Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/b8e773-4e71-4d09-b74a-b27f552672e0/1/TjwBugxcvyCuPpPKPTeeYt9clZo.mft
File: TjwBugxcvyCuPpPKPTeeYt9clZo.mft (raw, json)
Hash identifier: jYNS8GwbKPBWBTbk6jrbjIfWo/5zoRRN5ucR5Qu+pAc=
Subject key identifier: F3:83:8E:CE:40:20:1D:F6:EE:1F:C4:92:81:75:84:72:D1:26:04:AD
Authority key identifier: 4E:3C:01:BA:0C:5C:BF:20:AE:3E:93:CA:3D:37:9E:62:DF:5C:95:9A
Certificate issuer: /CN=4e3c01ba0c5cbf20ae3e93ca3d379e62df5c959a
Certificate serial: 019A4DAA687E4AF6712BF3DA8C7869EC6943
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TjwBugxcvyCuPpPKPTeeYt9clZo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/b8e773-4e71-4d09-b74a-b27f552672e0/1/TjwBugxcvyCuPpPKPTeeYt9clZo.mft
Manifest number: 170C
Signing time: Tue 04 Nov 2025 07:00:04 +0000
Manifest this update: Tue 04 Nov 2025 07:00:04 +0000
Manifest next update: Wed 05 Nov 2025 07:00:04 +0000
Files and hashes: 1: NYiqXRmP7nBBaBEa9iT79WYJ0gs.roa (hash: UqGys13kNv1mtJhLUKGkAEs9pExc7CtEz6E2KnEqZvM=)
2: TjwBugxcvyCuPpPKPTeeYt9clZo.crl (hash: 3LAiaUqxkNPQCc6nimcjK5FabBbo1ATDa4uuSAwGCa8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/b8e773-4e71-4d09-b74a-b27f552672e0/1/TjwBugxcvyCuPpPKPTeeYt9clZo.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/b8e773-4e71-4d09-b74a-b27f552672e0/1/TjwBugxcvyCuPpPKPTeeYt9clZo.mft
rsync://rpki.ripe.net/repository/DEFAULT/TjwBugxcvyCuPpPKPTeeYt9clZo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 07:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:aa:68:7e:4a:f6:71:2b:f3:da:8c:78:69:ec:69:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e3c01ba0c5cbf20ae3e93ca3d379e62df5c959a
Validity
Not Before: Nov 4 07:00:04 2025 GMT
Not After : Nov 5 07:00:04 2025 GMT
Subject: CN=f3838ece40201df6ee1fc49281758472d12604ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:98:70:a2:4d:80:17:84:28:fd:a7:5d:2b:fe:
e4:6e:b0:1d:95:34:a0:3f:aa:98:3a:48:35:11:ff:
81:99:3b:23:1b:40:db:d3:e4:59:c6:2e:60:c4:c9:
3d:6d:0a:5f:c7:6a:26:60:34:20:4d:8f:44:0a:0c:
50:8d:52:e6:cb:a7:bd:98:6e:9e:d2:3a:75:80:bd:
fa:e7:77:04:e3:5f:9f:f7:c3:d2:1b:08:5a:8a:38:
e2:c9:fc:8c:82:4f:c0:2d:df:ce:06:19:e6:d4:e4:
3b:e0:42:87:21:d9:18:42:c9:78:6a:d3:16:21:62:
c3:55:d6:85:e5:7a:7c:47:87:c6:48:c5:46:05:a8:
ba:d6:8a:a5:dd:2e:e4:61:11:e1:33:c6:ad:e3:af:
80:07:d0:99:64:87:9f:e0:9e:0c:23:7c:f2:db:20:
29:cb:ea:1d:8f:e8:ae:bf:22:ab:80:e6:42:76:dd:
56:34:58:53:e6:d6:78:ac:1f:c7:1b:7e:28:c3:95:
41:c5:b3:31:63:2a:eb:9f:64:06:c4:dd:ee:af:cb:
41:9d:59:37:ed:53:cc:46:bc:1a:9c:d6:92:91:b8:
cf:3c:5e:dc:b5:80:ce:d8:8d:0a:cb:ed:63:53:4b:
a6:12:a6:b7:6b:db:3d:df:82:5f:9e:5a:98:4f:14:
9c:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:83:8E:CE:40:20:1D:F6:EE:1F:C4:92:81:75:84:72:D1:26:04:AD
X509v3 Authority Key Identifier:
keyid:4E:3C:01:BA:0C:5C:BF:20:AE:3E:93:CA:3D:37:9E:62:DF:5C:95:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TjwBugxcvyCuPpPKPTeeYt9clZo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/b8e773-4e71-4d09-b74a-b27f552672e0/1/TjwBugxcvyCuPpPKPTeeYt9clZo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/b8e773-4e71-4d09-b74a-b27f552672e0/1/TjwBugxcvyCuPpPKPTeeYt9clZo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:f4:5b:6c:87:c2:4c:87:24:80:a8:ad:de:d0:e6:cf:9b:7b:
6a:b6:2b:0f:53:5d:8e:57:46:9a:97:1d:01:da:47:19:4b:5f:
a6:cc:71:ca:5f:03:d6:66:21:44:97:a1:df:3e:1e:3c:bb:2f:
ac:f3:fa:c5:34:77:10:90:1e:1e:72:7c:f3:d0:7b:9b:99:09:
22:3c:33:0b:33:11:50:2a:85:eb:ae:c3:9a:be:b1:a2:53:d2:
e2:5d:ff:7c:06:96:93:bd:1f:c1:54:6b:a7:50:85:e3:04:fd:
59:68:f8:61:8a:6e:c3:35:a9:06:96:b2:8a:50:b1:ec:fc:e4:
57:cc:90:43:28:58:38:86:d2:6b:75:6b:23:cb:6b:fe:32:18:
db:a3:c5:ee:75:d6:5d:3e:cb:c2:71:5a:34:17:fb:39:ef:14:
f0:70:a5:3c:d9:45:a7:ee:a7:0d:3a:8d:b1:41:7f:7b:86:29:
73:d4:a6:dc:1b:1b:b1:fa:5d:0f:a2:6b:d9:01:de:49:d7:26:
8c:68:3e:cb:18:20:51:2a:aa:9c:5a:36:4b:8a:d9:e8:f2:04:
26:ab:34:4f:80:36:9c:3e:b1:b0:bf:4d:e0:78:f5:d1:e9:8a:
ed:60:de:1b:7b:7d:e5:a6:c5:83:1f:5b:de:c2:11:6d:a9:c6:
91:3b:93:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 15:09:20 2025 by rpki-client