Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/6a9378-2fa7-482d-8c7c-69ca4cb65f97/1/TNkIkaeTL3NWqAMznaDM32OtLTU.mft
File: TNkIkaeTL3NWqAMznaDM32OtLTU.mft (raw, json)
Hash identifier: I3VlXHKKvn1UICO6cieV8rSFS+QVbWnM2Krkfb6R3ak=
Subject key identifier: 09:B1:59:2E:95:73:35:0B:6F:9C:A7:5E:55:B8:BD:11:69:89:4E:4D
Authority key identifier: 4C:D9:08:91:A7:93:2F:73:56:A8:03:33:9D:A0:CC:DF:63:AD:2D:35
Certificate issuer: /CN=4cd90891a7932f7356a803339da0ccdf63ad2d35
Certificate serial: 019A4FD062BD9CC352DB150D382B585ACB02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TNkIkaeTL3NWqAMznaDM32OtLTU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/6a9378-2fa7-482d-8c7c-69ca4cb65f97/1/TNkIkaeTL3NWqAMznaDM32OtLTU.mft
Manifest number: 01F8
Signing time: Tue 04 Nov 2025 17:00:48 +0000
Manifest this update: Tue 04 Nov 2025 17:00:48 +0000
Manifest next update: Wed 05 Nov 2025 17:00:48 +0000
Files and hashes: 1: GPp0CA4dJEmXPt3FvKOuB6Y1Ajo.roa (hash: /WVZb52tGGnvS1Lpmu++5VCxojp2nMgaocCDFVDfPQY=)
2: TNkIkaeTL3NWqAMznaDM32OtLTU.crl (hash: MORDVyxi1mpWRaDn+7Xrok44D5OP8cbRPIdI7tuCZsI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/6a9378-2fa7-482d-8c7c-69ca4cb65f97/1/TNkIkaeTL3NWqAMznaDM32OtLTU.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/6a9378-2fa7-482d-8c7c-69ca4cb65f97/1/TNkIkaeTL3NWqAMznaDM32OtLTU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TNkIkaeTL3NWqAMznaDM32OtLTU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 17:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:d0:62:bd:9c:c3:52:db:15:0d:38:2b:58:5a:cb:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4cd90891a7932f7356a803339da0ccdf63ad2d35
Validity
Not Before: Nov 4 17:00:48 2025 GMT
Not After : Nov 5 17:00:48 2025 GMT
Subject: CN=09b1592e9573350b6f9ca75e55b8bd1169894e4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:c1:0f:2c:73:e1:c1:b6:4a:7f:4c:35:20:a7:
1c:41:63:b9:0a:bc:a7:d5:11:e4:06:ea:2c:05:32:
31:95:36:9a:9b:5e:1a:64:ef:27:52:e5:a9:0c:21:
ef:41:4b:fc:39:e2:d1:48:f9:35:50:ad:a2:53:47:
8f:b4:38:87:15:e3:b6:79:06:f4:89:92:fa:2b:54:
73:28:34:d4:b8:84:3b:d3:fc:1d:48:c6:8d:06:7d:
16:df:2c:51:fa:2c:df:2d:35:f1:cb:9e:f6:79:48:
76:0c:5f:9a:ff:2e:bf:79:02:cb:73:2b:9f:2a:95:
8a:69:f6:40:cf:fd:72:a5:e6:ec:58:22:41:79:26:
65:60:b9:53:7c:5e:19:d7:50:e5:3c:c2:f1:42:86:
4b:1e:c2:b6:3f:b7:a3:97:d9:c9:08:0a:61:ea:04:
da:dc:c5:08:bd:d7:9b:5f:fe:57:65:e5:80:a3:50:
06:41:5a:b0:49:53:1f:2d:d9:40:65:db:c0:f6:cd:
e8:1b:91:db:e7:4c:50:9c:7a:f7:dd:32:5b:52:c4:
36:f7:29:fa:58:17:68:7e:8a:90:92:67:25:d7:5c:
b6:5a:ba:f0:ce:87:52:33:44:3c:35:36:e3:43:e3:
68:6f:5a:9d:d7:01:b2:50:89:78:9c:24:8e:27:95:
96:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:B1:59:2E:95:73:35:0B:6F:9C:A7:5E:55:B8:BD:11:69:89:4E:4D
X509v3 Authority Key Identifier:
keyid:4C:D9:08:91:A7:93:2F:73:56:A8:03:33:9D:A0:CC:DF:63:AD:2D:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TNkIkaeTL3NWqAMznaDM32OtLTU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/6a9378-2fa7-482d-8c7c-69ca4cb65f97/1/TNkIkaeTL3NWqAMznaDM32OtLTU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/6a9378-2fa7-482d-8c7c-69ca4cb65f97/1/TNkIkaeTL3NWqAMznaDM32OtLTU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:af:39:42:d8:4a:da:0c:2e:f9:01:bb:2d:69:3b:0d:0f:fb:
8b:8f:1a:0c:20:b1:5f:42:5b:b7:8c:f6:6d:df:9f:fc:ff:83:
41:a3:48:76:38:50:4d:81:a3:1a:b9:16:59:62:e4:7d:c4:f5:
4c:c2:fc:eb:9f:76:04:82:a2:95:9a:ab:dc:9b:ed:fa:af:3b:
ea:e8:21:f4:6c:bb:da:6f:13:e9:66:c9:79:8f:1f:3e:01:bb:
ed:ea:50:da:a5:45:01:c4:9e:e3:8c:f2:9d:5b:4d:d2:ca:15:
7d:ed:e4:70:92:8e:99:c1:56:e7:1e:37:71:04:9e:78:bc:21:
00:32:9a:ec:33:ba:c3:81:3a:ff:a4:bd:bb:84:ca:4f:3b:2a:
d8:15:62:36:a4:b2:45:cd:90:07:58:39:09:a7:8f:f2:17:91:
70:b8:fe:cb:38:d4:3f:e6:8a:3b:fa:22:60:a1:2e:53:d4:33:
d2:b1:f1:e5:ae:05:5e:23:f7:61:f3:a9:5a:2f:cf:91:92:4a:
8d:1d:ac:8b:5c:f5:4e:65:dd:30:cc:61:2c:1c:e6:82:b3:e6:
3e:aa:6a:f9:90:37:93:08:f8:94:59:d1:0c:8b:29:fd:b5:93:
9f:8c:a4:fc:57:ef:b1:18:38:05:cb:18:ef:b3:a8:67:29:c0:
d2:87:ea:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 02:20:25 2025 by rpki-client