Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/2215f7-887a-4bd5-bf97-ffb709f7668c/1/TIc4nvQfGMH8yCdUNJ6nCWmAseM.mft
File: TIc4nvQfGMH8yCdUNJ6nCWmAseM.mft (raw, json)
Hash identifier: KxZne3IDHdkWbP26S7HTM2L5/oPmvoWe594g8EClXe8=
Subject key identifier: 33:A7:EB:57:B7:0F:4D:01:1E:41:2F:DC:4A:E8:F6:C2:7F:16:74:A8
Authority key identifier: 4C:87:38:9E:F4:1F:18:C1:FC:C8:27:54:34:9E:A7:09:69:80:B1:E3
Certificate issuer: /CN=4c87389ef41f18c1fcc82754349ea7096980b1e3
Certificate serial: 019A4E18F0D80277348526CEF0B9D436CCD6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TIc4nvQfGMH8yCdUNJ6nCWmAseM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/2215f7-887a-4bd5-bf97-ffb709f7668c/1/TIc4nvQfGMH8yCdUNJ6nCWmAseM.mft
Manifest number: 1713
Signing time: Tue 04 Nov 2025 09:00:48 +0000
Manifest this update: Tue 04 Nov 2025 09:00:48 +0000
Manifest next update: Wed 05 Nov 2025 09:00:48 +0000
Files and hashes: 1: TIc4nvQfGMH8yCdUNJ6nCWmAseM.crl (hash: fDxlYLIEicwcg9DEQKKnKjqRp37CuA4bgSOU6dgA+QA=)
2: VCmh7D4aDnJ3RvUgB4_x96-F7yk.roa (hash: Fvy+64reQdJIkB2LlOhrfVK5VykM8awZbivVRRObMH8=)
3: W2TNL5im0fX66hopLKpEaeHN1Vw.roa (hash: jFMMnSyz7YrR/mDL9VXSfjnRvEdkg9GR9m7oXoI7Q1I=)
4: cC9Kn5RNwJ59ItW6IXpERzZosPw.roa (hash: Tn7jWRKA9agcVwEoCtyV/3OdfNNW+6uN3rC9ZNlnP8I=)
5: zpLViSP1mtGrcERbXmR4V_Zd6cE.roa (hash: yuKnJy9vuRLwT9M7eUlYmO+BbnE5uOEv2Od3+EfguMU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/2215f7-887a-4bd5-bf97-ffb709f7668c/1/TIc4nvQfGMH8yCdUNJ6nCWmAseM.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/2215f7-887a-4bd5-bf97-ffb709f7668c/1/TIc4nvQfGMH8yCdUNJ6nCWmAseM.mft
rsync://rpki.ripe.net/repository/DEFAULT/TIc4nvQfGMH8yCdUNJ6nCWmAseM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:18:f0:d8:02:77:34:85:26:ce:f0:b9:d4:36:cc:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c87389ef41f18c1fcc82754349ea7096980b1e3
Validity
Not Before: Nov 4 09:00:48 2025 GMT
Not After : Nov 5 09:00:48 2025 GMT
Subject: CN=33a7eb57b70f4d011e412fdc4ae8f6c27f1674a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:52:93:9a:77:55:6c:51:5a:fc:4b:70:22:b7:
d4:43:04:01:4e:f8:2a:f6:af:4f:4b:88:01:58:67:
7d:1c:e1:ba:66:2d:48:46:5d:b9:23:e5:c9:48:b0:
f5:2c:89:e7:14:94:31:cb:fb:e0:f4:4d:34:d5:ec:
bb:73:b9:b9:11:f1:3a:fc:59:9f:26:2a:5e:dc:19:
4b:cb:e9:87:96:e4:27:1f:3b:35:03:04:ed:56:3d:
18:43:14:50:ab:ac:d3:44:d1:2d:64:f8:c8:47:fd:
ac:a5:18:90:1b:f5:6e:41:f0:96:cf:0a:f1:df:16:
6d:48:b3:19:72:7a:e3:0f:f8:bf:d4:46:04:6d:c8:
37:73:0e:e3:c3:cc:2b:0e:b4:37:56:48:44:c8:fb:
35:f6:f7:88:49:57:2e:62:a9:56:82:32:eb:a7:bd:
13:4d:97:b0:53:b5:46:56:01:a7:d0:96:fb:27:0e:
8e:a8:fe:84:2b:d2:60:30:18:86:e0:e7:0d:b2:90:
03:57:b5:e0:af:50:87:25:eb:99:5b:0c:66:77:b2:
32:8b:72:c8:8b:73:28:0a:33:2d:45:dd:c5:b1:72:
32:7d:c7:c7:aa:36:9e:31:77:3a:39:8a:e0:fd:e5:
c9:de:6c:92:07:f0:5c:94:27:92:e2:7c:37:70:8e:
20:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:A7:EB:57:B7:0F:4D:01:1E:41:2F:DC:4A:E8:F6:C2:7F:16:74:A8
X509v3 Authority Key Identifier:
keyid:4C:87:38:9E:F4:1F:18:C1:FC:C8:27:54:34:9E:A7:09:69:80:B1:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TIc4nvQfGMH8yCdUNJ6nCWmAseM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/2215f7-887a-4bd5-bf97-ffb709f7668c/1/TIc4nvQfGMH8yCdUNJ6nCWmAseM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/2215f7-887a-4bd5-bf97-ffb709f7668c/1/TIc4nvQfGMH8yCdUNJ6nCWmAseM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:1d:31:c6:9a:f5:6a:b1:41:aa:eb:c9:3e:2c:56:4a:26:28:
18:3c:74:b8:ab:4f:87:90:f7:3f:2a:c4:f7:7d:02:0e:b3:33:
63:39:3b:91:64:9e:14:54:9e:64:14:17:18:be:60:bd:fe:d5:
c6:15:7e:16:43:f7:34:eb:6f:cd:a2:b7:7f:27:e2:d7:fa:e0:
8d:8e:98:44:c2:cd:95:32:7d:66:73:f5:a4:00:4e:c5:5c:4a:
3d:55:31:92:a9:1c:14:81:37:8f:47:59:ea:68:a8:c2:bb:67:
fa:7d:b8:75:55:64:b4:4e:53:f8:27:cf:90:cc:b8:de:96:4b:
ee:3f:96:58:53:b6:d9:b8:2a:7a:fe:4f:dd:56:98:a8:57:d2:
3e:07:2c:99:df:37:e9:0a:73:ed:87:1f:f1:86:34:d5:57:32:
64:c3:53:18:a2:96:ec:c4:e4:ab:65:36:dd:8a:82:98:b7:61:
df:a3:6a:20:a3:81:d3:51:23:0c:00:91:bc:02:a9:9d:0c:80:
9a:dd:f6:5d:f7:16:e0:fc:0f:6b:75:9a:b5:71:80:0d:0d:35:
3b:ae:36:de:e1:c1:2e:9e:4e:d8:2c:7c:70:05:fd:b7:f7:7e:
34:d2:80:0f:e1:13:28:09:5f:a4:e9:79:5c:b4:25:4e:55:3f:
17:a2:16:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:48:00 2025 by rpki-client