Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/672a2f-ac2b-4631-ab3d-c2bc1451f271/1/tcfYHsTEBVxnP_VxzK0Hw6aZEF4.mft
File: tcfYHsTEBVxnP_VxzK0Hw6aZEF4.mft (raw, json)
Hash identifier: IpFKeYqyRP1zStFOFQov0A7mb087W/RVae+iUR1sFrM=
Subject key identifier: E7:2B:93:4A:05:5E:0F:0F:51:53:BA:EA:56:44:09:E1:5A:88:34:3F
Authority key identifier: B5:C7:D8:1E:C4:C4:05:5C:67:3F:F5:71:CC:AD:07:C3:A6:99:10:5E
Certificate issuer: /CN=b5c7d81ec4c4055c673ff571ccad07c3a699105e
Certificate serial: 019A5074D1DB9F7B3BCECEB04E1B7698651D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tcfYHsTEBVxnP_VxzK0Hw6aZEF4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/672a2f-ac2b-4631-ab3d-c2bc1451f271/1/tcfYHsTEBVxnP_VxzK0Hw6aZEF4.mft
Manifest number: 0A68
Signing time: Tue 04 Nov 2025 20:00:24 +0000
Manifest this update: Tue 04 Nov 2025 20:00:24 +0000
Manifest next update: Wed 05 Nov 2025 20:00:24 +0000
Files and hashes: 1: ZFlE4CwGV5oXv28o6nsvolZlI_Y.roa (hash: S5Q4DAjjTKxkiafJ6he6yLpO30RXNUCaXjGnLWKadCQ=)
2: a3EraYk05VPEffLc6KjCZtg0uOM.roa (hash: MkXr1kaZ6Jwr9qIlXjAkJ2Xml1hQyvkyv9rct4pH8co=)
3: fJY20OuQ1IuJYeyVIHU1EBJ0rFM.roa (hash: +X81MlM0oUdVo08v6gDJj1EWTtIWJ/ia51w5FCk6+3U=)
4: tcfYHsTEBVxnP_VxzK0Hw6aZEF4.crl (hash: 6ZmbhYwJDPFwwQAAe6FlzqLyNO5C/nCnZDUhH8IBdko=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/672a2f-ac2b-4631-ab3d-c2bc1451f271/1/tcfYHsTEBVxnP_VxzK0Hw6aZEF4.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/672a2f-ac2b-4631-ab3d-c2bc1451f271/1/tcfYHsTEBVxnP_VxzK0Hw6aZEF4.mft
rsync://rpki.ripe.net/repository/DEFAULT/tcfYHsTEBVxnP_VxzK0Hw6aZEF4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:74:d1:db:9f:7b:3b:ce:ce:b0:4e:1b:76:98:65:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5c7d81ec4c4055c673ff571ccad07c3a699105e
Validity
Not Before: Nov 4 20:00:24 2025 GMT
Not After : Nov 5 20:00:24 2025 GMT
Subject: CN=e72b934a055e0f0f5153baea564409e15a88343f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:f7:1b:95:ab:1b:13:c8:c7:e3:2f:37:cf:a9:
48:4a:ec:0c:24:1b:a4:c1:8f:69:f1:46:13:06:03:
c3:b5:13:b2:8f:ff:11:99:49:d5:59:20:8c:ee:cb:
31:1a:0b:21:b1:e2:be:63:8d:c1:c5:54:6f:d8:eb:
41:c5:a3:1e:00:8c:ac:37:3c:17:e2:c0:09:6c:6b:
a7:56:4a:ea:c7:0d:e6:36:40:f0:0b:6d:6c:2c:af:
1a:96:45:f8:74:0b:a9:5b:30:34:ab:76:11:fe:81:
a1:ab:51:6b:53:6c:06:54:4a:dd:e4:d4:be:f3:0a:
9a:55:f0:66:4b:58:af:02:8a:0b:64:fd:b0:16:80:
fb:df:a8:83:c7:bb:7f:df:83:bb:8f:76:9e:dc:f3:
3c:64:df:f5:70:cf:7c:54:3d:48:34:de:93:4d:fb:
d7:ef:ff:bc:69:ac:24:45:ad:f1:a7:41:02:9e:4b:
2e:81:2c:82:66:85:c2:c8:0a:4c:b1:18:54:f2:fe:
95:4f:4a:ad:b6:bc:b2:05:6c:79:e8:44:a7:d3:1e:
b4:07:2c:48:2e:a7:37:72:26:bc:8c:42:15:d9:76:
53:ae:75:c9:f6:d7:ca:bd:15:21:34:43:a7:45:f4:
93:6e:4e:0f:79:18:41:9e:f2:9e:26:bf:1c:d5:58:
79:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:2B:93:4A:05:5E:0F:0F:51:53:BA:EA:56:44:09:E1:5A:88:34:3F
X509v3 Authority Key Identifier:
keyid:B5:C7:D8:1E:C4:C4:05:5C:67:3F:F5:71:CC:AD:07:C3:A6:99:10:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tcfYHsTEBVxnP_VxzK0Hw6aZEF4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/672a2f-ac2b-4631-ab3d-c2bc1451f271/1/tcfYHsTEBVxnP_VxzK0Hw6aZEF4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/672a2f-ac2b-4631-ab3d-c2bc1451f271/1/tcfYHsTEBVxnP_VxzK0Hw6aZEF4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:6e:5f:5f:b7:5d:f2:3c:19:12:da:2b:7b:86:46:61:c0:a2:
ee:2e:39:58:a5:07:55:d8:45:87:de:f8:94:b0:f0:a3:70:73:
4a:04:7c:96:8c:be:fb:15:ba:51:8c:68:68:d2:0b:88:b4:02:
b1:13:5e:1e:ab:b4:c8:cc:3f:85:7e:4d:9f:88:fa:62:a9:6e:
75:53:0d:7b:80:c3:3e:05:5d:89:5a:27:34:87:60:82:71:b5:
0c:2a:9b:96:84:fa:f9:aa:d1:df:f5:84:42:f1:d7:a1:28:6b:
cc:a8:c0:3c:41:d9:38:24:03:67:d5:9f:fe:40:ed:a7:8f:4a:
9e:ef:1a:7f:c7:c3:30:72:d5:25:2a:27:92:b0:92:74:f9:b1:
4d:b9:a2:74:09:93:f5:12:67:e2:31:12:52:0c:ee:12:94:83:
7e:bc:8f:c0:31:08:d4:c4:76:82:e3:6b:10:98:f3:22:27:49:
80:4b:6b:a3:9c:4e:71:82:47:9a:c3:2f:22:d0:a4:14:e8:db:
46:ef:4d:20:ea:76:19:5e:54:23:52:e2:cc:e0:7e:31:83:f1:
18:e4:79:3f:fb:86:96:36:96:c5:f4:a8:1e:a3:3f:6d:2a:d4:
0a:13:cd:eb:67:05:82:b5:c5:1e:5f:44:b0:79:b3:6e:35:11:
f7:46:c4:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 22:52:10 2025 by rpki-client