Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/a831c0-457c-4ba8-bec7-e251109bfd19/1/TaNxHcXeRfL1tHkBZZ6VbZOCcv4.mft
File: TaNxHcXeRfL1tHkBZZ6VbZOCcv4.mft (raw, json)
Hash identifier: dPm5ZHDyBUztx1Yim5jccHrrm9NNHOv5iZynSudxSiI=
Subject key identifier: 79:41:43:BF:ED:4F:B5:4B:EC:E4:75:F3:49:23:CF:52:AA:92:23:3D
Authority key identifier: 4D:A3:71:1D:C5:DE:45:F2:F5:B4:79:01:65:9E:95:6D:93:82:72:FE
Certificate issuer: /CN=4da3711dc5de45f2f5b47901659e956d938272fe
Certificate serial: 019A4E4FF81041BFC572F0B01C26542FE762
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TaNxHcXeRfL1tHkBZZ6VbZOCcv4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/a831c0-457c-4ba8-bec7-e251109bfd19/1/TaNxHcXeRfL1tHkBZZ6VbZOCcv4.mft
Manifest number: 170D
Signing time: Tue 04 Nov 2025 10:00:54 +0000
Manifest this update: Tue 04 Nov 2025 10:00:54 +0000
Manifest next update: Wed 05 Nov 2025 10:00:54 +0000
Files and hashes: 1: 7YKaewqyZbI9lVFIivFUL2FPVzU.roa (hash: wf42n7crwFg9XaXHUPxEE3NTHiwbzXO1xRDVNEMLG6A=)
2: TaNxHcXeRfL1tHkBZZ6VbZOCcv4.crl (hash: oR+SPbbG1i6D1JSaQVwzJzxD9uV4lxngQMS/Wublz6E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/a831c0-457c-4ba8-bec7-e251109bfd19/1/TaNxHcXeRfL1tHkBZZ6VbZOCcv4.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/a831c0-457c-4ba8-bec7-e251109bfd19/1/TaNxHcXeRfL1tHkBZZ6VbZOCcv4.mft
rsync://rpki.ripe.net/repository/DEFAULT/TaNxHcXeRfL1tHkBZZ6VbZOCcv4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:4f:f8:10:41:bf:c5:72:f0:b0:1c:26:54:2f:e7:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4da3711dc5de45f2f5b47901659e956d938272fe
Validity
Not Before: Nov 4 10:00:54 2025 GMT
Not After : Nov 5 10:00:54 2025 GMT
Subject: CN=794143bfed4fb54bece475f34923cf52aa92233d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:22:4e:ef:da:b4:1f:3a:cb:25:17:61:50:d9:
ff:f3:0d:de:22:05:a5:fa:94:d6:54:26:93:f5:f9:
95:1d:ff:a7:98:67:00:26:2c:35:fd:dd:2a:80:0b:
8b:7e:d7:84:0a:23:21:69:2b:1c:57:77:b5:d1:12:
a0:08:4b:37:18:ad:6e:d4:a5:3d:9c:8d:ef:f6:f9:
2d:16:e1:13:5c:30:8f:f1:8e:64:89:c3:55:f7:04:
bb:3f:b7:01:ae:66:02:9e:d2:55:14:39:d1:0d:b5:
d8:c3:01:25:f7:fb:4e:4d:60:d2:45:30:a4:a9:6a:
56:b5:cb:fd:f0:6b:e0:de:50:52:26:6f:92:59:da:
38:1e:fe:3b:53:bf:18:9e:ed:f8:16:ed:3a:b7:b1:
d4:0f:bb:8c:d3:13:d3:01:a8:bc:2b:51:03:ec:3a:
25:51:cf:63:ba:c8:16:ce:f4:4e:e8:9e:ce:69:34:
bf:cd:37:1c:6a:c1:a6:4e:73:ec:07:83:8d:8b:be:
e7:eb:ac:f4:e5:97:09:37:18:18:b5:12:a5:dc:e6:
f5:38:a5:a8:c6:a1:51:3a:ed:92:46:00:0b:5f:61:
bf:56:b7:b8:6c:1b:d3:9e:4f:8e:af:f0:d0:9a:9f:
cf:8e:a5:eb:bb:9b:cb:1b:80:8e:12:5c:f1:63:1d:
09:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:41:43:BF:ED:4F:B5:4B:EC:E4:75:F3:49:23:CF:52:AA:92:23:3D
X509v3 Authority Key Identifier:
keyid:4D:A3:71:1D:C5:DE:45:F2:F5:B4:79:01:65:9E:95:6D:93:82:72:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TaNxHcXeRfL1tHkBZZ6VbZOCcv4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/a831c0-457c-4ba8-bec7-e251109bfd19/1/TaNxHcXeRfL1tHkBZZ6VbZOCcv4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/a831c0-457c-4ba8-bec7-e251109bfd19/1/TaNxHcXeRfL1tHkBZZ6VbZOCcv4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:ea:18:f4:51:47:63:c3:60:af:49:9d:a0:01:94:b0:8d:2f:
eb:8c:a6:b0:f2:87:b1:60:14:da:1c:1b:3d:b5:f0:80:37:24:
cf:1b:b7:fa:4b:77:31:6d:51:91:e2:8c:8f:19:37:b4:fc:fa:
d2:e6:4a:ec:77:8f:cb:8f:bd:cb:6e:2c:2b:ee:44:a1:92:10:
1d:1e:c4:bc:e7:b4:51:da:2d:64:26:3a:5e:90:e1:4c:06:b4:
a7:5e:f0:ff:f0:19:2e:8c:1d:cb:ed:ff:c0:cb:fb:64:1a:1e:
8c:93:e1:e7:6d:b6:e5:83:c2:6b:04:db:f1:30:93:91:52:82:
7a:cf:21:a3:91:ea:91:9f:27:33:56:60:26:b8:e5:49:28:d6:
e9:ae:1b:e0:c6:48:26:39:e1:f7:9a:f7:82:e5:d7:96:87:c4:
9b:28:2e:6d:cd:37:4a:cb:cc:69:fd:c8:95:8f:9e:f3:01:64:
5c:bc:57:17:6f:6e:f4:0a:e5:ec:b3:90:26:ea:ef:94:be:b1:
54:a8:71:cf:0d:25:d0:d9:cd:bd:3b:09:28:6d:a8:87:3f:ac:
81:b6:16:dc:4b:23:35:7c:82:17:e2:d1:81:d6:27:45:a0:58:
24:4f:47:5e:60:67:ca:83:16:1f:8f:30:cd:78:43:45:88:f1:
f4:c9:f0:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:41:43 2025 by rpki-client