Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/bbedbe-8821-4bd8-bbcc-3adf9b61347d/1/TPzH4BfCyfdjLacpNHa7fkowNlo.mft
File: TPzH4BfCyfdjLacpNHa7fkowNlo.mft (raw, json)
Hash identifier: FaH08S9AK4/ZKaiNWjpMd/AIXdT+foGfP6udbGafROk=
Subject key identifier: 56:FF:CB:CC:63:81:2E:B8:7F:48:7C:F7:F5:62:4A:57:E9:1D:BF:07
Authority key identifier: 4C:FC:C7:E0:17:C2:C9:F7:63:2D:A7:29:34:76:BB:7E:4A:30:36:5A
Certificate issuer: /CN=4cfcc7e017c2c9f7632da7293476bb7e4a30365a
Certificate serial: 019A4D73B3697649BF176310CB75DF93056C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TPzH4BfCyfdjLacpNHa7fkowNlo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/bbedbe-8821-4bd8-bbcc-3adf9b61347d/1/TPzH4BfCyfdjLacpNHa7fkowNlo.mft
Manifest number: 170E
Signing time: Tue 04 Nov 2025 06:00:19 +0000
Manifest this update: Tue 04 Nov 2025 06:00:19 +0000
Manifest next update: Wed 05 Nov 2025 06:00:19 +0000
Files and hashes: 1: OQKKfCP8SjNyLo9484epfP4wbRU.roa (hash: GIFqkdSx0szCVRVxH/rU2b7Y/JXh/nneSVo+VlwXpJY=)
2: TPzH4BfCyfdjLacpNHa7fkowNlo.crl (hash: ZpnFTlIBwCaNFo8bxQQixzPzHjrnlOza2NyD66RtdYM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/bbedbe-8821-4bd8-bbcc-3adf9b61347d/1/TPzH4BfCyfdjLacpNHa7fkowNlo.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/bbedbe-8821-4bd8-bbcc-3adf9b61347d/1/TPzH4BfCyfdjLacpNHa7fkowNlo.mft
rsync://rpki.ripe.net/repository/DEFAULT/TPzH4BfCyfdjLacpNHa7fkowNlo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 06:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:73:b3:69:76:49:bf:17:63:10:cb:75:df:93:05:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4cfcc7e017c2c9f7632da7293476bb7e4a30365a
Validity
Not Before: Nov 4 06:00:19 2025 GMT
Not After : Nov 5 06:00:19 2025 GMT
Subject: CN=56ffcbcc63812eb87f487cf7f5624a57e91dbf07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:7e:a9:8b:eb:9d:7a:98:c4:62:f1:07:a5:33:
43:f6:7b:a4:25:f5:98:5a:de:05:e0:b9:e7:c3:eb:
85:75:09:d9:01:5d:7e:d3:93:53:0b:7e:8c:07:6a:
ca:bd:89:19:9b:ed:18:67:c7:4d:c1:78:27:5a:d8:
50:c9:71:88:04:e2:53:a4:14:e4:28:04:88:de:4b:
af:ab:69:9a:58:3d:be:a9:45:69:c4:b4:47:68:d7:
bf:9c:b4:43:86:a4:ac:d7:39:8a:bc:23:99:fc:c1:
0e:16:bb:91:57:37:0d:8d:d3:5f:52:92:e4:b8:ef:
89:2d:99:84:a9:48:59:26:8e:bb:95:a3:c1:77:5a:
e3:45:86:b2:c1:45:f3:84:53:81:1b:2a:36:72:71:
af:bb:7d:06:82:ec:a9:84:76:2c:f2:f4:a3:2a:4c:
05:b8:52:ef:76:c9:d2:94:ac:0e:2b:dd:0f:d4:03:
82:b7:57:b5:f4:d3:9e:75:a9:91:3d:89:3c:76:38:
3b:35:95:90:9b:ab:7b:5f:df:cf:f3:d4:2e:c6:fc:
6c:cc:af:55:33:e7:17:11:77:a9:3b:a1:b3:3b:65:
a4:d4:41:12:9a:a0:58:a7:c9:4e:fb:90:62:1c:e5:
1d:59:13:5f:9f:a5:f6:79:31:44:75:a3:63:77:5f:
05:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:FF:CB:CC:63:81:2E:B8:7F:48:7C:F7:F5:62:4A:57:E9:1D:BF:07
X509v3 Authority Key Identifier:
keyid:4C:FC:C7:E0:17:C2:C9:F7:63:2D:A7:29:34:76:BB:7E:4A:30:36:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TPzH4BfCyfdjLacpNHa7fkowNlo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/bbedbe-8821-4bd8-bbcc-3adf9b61347d/1/TPzH4BfCyfdjLacpNHa7fkowNlo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/bbedbe-8821-4bd8-bbcc-3adf9b61347d/1/TPzH4BfCyfdjLacpNHa7fkowNlo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:4e:b2:91:b6:92:b1:0d:63:5b:b9:fa:b4:9f:2c:b1:fc:14:
d8:df:e2:28:2c:83:b3:ea:4b:14:98:39:a6:b1:63:7a:54:20:
dd:b5:64:2c:6b:5b:89:1a:11:c0:d2:3b:ff:51:c9:65:5f:81:
ae:a3:96:7d:1d:85:cd:74:85:e9:b1:4e:f9:9f:12:03:66:14:
28:3d:2b:d7:8f:b6:78:26:e3:63:9a:1c:db:5b:29:ed:5a:6c:
d7:ef:f0:fe:5d:19:d0:a6:4f:74:66:60:fe:19:35:1c:8b:24:
55:4c:50:c0:81:9b:6b:54:cd:66:04:87:4f:ef:68:30:48:26:
a8:d7:7a:0d:59:cc:e4:58:d4:c2:96:2e:50:22:ef:d0:d0:0d:
23:30:84:21:a8:e5:26:58:73:8d:9c:df:92:19:09:06:f7:f2:
0b:0b:30:f2:33:4b:63:3b:80:d2:ca:d7:4a:db:95:7d:e7:00:
6a:75:21:53:f9:94:8f:ee:cb:71:e0:47:56:85:02:f9:65:7f:
00:7f:7a:fe:f2:7a:7e:0d:35:1b:4d:a3:e0:be:e8:03:02:45:
5b:d4:b4:0b:b7:d0:41:9c:d1:49:a3:d8:93:72:25:4d:ee:40:
54:c3:6f:91:2b:74:1e:bd:55:fd:ec:a3:09:56:4f:d4:fc:89:
84:b1:bf:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:51:23 2025 by rpki-client