Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/ee29a6-691d-4b0c-ad63-94c8254bd3b7/1/TBsMQJaQgJV_zO4fuKP7S7OL9dw.mft
File: TBsMQJaQgJV_zO4fuKP7S7OL9dw.mft (raw, json)
Hash identifier: gw62qWowRpu1jTiPec+QWXWKQ+qKbFE6BYnlc8uieZg=
Subject key identifier: 23:08:8C:7F:44:BC:6D:75:23:32:5A:14:83:BD:59:73:C9:A2:2B:B1
Authority key identifier: 4C:1B:0C:40:96:90:80:95:7F:CC:EE:1F:B8:A3:FB:4B:B3:8B:F5:DC
Certificate issuer: /CN=4c1b0c40969080957fccee1fb8a3fb4bb38bf5dc
Certificate serial: 019A4D05EC706322DD2F345FF021B1D79C6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TBsMQJaQgJV_zO4fuKP7S7OL9dw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/ee29a6-691d-4b0c-ad63-94c8254bd3b7/1/TBsMQJaQgJV_zO4fuKP7S7OL9dw.mft
Manifest number: 13FA
Signing time: Tue 04 Nov 2025 04:00:25 +0000
Manifest this update: Tue 04 Nov 2025 04:00:25 +0000
Manifest next update: Wed 05 Nov 2025 04:00:25 +0000
Files and hashes: 1: H36xXwuB9FJ3ESjpo_XmH_KZ2R4.roa (hash: CUtTMRPtfP9rNsMoQeZ2J44Z+jwTnsWRsKW5k/0LKug=)
2: TBsMQJaQgJV_zO4fuKP7S7OL9dw.crl (hash: 60v4/9c58JnJQhi+Q2jsiQpY+bfREI2hzSRbi79bFkw=)
3: tpqvdlW8wuSttlFQd80uk4F5YQY.roa (hash: yDvp+gGPiyhARcManoLZEVb02KcZ7k4JkC3clhGu75w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/ee29a6-691d-4b0c-ad63-94c8254bd3b7/1/TBsMQJaQgJV_zO4fuKP7S7OL9dw.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/ee29a6-691d-4b0c-ad63-94c8254bd3b7/1/TBsMQJaQgJV_zO4fuKP7S7OL9dw.mft
rsync://rpki.ripe.net/repository/DEFAULT/TBsMQJaQgJV_zO4fuKP7S7OL9dw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 04:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:05:ec:70:63:22:dd:2f:34:5f:f0:21:b1:d7:9c:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c1b0c40969080957fccee1fb8a3fb4bb38bf5dc
Validity
Not Before: Nov 4 04:00:25 2025 GMT
Not After : Nov 5 04:00:25 2025 GMT
Subject: CN=23088c7f44bc6d7523325a1483bd5973c9a22bb1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:b9:3d:54:7d:c0:0c:ca:b0:53:f5:1d:c8:09:
b5:05:3a:1b:36:b4:92:7a:f3:d2:fa:55:c3:27:47:
b0:4e:e9:a8:f7:2b:12:f1:4e:59:9c:68:7b:e0:0c:
7c:25:f2:5a:b0:44:ed:63:13:d6:a4:92:dd:bf:61:
dc:f5:85:58:5d:b0:3e:f8:cb:15:37:12:bf:58:df:
b6:37:af:77:08:ab:1e:ab:4e:5e:a5:46:ab:b5:0c:
32:6b:ea:1f:a1:28:89:74:a2:95:79:c6:56:69:4b:
6c:b3:15:fc:cf:fb:91:43:39:5b:6c:91:74:8c:5f:
da:ff:6c:20:fe:0a:11:ea:85:b2:cf:d1:2e:f8:78:
7f:2e:48:09:77:ac:22:17:8b:4f:87:2f:94:95:01:
9e:0e:67:cb:72:a5:64:96:71:33:3d:b1:00:b4:c0:
20:6b:61:81:76:c7:20:53:63:63:cd:f0:e5:ce:4c:
c0:6c:89:d1:e7:db:f6:98:71:5d:f0:7d:85:15:55:
a2:e9:c4:e0:85:ed:a9:47:cd:44:ec:22:07:33:07:
d6:08:61:69:72:6b:d6:93:22:b0:19:8c:ab:d8:b2:
d5:63:04:0a:91:d2:b4:a9:7b:19:ad:65:47:fd:53:
30:fe:43:9c:5f:67:a7:bd:14:1f:f7:02:80:bb:01:
3c:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:08:8C:7F:44:BC:6D:75:23:32:5A:14:83:BD:59:73:C9:A2:2B:B1
X509v3 Authority Key Identifier:
keyid:4C:1B:0C:40:96:90:80:95:7F:CC:EE:1F:B8:A3:FB:4B:B3:8B:F5:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TBsMQJaQgJV_zO4fuKP7S7OL9dw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/ee29a6-691d-4b0c-ad63-94c8254bd3b7/1/TBsMQJaQgJV_zO4fuKP7S7OL9dw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/ee29a6-691d-4b0c-ad63-94c8254bd3b7/1/TBsMQJaQgJV_zO4fuKP7S7OL9dw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:14:d2:9c:31:ab:84:8a:60:d2:9a:91:63:a0:17:37:6d:d4:
7a:15:ad:0e:1a:f9:5c:2e:fa:d6:31:66:84:09:7d:be:c3:b2:
68:d3:70:e1:29:ce:53:1d:3b:98:a1:4a:e6:08:67:51:03:cc:
0d:5b:d2:5a:c1:81:de:5e:e9:ca:b1:56:2c:00:00:45:50:0b:
1c:ec:b4:07:f6:a3:78:c1:c1:79:e2:a6:44:4e:3b:64:f0:b2:
1f:2b:3f:bb:a1:c3:c0:04:72:9e:21:a8:09:73:15:66:ec:de:
06:85:b1:a3:40:2c:0e:94:84:5d:aa:70:4a:9d:ef:33:5f:7d:
9e:41:69:90:e3:0b:97:9f:3c:98:3f:fb:42:53:ba:e8:2c:24:
93:84:da:f6:75:64:8a:25:25:ce:a3:01:11:66:73:dd:0f:6e:
0e:0f:f1:c7:42:b6:c2:f8:75:74:94:64:45:1c:c1:81:f5:5a:
2a:30:f0:9c:fc:06:37:4b:37:de:50:64:8f:0f:11:a7:56:d5:
79:cb:6a:59:10:29:7c:a3:17:72:e6:44:ad:08:89:e8:dd:f5:
c6:cb:0d:10:0a:41:0c:e4:c1:f9:c0:cd:60:f5:a3:f2:a1:5a:
b7:94:56:ee:11:79:c6:87:d7:42:08:2b:b8:e5:46:49:51:1c:
48:a5:32:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:47:25 2025 by rpki-client