Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/0c9de8-cef2-4d8d-a920-76594a19177c/1/1-TmwPxKU69NaOxXWldfpH4y0H6A.mft
File: 1-TmwPxKU69NaOxXWldfpH4y0H6A.mft (raw, json)
Hash identifier: 3fq3EhxKR9Kgcm5fHJpNJdJB8jgYk4GNKYwYXRwI/IA=
Subject key identifier: 47:DE:46:0F:79:35:2D:65:32:34:67:22:E5:A1:49:13:DF:A2:17:2D
Authority key identifier: F9:39:B0:3F:12:94:EB:D3:5A:3B:15:D6:95:D7:E9:1F:8C:B4:1F:A0
Certificate issuer: /CN=f939b03f1294ebd35a3b15d695d7e91f8cb41fa0
Certificate serial: 019A4E865BC6E316144C8EF043BA76CE1097
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-TmwPxKU69NaOxXWldfpH4y0H6A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/0c9de8-cef2-4d8d-a920-76594a19177c/1/1-TmwPxKU69NaOxXWldfpH4y0H6A.mft
Manifest number: 1358
Signing time: Tue 04 Nov 2025 11:00:19 +0000
Manifest this update: Tue 04 Nov 2025 11:00:19 +0000
Manifest next update: Wed 05 Nov 2025 11:00:19 +0000
Files and hashes: 1: 1-TmwPxKU69NaOxXWldfpH4y0H6A.crl (hash: uBMgkFMjnSBBaCaiAWnlKMAoEYZ9iQHQndSe28SeswQ=)
2: S1K-LNOfEdqMwJPR6JwjXy3twNM.roa (hash: 6+dgtQWWnCxkd6rViHnDLK3NWbLzGQNeNx6DA6f+PL0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/0c9de8-cef2-4d8d-a920-76594a19177c/1/1-TmwPxKU69NaOxXWldfpH4y0H6A.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/0c9de8-cef2-4d8d-a920-76594a19177c/1/1-TmwPxKU69NaOxXWldfpH4y0H6A.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-TmwPxKU69NaOxXWldfpH4y0H6A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:86:5b:c6:e3:16:14:4c:8e:f0:43:ba:76:ce:10:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f939b03f1294ebd35a3b15d695d7e91f8cb41fa0
Validity
Not Before: Nov 4 11:00:19 2025 GMT
Not After : Nov 5 11:00:19 2025 GMT
Subject: CN=47de460f79352d6532346722e5a14913dfa2172d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:95:ad:1a:c4:9b:16:e7:08:03:48:8e:24:28:
72:b6:77:b1:42:ba:f1:02:3b:96:ec:5c:3e:47:d7:
39:9b:2a:7a:2a:b3:18:b9:d9:0e:92:f3:1d:67:6f:
89:9a:bc:0c:a1:13:ed:61:c4:4e:69:fb:a2:85:c8:
83:88:e6:11:cc:fe:f2:30:e1:bf:bf:21:09:c8:ce:
39:0e:e4:e8:dd:92:c8:de:76:26:1a:61:23:1e:e5:
53:6a:0d:73:c8:ab:1b:db:bc:c3:82:02:71:be:43:
ea:30:30:cc:00:90:a2:6f:13:62:b2:64:9a:1d:0a:
1c:48:e8:1c:0b:49:10:8a:f6:b4:36:71:a0:8e:b1:
3a:7b:49:c5:de:b1:44:f5:7f:12:b8:b3:c0:45:cb:
22:c6:b5:c8:33:59:48:25:42:a7:0d:9f:4c:af:45:
c1:4d:30:ab:1d:33:a9:13:ea:df:50:a2:36:ee:37:
8e:58:cd:eb:61:7c:94:b1:b4:f6:43:4d:d0:0e:30:
30:57:ff:6d:fb:2a:c3:8a:1a:8e:d9:48:e0:08:cd:
1d:01:6e:e2:d5:5f:5e:e9:f2:e2:02:34:11:93:40:
61:51:95:ca:4b:90:d3:38:8c:79:cf:dd:31:dd:da:
0b:f2:d3:f0:5a:ae:98:da:c0:7a:d5:b7:0c:2d:a9:
44:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:DE:46:0F:79:35:2D:65:32:34:67:22:E5:A1:49:13:DF:A2:17:2D
X509v3 Authority Key Identifier:
keyid:F9:39:B0:3F:12:94:EB:D3:5A:3B:15:D6:95:D7:E9:1F:8C:B4:1F:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-TmwPxKU69NaOxXWldfpH4y0H6A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/0c9de8-cef2-4d8d-a920-76594a19177c/1/1-TmwPxKU69NaOxXWldfpH4y0H6A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/0c9de8-cef2-4d8d-a920-76594a19177c/1/1-TmwPxKU69NaOxXWldfpH4y0H6A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:20:85:aa:21:46:34:b1:dc:71:dd:a4:d6:d4:ac:24:3d:ad:
e2:e8:98:f0:52:95:97:16:77:ce:3a:74:fc:bc:7d:7a:52:45:
08:f4:13:65:e8:5e:ae:31:8e:6a:8a:11:c2:3b:f2:b6:14:d8:
d6:20:52:81:b9:89:4f:94:ec:1c:7a:53:c3:73:3e:e6:71:34:
a4:d3:86:07:dd:f9:53:dd:63:fc:d6:28:cd:81:92:fd:48:38:
4e:45:48:91:dd:79:fd:58:bc:8b:91:12:42:fb:d1:43:c2:fc:
d7:66:10:d3:2e:45:54:f4:3d:d8:2a:bf:36:d0:5b:74:21:dc:
08:a1:51:58:b6:35:75:9f:31:44:20:f0:00:1b:1e:2f:17:3c:
c4:0b:cf:ce:c4:4a:6d:4f:36:2c:c6:6e:2c:a0:6d:b1:75:a3:
61:d5:c4:24:54:2a:80:91:8e:55:cc:61:7c:39:c0:71:fe:53:
b6:bd:20:66:e4:8c:f2:ed:07:3a:16:24:74:86:20:b7:16:64:
03:68:dd:56:5d:d6:e4:9c:6d:e9:93:4c:60:a6:aa:a3:bb:18:
de:71:29:8a:3c:d7:47:fa:4e:42:a8:13:41:da:8e:80:05:4f:
34:99:1d:ab:b9:9e:68:b3:b5:bd:6c:30:19:d6:ce:12:02:b6:
16:12:82:79
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZpOhlvG4xYUTI7wQ7p2zhCXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY5MzliMDNmMTI5NGViZDM1YTNiMTVkNjk1ZDdlOTFmOGNi
NDFmYTAwHhcNMjUxMTA0MTEwMDE5WhcNMjUxMTA1MTEwMDE5WjAzMTEwLwYDVQQD
Eyg0N2RlNDYwZjc5MzUyZDY1MzIzNDY3MjJlNWExNDkxM2RmYTIxNzJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjZWtGsSbFucIA0iOJChytnexQrrx
AjuW7Fw+R9c5myp6KrMYudkOkvMdZ2+JmrwMoRPtYcROafuihciDiOYRzP7yMOG/
vyEJyM45DuTo3ZLI3nYmGmEjHuVTag1zyKsb27zDggJxvkPqMDDMAJCibxNismSa
HQocSOgcC0kQiva0NnGgjrE6e0nF3rFE9X8SuLPARcsixrXIM1lIJUKnDZ9Mr0XB
TTCrHTOpE+rfUKI27jeOWM3rYXyUsbT2Q03QDjAwV/9t+yrDihqO2UjgCM0dAW7i
1V9e6fLiAjQRk0BhUZXKS5DTOIx5z90x3doL8tPwWq6Y2sB61bcMLalEmQIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFEfeRg95NS1lMjRnIuWhSRPfohctMB8GA1UdIwQY
MBaAFPk5sD8SlOvTWjsV1pXX6R+MtB+gMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1UbXdQeEtVNjlOYU94WFdsZGZwSDR5MEg2QS5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYTcvMGM5ZGU4LWNlZjItNGQ4ZC1hOTIw
LTc2NTk0YTE5MTc3Yy8xLzEtVG13UHhLVTY5TmFPeFhXbGRmcEg0eTBINkEubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxUL2E3LzBjOWRlOC1jZWYyLTRkOGQtYTkyMC03NjU5NGExOTE3
N2MvMS8xLVRtd1B4S1U2OU5hT3hYV2xkZnBINHkwSDZBLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnyCF
qiFGNLHccd2k1tSsJD2t4uiY8FKVlxZ3zjp0/Lx9elJFCPQTZeherjGOaooRwjvy
thTY1iBSgbmJT5TsHHpTw3M+5nE0pNOGB935U91j/NYozYGS/Ug4TkVIkd15/Vi8
i5ESQvvRQ8L812YQ0y5FVPQ92Cq/NtBbdCHcCKFRWLY1dZ8xRCDwABseLxc8xAvP
zsRKbU82LMZuLKBtsXWjYdXEJFQqgJGOVcxhfDnAcf5Ttr0gZuSM8u0HOhYkdIYg
txZkA2jdVl3W5Jxt6ZNMYKaqo7sY3nEpijzXR/pOQqgTQdqOgAVPNJkdq7meaLO1
vWwwGdbOEgK2FhKCeQ==
-----END CERTIFICATE-----
Generated at Tue Nov 4 18:14:02 2025 by rpki-client