Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/5a0f81-31e2-4db2-8339-9241ff6ec3bf/1/TOdM9jcjwCadUoOxBlghrzhKmiY.mft
File: TOdM9jcjwCadUoOxBlghrzhKmiY.mft (raw, json)
Hash identifier: SYJwTdp5j448sY3XxNuVrjy6p+jnjJiEzJQmosOPFso=
Subject key identifier: BA:DC:72:E2:87:A6:F6:1A:79:5B:58:DC:59:09:A4:F3:3C:74:E3:D2
Authority key identifier: 4C:E7:4C:F6:37:23:C0:26:9D:52:83:B1:06:58:21:AF:38:4A:9A:26
Certificate issuer: /CN=4ce74cf63723c0269d5283b1065821af384a9a26
Certificate serial: 019A515128648B60DD426FF6E617DAD06AB0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TOdM9jcjwCadUoOxBlghrzhKmiY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/5a0f81-31e2-4db2-8339-9241ff6ec3bf/1/TOdM9jcjwCadUoOxBlghrzhKmiY.mft
Manifest number: 07A5
Signing time: Wed 05 Nov 2025 00:01:04 +0000
Manifest this update: Wed 05 Nov 2025 00:01:04 +0000
Manifest next update: Thu 06 Nov 2025 00:01:04 +0000
Files and hashes: 1: CEobCVyOq89vMXgU83DpMwfT0Wo.roa (hash: DcQa6f54mwH80zIkbXchOx9QQQsb0gD6KDYchnHbpMk=)
2: HmvWFjOJ5QNe_0VBD7eTmwN-1XQ.roa (hash: StcAstNQR/UIdmTZ6Q1iuGPLcyfmxWT20PZ/h6s9A5g=)
3: TOdM9jcjwCadUoOxBlghrzhKmiY.crl (hash: D4QsCT32us0G8NiWPF4YPCWkG4AZUOMysxyOE2O8im8=)
4: ysuILm8GTM9rr0tx4VWy1ub_M3Y.roa (hash: wnzsKo97TxUOdXYRLd6GXvYrsFQQtPcVycGoHAT6hoo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/5a0f81-31e2-4db2-8339-9241ff6ec3bf/1/TOdM9jcjwCadUoOxBlghrzhKmiY.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/5a0f81-31e2-4db2-8339-9241ff6ec3bf/1/TOdM9jcjwCadUoOxBlghrzhKmiY.mft
rsync://rpki.ripe.net/repository/DEFAULT/TOdM9jcjwCadUoOxBlghrzhKmiY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 00:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:51:28:64:8b:60:dd:42:6f:f6:e6:17:da:d0:6a:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ce74cf63723c0269d5283b1065821af384a9a26
Validity
Not Before: Nov 5 00:01:04 2025 GMT
Not After : Nov 6 00:01:04 2025 GMT
Subject: CN=badc72e287a6f61a795b58dc5909a4f33c74e3d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:0f:f7:81:d2:a3:c7:e1:4d:a5:93:05:7a:5b:
cb:ad:cb:ea:ad:3c:63:14:30:2b:c8:73:6a:14:e2:
c4:3b:2d:05:77:e6:94:c7:03:09:e8:6a:a4:26:b9:
d3:c8:8f:15:85:3b:8f:e2:67:75:61:58:24:39:81:
89:e5:5e:72:d8:44:29:6a:cf:c2:8d:ad:0e:11:ab:
87:9a:e1:f5:30:35:55:f0:ed:fd:4d:95:a2:3d:ca:
2e:40:c0:25:82:37:8d:72:a3:fc:54:ef:45:dc:2f:
7e:0d:fe:58:9d:a7:b7:1d:96:c9:3c:e6:f5:8f:8f:
34:cf:1e:09:2b:68:41:72:2c:0a:0c:c7:34:62:4c:
25:a5:7c:d9:b3:d0:bf:d1:9a:0d:e7:70:de:3a:7e:
ba:95:cf:80:01:98:1d:de:05:98:a6:9b:34:2b:c6:
0c:b4:36:5e:19:ca:ad:6c:a8:9d:54:e7:82:e0:18:
af:ca:22:31:a0:bb:9f:02:f3:1e:f0:d7:e1:35:b1:
e4:5a:72:3e:9b:bb:8d:43:61:78:0a:59:09:18:ac:
75:08:c3:67:74:05:0c:f1:25:6c:24:e2:ef:9b:4f:
61:b6:03:7b:0b:12:1c:e0:9c:76:b8:dd:cf:27:3e:
45:bb:2b:2a:b9:27:81:34:4b:ed:dd:00:fd:49:2e:
06:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:DC:72:E2:87:A6:F6:1A:79:5B:58:DC:59:09:A4:F3:3C:74:E3:D2
X509v3 Authority Key Identifier:
keyid:4C:E7:4C:F6:37:23:C0:26:9D:52:83:B1:06:58:21:AF:38:4A:9A:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TOdM9jcjwCadUoOxBlghrzhKmiY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5a0f81-31e2-4db2-8339-9241ff6ec3bf/1/TOdM9jcjwCadUoOxBlghrzhKmiY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5a0f81-31e2-4db2-8339-9241ff6ec3bf/1/TOdM9jcjwCadUoOxBlghrzhKmiY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:be:22:d7:32:9c:72:97:96:69:cc:d3:71:29:cc:ed:cf:f4:
2d:62:45:ad:56:ac:fc:cc:b7:0c:20:fc:87:71:f7:6e:ba:3a:
b8:bc:d1:53:90:60:84:71:84:14:a7:d7:6b:9b:59:ee:a7:48:
2b:b0:7f:b1:b9:60:99:46:8d:a1:22:0b:18:6d:79:d4:6d:35:
73:50:00:e0:c5:fd:90:62:ce:17:77:1a:41:32:eb:d3:07:3f:
e0:c7:7d:a8:b9:07:1c:df:d6:13:f3:a3:06:c6:b1:ed:5e:4c:
19:76:51:7c:f7:cc:8a:82:0c:ae:d7:95:c6:60:39:ca:82:99:
ec:d6:07:e6:36:40:8c:10:2c:f0:31:db:54:11:12:ff:ae:2a:
be:e3:3d:13:55:54:56:d7:fa:1a:29:97:bf:86:a9:5b:d6:27:
05:45:a5:f1:79:50:d7:e9:d6:b2:ec:25:75:2d:ee:f9:85:ea:
2e:3a:be:1a:bb:3f:14:dd:4c:d6:5c:4a:93:23:d3:04:f5:35:
cf:2b:a4:64:67:3b:11:6d:07:79:be:42:d0:dd:e6:76:34:7d:
f2:12:fb:39:30:89:40:ad:5c:a5:7c:70:ac:9c:88:d1:fe:e2:
4d:3d:ce:ce:13:b5:5b:e1:98:49:70:a3:bd:94:d0:2d:78:ef:
75:65:01:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 10:06:56 2025 by rpki-client