Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/0cfe3e-729f-4418-9cf4-863daecfc2e8/1/tPpNCBs2iH8-XKZTf3Rp7uIdca4.mft
File: tPpNCBs2iH8-XKZTf3Rp7uIdca4.mft (raw, json)
Hash identifier: /1Zjf0eUtoIw7Yg7WT9j8MUvHZvYzDw+U9jhtW6TQ3A=
Subject key identifier: FF:11:B7:1A:73:8C:AF:05:2F:C6:45:7F:0D:37:A3:34:32:61:E0:AB
Authority key identifier: B4:FA:4D:08:1B:36:88:7F:3E:5C:A6:53:7F:74:69:EE:E2:1D:71:AE
Certificate issuer: /CN=b4fa4d081b36887f3e5ca6537f7469eee21d71ae
Certificate serial: 019A4F620DB393575A759557D7FD728192CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tPpNCBs2iH8-XKZTf3Rp7uIdca4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/0cfe3e-729f-4418-9cf4-863daecfc2e8/1/tPpNCBs2iH8-XKZTf3Rp7uIdca4.mft
Manifest number: 170F
Signing time: Tue 04 Nov 2025 15:00:17 +0000
Manifest this update: Tue 04 Nov 2025 15:00:17 +0000
Manifest next update: Wed 05 Nov 2025 15:00:17 +0000
Files and hashes: 1: HeDUncvNrC9DXvqHmX3LCuEEQFk.roa (hash: pkL8awVC+vif3Sv8BEo/gQroGPTBLCBBOJrEXIA/gLU=)
2: tPpNCBs2iH8-XKZTf3Rp7uIdca4.crl (hash: F34TaTJ8Zk4/MtW7so0PTmvaGvcXbVS9TGR4d+vsgU8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/0cfe3e-729f-4418-9cf4-863daecfc2e8/1/tPpNCBs2iH8-XKZTf3Rp7uIdca4.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/0cfe3e-729f-4418-9cf4-863daecfc2e8/1/tPpNCBs2iH8-XKZTf3Rp7uIdca4.mft
rsync://rpki.ripe.net/repository/DEFAULT/tPpNCBs2iH8-XKZTf3Rp7uIdca4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:62:0d:b3:93:57:5a:75:95:57:d7:fd:72:81:92:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4fa4d081b36887f3e5ca6537f7469eee21d71ae
Validity
Not Before: Nov 4 15:00:17 2025 GMT
Not After : Nov 5 15:00:17 2025 GMT
Subject: CN=ff11b71a738caf052fc6457f0d37a3343261e0ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:ce:97:62:6a:22:7a:ee:9b:e4:cd:d7:3e:41:
4f:98:64:ad:72:3f:7e:e5:b0:e1:68:6d:ab:25:a4:
d5:d1:29:ab:42:6e:bb:b0:98:7a:ab:77:7b:8e:58:
94:cd:ad:03:73:3f:82:06:91:61:d5:c7:cd:c7:06:
bc:4d:a0:f2:e4:7d:a8:af:e8:0d:04:2a:07:7b:0b:
bd:bb:81:5a:e4:94:6b:a7:c0:72:9c:5e:af:9a:f2:
4e:05:6c:3d:6a:58:9a:1e:0a:c9:ac:a1:cb:c7:dd:
f4:ee:24:bf:b8:bc:e1:f2:e7:23:ef:b0:02:81:a9:
76:ad:26:0c:b6:83:a6:f9:92:f1:53:b2:d5:ca:bf:
a2:6b:2f:1a:a9:5c:2d:37:b5:ed:66:ce:92:c0:26:
03:09:5e:ac:37:62:14:c0:4c:c4:e1:3f:61:9b:e0:
79:81:f2:17:c1:9c:a2:3f:f4:bf:95:a9:ed:43:25:
c5:15:92:ac:40:c2:2e:25:f5:0c:f4:ab:a0:60:9d:
1f:d6:92:67:03:45:54:65:0e:3d:ad:03:4f:6e:b3:
3d:20:68:15:7a:1e:07:ca:13:5b:76:00:ae:ca:4d:
8f:26:ad:42:41:e1:33:cd:e2:06:44:58:4d:19:fb:
19:b7:05:2e:c5:b7:2a:40:a5:b1:8e:c2:7b:54:ff:
ec:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:11:B7:1A:73:8C:AF:05:2F:C6:45:7F:0D:37:A3:34:32:61:E0:AB
X509v3 Authority Key Identifier:
keyid:B4:FA:4D:08:1B:36:88:7F:3E:5C:A6:53:7F:74:69:EE:E2:1D:71:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tPpNCBs2iH8-XKZTf3Rp7uIdca4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/0cfe3e-729f-4418-9cf4-863daecfc2e8/1/tPpNCBs2iH8-XKZTf3Rp7uIdca4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/0cfe3e-729f-4418-9cf4-863daecfc2e8/1/tPpNCBs2iH8-XKZTf3Rp7uIdca4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:4a:6c:ad:bf:11:a1:f9:58:d8:f0:dd:bd:83:73:aa:ae:f9:
fa:3b:42:5c:28:84:81:47:94:c5:22:49:1e:fa:97:53:43:7a:
64:78:c8:ec:73:8f:d4:d8:be:4f:9f:e2:e7:11:3c:c0:40:94:
57:87:4d:b3:ae:8f:19:c7:e3:d3:52:11:0b:e2:fa:a7:4c:a4:
83:10:f7:0a:c7:66:78:85:ab:09:75:f5:63:f1:e0:6e:5a:73:
38:c6:79:a0:43:1a:46:5c:8c:29:32:9c:54:af:1c:c9:2d:f7:
2f:47:35:7e:b0:f4:e6:2f:34:31:55:00:cc:5b:02:03:6e:1e:
27:e2:39:c4:d3:73:e1:64:10:87:b1:b6:6d:35:56:d7:98:89:
91:52:20:fd:7a:6f:31:3e:ea:78:8a:06:bd:fe:59:1e:71:e1:
c7:61:ac:bc:ef:a5:f2:74:9c:75:9c:bc:3c:ac:dc:e3:15:25:
43:c3:c3:cb:e9:23:01:5c:43:df:7c:c4:f3:c8:6e:bc:4d:eb:
42:2d:84:9a:dd:58:a9:f0:39:6d:14:c7:15:7d:f9:36:d5:a3:
a7:c2:8f:bb:48:41:eb:bd:f3:51:ba:e7:fd:da:fa:db:6e:60:
40:ac:6a:86:75:e9:5f:f0:c5:2b:38:21:3c:cb:3f:b9:41:a1:
64:45:e7:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:36:33 2025 by rpki-client