Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/a53644-9da6-4d29-b9b6-e78cfa79eff1/1/TnVF7uZtqjlEP_n4j1IkR_eGN4M.mft
File: TnVF7uZtqjlEP_n4j1IkR_eGN4M.mft (raw, json)
Hash identifier: ERp51QRpWhxpclEuBYwsv6C8/vdTutThyNxGyKaRWgo=
Subject key identifier: 98:B3:8A:9E:ED:3E:73:2D:0E:C5:4E:37:72:13:54:8B:AF:58:C0:C7
Authority key identifier: 4E:75:45:EE:E6:6D:AA:39:44:3F:F9:F8:8F:52:24:47:F7:86:37:83
Certificate issuer: /CN=4e7545eee66daa39443ff9f88f522447f7863783
Certificate serial: 019A50E3DE5ED3599CB36480BD7727214879
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TnVF7uZtqjlEP_n4j1IkR_eGN4M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/a53644-9da6-4d29-b9b6-e78cfa79eff1/1/TnVF7uZtqjlEP_n4j1IkR_eGN4M.mft
Manifest number: 1265
Signing time: Tue 04 Nov 2025 22:01:42 +0000
Manifest this update: Tue 04 Nov 2025 22:01:42 +0000
Manifest next update: Wed 05 Nov 2025 22:01:42 +0000
Files and hashes: 1: NRxH6LDQFnqwlvTIsGf-f3zdgZM.roa (hash: 45q8sJ0aVkz5DnC4TEh7gH+UDuL3EgyXgzbbWcDZotI=)
2: TnVF7uZtqjlEP_n4j1IkR_eGN4M.crl (hash: Rfo9D5UfSWJJDSFX5PWuYXC40KEI2gw4V2y8sMNo7h8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/a53644-9da6-4d29-b9b6-e78cfa79eff1/1/TnVF7uZtqjlEP_n4j1IkR_eGN4M.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/a53644-9da6-4d29-b9b6-e78cfa79eff1/1/TnVF7uZtqjlEP_n4j1IkR_eGN4M.mft
rsync://rpki.ripe.net/repository/DEFAULT/TnVF7uZtqjlEP_n4j1IkR_eGN4M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:01:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:e3:de:5e:d3:59:9c:b3:64:80:bd:77:27:21:48:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e7545eee66daa39443ff9f88f522447f7863783
Validity
Not Before: Nov 4 22:01:42 2025 GMT
Not After : Nov 5 22:01:42 2025 GMT
Subject: CN=98b38a9eed3e732d0ec54e377213548baf58c0c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:cd:a8:97:52:2a:31:3b:eb:18:45:4c:e4:6c:
6a:01:4f:53:9d:8a:1f:c3:e1:5b:b6:f8:67:a1:7a:
9a:63:ce:e2:97:c7:06:2f:c2:66:a8:c6:a6:3c:92:
5b:75:ef:c8:7a:9c:eb:7a:56:fc:66:fe:fc:e9:44:
1a:f3:ae:b3:e3:b0:66:bd:5d:99:10:30:8c:bf:55:
fe:40:01:c3:2d:b5:4a:db:aa:d1:4f:22:fd:58:ee:
4e:8c:79:fa:fa:28:a3:ea:c1:05:74:41:44:e3:e0:
d6:65:2e:c8:d7:f3:da:be:b3:ff:44:4d:be:19:46:
4a:85:57:37:d8:f4:63:9f:42:a9:71:e2:50:42:dd:
d3:e8:8d:bd:d3:75:ba:f7:13:2e:0c:7e:20:9f:3d:
57:fa:09:c0:44:1e:fa:a2:9c:c6:73:3b:69:68:32:
3c:e1:e7:41:63:6c:ba:24:16:e2:28:17:d8:7b:89:
e4:ad:72:99:f5:cc:9b:a3:41:92:15:9b:e0:1d:6c:
1b:a7:24:40:07:31:ab:09:d3:6d:02:06:19:7e:cb:
12:10:68:f8:a2:05:d2:ff:55:7f:8a:1a:d4:b2:3f:
85:a9:89:4b:e8:ca:53:69:1e:28:fc:1b:8f:1b:be:
db:97:48:a8:df:29:3a:2d:ed:43:eb:3b:ca:f8:6d:
25:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:B3:8A:9E:ED:3E:73:2D:0E:C5:4E:37:72:13:54:8B:AF:58:C0:C7
X509v3 Authority Key Identifier:
keyid:4E:75:45:EE:E6:6D:AA:39:44:3F:F9:F8:8F:52:24:47:F7:86:37:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TnVF7uZtqjlEP_n4j1IkR_eGN4M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/a53644-9da6-4d29-b9b6-e78cfa79eff1/1/TnVF7uZtqjlEP_n4j1IkR_eGN4M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/a53644-9da6-4d29-b9b6-e78cfa79eff1/1/TnVF7uZtqjlEP_n4j1IkR_eGN4M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:8c:1e:c9:c1:f3:76:63:2c:cd:d1:fc:fd:5a:21:d2:c8:50:
bb:7a:f2:71:2d:58:b5:b9:87:3d:a9:ec:f7:06:54:31:d0:17:
7a:93:50:e1:cc:18:fc:ae:6f:c3:07:2d:0d:46:09:3f:cd:73:
ba:bf:aa:0a:a7:69:9d:3b:6f:59:10:1f:a2:f7:fa:a8:4e:bd:
8e:83:88:f4:6b:6c:88:95:3f:7e:a8:70:20:f8:0e:7e:4d:c0:
32:12:a1:d8:68:31:d7:83:8e:b3:f1:02:6b:ac:93:a5:51:f8:
59:7f:cc:62:ef:97:8c:1f:79:a8:a0:42:b5:44:ec:3d:02:ce:
f8:d6:b1:56:a8:20:da:cc:96:97:50:81:ee:f3:96:73:69:84:
74:56:83:2e:58:fc:71:51:f9:14:2d:b9:0b:64:6a:ec:af:04:
f9:12:b9:47:6d:03:5c:01:8b:af:49:8d:8a:cc:fc:bc:6a:08:
ab:0d:92:5e:89:6b:8d:83:60:fb:4d:2f:bf:c6:01:6d:f9:fc:
2c:34:67:16:c0:69:69:83:97:8f:7c:07:4a:fa:55:b3:a8:da:
19:38:9a:c2:fe:07:e6:72:65:5d:c8:2c:b2:00:69:ff:c3:96:
2c:77:7e:aa:bd:22:f6:ae:6a:94:a0:c4:78:a9:0b:b8:53:43:
7b:9a:0c:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 08:19:11 2025 by rpki-client