Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/d66a58-fdf5-491e-b511-fd2915d4cd5a/1/TcOR3GFf1KOtEMDyq4sKUG0Dntg.mft
File: TcOR3GFf1KOtEMDyq4sKUG0Dntg.mft (raw, json)
Hash identifier: WOeBGim053PS2ZOnBRu1VjnsHndQSOzG+nrrfW9ghKw=
Subject key identifier: 10:F5:1B:18:97:E6:32:30:F6:10:02:2C:CF:3D:63:B4:76:A3:B2:A9
Authority key identifier: 4D:C3:91:DC:61:5F:D4:A3:AD:10:C0:F2:AB:8B:0A:50:6D:03:9E:D8
Certificate issuer: /CN=4dc391dc615fd4a3ad10c0f2ab8b0a506d039ed8
Certificate serial: 019A4EF42ADDA7E45C385E5813602C7026E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TcOR3GFf1KOtEMDyq4sKUG0Dntg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/d66a58-fdf5-491e-b511-fd2915d4cd5a/1/TcOR3GFf1KOtEMDyq4sKUG0Dntg.mft
Manifest number: 170C
Signing time: Tue 04 Nov 2025 13:00:15 +0000
Manifest this update: Tue 04 Nov 2025 13:00:15 +0000
Manifest next update: Wed 05 Nov 2025 13:00:15 +0000
Files and hashes: 1: B9-Xs7dhnKZZ3y2oqYpIdAWmlNw.roa (hash: TgNafOFIPNxSy2OvvIzhsdKUEZp12L7C7S2Pd52eKm0=)
2: QNGb0gtG4GRClc-idD7pOZ3NKu4.roa (hash: RBMmyAJB99vMalTNtIMZJrCnoBdNekiveW7iLd5Zyt4=)
3: TcOR3GFf1KOtEMDyq4sKUG0Dntg.crl (hash: ZvElEC3lGb3j4GlwQfqklgrcbq582molLl8k/m25oFk=)
4: uL8wQ5suTSJs6R1LegMqq0w_KnA.roa (hash: q1cpaZXwQ8FTgzr+1V+AjkI0yfC5jTYIkOuwUOw+jNs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/d66a58-fdf5-491e-b511-fd2915d4cd5a/1/TcOR3GFf1KOtEMDyq4sKUG0Dntg.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/d66a58-fdf5-491e-b511-fd2915d4cd5a/1/TcOR3GFf1KOtEMDyq4sKUG0Dntg.mft
rsync://rpki.ripe.net/repository/DEFAULT/TcOR3GFf1KOtEMDyq4sKUG0Dntg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 13:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:2a:dd:a7:e4:5c:38:5e:58:13:60:2c:70:26:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4dc391dc615fd4a3ad10c0f2ab8b0a506d039ed8
Validity
Not Before: Nov 4 13:00:15 2025 GMT
Not After : Nov 5 13:00:15 2025 GMT
Subject: CN=10f51b1897e63230f610022ccf3d63b476a3b2a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:54:b3:75:40:98:6a:97:f4:1f:24:9f:a8:38:
ac:f4:d0:04:eb:84:f4:2a:88:9c:f5:49:dd:b8:95:
95:6f:9f:88:8b:8a:fd:38:e8:b7:c8:93:8c:30:f7:
71:ee:26:dc:91:94:6c:b6:17:a8:6e:fa:4b:4f:35:
7f:ca:b5:f2:80:99:dd:21:80:36:9c:71:db:b4:ad:
4c:03:7c:3f:13:4c:b6:a4:56:ea:0a:fe:cc:4e:b3:
e9:3e:36:2b:66:73:5d:3a:65:c9:1a:8e:9b:71:e4:
11:43:ac:ef:9b:0d:ae:e7:5d:7a:e2:6c:5d:f5:b0:
ad:b7:d0:c6:37:3d:66:86:50:b3:de:1b:d1:46:d1:
06:00:eb:88:c5:a1:cd:ca:29:d4:83:a8:48:91:1b:
0e:13:2c:1d:42:b3:7a:d1:d3:c8:15:b9:88:6a:53:
f1:3c:8c:49:f2:9f:58:5e:79:a6:2c:ba:42:ce:d8:
e3:3b:6c:b3:ce:59:ca:26:2d:fd:81:3e:93:4e:01:
3e:48:36:96:f7:13:de:a4:2c:ec:76:26:b8:3b:e4:
98:b2:97:f5:3c:6e:89:09:8c:ef:2b:ff:d3:0c:58:
96:3e:24:c5:7c:4f:d4:48:55:37:01:9d:90:f0:74:
fe:d2:39:9d:ac:b4:1b:5f:4a:54:34:32:ba:73:be:
90:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:F5:1B:18:97:E6:32:30:F6:10:02:2C:CF:3D:63:B4:76:A3:B2:A9
X509v3 Authority Key Identifier:
keyid:4D:C3:91:DC:61:5F:D4:A3:AD:10:C0:F2:AB:8B:0A:50:6D:03:9E:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TcOR3GFf1KOtEMDyq4sKUG0Dntg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/d66a58-fdf5-491e-b511-fd2915d4cd5a/1/TcOR3GFf1KOtEMDyq4sKUG0Dntg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/d66a58-fdf5-491e-b511-fd2915d4cd5a/1/TcOR3GFf1KOtEMDyq4sKUG0Dntg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:97:87:11:5e:10:15:20:f6:94:2f:fe:68:85:35:5b:f0:d8:
29:35:e9:dd:6b:b1:8f:4f:44:fa:a9:7e:a3:6e:b4:64:4d:c4:
83:0e:d9:30:4a:51:91:8f:27:6e:d3:a4:7b:5b:af:ea:b5:7c:
04:2e:fc:19:fb:09:ba:fb:98:6b:58:73:bc:72:75:f8:f4:86:
0a:b4:cf:ea:a5:40:72:b3:3d:12:04:ab:ed:a5:b4:05:95:e8:
eb:11:7d:83:68:0e:ff:e1:a1:ae:99:0c:2e:46:a7:1d:c8:4d:
3c:12:ed:93:8b:5d:b5:e7:ec:be:72:fa:86:a6:44:3b:9e:84:
af:ed:3b:ea:8d:c1:d7:9b:21:30:01:56:e6:df:b2:cc:74:5d:
48:83:f3:0d:c4:0f:a0:41:5c:f1:d6:87:55:a0:b9:b1:16:78:
df:f4:f5:bd:b8:26:2d:ac:d2:39:a4:3f:6c:0c:ff:1f:2c:e0:
74:b7:23:6f:9d:d6:85:13:20:97:80:5a:e5:59:c6:11:4f:f8:
da:ff:80:e2:1e:54:63:fa:4f:de:ea:ad:73:1b:c9:a0:49:61:
f8:64:c8:93:54:49:bf:5b:09:2c:04:92:48:22:91:cd:b5:b1:
1a:37:54:78:35:4a:7e:73:16:d7:dc:81:e8:b1:d5:0d:62:69:
6c:ee:51:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 22:37:06 2025 by rpki-client