Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/7358bd-c72f-4d9b-bb0d-0b4f717aa363/1/TVg7b1bPCSco3lk62VKuoZzjGIY.mft
File: TVg7b1bPCSco3lk62VKuoZzjGIY.mft (raw, json)
Hash identifier: mwxBSJXHivZE+ql0wdJBqKnfucXQCdBQ1x75+fLmJSA=
Subject key identifier: 0F:5E:0F:25:E5:3D:2F:EE:BB:F7:F0:27:78:D9:B4:4C:39:F7:20:5C
Authority key identifier: 4D:58:3B:6F:56:CF:09:27:28:DE:59:3A:D9:52:AE:A1:9C:E3:18:86
Certificate issuer: /CN=4d583b6f56cf092728de593ad952aea19ce31886
Certificate serial: 019A4EF5A4BC4B1066E946F2CA9218C10BF6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TVg7b1bPCSco3lk62VKuoZzjGIY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/7358bd-c72f-4d9b-bb0d-0b4f717aa363/1/TVg7b1bPCSco3lk62VKuoZzjGIY.mft
Manifest number: 1663
Signing time: Tue 04 Nov 2025 13:01:52 +0000
Manifest this update: Tue 04 Nov 2025 13:01:52 +0000
Manifest next update: Wed 05 Nov 2025 13:01:52 +0000
Files and hashes: 1: TVg7b1bPCSco3lk62VKuoZzjGIY.crl (hash: 13mzQBUtgpSE1KB5pRatIQp/80q43rFQPcYJFfuWcj8=)
2: bOLohqMKHagd_oJ4fhpVo7NmmeM.roa (hash: zc2jSYa3eGI9kHGQfF97SUcixmU4Ya6CBO+chtxYjPg=)
3: rAEXG8LVncu-VzH6pWQ3O-v7vJk.roa (hash: pHtLRGskuQm7vCqkOegxgViLMoHSueDTg44n3jic3FY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/7358bd-c72f-4d9b-bb0d-0b4f717aa363/1/TVg7b1bPCSco3lk62VKuoZzjGIY.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/7358bd-c72f-4d9b-bb0d-0b4f717aa363/1/TVg7b1bPCSco3lk62VKuoZzjGIY.mft
rsync://rpki.ripe.net/repository/DEFAULT/TVg7b1bPCSco3lk62VKuoZzjGIY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:a4:bc:4b:10:66:e9:46:f2:ca:92:18:c1:0b:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d583b6f56cf092728de593ad952aea19ce31886
Validity
Not Before: Nov 4 13:01:52 2025 GMT
Not After : Nov 5 13:01:52 2025 GMT
Subject: CN=0f5e0f25e53d2feebbf7f02778d9b44c39f7205c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:72:04:db:0d:0f:6d:14:50:85:dc:32:7b:67:
ea:79:85:e9:ee:24:3f:4b:c1:59:2d:c2:f3:b5:bf:
e1:28:f0:6b:22:df:b0:10:a6:4e:68:fd:cb:49:71:
3b:65:3c:3b:0a:28:07:1c:fa:78:c4:2c:34:c0:8e:
09:4b:77:d7:46:74:f8:c2:69:27:fc:b6:62:2b:c1:
6b:fc:68:29:24:c9:59:64:ea:1a:cf:7e:2a:6a:6d:
8f:2f:69:19:cd:ba:a9:3f:32:2a:b8:74:bd:62:57:
ab:d7:03:33:b3:fa:47:de:81:1d:e8:9c:90:99:5b:
be:26:60:16:51:67:5b:39:7a:01:7f:2c:22:8f:3d:
34:3a:64:51:60:03:d9:e1:c2:d6:c1:a6:5c:90:02:
86:38:75:dd:2f:5e:be:c5:93:28:85:b0:6a:bc:cb:
bb:c9:a7:c4:88:51:26:bb:0c:58:80:de:da:d2:5f:
49:7a:d1:c8:0c:64:3f:35:1f:6e:e1:e3:cf:50:ef:
43:97:1b:cb:d4:f6:60:17:30:fe:b7:ae:3b:ea:62:
2f:5b:84:11:f5:9b:40:b8:8e:e1:82:5c:60:a7:c3:
54:fd:14:5e:1d:e1:09:bb:b0:c3:bc:7d:a7:40:5d:
80:8f:4f:d3:1d:ce:86:b3:f8:7c:b4:cf:90:fb:11:
ac:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:5E:0F:25:E5:3D:2F:EE:BB:F7:F0:27:78:D9:B4:4C:39:F7:20:5C
X509v3 Authority Key Identifier:
keyid:4D:58:3B:6F:56:CF:09:27:28:DE:59:3A:D9:52:AE:A1:9C:E3:18:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TVg7b1bPCSco3lk62VKuoZzjGIY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/7358bd-c72f-4d9b-bb0d-0b4f717aa363/1/TVg7b1bPCSco3lk62VKuoZzjGIY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/7358bd-c72f-4d9b-bb0d-0b4f717aa363/1/TVg7b1bPCSco3lk62VKuoZzjGIY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:c8:55:2d:c6:f9:10:50:27:1a:f3:0c:bf:c5:63:e6:41:6d:
ae:54:6b:8f:a4:60:e0:78:f8:11:da:5d:29:e7:68:f9:60:8e:
96:14:d5:6d:7e:83:c4:8e:26:46:be:b1:0c:dc:32:d6:e4:88:
1b:ad:84:e3:8e:67:29:5a:20:6c:06:b2:4a:9a:1a:6f:73:b8:
d8:24:42:f4:eb:af:10:92:ac:0e:16:dc:db:6f:4d:fd:02:26:
7e:75:ab:20:58:69:95:c6:02:6d:de:29:a3:57:78:6b:8d:53:
93:70:51:de:bf:6f:a8:97:f2:88:41:cc:44:26:3f:5e:60:4e:
a6:33:d2:68:84:4b:6e:09:26:d8:fb:52:33:2a:79:ef:a0:26:
be:10:9b:63:31:87:44:ed:28:1c:b5:96:fc:5a:ea:f1:fb:20:
69:44:66:f6:99:22:d8:a1:d1:cd:90:69:f7:e4:95:ac:1c:6e:
fe:8a:84:44:24:3a:d2:e5:22:73:35:23:60:74:91:1c:27:7e:
be:37:dc:47:c9:ad:ab:47:51:83:fc:4d:e3:eb:ad:20:cb:e5:
cd:5f:23:85:1d:f7:01:e1:1d:a8:93:56:b8:ce:f9:ad:22:0f:
ed:f6:ab:84:7c:46:eb:e1:fa:06:42:2b:26:97:79:bc:6c:51:
ab:84:c1:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:19:07 2025 by rpki-client