Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/ce001b-a4d8-4f0e-831d-35c66d7c5260/1/tfGesN1I4bJJJJCLtbaEjMFnhUY.mft
File: tfGesN1I4bJJJJCLtbaEjMFnhUY.mft (raw, json)
Hash identifier: bE4tFl0fDMt+plGB5Kj2zjsoVo3G6f8mKIebG29aqIg=
Subject key identifier: 81:75:17:CD:0B:4D:F8:6B:1B:67:63:CC:67:AC:F3:12:E7:55:E0:A0
Authority key identifier: B5:F1:9E:B0:DD:48:E1:B2:49:24:90:8B:B5:B6:84:8C:C1:67:85:46
Certificate issuer: /CN=b5f19eb0dd48e1b24924908bb5b6848cc1678546
Certificate serial: 019A4E868DE3A73E7FBF092C42167C8EBED9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tfGesN1I4bJJJJCLtbaEjMFnhUY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/ce001b-a4d8-4f0e-831d-35c66d7c5260/1/tfGesN1I4bJJJJCLtbaEjMFnhUY.mft
Manifest number: 170D
Signing time: Tue 04 Nov 2025 11:00:32 +0000
Manifest this update: Tue 04 Nov 2025 11:00:32 +0000
Manifest next update: Wed 05 Nov 2025 11:00:32 +0000
Files and hashes: 1: dMyCW0_TBkO1nYNBL_n11IKNaBI.roa (hash: WTKaBFp1QPSs1ROafjR4WJfZR1PRtcVHfjnPURoJWEQ=)
2: iWujOO5h_XVMHY2nSFxBko0o46E.roa (hash: hfZ0O6pRdbOdpr8hVRCYtXgEcI0jSP4lHjfs8kAt2hk=)
3: qrrQR7WuIleyYS2sO7I0VvjROUo.roa (hash: 4JE74Aq/xmpPqZIRbZrMja/xvjU3RSpM11pAC7vf4sE=)
4: tfGesN1I4bJJJJCLtbaEjMFnhUY.crl (hash: zMG/cKf6n7e2H4ZlLsgxGMiOB44SbZpulXeGfWYSGd4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/ce001b-a4d8-4f0e-831d-35c66d7c5260/1/tfGesN1I4bJJJJCLtbaEjMFnhUY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/ce001b-a4d8-4f0e-831d-35c66d7c5260/1/tfGesN1I4bJJJJCLtbaEjMFnhUY.mft
rsync://rpki.ripe.net/repository/DEFAULT/tfGesN1I4bJJJJCLtbaEjMFnhUY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:86:8d:e3:a7:3e:7f:bf:09:2c:42:16:7c:8e:be:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5f19eb0dd48e1b24924908bb5b6848cc1678546
Validity
Not Before: Nov 4 11:00:32 2025 GMT
Not After : Nov 5 11:00:32 2025 GMT
Subject: CN=817517cd0b4df86b1b6763cc67acf312e755e0a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:fc:43:0b:17:b6:91:94:b7:ac:05:cd:48:9a:
c6:68:ad:8d:bc:48:49:83:7d:7e:a2:c9:74:63:7a:
06:ef:5e:95:74:be:df:76:73:24:58:95:e5:13:d4:
92:c2:9a:f4:be:99:3c:2d:6d:bb:66:e0:f8:75:7c:
c8:35:ec:c1:d6:8e:9c:30:ac:1e:16:91:42:34:84:
4d:78:32:cf:bc:72:f5:3b:8b:c9:2b:ae:9d:6b:ee:
ba:ac:5c:41:93:2d:53:d7:de:5e:19:d0:d1:66:1e:
52:4a:7c:95:47:a8:73:75:3a:2a:61:e4:7b:ae:da:
e2:1f:8a:52:6f:16:23:bd:e9:26:f2:2b:60:4d:b7:
b6:f0:05:7e:0a:29:83:19:bb:17:e0:49:b5:13:0e:
9b:24:04:a8:0d:80:cd:10:f0:68:01:10:4d:a9:4e:
4e:e4:58:41:98:9b:f4:61:63:be:df:96:ab:d9:9d:
41:80:4d:8e:dc:6f:92:7a:d4:35:11:5d:48:95:54:
a9:92:20:26:ee:e2:62:48:fe:b6:76:e7:a9:e7:31:
45:ca:9f:d5:de:50:da:74:29:76:6a:27:ee:79:23:
4d:f8:b5:d7:3c:3c:4c:19:9f:44:9e:b5:f2:79:ad:
8d:29:fd:df:7c:d3:fb:e5:c8:35:9b:e0:22:85:e1:
8f:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:75:17:CD:0B:4D:F8:6B:1B:67:63:CC:67:AC:F3:12:E7:55:E0:A0
X509v3 Authority Key Identifier:
keyid:B5:F1:9E:B0:DD:48:E1:B2:49:24:90:8B:B5:B6:84:8C:C1:67:85:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tfGesN1I4bJJJJCLtbaEjMFnhUY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/ce001b-a4d8-4f0e-831d-35c66d7c5260/1/tfGesN1I4bJJJJCLtbaEjMFnhUY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/ce001b-a4d8-4f0e-831d-35c66d7c5260/1/tfGesN1I4bJJJJCLtbaEjMFnhUY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c5:33:74:1b:90:91:ce:a3:92:49:a8:79:e3:96:ae:75:26:ad:
b5:a6:04:4e:e1:f2:c5:59:90:42:5a:98:2e:7a:ac:d8:fd:de:
69:c6:eb:32:b9:d4:d8:d7:a1:6c:49:91:c0:e2:1c:72:7c:be:
31:05:ae:d4:24:93:6c:48:dc:5e:29:f6:83:9c:71:df:8c:9b:
ad:a9:05:f6:96:4b:9b:d8:0e:42:f0:06:4f:49:45:58:9c:e8:
0f:86:25:1d:66:ae:6c:d5:e7:a3:a7:b1:05:4c:c6:58:dc:a6:
eb:81:36:06:62:ab:8b:6b:19:d3:23:0c:39:f1:fa:25:59:de:
73:28:46:de:e0:59:bb:63:1f:77:a9:96:fb:6c:a0:80:a5:04:
23:a1:49:5c:d7:90:bf:ea:66:c8:57:fb:aa:97:25:e7:40:1b:
7d:df:b7:34:d0:10:47:f9:05:d2:2f:b9:30:db:80:07:a8:fa:
7d:5e:04:27:5b:f8:1f:74:52:5e:3e:f0:02:f8:d8:1d:7e:32:
c1:ab:2f:14:ec:80:a3:25:5f:37:58:1e:bb:ed:d3:9a:ad:8f:
9d:f4:d4:0d:b5:27:c1:c7:e5:33:9a:c9:a8:3a:e7:43:96:b6:
26:d8:f2:cf:45:2a:2f:98:47:0f:a0:de:f0:41:d2:73:82:78:
b4:16:b3:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:21:21 2025 by rpki-client