Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/cbfd1e-1202-40c1-bdf0-c24ee0494541/1/TZRvTfIjdJGmjfpAe-QfroS72mY.mft
File: TZRvTfIjdJGmjfpAe-QfroS72mY.mft (raw, json)
Hash identifier: qkjMYcRLZqzQOOYRhJBGiLdEQZR0WIHAEI+XI398FCY=
Subject key identifier: 47:2F:08:50:50:EE:82:75:58:4B:06:B8:F7:F6:E3:1B:31:94:77:2F
Authority key identifier: 4D:94:6F:4D:F2:23:74:91:A6:8D:FA:40:7B:E4:1F:AE:84:BB:DA:66
Certificate issuer: /CN=4d946f4df2237491a68dfa407be41fae84bbda66
Certificate serial: 019A4F2B049F6B316EC57B4B6F8F626CB104
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TZRvTfIjdJGmjfpAe-QfroS72mY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/cbfd1e-1202-40c1-bdf0-c24ee0494541/1/TZRvTfIjdJGmjfpAe-QfroS72mY.mft
Manifest number: 106F
Signing time: Tue 04 Nov 2025 14:00:10 +0000
Manifest this update: Tue 04 Nov 2025 14:00:10 +0000
Manifest next update: Wed 05 Nov 2025 14:00:10 +0000
Files and hashes: 1: C8PR4XXWsjpP8PHYuoN78zoE9nY.roa (hash: uu2Jn3Slz9u+yGZ22j4LqOkp9lCOWyyfMINckydLJ3E=)
2: TZRvTfIjdJGmjfpAe-QfroS72mY.crl (hash: e0s7EEnFDeqZ04C3ghQyxULBKM2yHrC7PuGk6iMAujE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/cbfd1e-1202-40c1-bdf0-c24ee0494541/1/TZRvTfIjdJGmjfpAe-QfroS72mY.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/cbfd1e-1202-40c1-bdf0-c24ee0494541/1/TZRvTfIjdJGmjfpAe-QfroS72mY.mft
rsync://rpki.ripe.net/repository/DEFAULT/TZRvTfIjdJGmjfpAe-QfroS72mY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 14:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:2b:04:9f:6b:31:6e:c5:7b:4b:6f:8f:62:6c:b1:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d946f4df2237491a68dfa407be41fae84bbda66
Validity
Not Before: Nov 4 14:00:10 2025 GMT
Not After : Nov 5 14:00:10 2025 GMT
Subject: CN=472f085050ee8275584b06b8f7f6e31b3194772f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:3e:16:0f:72:fe:c4:12:91:d7:45:cd:00:2f:
d2:99:a7:31:18:d0:8e:11:a7:80:ea:2a:44:11:b5:
bb:f2:e6:39:e6:d6:f4:84:ad:2c:78:65:ee:86:87:
8b:4c:b7:0f:8d:8e:21:02:5d:b1:11:f4:db:a7:f1:
ce:ce:3d:6d:56:33:14:df:09:2b:05:88:15:fe:62:
0f:46:b9:03:cb:45:e2:5a:5e:79:c5:31:37:c7:3f:
75:4e:9a:68:d8:38:39:09:2d:3c:6f:89:8c:49:43:
67:7e:66:79:58:30:2d:92:b9:dd:ab:01:28:b2:7a:
92:d5:d6:65:b7:33:38:6c:f3:60:02:f8:fc:5d:fb:
ed:43:c7:f0:75:43:b3:53:a6:5e:ae:31:aa:92:ea:
c4:74:58:f8:1a:dd:9a:ca:31:26:df:c9:29:73:2c:
3a:06:b4:7d:84:e2:c5:ad:0f:84:c0:a7:0f:21:ef:
6c:af:37:45:ac:31:f8:af:8b:eb:a3:d5:fd:28:6a:
c9:d9:5a:fd:c3:dd:9b:79:c8:fe:a4:5d:23:bc:8b:
04:d9:fd:6a:bf:88:2e:ea:37:7d:88:87:d8:57:77:
23:b6:82:a4:d2:0a:b0:e2:38:f6:64:1c:4f:79:80:
08:e2:c0:f4:4b:89:fa:e2:d0:60:6c:1a:fa:6d:ee:
e4:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:2F:08:50:50:EE:82:75:58:4B:06:B8:F7:F6:E3:1B:31:94:77:2F
X509v3 Authority Key Identifier:
keyid:4D:94:6F:4D:F2:23:74:91:A6:8D:FA:40:7B:E4:1F:AE:84:BB:DA:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TZRvTfIjdJGmjfpAe-QfroS72mY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/cbfd1e-1202-40c1-bdf0-c24ee0494541/1/TZRvTfIjdJGmjfpAe-QfroS72mY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/cbfd1e-1202-40c1-bdf0-c24ee0494541/1/TZRvTfIjdJGmjfpAe-QfroS72mY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:55:e9:9b:75:67:6a:2c:4a:d8:2b:10:e0:4c:f7:1d:1c:e9:
86:4e:f1:2d:b1:ab:2e:0b:d5:ae:93:e6:b1:a9:70:2f:27:74:
f9:f5:dc:a6:3c:c4:58:5d:af:b8:d7:74:78:24:9c:f2:1e:37:
e1:3d:0a:39:18:ce:05:bb:73:6c:ff:8c:cc:60:6c:bc:6b:b5:
8a:28:84:b8:aa:7c:08:67:7f:e8:1d:56:42:97:43:82:68:ff:
9d:0e:91:19:59:a2:ad:48:bb:a7:9b:d1:3a:50:6c:8f:bf:22:
74:c1:7c:98:c2:28:0c:0d:11:a9:68:3f:a6:11:63:fa:d8:08:
06:a4:72:01:45:09:12:50:27:0d:e7:46:a7:6d:d7:e0:42:0b:
17:67:a2:b3:6a:ca:6f:2d:4a:8c:09:a1:08:24:ee:53:57:56:
61:92:ae:a7:ac:bc:a6:38:03:c7:1b:89:79:4d:ce:c8:1b:ff:
fa:fe:a4:17:b7:fb:97:4a:73:69:c6:ae:a3:a6:98:41:09:36:
b2:1a:6e:52:ae:e8:1d:ab:71:7e:30:f1:8d:86:43:35:02:bf:
aa:2b:1d:e0:29:e2:0f:22:83:29:76:c5:bb:60:90:eb:2c:19:
48:36:c5:15:c1:8f:a5:db:8c:54:48:7c:56:dd:0c:ef:9c:49:
07:66:34:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:42:36 2025 by rpki-client