Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/689ab5-30d2-46a3-8c54-16b4196fa294/1/Tmm0ArZ9dZNvRdyLxUuGgU4GNro.mft
File: Tmm0ArZ9dZNvRdyLxUuGgU4GNro.mft (raw, json)
Hash identifier: reLycNzXJW206UBSs3RHIAh7QmNEUax3gFPM2xEEPbE=
Subject key identifier: F6:B7:00:5E:0B:90:D3:60:CE:B8:F5:C9:E3:74:8D:6A:90:9C:9A:1A
Authority key identifier: 4E:69:B4:02:B6:7D:75:93:6F:45:DC:8B:C5:4B:86:81:4E:06:36:BA
Certificate issuer: /CN=4e69b402b67d75936f45dc8bc54b86814e0636ba
Certificate serial: 019A4E18C4ACBF0C47E950FFC1183B5EC11B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tmm0ArZ9dZNvRdyLxUuGgU4GNro.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/689ab5-30d2-46a3-8c54-16b4196fa294/1/Tmm0ArZ9dZNvRdyLxUuGgU4GNro.mft
Manifest number: 12ED
Signing time: Tue 04 Nov 2025 09:00:37 +0000
Manifest this update: Tue 04 Nov 2025 09:00:37 +0000
Manifest next update: Wed 05 Nov 2025 09:00:37 +0000
Files and hashes: 1: OvfWeCcNPkjbD4WceB7qJUQP56g.roa (hash: fRXrYY7/CZ7H+wWfEy5WHXYQSNWj53G/u9ERuP4d6t8=)
2: Tmm0ArZ9dZNvRdyLxUuGgU4GNro.crl (hash: fGDKn9hyf5EPjhWeNzLsZH2sj/XGeffiGq+0B7F6UA8=)
3: mVQlHhnVYgof6PbGg47IlXbHufE.roa (hash: EuWc5XhS83Rt6mxNh7vCwfoYl/yRKN36oWWE3rRVLmQ=)
4: qs4pJOexn1Zfkfzcd1TjFYHIVOs.roa (hash: FgzvVUL28rYxcaIK8c4YP+ZNrmGFqrNKlv9zOeTK/II=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/689ab5-30d2-46a3-8c54-16b4196fa294/1/Tmm0ArZ9dZNvRdyLxUuGgU4GNro.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/689ab5-30d2-46a3-8c54-16b4196fa294/1/Tmm0ArZ9dZNvRdyLxUuGgU4GNro.mft
rsync://rpki.ripe.net/repository/DEFAULT/Tmm0ArZ9dZNvRdyLxUuGgU4GNro.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:18:c4:ac:bf:0c:47:e9:50:ff:c1:18:3b:5e:c1:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e69b402b67d75936f45dc8bc54b86814e0636ba
Validity
Not Before: Nov 4 09:00:37 2025 GMT
Not After : Nov 5 09:00:37 2025 GMT
Subject: CN=f6b7005e0b90d360ceb8f5c9e3748d6a909c9a1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:12:1f:fe:67:aa:22:2f:62:41:35:58:6c:1f:
2a:f6:c4:22:36:e7:11:3a:3b:13:06:ac:3a:f9:8b:
99:b9:02:07:24:3a:60:ff:6a:35:41:d5:d6:c0:ef:
ba:be:0b:74:98:b5:5e:fd:32:6b:73:6b:21:56:b8:
33:3a:7d:8f:a7:a3:4d:93:c8:6e:32:37:f8:87:63:
de:d3:87:12:88:79:2f:30:79:6e:4a:0a:b5:27:99:
9a:f6:23:99:2e:ca:a1:bb:b4:57:1a:dc:e2:c8:ad:
40:1e:3b:17:21:0b:2a:d1:58:fe:52:17:72:d1:b8:
4e:af:26:c0:be:43:7c:5e:c2:4d:1b:a9:ec:53:cc:
7a:cd:c0:52:40:5d:40:5e:e9:0d:4a:b3:8b:ea:ea:
88:53:40:43:a0:55:86:a7:ab:35:82:fb:6d:46:4a:
29:dc:0c:7c:86:49:b9:6e:3d:a0:0f:af:25:20:a2:
a4:e1:29:fa:54:5e:1d:fe:4f:47:91:42:bd:30:7c:
95:06:21:ad:f8:41:f3:55:a3:d5:73:66:2f:98:d4:
ed:d8:64:fb:06:ef:36:74:39:4e:7d:92:e2:d6:8b:
10:22:4d:92:17:cb:5f:43:aa:e0:a9:5a:54:6f:c5:
c6:7b:c6:87:69:ec:59:71:de:30:c5:31:02:62:e6:
4d:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:B7:00:5E:0B:90:D3:60:CE:B8:F5:C9:E3:74:8D:6A:90:9C:9A:1A
X509v3 Authority Key Identifier:
keyid:4E:69:B4:02:B6:7D:75:93:6F:45:DC:8B:C5:4B:86:81:4E:06:36:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tmm0ArZ9dZNvRdyLxUuGgU4GNro.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/689ab5-30d2-46a3-8c54-16b4196fa294/1/Tmm0ArZ9dZNvRdyLxUuGgU4GNro.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/689ab5-30d2-46a3-8c54-16b4196fa294/1/Tmm0ArZ9dZNvRdyLxUuGgU4GNro.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:62:c5:6b:72:88:56:c4:f2:61:ab:19:6b:e2:13:0f:a0:6e:
fc:32:d0:52:8b:b0:e7:20:38:39:84:78:e0:5e:01:b1:10:ab:
5c:a1:ad:43:66:57:75:9e:19:3e:a6:17:fc:2d:d4:a9:2a:6a:
b5:36:31:1f:d0:a4:fc:56:80:48:ca:11:02:75:60:be:87:16:
4f:6b:1e:5a:96:00:fa:3a:30:af:20:57:e6:55:bc:58:64:76:
82:bd:35:ad:9e:b7:9c:52:be:b5:69:84:3e:3b:03:e8:11:76:
9c:3d:13:17:fc:2d:78:9a:7f:d8:15:1a:4a:97:75:13:ed:57:
c3:67:f4:34:6e:4f:1b:d6:c8:be:48:88:ab:70:20:03:dc:cf:
53:6c:e2:67:5d:3d:0f:54:e5:de:f6:94:ac:c7:81:80:41:6f:
d8:4e:9f:01:09:e6:d3:dd:2e:9b:c4:a0:9d:39:4c:11:18:f1:
57:8a:67:6a:d3:e2:c8:7e:3f:e7:92:1f:6c:4b:44:6a:a2:80:
84:8d:8a:c3:d6:43:80:d6:c3:ec:4c:58:f1:1b:cb:b7:e9:ea:
a1:33:85:93:57:ca:5f:0d:24:00:c1:9e:0b:49:5f:54:d8:ed:
07:6c:d3:79:91:c8:87:9a:93:2e:a6:85:45:c2:da:65:e2:7b:
4a:10:5d:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:52:50 2025 by rpki-client