4e340187c0fce5fff037ced9a6508243e404da71
Certificate serial: 019A533F63A345D804B7E42B683DDCDA77D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TjQBh8D85f_wN87ZplCCQ-QE2nE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/961f64-837c-4811-aa42-58f215bca53a/1/TjQBh8D85f_wN87ZplCCQ-QE2nE.mft
Manifest number: 0A3B
Signing time: Wed 05 Nov 2025 09:00:54 +0000
Manifest this update: Wed 05 Nov 2025 09:00:54 +0000
Manifest next update: Thu 06 Nov 2025 09:00:54 +0000
Files and hashes: 1: CpuMVh4uJ1tcoj_OkQygaUN_hh8.roa (hash: yhnMpFW3oI3a8/KGPX3tjlLUQZvGsHrg1LJyUrjeFm8=)
2: TjQBh8D85f_wN87ZplCCQ-QE2nE.crl (hash: Y7hTi5XgU9ml5UN7OmXcgZGYFI8+gK1b0T/zRWkDpLw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/961f64-837c-4811-aa42-58f215bca53a/1/TjQBh8D85f_wN87ZplCCQ-QE2nE.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/961f64-837c-4811-aa42-58f215bca53a/1/TjQBh8D85f_wN87ZplCCQ-QE2nE.mft
rsync://rpki.ripe.net/repository/DEFAULT/TjQBh8D85f_wN87ZplCCQ-QE2nE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:53:3f:63:a3:45:d8:04:b7:e4:2b:68:3d:dc:da:77:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e340187c0fce5fff037ced9a6508243e404da71
Validity
Not Before: Nov 5 09:00:54 2025 GMT
Not After : Nov 6 09:00:54 2025 GMT
Subject: CN=fd89a678efca6bec90d08a690a4a9c756a61e273
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:2b:d9:d3:cb:ef:7f:41:ae:cf:79:23:cc:3e:
ee:a2:e2:29:2f:27:28:df:b7:7e:a5:b0:4e:9c:9c:
5d:1a:7e:55:76:80:17:c0:f9:ed:ae:7d:18:e0:74:
be:f9:68:63:17:ca:fc:5a:25:ff:05:76:39:1e:f4:
85:92:90:2e:ce:37:fd:a4:34:54:58:70:cb:8e:80:
01:87:04:00:1e:9c:cb:ee:21:c6:9a:01:67:b9:4f:
5a:55:d3:09:ec:09:f7:83:08:5c:1e:3c:80:d6:c3:
1a:25:d2:9c:4a:e5:15:d7:40:df:e8:6a:22:c8:b5:
9d:8b:c4:77:52:c7:94:fa:d5:c7:c3:6f:7a:4b:f4:
48:f1:92:46:b0:f5:22:ac:71:97:96:4f:99:cc:73:
70:11:1f:52:d5:c0:c8:ff:6e:44:dc:92:f4:34:68:
34:01:7a:9d:b2:e2:2c:b4:5b:31:42:d6:60:9f:a7:
62:ca:8d:85:b5:e1:76:94:eb:91:c9:fb:75:2d:ea:
d1:23:b1:98:93:75:6b:fd:74:e7:0c:9a:57:37:cb:
42:a9:76:b9:96:1d:8f:bc:ab:2e:75:74:cb:b3:bd:
dc:d8:6e:86:91:62:30:2c:8e:90:aa:3a:af:87:8b:
2c:49:7b:cc:2f:7b:2a:4c:40:70:c0:54:17:db:c3:
24:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:89:A6:78:EF:CA:6B:EC:90:D0:8A:69:0A:4A:9C:75:6A:61:E2:73
X509v3 Authority Key Identifier:
keyid:4E:34:01:87:C0:FC:E5:FF:F0:37:CE:D9:A6:50:82:43:E4:04:DA:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TjQBh8D85f_wN87ZplCCQ-QE2nE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/961f64-837c-4811-aa42-58f215bca53a/1/TjQBh8D85f_wN87ZplCCQ-QE2nE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/961f64-837c-4811-aa42-58f215bca53a/1/TjQBh8D85f_wN87ZplCCQ-QE2nE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c9:de:c7:55:25:c7:e2:ae:bf:5d:10:76:1c:7e:ba:50:ea:be:
ac:6a:bb:60:0f:3e:d5:42:23:51:02:da:28:28:2c:3e:89:43:
15:96:2c:ad:67:74:ba:ea:27:b7:23:20:7c:e5:f8:9d:b6:d2:
73:53:2f:35:0f:dd:1e:f9:8c:50:37:01:f9:5b:9d:a0:78:5a:
fd:99:c4:1b:81:69:0e:3c:2b:f4:24:66:cd:8e:9d:53:51:c3:
dc:1f:44:3b:55:1a:40:83:49:09:56:89:c7:02:f7:44:4f:1d:
20:4b:2a:84:88:6b:f0:c4:2e:72:f4:c8:7b:3e:fb:21:74:18:
40:82:b7:93:86:82:aa:18:25:0d:50:34:61:f3:c9:1d:3a:1f:
b3:2a:05:9c:d7:2b:20:11:fd:11:ad:6a:69:e9:18:24:84:89:
0b:89:95:e1:d7:76:37:d4:b9:99:d3:4c:ce:fa:46:9a:a7:04:
3e:c6:15:08:5d:11:33:b4:d6:1e:39:97:db:0d:4d:65:c0:8c:
6a:da:93:4f:6c:d9:38:61:d6:64:20:b3:fa:34:0a:cf:6f:18:
32:75:b9:06:aa:02:dd:fe:ad:9b:1d:fd:3c:76:6d:7b:7c:dd:
6d:9b:33:c7:0d:30:50:08:83:1d:11:32:0e:37:0a:45:84:f3:
61:2c:15:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 10:52:40 2025 by rpki-client