Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/02c5ec-7c6f-4ae2-9897-3059c89b72ea/1/TFTszmy8nFSSnqpLIrM3sP2bNr8.mft
File: TFTszmy8nFSSnqpLIrM3sP2bNr8.mft (raw, json)
Hash identifier: pl9osEPeP7lXkzyJ0xPaY8h65CA1+8Uj+pU8M7hHowg=
Subject key identifier: A9:2E:59:21:91:B2:77:23:5C:BB:5F:83:3C:39:BC:8F:0A:C9:25:F7
Authority key identifier: 4C:54:EC:CE:6C:BC:9C:54:92:9E:AA:4B:22:B3:37:B0:FD:9B:36:BF
Certificate issuer: /CN=4c54ecce6cbc9c54929eaa4b22b337b0fd9b36bf
Certificate serial: 019A5074944BF77E95E4A5F4FF68B307ADB0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TFTszmy8nFSSnqpLIrM3sP2bNr8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/02c5ec-7c6f-4ae2-9897-3059c89b72ea/1/TFTszmy8nFSSnqpLIrM3sP2bNr8.mft
Manifest number: 170F
Signing time: Tue 04 Nov 2025 20:00:08 +0000
Manifest this update: Tue 04 Nov 2025 20:00:08 +0000
Manifest next update: Wed 05 Nov 2025 20:00:08 +0000
Files and hashes: 1: FthrDhWKQKwEzNN5rbEKo0Gle9U.roa (hash: g0UDkg5eszKLKNeW9Nu0ccpcl/R27yXYXJn3G2Co7Z4=)
2: TFTszmy8nFSSnqpLIrM3sP2bNr8.crl (hash: 6q+Q0w3g5QK78HtFq1vPH3XjLx7xPr/M1rcyoa/dC5s=)
3: eHPqpiMAvfqI-We9VzdWjZPR_bY.roa (hash: 2EtKDvjgQC4QGGaHfks3HUfVQC7NvALc/OB3oROL6rM=)
4: ePZ7Yuu3-_aTMfNEBfmL4fdhXII.roa (hash: ho6FnqARFfeawc2fVl+6U/A9evk5Ck/9UluGTSWRaEw=)
5: jEFUKY2bhw_vuBM1OshauBn8mvg.roa (hash: ZeWPCxGU+ldLXwfBechPAx21XNMieJ0auUVK9LjYs/8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/02c5ec-7c6f-4ae2-9897-3059c89b72ea/1/TFTszmy8nFSSnqpLIrM3sP2bNr8.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/02c5ec-7c6f-4ae2-9897-3059c89b72ea/1/TFTszmy8nFSSnqpLIrM3sP2bNr8.mft
rsync://rpki.ripe.net/repository/DEFAULT/TFTszmy8nFSSnqpLIrM3sP2bNr8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:74:94:4b:f7:7e:95:e4:a5:f4:ff:68:b3:07:ad:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c54ecce6cbc9c54929eaa4b22b337b0fd9b36bf
Validity
Not Before: Nov 4 20:00:08 2025 GMT
Not After : Nov 5 20:00:08 2025 GMT
Subject: CN=a92e592191b277235cbb5f833c39bc8f0ac925f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:e5:5b:59:ec:a5:d5:09:d9:fb:5d:94:6e:49:
59:2f:ad:19:64:35:7c:8b:e0:15:46:75:32:7c:23:
ee:e1:54:69:74:f9:f8:32:35:17:33:45:82:30:90:
94:f0:d5:2c:69:74:00:2c:02:a4:b8:ed:4d:62:3a:
4a:55:aa:53:be:b4:8e:7a:d2:54:fb:d8:f4:79:c2:
f6:0a:f2:87:7b:0f:70:a4:c2:d4:d9:3e:ae:0e:af:
f4:a5:6c:a8:8e:33:d6:05:60:55:cf:38:19:ab:dd:
75:43:e4:78:c6:d7:f6:f0:a0:a0:a9:86:89:1e:61:
f0:36:ae:15:95:c8:0d:5f:df:00:09:91:a4:b1:5e:
da:a9:14:bc:c9:ae:85:f3:00:2d:20:50:69:58:4b:
d5:e8:0b:c0:88:69:d6:ff:5d:20:89:b7:f9:96:aa:
f3:ca:33:88:a0:62:27:43:cc:c8:fd:64:b7:65:93:
c8:5f:57:74:b4:3b:c1:fb:b6:a8:9d:c9:0d:7a:4f:
52:85:80:d4:78:23:b7:91:46:7f:0f:83:cc:4a:b0:
4a:5e:fc:bb:b9:dd:84:af:1c:b6:25:b7:bd:9f:9d:
d6:af:fa:96:4f:41:e6:bd:55:e2:fb:24:a5:29:38:
a8:b6:f7:80:02:57:5d:c2:0c:04:f9:5b:05:4e:62:
9b:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:2E:59:21:91:B2:77:23:5C:BB:5F:83:3C:39:BC:8F:0A:C9:25:F7
X509v3 Authority Key Identifier:
keyid:4C:54:EC:CE:6C:BC:9C:54:92:9E:AA:4B:22:B3:37:B0:FD:9B:36:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TFTszmy8nFSSnqpLIrM3sP2bNr8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/02c5ec-7c6f-4ae2-9897-3059c89b72ea/1/TFTszmy8nFSSnqpLIrM3sP2bNr8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/02c5ec-7c6f-4ae2-9897-3059c89b72ea/1/TFTszmy8nFSSnqpLIrM3sP2bNr8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:2d:4c:9a:42:f7:57:cc:36:d6:af:0f:ee:af:76:77:7d:2d:
15:0f:76:7e:47:e7:f0:29:0c:2e:29:ad:3a:17:14:33:dc:1b:
14:d8:92:b1:4f:05:a3:96:e9:86:c3:e9:a5:fc:03:39:da:9f:
fb:4c:56:a5:d3:cc:58:2a:29:b9:ff:6e:49:e9:d6:06:2c:36:
05:9c:64:ab:4a:b9:fc:24:e9:b0:3d:03:83:43:7a:30:d0:b5:
c7:53:7e:59:af:b1:57:93:ea:ac:7c:aa:26:06:55:e9:ab:30:
c5:d3:a0:15:e9:3c:54:52:f4:32:95:17:31:92:2f:45:c9:f5:
8f:1b:d7:00:09:4d:58:a0:1c:a4:63:03:56:45:84:15:1c:b4:
c2:a0:7f:25:19:df:a4:33:db:ef:34:12:eb:b3:d4:0c:ee:4d:
79:8a:91:45:e6:1c:57:df:47:a9:ea:c9:dc:25:f7:9a:1a:e7:
70:38:23:c8:3c:1d:29:1d:98:b3:e3:7e:f6:59:63:a0:70:7b:
33:51:ca:9c:72:c0:8d:0b:6a:54:ca:9d:4a:90:94:92:7b:5f:
87:49:d0:8d:19:76:d3:d1:8d:a0:6e:2b:e0:4d:0c:50:34:07:
ea:b6:7f:a4:c4:27:69:c0:fd:60:90:77:94:40:50:0a:f4:49:
51:c6:34:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 03:43:28 2025 by rpki-client