Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/9e9122-bbff-48d9-98c6-0a4286f3cfbe/1/tfV-SevwmLxT6Ns4iIHJI2nZv4w.mft
File: tfV-SevwmLxT6Ns4iIHJI2nZv4w.mft (raw, json)
Hash identifier: HetkXKbGUbeLtn5qHTpJgOHpBv6o7doBtdODI2zyBnM=
Subject key identifier: 94:34:55:52:0D:C6:BA:DB:D0:46:E3:84:C3:C9:BB:0C:33:62:1B:99
Authority key identifier: B5:F5:7E:49:EB:F0:98:BC:53:E8:DB:38:88:81:C9:23:69:D9:BF:8C
Certificate issuer: /CN=b5f57e49ebf098bc53e8db388881c92369d9bf8c
Certificate serial: 019A4F62D4B7F144B01120754996502F17F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tfV-SevwmLxT6Ns4iIHJI2nZv4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/9e9122-bbff-48d9-98c6-0a4286f3cfbe/1/tfV-SevwmLxT6Ns4iIHJI2nZv4w.mft
Manifest number: 1490
Signing time: Tue 04 Nov 2025 15:01:08 +0000
Manifest this update: Tue 04 Nov 2025 15:01:08 +0000
Manifest next update: Wed 05 Nov 2025 15:01:08 +0000
Files and hashes: 1: HqctvWxlrIEslD4ELNpmV-XhZkU.roa (hash: CGfhQ4fck7gcAxsslFd0Q8T9jYmDIbHyBLNxPR9Qais=)
2: bKSpPE5-kXmlbnT7r_1atj4jQSY.roa (hash: L3QXcpXiam9j36oZrcZebMrghkDu87SD2DJXHj63ivw=)
3: tfV-SevwmLxT6Ns4iIHJI2nZv4w.crl (hash: 5MZjjiPX3iyoo7XaxLbZWo9fp6HgJS8TY/zWcVp1WYM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/9e9122-bbff-48d9-98c6-0a4286f3cfbe/1/tfV-SevwmLxT6Ns4iIHJI2nZv4w.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/9e9122-bbff-48d9-98c6-0a4286f3cfbe/1/tfV-SevwmLxT6Ns4iIHJI2nZv4w.mft
rsync://rpki.ripe.net/repository/DEFAULT/tfV-SevwmLxT6Ns4iIHJI2nZv4w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:62:d4:b7:f1:44:b0:11:20:75:49:96:50:2f:17:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5f57e49ebf098bc53e8db388881c92369d9bf8c
Validity
Not Before: Nov 4 15:01:08 2025 GMT
Not After : Nov 5 15:01:08 2025 GMT
Subject: CN=943455520dc6badbd046e384c3c9bb0c33621b99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:1d:a0:34:49:3a:72:cd:3e:60:86:4a:aa:be:
7d:c3:11:9e:fd:14:b3:af:55:20:a2:d3:5b:00:4c:
e2:05:53:22:b6:2d:69:4a:13:c6:9d:72:ef:85:41:
d4:6e:3f:e3:dd:8f:d1:ec:3f:ce:09:06:ca:d2:e4:
88:c4:58:8c:e8:ef:4f:ec:1d:d7:82:7a:4d:21:ed:
61:e1:b8:ea:8f:d4:de:dc:97:0f:ef:59:74:b4:8e:
ab:63:da:cf:25:15:4f:9d:fc:39:17:66:ba:a5:5f:
b8:43:5b:05:ce:a2:21:a7:3c:9e:19:35:27:b4:be:
d6:ce:2a:80:cc:27:bf:b1:bb:6c:82:4c:bd:a8:f2:
9f:76:70:02:ba:87:5c:31:ac:c0:4d:34:22:02:40:
94:de:55:b3:05:16:3b:98:52:a4:0e:ae:fc:9c:ba:
f6:28:9e:e3:6d:36:13:25:cb:15:aa:b9:a6:c3:5a:
fc:48:25:16:67:99:d0:81:8f:7e:a2:99:45:a0:16:
ba:e8:14:64:63:70:ff:f4:7e:c2:f3:46:13:21:39:
02:13:d3:97:34:17:b2:d0:b6:8b:44:54:9c:dd:f0:
a3:d2:b8:b2:6d:9a:94:d2:e7:1d:53:d2:2d:4b:da:
76:64:fd:a0:d4:5b:c9:8e:42:7e:aa:11:2e:9f:91:
44:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:34:55:52:0D:C6:BA:DB:D0:46:E3:84:C3:C9:BB:0C:33:62:1B:99
X509v3 Authority Key Identifier:
keyid:B5:F5:7E:49:EB:F0:98:BC:53:E8:DB:38:88:81:C9:23:69:D9:BF:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tfV-SevwmLxT6Ns4iIHJI2nZv4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/9e9122-bbff-48d9-98c6-0a4286f3cfbe/1/tfV-SevwmLxT6Ns4iIHJI2nZv4w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/9e9122-bbff-48d9-98c6-0a4286f3cfbe/1/tfV-SevwmLxT6Ns4iIHJI2nZv4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:ee:c6:42:c8:2c:f6:58:b9:82:c4:38:f9:7d:d9:15:e4:aa:
4e:ae:da:7e:58:9e:ae:03:25:36:ed:fa:38:cd:96:ee:73:08:
95:77:91:b2:50:74:92:0b:5e:de:f2:3e:7d:c4:1f:c0:20:39:
6b:8e:d5:53:1d:3d:98:e5:04:cb:be:03:07:25:8b:91:42:a0:
12:8a:32:ef:f9:57:69:a8:00:a9:4f:e7:3d:94:5c:e2:3c:6a:
fd:5b:cb:73:f8:42:f0:13:f8:5d:e8:84:a4:56:b4:28:5c:2c:
d6:9a:aa:bd:d5:05:0a:61:ed:ef:c4:81:f9:82:a9:63:6a:cc:
0a:04:16:cc:dc:ee:8c:b3:42:87:fc:b3:5b:ca:fc:fb:f6:3e:
ae:ed:a1:03:05:57:50:f0:59:01:a2:ac:73:64:84:70:1e:19:
0e:32:11:64:98:db:c5:2b:46:95:c4:16:4d:83:8c:a5:0d:bf:
ae:6d:30:14:04:68:a1:b9:73:af:ff:24:6c:dc:1b:63:c6:94:
9b:3e:9e:ea:05:fb:36:99:aa:03:a3:ec:7a:80:45:9c:01:b4:
8d:17:0b:12:1a:d9:e2:a0:b3:c4:8a:40:a0:85:86:f4:79:33:
7b:85:2f:ee:97:28:8d:37:12:0b:02:b9:b3:42:4f:21:85:3c:
5b:45:ab:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:17:33 2025 by rpki-client