Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/df6e25-923c-4838-864f-d4b37e44ab7c/1/TDkFWmmQuCQIzxq_KTE3gOJJpMk.mft
File: TDkFWmmQuCQIzxq_KTE3gOJJpMk.mft (raw, json)
Hash identifier: t550Oq7a0LR1ZkiHWLzUTLqJzcV4sWA6HIo74wkJpNU=
Subject key identifier: 1B:5A:45:D9:F6:BC:04:C1:E1:01:BF:79:6B:51:20:99:6B:13:AF:10
Authority key identifier: 4C:39:05:5A:69:90:B8:24:08:CF:1A:BF:29:31:37:80:E2:49:A4:C9
Certificate issuer: /CN=4c39055a6990b82408cf1abf29313780e249a4c9
Certificate serial: 019A5119D2D11FA88E360C9653CDE67F79B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TDkFWmmQuCQIzxq_KTE3gOJJpMk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/df6e25-923c-4838-864f-d4b37e44ab7c/1/TDkFWmmQuCQIzxq_KTE3gOJJpMk.mft
Manifest number: 1277
Signing time: Tue 04 Nov 2025 23:00:38 +0000
Manifest this update: Tue 04 Nov 2025 23:00:38 +0000
Manifest next update: Wed 05 Nov 2025 23:00:38 +0000
Files and hashes: 1: 0Y15xTEGHWqAVJeDnj84hoOI0tg.roa (hash: x9AqfYccJqcsHyWL4/sbLsYAD4D5JWU2OTOL9ya8Qzo=)
2: IYab2KOA6Rs-FvpcDRNq2DIlRwA.roa (hash: IVe8cPHTrjQPMjYgTeQH7fMCvrM38QVBDNRacJOqgtc=)
3: TDkFWmmQuCQIzxq_KTE3gOJJpMk.crl (hash: HVYlgz5dgE++A7bM8DeQnRTwJptvIOAXN1eQ7N4FbRU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/df6e25-923c-4838-864f-d4b37e44ab7c/1/TDkFWmmQuCQIzxq_KTE3gOJJpMk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/df6e25-923c-4838-864f-d4b37e44ab7c/1/TDkFWmmQuCQIzxq_KTE3gOJJpMk.mft
rsync://rpki.ripe.net/repository/DEFAULT/TDkFWmmQuCQIzxq_KTE3gOJJpMk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:37:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:19:d2:d1:1f:a8:8e:36:0c:96:53:cd:e6:7f:79:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c39055a6990b82408cf1abf29313780e249a4c9
Validity
Not Before: Nov 4 23:00:38 2025 GMT
Not After : Nov 5 23:00:38 2025 GMT
Subject: CN=1b5a45d9f6bc04c1e101bf796b5120996b13af10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:98:0e:79:bd:25:ff:1b:fd:88:8d:bb:8d:7e:
6c:ac:6d:e7:29:7d:ce:ff:bd:31:c8:f1:c9:d2:64:
63:0f:55:86:9e:6a:e7:4a:1a:89:fc:27:5d:e8:64:
5d:fa:ca:8d:60:cc:ff:ac:ac:2d:6f:45:d3:54:29:
cd:3b:85:dc:ac:94:9b:d2:ee:ed:44:99:d5:3d:cf:
26:5b:a7:21:54:48:c0:62:c8:a6:26:3d:66:bf:22:
dc:5e:34:27:d2:be:63:95:4f:0a:84:3d:32:e1:fa:
0b:17:8f:ef:75:2a:ec:76:87:26:b7:65:cc:58:27:
96:3f:17:e4:6d:12:8a:23:60:7e:28:40:28:5d:2a:
61:6a:99:42:b6:be:48:8e:8f:4b:14:34:85:e5:cd:
e7:1e:2f:66:49:79:fe:83:69:7b:8d:1d:66:e6:e7:
80:50:88:ee:44:89:70:77:a5:ae:23:0e:4f:81:b1:
e4:8b:0e:1c:1e:88:f2:d4:47:f1:05:a1:49:a0:ce:
a0:1e:8a:91:5b:c2:f8:07:f6:ce:62:73:d3:11:f9:
52:91:a4:2d:d1:66:29:97:86:e8:c7:54:87:74:11:
ba:d3:9a:f1:fb:9f:f3:a2:77:ff:ec:7c:47:82:fe:
ac:d4:c4:76:ba:6e:43:03:f6:d2:7b:e5:c1:26:31:
95:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:5A:45:D9:F6:BC:04:C1:E1:01:BF:79:6B:51:20:99:6B:13:AF:10
X509v3 Authority Key Identifier:
keyid:4C:39:05:5A:69:90:B8:24:08:CF:1A:BF:29:31:37:80:E2:49:A4:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TDkFWmmQuCQIzxq_KTE3gOJJpMk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/df6e25-923c-4838-864f-d4b37e44ab7c/1/TDkFWmmQuCQIzxq_KTE3gOJJpMk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/df6e25-923c-4838-864f-d4b37e44ab7c/1/TDkFWmmQuCQIzxq_KTE3gOJJpMk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:10:d1:4a:16:c7:8f:60:cb:23:4f:c0:b1:85:6b:6b:cf:ad:
e8:4a:90:5b:ea:1a:1e:97:44:48:c5:1b:2d:92:ce:1d:53:7a:
42:80:51:30:22:b9:a0:96:ec:7e:db:30:a6:98:6e:54:e1:7a:
e5:71:70:9b:8e:94:dd:53:29:8f:fd:93:15:ea:ff:6f:47:52:
85:57:0a:11:4b:4e:2d:d4:89:a0:d4:84:59:0f:68:c9:82:56:
f8:4e:8b:67:75:7f:0a:59:04:d2:bf:49:3f:64:f7:0b:42:c2:
fd:fa:22:f9:49:d1:7b:ee:18:e0:31:6e:a9:1f:2f:49:17:ca:
5c:9d:d6:ad:fe:49:56:8b:3c:9b:10:d4:e3:5b:be:8f:0d:70:
9c:f6:c0:91:e3:66:df:af:07:2e:3c:ec:d6:5b:a2:24:b9:96:
a9:6f:ab:87:25:57:89:1d:26:5d:c8:27:1f:59:66:a7:68:6b:
b5:ea:a2:10:53:03:cb:92:83:e6:96:d2:d0:cc:eb:14:ac:2c:
73:f0:34:67:5f:79:e5:c3:2d:b8:3b:51:9e:74:f3:54:91:8e:
b9:92:8c:10:28:b1:37:46:94:7d:e2:1e:2f:07:87:aa:c7:7d:
4e:2d:dd:67:57:44:60:f2:3b:fc:4e:2b:16:87:cd:9f:55:43:
ad:0d:8f:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 07:27:51 2025 by rpki-client