Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/d6ba8d-150e-450e-849c-f38fa0e71d99/1/Tp9S_VUGkr5-7Bkvw-0jJ_Wi-as.mft
File: Tp9S_VUGkr5-7Bkvw-0jJ_Wi-as.mft (raw, json)
Hash identifier: nQpd/Lh6ETOZYvZkeN9gme0SomDhM3Z9K3pGr4IYTqU=
Subject key identifier: BA:90:3F:F3:FE:FD:4D:7B:CE:AF:79:BC:F0:F9:D0:80:BE:35:60:EC
Authority key identifier: 4E:9F:52:FD:55:06:92:BE:7E:EC:19:2F:C3:ED:23:27:F5:A2:F9:AB
Certificate issuer: /CN=4e9f52fd550692be7eec192fc3ed2327f5a2f9ab
Certificate serial: 019A4E862C6C55BB3418A9D38DAA2D74475A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tp9S_VUGkr5-7Bkvw-0jJ_Wi-as.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/d6ba8d-150e-450e-849c-f38fa0e71d99/1/Tp9S_VUGkr5-7Bkvw-0jJ_Wi-as.mft
Manifest number: 03C8
Signing time: Tue 04 Nov 2025 11:00:07 +0000
Manifest this update: Tue 04 Nov 2025 11:00:07 +0000
Manifest next update: Wed 05 Nov 2025 11:00:07 +0000
Files and hashes: 1: 1-KGFkp6-58CAfMM59AAzTBwEK5A.roa (hash: LpeybfjrfgjM/OjVBSR68hbsEhIa7z+y+IoR5F/Kfmc=)
2: Tp9S_VUGkr5-7Bkvw-0jJ_Wi-as.crl (hash: pw8wDLaqJ2R/VSZJ2hIK1NPHGAFHEp8N26hk4kBzE4I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/d6ba8d-150e-450e-849c-f38fa0e71d99/1/Tp9S_VUGkr5-7Bkvw-0jJ_Wi-as.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/d6ba8d-150e-450e-849c-f38fa0e71d99/1/Tp9S_VUGkr5-7Bkvw-0jJ_Wi-as.mft
rsync://rpki.ripe.net/repository/DEFAULT/Tp9S_VUGkr5-7Bkvw-0jJ_Wi-as.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:86:2c:6c:55:bb:34:18:a9:d3:8d:aa:2d:74:47:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e9f52fd550692be7eec192fc3ed2327f5a2f9ab
Validity
Not Before: Nov 4 11:00:07 2025 GMT
Not After : Nov 5 11:00:07 2025 GMT
Subject: CN=ba903ff3fefd4d7bceaf79bcf0f9d080be3560ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:b7:a2:a6:97:06:c1:fc:4b:b0:d6:99:b0:e0:
89:0c:43:f1:81:4c:d4:77:7c:d4:14:0b:df:a2:71:
2e:d0:7c:06:33:91:7e:bb:bd:bf:09:c9:50:a8:18:
d0:97:3f:1e:df:bd:a1:12:e1:a2:8d:31:b6:81:a7:
7e:da:ea:38:55:64:a6:50:ed:6f:4f:76:ae:80:9a:
de:19:d1:de:f2:4f:f4:84:30:f4:1e:9d:d1:11:c7:
ae:ab:64:01:40:00:a9:8b:ed:de:f2:a9:69:7e:b0:
5f:ee:90:98:56:f4:c5:8e:e7:5c:d6:30:b4:7c:95:
b2:e6:c9:eb:ea:3e:32:b6:f6:a1:f6:a4:9d:a8:90:
55:22:9c:9d:1d:b4:9e:73:7e:95:54:6c:22:77:31:
2f:fa:6f:48:76:e8:4d:a2:ed:a6:61:f5:c7:ce:f1:
65:a7:01:d3:e0:69:e2:7c:0c:ad:fc:d8:36:16:8f:
e2:79:88:9f:1b:3d:4d:8d:06:1e:21:14:c1:03:6b:
16:97:bb:6a:bf:b2:ad:9f:55:f7:15:87:28:64:d1:
5e:1c:77:75:ca:26:07:97:16:90:7d:8f:36:45:0d:
ec:a9:17:dc:0b:0d:40:d2:78:b8:aa:fd:c2:01:12:
c5:d5:4a:19:64:57:55:a5:eb:91:bb:c4:bd:a6:e0:
f6:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:90:3F:F3:FE:FD:4D:7B:CE:AF:79:BC:F0:F9:D0:80:BE:35:60:EC
X509v3 Authority Key Identifier:
keyid:4E:9F:52:FD:55:06:92:BE:7E:EC:19:2F:C3:ED:23:27:F5:A2:F9:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tp9S_VUGkr5-7Bkvw-0jJ_Wi-as.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/d6ba8d-150e-450e-849c-f38fa0e71d99/1/Tp9S_VUGkr5-7Bkvw-0jJ_Wi-as.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/d6ba8d-150e-450e-849c-f38fa0e71d99/1/Tp9S_VUGkr5-7Bkvw-0jJ_Wi-as.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:4e:5f:b0:7a:3e:df:95:59:da:15:21:12:a1:1b:d2:7a:db:
c1:90:67:14:a7:c1:be:1b:81:12:7b:68:da:34:cf:64:d9:23:
7c:f0:84:92:1c:00:d2:d6:e0:47:0e:21:68:13:c6:0f:ab:2a:
07:b5:90:2e:e5:95:d6:9b:ed:47:76:90:19:38:d8:1c:37:e3:
75:6e:ae:a5:14:71:51:58:b8:de:e7:c7:52:ba:12:54:63:39:
0d:e0:3e:a4:5c:0c:7b:ab:f4:78:6f:f9:b2:5a:cb:1d:32:a9:
85:03:37:ba:0e:f5:41:20:ee:a1:2f:b9:71:1a:1d:27:27:93:
3d:b3:20:ea:12:3d:7e:46:e1:f3:ee:0a:ff:9b:9f:f5:ad:94:
ab:c8:8f:55:c2:1f:9c:ec:62:74:eb:92:d1:bd:7f:43:1c:5a:
4a:3b:c5:1d:73:70:13:68:a2:b4:1a:26:30:48:b9:7a:f6:2c:
16:68:f7:0d:b9:2d:4f:28:41:b9:c3:96:ad:ad:69:9e:01:b2:
81:71:70:dc:b3:9b:d3:3c:5b:f0:b1:43:8b:75:c2:e7:10:d2:
5b:1f:4e:dd:31:65:cc:67:1f:fa:ad:b6:b8:ef:8e:e1:63:15:
54:56:42:fe:66:b8:f1:59:9b:72:65:df:27:d2:1f:90:ad:20:
c7:50:75:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:20:54 2025 by rpki-client