Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/da4e46-2a93-44a4-b8e3-c2133dd81b56/1/TS-f1cihTNyfMcRYXNYNtXz_tMI.mft
File: TS-f1cihTNyfMcRYXNYNtXz_tMI.mft (raw, json)
Hash identifier: Qsqwh8wJ7ITnMPG3ntAh1H1LDeXzL53gOlubRs+J2OI=
Subject key identifier: 50:7B:8A:3C:AF:E3:29:A3:7A:D6:72:79:F5:B0:F9:CC:AE:AB:6C:D9
Authority key identifier: 4D:2F:9F:D5:C8:A1:4C:DC:9F:31:C4:58:5C:D6:0D:B5:7C:FF:B4:C2
Certificate issuer: /CN=4d2f9fd5c8a14cdc9f31c4585cd60db57cffb4c2
Certificate serial: 019A4EF5673D59C84CDADE03B497D19E0F15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TS-f1cihTNyfMcRYXNYNtXz_tMI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/da4e46-2a93-44a4-b8e3-c2133dd81b56/1/TS-f1cihTNyfMcRYXNYNtXz_tMI.mft
Manifest number: 0DD0
Signing time: Tue 04 Nov 2025 13:01:36 +0000
Manifest this update: Tue 04 Nov 2025 13:01:36 +0000
Manifest next update: Wed 05 Nov 2025 13:01:36 +0000
Files and hashes: 1: 1-QMPtoomm6W5CX-SS0fyQ5AS734.roa (hash: hcd0LKLxrMub9hVDF7pi719s+IDTrzb/8hX4yl7gw2w=)
2: 8-JB4jMg3_rMGJjuIMVCBLnxwQ8.roa (hash: buBER4odhou/4TCkZQ3UeIhbfaoQJUXmTZ3cmJ4K9k8=)
3: TS-f1cihTNyfMcRYXNYNtXz_tMI.crl (hash: A3zmb6KZwiDealVX4r7UUiZ6tiaBKrQHYlVMpXrESxM=)
4: pSmbhIOz_v9DcZ6BjkBTv88tPZ4.roa (hash: 1vOAxGM5C9HFgFv3tm1lOiYWc4bRDbFQtmaO7PV8kkc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/da4e46-2a93-44a4-b8e3-c2133dd81b56/1/TS-f1cihTNyfMcRYXNYNtXz_tMI.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/da4e46-2a93-44a4-b8e3-c2133dd81b56/1/TS-f1cihTNyfMcRYXNYNtXz_tMI.mft
rsync://rpki.ripe.net/repository/DEFAULT/TS-f1cihTNyfMcRYXNYNtXz_tMI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 13:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:67:3d:59:c8:4c:da:de:03:b4:97:d1:9e:0f:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d2f9fd5c8a14cdc9f31c4585cd60db57cffb4c2
Validity
Not Before: Nov 4 13:01:36 2025 GMT
Not After : Nov 5 13:01:36 2025 GMT
Subject: CN=507b8a3cafe329a37ad67279f5b0f9ccaeab6cd9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:5f:7c:f7:cc:07:fc:bb:39:ab:96:84:28:ba:
8f:f8:5c:13:10:bf:a5:75:8f:7b:fb:f4:6e:f9:10:
1d:c4:9a:a6:e1:36:eb:e1:8b:c7:90:87:4d:60:21:
7f:bb:77:e5:32:93:f0:97:41:4a:58:4c:ee:7d:5f:
68:b6:fc:53:87:2b:4e:4a:e7:53:5a:99:65:48:8c:
8e:1c:76:c5:fd:89:0d:f5:5b:61:45:73:ac:d2:c8:
b2:7c:f7:6c:ca:88:05:dc:b2:26:ed:83:52:c6:9f:
23:ce:ca:11:95:53:0a:3b:29:18:6d:59:ad:3b:f0:
e8:08:c2:c4:b6:d9:2e:81:8f:d6:90:6b:37:e5:03:
0e:1a:44:b3:29:92:d8:62:42:6c:da:a8:d2:25:52:
b8:79:cb:c3:a8:85:63:46:66:88:b7:c4:d1:e2:4e:
4b:1d:ed:00:3c:3a:ff:75:68:f4:b6:e2:03:f6:bf:
bc:1c:2d:61:e9:7f:8c:dc:75:96:8f:bb:a0:df:91:
0b:48:47:fc:72:c0:40:ed:b5:38:4b:62:69:57:ff:
d6:a8:5f:0a:80:7f:df:c9:26:62:0a:a3:66:d9:2f:
d7:b7:9c:0d:18:bc:f3:6d:93:40:77:8a:b8:6d:e6:
0a:c9:a4:6e:78:79:8c:5d:29:d4:e7:3f:a1:b0:43:
da:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:7B:8A:3C:AF:E3:29:A3:7A:D6:72:79:F5:B0:F9:CC:AE:AB:6C:D9
X509v3 Authority Key Identifier:
keyid:4D:2F:9F:D5:C8:A1:4C:DC:9F:31:C4:58:5C:D6:0D:B5:7C:FF:B4:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TS-f1cihTNyfMcRYXNYNtXz_tMI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/da4e46-2a93-44a4-b8e3-c2133dd81b56/1/TS-f1cihTNyfMcRYXNYNtXz_tMI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/da4e46-2a93-44a4-b8e3-c2133dd81b56/1/TS-f1cihTNyfMcRYXNYNtXz_tMI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:5d:59:4d:8d:d3:22:92:16:4a:a2:d7:c2:d8:15:b3:bd:7c:
15:6f:40:6b:a3:45:c3:5e:bc:81:fa:44:e3:8f:d7:4c:b1:5a:
ad:b3:10:63:44:db:d0:29:6a:dc:f0:dc:9c:96:44:5b:7f:74:
43:c6:40:de:a2:6c:0f:89:44:0e:a2:34:12:e8:b6:72:d7:c2:
40:db:34:50:52:e0:da:40:ec:e5:c3:21:86:b4:ac:ee:b9:b6:
12:34:53:cf:ed:32:91:c6:97:4c:d4:d3:8b:6d:8d:b3:1c:4d:
30:ee:3f:35:c8:0d:0e:47:b5:de:4a:03:fd:5c:84:32:1d:f4:
60:8d:01:5d:8b:9f:69:ff:da:7e:53:28:ed:be:69:31:fb:79:
39:85:c6:10:72:06:e1:1e:cb:a1:19:1e:a8:ef:ce:1b:2b:95:
3a:7a:f1:e3:e2:1f:42:eb:6f:fb:0e:33:ea:62:24:f5:16:d3:
48:88:37:b9:5e:95:17:45:6d:35:82:77:86:99:76:b5:f9:61:
2f:5f:da:23:87:5a:c7:bf:05:e4:5a:33:d8:0c:b6:24:6b:6b:
4a:21:bd:df:c5:4e:7d:3d:ed:38:c6:a8:86:57:fa:d5:a2:18:
e1:11:63:d2:87:41:b6:5e:2b:7c:38:19:0c:e3:27:f9:eb:ac:
9e:56:9e:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 22:20:27 2025 by rpki-client