Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/b5733b-3891-449b-9950-ff60e218ed41/1/TL_T5y1KA5b5U0cza0Jnj2jCZDA.mft
File: TL_T5y1KA5b5U0cza0Jnj2jCZDA.mft (raw, json)
Hash identifier: VXwMTw7riI4IPNbzgbdUuT0udkHnZIth2+vcmD3A07I=
Subject key identifier: 2B:96:F4:1A:69:C0:CE:65:83:D7:B0:3C:76:A4:9E:92:4A:5B:C1:C5
Authority key identifier: 4C:BF:D3:E7:2D:4A:03:96:F9:53:47:33:6B:42:67:8F:68:C2:64:30
Certificate issuer: /CN=4cbfd3e72d4a0396f95347336b42678f68c26430
Certificate serial: 019A4F62E1CC9EFCE481B8D112C26F6B2827
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TL_T5y1KA5b5U0cza0Jnj2jCZDA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/b5733b-3891-449b-9950-ff60e218ed41/1/TL_T5y1KA5b5U0cza0Jnj2jCZDA.mft
Manifest number: 171C
Signing time: Tue 04 Nov 2025 15:01:11 +0000
Manifest this update: Tue 04 Nov 2025 15:01:11 +0000
Manifest next update: Wed 05 Nov 2025 15:01:11 +0000
Files and hashes: 1: IF7POYmH2s6_XyYc1YSgmRclBfU.roa (hash: vkWkPszh+VD/raa/NYL5vb45rCVCasfYYp1M1TBPCxY=)
2: JEYd_tTpdWRz3pFCNxB3FFwgT6Y.roa (hash: Cf4mCXc4k2uDXgbB44mtC61vJtEhAxi4CrnAuvkGzGk=)
3: TL_T5y1KA5b5U0cza0Jnj2jCZDA.crl (hash: 9IvMtjFMKH0/OihLEp+C702Pxnikl7beh+3Xp4yCEvw=)
4: aC7DUlOCYd4ZrOlGrZ-OMdQYyBE.roa (hash: gIed90T8oX8NcIFpqOYwduIUaAgChpM53a4QzPH0Bg8=)
5: e0P4zqHajvo1XtAyySozyOucDY0.roa (hash: uBYNOSzSg+Z80PXiuAGXfKeocd8WYWEry+iBGwq/1mk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/b5733b-3891-449b-9950-ff60e218ed41/1/TL_T5y1KA5b5U0cza0Jnj2jCZDA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/b5733b-3891-449b-9950-ff60e218ed41/1/TL_T5y1KA5b5U0cza0Jnj2jCZDA.mft
rsync://rpki.ripe.net/repository/DEFAULT/TL_T5y1KA5b5U0cza0Jnj2jCZDA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 15:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:62:e1:cc:9e:fc:e4:81:b8:d1:12:c2:6f:6b:28:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4cbfd3e72d4a0396f95347336b42678f68c26430
Validity
Not Before: Nov 4 15:01:11 2025 GMT
Not After : Nov 5 15:01:11 2025 GMT
Subject: CN=2b96f41a69c0ce6583d7b03c76a49e924a5bc1c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:cf:b7:34:d1:4f:31:44:d3:07:e2:f5:38:39:
73:4b:18:d3:32:8e:b4:6b:10:67:a4:32:cc:b7:9a:
62:11:98:18:0b:22:b2:71:d7:80:f2:2e:8c:13:1d:
c9:af:39:18:e9:cb:aa:b7:d8:67:5a:03:1f:f1:81:
64:08:46:05:13:ee:29:bf:cc:ab:58:6e:51:54:11:
a0:4b:9b:ae:f2:70:8f:0f:2e:e1:6b:bb:f0:78:ce:
cd:9b:04:8e:f1:90:8a:13:5b:c2:86:94:dd:dc:e6:
5d:ec:6e:b9:35:5b:ac:6c:4c:1d:9c:e5:bf:a9:cc:
76:e7:fa:5d:d5:78:63:10:c7:0c:74:be:b3:61:7c:
e0:55:24:83:43:28:89:23:84:bc:84:a4:47:b6:c5:
6e:da:7e:91:5b:97:43:26:74:9c:bb:3c:b4:5f:e0:
8c:c2:ba:31:e3:8d:5f:bf:97:a0:5d:7c:27:9b:7e:
48:94:80:b3:6d:b8:38:10:6a:7c:1e:e3:d8:49:7c:
91:f8:56:b9:f3:90:58:64:ba:e4:eb:02:bc:1b:b8:
f8:c8:8a:3a:00:d7:1b:03:67:0c:a6:d3:18:c4:a9:
7a:93:c5:10:55:f7:ce:6b:83:55:43:09:b0:71:f2:
0d:2b:f6:76:f0:f7:73:8f:49:02:5d:74:3f:b6:e0:
c6:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:96:F4:1A:69:C0:CE:65:83:D7:B0:3C:76:A4:9E:92:4A:5B:C1:C5
X509v3 Authority Key Identifier:
keyid:4C:BF:D3:E7:2D:4A:03:96:F9:53:47:33:6B:42:67:8F:68:C2:64:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TL_T5y1KA5b5U0cza0Jnj2jCZDA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/b5733b-3891-449b-9950-ff60e218ed41/1/TL_T5y1KA5b5U0cza0Jnj2jCZDA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/b5733b-3891-449b-9950-ff60e218ed41/1/TL_T5y1KA5b5U0cza0Jnj2jCZDA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:4d:95:75:15:7a:e0:e9:34:4b:94:8d:53:ef:54:ee:04:09:
9a:8b:98:97:0f:9f:10:25:0a:d8:5c:e8:00:4c:fe:5a:ae:85:
c2:4b:39:6f:45:36:66:fd:98:ec:3d:79:a1:57:a8:ae:e3:9a:
83:4d:d9:3a:f0:fc:1c:60:01:c4:7a:e0:a3:8b:18:93:c6:f4:
cb:71:4a:a2:13:fa:02:dd:d9:1f:97:d2:fb:7a:ba:af:f0:4a:
58:e1:fe:59:bd:e7:e2:1b:9a:f7:0e:64:3a:6c:ca:6d:f4:e0:
fe:c5:2f:23:e5:85:cf:c4:3f:ce:d0:35:9c:9f:d1:3d:b5:05:
02:e2:3c:f1:b1:7c:3b:c6:8a:d7:0b:5b:d5:bd:c9:4c:80:6b:
80:2b:60:64:ad:f6:77:9a:c4:88:2f:ef:e1:2a:a6:84:c8:1f:
27:6b:ad:3f:b8:8f:07:cf:4e:84:d0:ce:50:81:8d:76:3a:7f:
19:5a:9f:6c:e3:eb:6a:6b:43:73:43:9a:5f:07:32:c7:62:22:
37:46:52:53:2d:66:db:45:1f:47:a3:12:d8:06:92:91:9c:4f:
3b:cb:30:0a:65:5e:45:36:ba:07:df:6d:26:77:2f:3b:3c:51:
14:80:3a:2b:0e:c5:e0:18:5d:19:f5:3a:d6:ee:b9:5d:85:04:
56:14:ff:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 23:56:04 2025 by rpki-client