Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/e4e696-9d78-414c-af40-cf56c66a0ac0/1/TJMhPYj6h060Rg4sXPG7GpHakHg.mft
File: TJMhPYj6h060Rg4sXPG7GpHakHg.mft (raw, json)
Hash identifier: heg9W8TEYz8E0/YnIeYMC6kHOXmf1jWm1gk1WnYaTcg=
Subject key identifier: 89:5E:F8:9F:00:4E:EB:D6:C0:BC:A4:28:5F:FB:2C:BC:54:18:7B:19
Authority key identifier: 4C:93:21:3D:88:FA:87:4E:B4:46:0E:2C:5C:F1:BB:1A:91:DA:90:78
Certificate issuer: /CN=4c93213d88fa874eb4460e2c5cf1bb1a91da9078
Certificate serial: 019A4DAAC767B7C566DED15468E9EDCD5E21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TJMhPYj6h060Rg4sXPG7GpHakHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/e4e696-9d78-414c-af40-cf56c66a0ac0/1/TJMhPYj6h060Rg4sXPG7GpHakHg.mft
Manifest number: 170B
Signing time: Tue 04 Nov 2025 07:00:28 +0000
Manifest this update: Tue 04 Nov 2025 07:00:28 +0000
Manifest next update: Wed 05 Nov 2025 07:00:28 +0000
Files and hashes: 1: 1LkKTJE8VWFRjFVsY2vc5JNxUyo.roa (hash: gqvXE5VHGf5Er/eIvJDh+DnQ30d/N/LUShz/R2QWX8s=)
2: TJMhPYj6h060Rg4sXPG7GpHakHg.crl (hash: YnsnKoCj6uWlV+ULttZ8vgJAhBO/or0ucwDOb0B50so=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/e4e696-9d78-414c-af40-cf56c66a0ac0/1/TJMhPYj6h060Rg4sXPG7GpHakHg.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/e4e696-9d78-414c-af40-cf56c66a0ac0/1/TJMhPYj6h060Rg4sXPG7GpHakHg.mft
rsync://rpki.ripe.net/repository/DEFAULT/TJMhPYj6h060Rg4sXPG7GpHakHg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 07:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:aa:c7:67:b7:c5:66:de:d1:54:68:e9:ed:cd:5e:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c93213d88fa874eb4460e2c5cf1bb1a91da9078
Validity
Not Before: Nov 4 07:00:28 2025 GMT
Not After : Nov 5 07:00:28 2025 GMT
Subject: CN=895ef89f004eebd6c0bca4285ffb2cbc54187b19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:73:a9:07:ba:37:bb:d2:59:07:7b:4a:0c:e1:
ba:92:0b:b2:67:60:8b:6b:69:e8:f1:00:3b:18:f2:
ab:2f:86:e4:69:3e:38:7d:95:35:d1:ee:db:b6:c0:
49:66:96:7b:be:2e:ff:dd:ed:de:b6:84:18:f3:f8:
0b:ca:d3:5c:24:11:bc:01:de:20:a5:08:f5:51:1c:
91:90:75:2e:b4:b4:d1:54:a7:0b:31:05:f7:38:b5:
ec:cd:48:b6:c3:26:11:e8:81:56:fe:91:82:19:4e:
62:79:ac:01:eb:2d:4a:51:2e:11:a2:83:18:e9:0d:
bf:aa:46:17:6e:28:fb:94:e4:e6:c9:83:35:c4:e7:
1d:f1:07:fc:2d:b9:c2:fe:49:a8:25:ea:00:5d:09:
e9:a8:ee:c4:a4:d3:9f:c2:83:82:47:96:26:2a:3f:
ac:90:54:71:59:32:a8:6f:a6:73:fc:a8:3a:6e:95:
ea:e4:1f:7b:72:ee:f0:60:db:c3:0c:fa:c6:52:f6:
a3:f6:df:d0:07:79:07:0a:db:cf:71:13:40:d6:64:
ca:94:a3:27:46:88:2a:31:55:c9:60:cd:86:3a:4a:
15:89:b2:5f:c5:5f:c8:d6:80:ba:14:91:08:a4:d5:
9a:f2:ce:58:b2:34:ff:61:49:55:15:01:0a:b2:2b:
67:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:5E:F8:9F:00:4E:EB:D6:C0:BC:A4:28:5F:FB:2C:BC:54:18:7B:19
X509v3 Authority Key Identifier:
keyid:4C:93:21:3D:88:FA:87:4E:B4:46:0E:2C:5C:F1:BB:1A:91:DA:90:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TJMhPYj6h060Rg4sXPG7GpHakHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/e4e696-9d78-414c-af40-cf56c66a0ac0/1/TJMhPYj6h060Rg4sXPG7GpHakHg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/e4e696-9d78-414c-af40-cf56c66a0ac0/1/TJMhPYj6h060Rg4sXPG7GpHakHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:9e:55:0f:e9:23:25:bd:46:17:02:88:03:2a:ae:73:5a:06:
61:12:8f:1b:75:d9:63:ea:1e:22:39:8b:05:bb:3e:43:68:43:
cc:15:26:c7:ef:45:60:9c:77:9c:63:ab:c0:46:6f:4e:c3:35:
88:81:c0:16:c9:7c:ef:71:b4:b3:48:b6:50:36:6f:71:77:97:
7d:a7:c1:c1:17:f7:86:1a:54:b6:c3:d0:d3:f9:df:a3:6b:c5:
12:34:de:b5:c4:58:af:79:b1:ef:2e:20:90:90:75:f2:00:03:
41:ba:29:23:14:5a:31:1f:0c:77:77:63:28:c7:54:0b:56:54:
b1:78:2e:ad:19:57:73:db:0f:93:dc:7b:e0:0e:04:1e:38:15:
1b:cd:27:26:5f:0d:95:a4:fb:1a:61:3b:4e:ab:90:2b:49:c0:
7b:12:df:48:3b:1f:35:bc:ab:6e:77:bb:1f:b0:fa:89:46:e8:
b7:ad:3f:65:73:d2:af:12:5f:66:f0:a2:84:30:ca:59:f3:d5:
6a:14:b7:39:15:b2:0a:3a:b2:25:63:df:29:12:f5:21:dc:c4:
2a:de:98:83:0a:ca:1e:a7:19:69:9b:bc:05:16:41:e5:68:5b:
b2:11:24:3a:9f:b0:37:c6:cb:b1:dc:98:34:8f:d9:b6:28:25:
87:50:55:ea
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpNqsdnt8Vm3tFUaOntzV4hMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRjOTMyMTNkODhmYTg3NGViNDQ2MGUyYzVjZjFiYjFhOTFk
YTkwNzgwHhcNMjUxMTA0MDcwMDI4WhcNMjUxMTA1MDcwMDI4WjAzMTEwLwYDVQQD
Eyg4OTVlZjg5ZjAwNGVlYmQ2YzBiY2E0Mjg1ZmZiMmNiYzU0MTg3YjE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+XOpB7o3u9JZB3tKDOG6kguyZ2CL
a2no8QA7GPKrL4bkaT44fZU10e7btsBJZpZ7vi7/3e3etoQY8/gLytNcJBG8Ad4g
pQj1URyRkHUutLTRVKcLMQX3OLXszUi2wyYR6IFW/pGCGU5ieawB6y1KUS4RooMY
6Q2/qkYXbij7lOTmyYM1xOcd8Qf8LbnC/kmoJeoAXQnpqO7EpNOfwoOCR5YmKj+s
kFRxWTKob6Zz/Kg6bpXq5B97cu7wYNvDDPrGUvaj9t/QB3kHCtvPcRNA1mTKlKMn
RogqMVXJYM2GOkoVibJfxV/I1oC6FJEIpNWa8s5YsjT/YUlVFQEKsitnvQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIle+J8ATuvWwLykKF/7LLxUGHsZMB8GA1UdIwQY
MBaAFEyTIT2I+odOtEYOLFzxuxqR2pB4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVEpNaFBZajZoMDYwUmc0c1hQRzdHcEhha0hnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS9lNGU2OTYtOWQ3OC00MTRjLWFmNDAt
Y2Y1NmM2NmEwYWMwLzEvVEpNaFBZajZoMDYwUmc0c1hQRzdHcEhha0hnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMS9lNGU2OTYtOWQ3OC00MTRjLWFmNDAtY2Y1NmM2NmEwYWMw
LzEvVEpNaFBZajZoMDYwUmc0c1hQRzdHcEhha0hnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHp5VD+kj
Jb1GFwKIAyquc1oGYRKPG3XZY+oeIjmLBbs+Q2hDzBUmx+9FYJx3nGOrwEZvTsM1
iIHAFsl873G0s0i2UDZvcXeXfafBwRf3hhpUtsPQ0/nfo2vFEjTetcRYr3mx7y4g
kJB18gADQbopIxRaMR8Md3djKMdUC1ZUsXgurRlXc9sPk9x74A4EHjgVG80nJl8N
laT7GmE7TquQK0nAexLfSDsfNbyrbne7H7D6iUbot60/ZXPSrxJfZvCihDDKWfPV
ahS3ORWyCjqyJWPfKRL1IdzEKt6YgwrKHqcZaZu8BRZB5WhbshEkOp+wN8bLsdyY
NI/Ztiglh1BV6g==
-----END CERTIFICATE-----
Generated at Tue Nov 4 10:43:48 2025 by rpki-client