Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/5687c1-df9f-4ae5-a4cc-ec03ebd19000/1/TIp4hmYiVL456hrdcnKOAA6ywlo.mft
File: TIp4hmYiVL456hrdcnKOAA6ywlo.mft (raw, json)
Hash identifier: zHTjiTEb1E/YyUhjFyrYQzrMH2tG6Rplk8Eap/uf/iY=
Subject key identifier: 1B:FF:CC:D7:CB:BD:B0:26:94:05:42:6B:96:BD:3B:53:8E:B9:C8:45
Authority key identifier: 4C:8A:78:86:66:22:54:BE:39:EA:1A:DD:72:72:8E:00:0E:B2:C2:5A
Certificate issuer: /CN=4c8a7886662254be39ea1add72728e000eb2c25a
Certificate serial: 019A4EF5007A0D3F00A0CDBC821AD02D5619
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TIp4hmYiVL456hrdcnKOAA6ywlo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/5687c1-df9f-4ae5-a4cc-ec03ebd19000/1/TIp4hmYiVL456hrdcnKOAA6ywlo.mft
Manifest number: 1710
Signing time: Tue 04 Nov 2025 13:01:10 +0000
Manifest this update: Tue 04 Nov 2025 13:01:10 +0000
Manifest next update: Wed 05 Nov 2025 13:01:10 +0000
Files and hashes: 1: JjwEZWBFYdro1bclN7oB-fRyAwA.roa (hash: k4IvqBYPxW6gaMsyO55esYb4IVeV/xHT6lju64eLGfA=)
2: TIp4hmYiVL456hrdcnKOAA6ywlo.crl (hash: qq+dcVHRCIii3knjo5HjRujLDWWqzfUTXgXuMuVrRAA=)
3: a9wio39nY7HA5Emvyn8dQazuTJQ.roa (hash: NmO/lOJq3pD1F19fAJROTywj9iP7yhDSrwvmQCnkS38=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/5687c1-df9f-4ae5-a4cc-ec03ebd19000/1/TIp4hmYiVL456hrdcnKOAA6ywlo.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/5687c1-df9f-4ae5-a4cc-ec03ebd19000/1/TIp4hmYiVL456hrdcnKOAA6ywlo.mft
rsync://rpki.ripe.net/repository/DEFAULT/TIp4hmYiVL456hrdcnKOAA6ywlo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:00:7a:0d:3f:00:a0:cd:bc:82:1a:d0:2d:56:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c8a7886662254be39ea1add72728e000eb2c25a
Validity
Not Before: Nov 4 13:01:10 2025 GMT
Not After : Nov 5 13:01:10 2025 GMT
Subject: CN=1bffccd7cbbdb0269405426b96bd3b538eb9c845
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:74:35:4c:8b:17:22:cc:0a:b0:70:d4:25:1b:
5c:51:9c:e4:ef:72:e1:b3:7a:f0:6d:c9:18:fe:d7:
1b:0b:29:dd:59:d8:8c:d2:27:32:69:d1:a0:56:b2:
ad:bb:33:16:aa:c1:a9:3b:86:4d:82:5e:20:15:2d:
10:e0:de:19:87:a6:fe:8b:78:04:47:7f:dd:85:01:
46:0c:4a:e0:9a:f0:35:8e:21:af:3f:07:1f:5a:e4:
53:b5:98:13:43:36:f0:1f:02:6a:bd:44:2d:c2:b4:
53:aa:8d:aa:66:6e:fb:45:9a:c3:1e:62:bf:6c:18:
49:57:45:1e:ca:14:af:34:91:21:7f:42:1b:5e:6d:
45:30:ec:02:54:61:54:c6:33:5c:db:5c:ee:19:76:
a5:8b:db:97:90:6d:db:e9:78:37:07:69:28:25:df:
c0:6b:f4:ca:90:81:97:fb:68:8b:a3:00:13:47:d2:
b8:96:b2:4f:29:d2:86:21:6e:86:9f:53:73:15:3b:
bc:90:ed:04:f8:75:1f:e0:74:65:d8:c8:dd:62:8e:
14:52:0e:8b:a0:6a:00:a9:20:b1:b4:d3:d0:f6:89:
27:6a:8b:7c:8e:47:1f:b9:99:db:db:cc:d0:75:be:
25:48:4a:d3:c6:b6:af:3f:ce:81:ac:b6:cc:0e:3e:
f7:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:FF:CC:D7:CB:BD:B0:26:94:05:42:6B:96:BD:3B:53:8E:B9:C8:45
X509v3 Authority Key Identifier:
keyid:4C:8A:78:86:66:22:54:BE:39:EA:1A:DD:72:72:8E:00:0E:B2:C2:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TIp4hmYiVL456hrdcnKOAA6ywlo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/5687c1-df9f-4ae5-a4cc-ec03ebd19000/1/TIp4hmYiVL456hrdcnKOAA6ywlo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/5687c1-df9f-4ae5-a4cc-ec03ebd19000/1/TIp4hmYiVL456hrdcnKOAA6ywlo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:7b:76:d8:09:b0:96:89:06:3c:7a:32:a8:02:fe:35:c0:31:
38:04:fe:98:78:48:d4:62:78:c8:eb:5d:ab:bc:1a:b3:af:dc:
e0:64:37:56:87:36:52:a7:a5:6d:fa:6b:3d:5e:b0:2f:fc:03:
75:32:ab:66:aa:6c:1b:d4:a0:d6:1b:d7:1d:5e:73:61:5b:ea:
68:96:ac:44:3f:9b:2a:a0:60:39:4f:76:a3:76:96:95:c3:43:
fb:e5:43:b7:65:7a:24:43:0f:e3:d0:e4:06:df:11:b9:93:f8:
78:bf:8f:9d:b2:7b:8f:3a:e8:d8:4b:84:92:e9:e4:57:c8:14:
c5:9a:d9:c7:c8:26:a2:e0:39:6f:27:66:62:60:e8:58:4f:af:
be:c0:52:7c:20:56:b4:94:1d:d3:d3:4a:b7:d4:e6:74:cf:2d:
9b:02:24:dc:b1:ea:4f:57:2c:56:ab:48:f9:87:05:0b:2b:0b:
53:25:cd:d8:2e:c9:7c:65:95:29:b7:a8:0d:cf:35:63:3c:7d:
94:b6:08:56:a1:9d:4c:d9:88:1f:dc:a1:c6:85:23:ed:d5:96:
8a:08:2a:b0:7e:e3:27:89:0e:2f:6c:97:4f:27:74:fa:c4:a4:
da:00:fc:32:ec:70:90:ee:2b:92:4a:88:96:74:cb:7a:18:60:
14:64:e6:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:58:12 2025 by rpki-client