Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/61109f-2d19-41ce-ba6e-ddbc0def83e1/1/TnRhR3tZt7wJBvbOYGULs60t7lc.mft
File: TnRhR3tZt7wJBvbOYGULs60t7lc.mft (raw, json)
Hash identifier: F1LE49vY7mFuko0MMwUOGQ+bJRo+0k8Y1PRAreYR/2w=
Subject key identifier: EF:F1:63:B1:32:71:CE:D4:05:5D:B2:60:84:6C:24:20:15:01:20:31
Authority key identifier: 4E:74:61:47:7B:59:B7:BC:09:06:F6:CE:60:65:0B:B3:AD:2D:EE:57
Certificate issuer: /CN=4e7461477b59b7bc0906f6ce60650bb3ad2dee57
Certificate serial: 019A52D1A938B6B627CA843F653ACCDA4773
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TnRhR3tZt7wJBvbOYGULs60t7lc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/61109f-2d19-41ce-ba6e-ddbc0def83e1/1/TnRhR3tZt7wJBvbOYGULs60t7lc.mft
Manifest number: 0764
Signing time: Wed 05 Nov 2025 07:01:03 +0000
Manifest this update: Wed 05 Nov 2025 07:01:03 +0000
Manifest next update: Thu 06 Nov 2025 07:01:03 +0000
Files and hashes: 1: 1-deSD0Zx7mZFaKLgvp5MfNNL6B0.roa (hash: 0HLnR/UxvmJgyKOOTOBI/jNtxozr1BfrerbK66hTjvg=)
2: TnRhR3tZt7wJBvbOYGULs60t7lc.crl (hash: wIZzKf/sFP0WOTAhXJI4K0G4WYOOaDd8Bx0afvtGVqs=)
3: ztG3iRtcx4pgmD82wNPmhKWPj8w.roa (hash: 7wVFIe2H/2PMSyJC9QSggcK+C7T3Sk0wvSIjn0Idsps=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/61109f-2d19-41ce-ba6e-ddbc0def83e1/1/TnRhR3tZt7wJBvbOYGULs60t7lc.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/61109f-2d19-41ce-ba6e-ddbc0def83e1/1/TnRhR3tZt7wJBvbOYGULs60t7lc.mft
rsync://rpki.ripe.net/repository/DEFAULT/TnRhR3tZt7wJBvbOYGULs60t7lc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:d1:a9:38:b6:b6:27:ca:84:3f:65:3a:cc:da:47:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e7461477b59b7bc0906f6ce60650bb3ad2dee57
Validity
Not Before: Nov 5 07:01:03 2025 GMT
Not After : Nov 6 07:01:03 2025 GMT
Subject: CN=eff163b13271ced4055db260846c242015012031
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:a4:88:ce:bf:41:fe:84:23:13:d7:cb:4c:66:
ce:9c:32:6e:88:b5:4c:61:a6:5b:48:89:7b:40:b7:
40:5d:74:25:cf:f4:24:0c:76:c7:b1:a9:73:fb:c5:
c8:67:ec:d2:34:78:e9:c6:76:de:b1:45:c2:7f:4d:
e3:09:b6:80:b7:5c:92:fb:4f:0e:fb:37:74:2a:5a:
31:52:79:d4:61:04:d1:f9:e3:13:05:70:6a:ab:88:
32:a9:53:52:ff:24:f9:b4:77:87:ae:45:c7:f2:17:
de:ea:fc:8e:31:01:ee:92:be:40:9b:0a:a4:ac:ff:
94:c3:77:21:df:ee:ec:6b:77:55:40:a6:e2:23:47:
1c:30:bc:60:05:0c:1d:33:97:4a:1e:e7:c0:83:0f:
14:db:29:bf:bd:00:e3:a8:a0:34:2c:a3:ec:cf:b5:
cc:b7:f0:ee:48:10:ba:98:04:42:7a:cf:f4:1e:c6:
69:26:f3:bf:a3:31:52:1c:a0:1a:b6:18:87:53:14:
be:9f:29:b7:a4:04:2e:11:5e:2f:6b:69:66:bf:9b:
39:9c:78:96:4f:5e:01:a2:e7:71:17:75:98:ed:c6:
6f:48:fe:99:8e:4d:94:a6:42:d3:ae:48:ef:5f:2e:
4f:2b:f9:43:b0:63:5f:8b:29:67:41:0d:24:66:ce:
2f:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:F1:63:B1:32:71:CE:D4:05:5D:B2:60:84:6C:24:20:15:01:20:31
X509v3 Authority Key Identifier:
keyid:4E:74:61:47:7B:59:B7:BC:09:06:F6:CE:60:65:0B:B3:AD:2D:EE:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TnRhR3tZt7wJBvbOYGULs60t7lc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/61109f-2d19-41ce-ba6e-ddbc0def83e1/1/TnRhR3tZt7wJBvbOYGULs60t7lc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/61109f-2d19-41ce-ba6e-ddbc0def83e1/1/TnRhR3tZt7wJBvbOYGULs60t7lc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:88:8b:e1:c5:1a:db:90:35:5a:85:6c:a8:0a:23:1e:be:8f:
2a:5c:11:1c:38:94:c2:a1:4e:ec:98:b3:76:dc:b8:c8:19:17:
ff:f6:ae:ba:de:53:52:48:0e:c2:b0:13:e0:75:0b:b9:87:71:
52:43:be:d1:0b:9d:ec:14:fa:d6:26:c8:c2:af:fb:bb:8f:95:
63:72:20:5d:c1:40:61:a4:36:cd:09:e7:b1:d9:4c:a6:ba:61:
79:4b:2a:7f:2a:ac:15:b9:9a:5d:6d:e8:8e:8b:c2:e7:b1:1f:
d1:03:97:e4:e2:74:e2:39:38:0f:bf:94:6a:ef:cd:88:de:ca:
7a:66:24:8e:25:d3:f5:b2:5f:f9:64:7a:9d:63:03:97:29:d3:
30:bc:70:d0:d1:60:ee:cd:19:e9:d1:e6:eb:16:ca:18:df:73:
2b:fa:78:27:87:47:29:e9:86:87:36:20:14:64:83:92:e7:5e:
d5:28:26:27:65:cb:81:ac:1c:0c:0e:fa:a2:37:a8:5d:4e:d0:
ac:b9:3f:92:3a:61:f3:62:f2:da:f4:ac:23:c1:88:3c:03:5f:
e5:33:dc:58:60:43:95:60:32:da:50:4e:78:1d:be:18:a1:c0:
ee:27:32:88:fa:13:c8:3e:cb:c1:c5:54:b8:09:f8:2e:cf:f2:
7a:47:49:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 10:48:17 2025 by rpki-client