Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/41dec1-1eb1-49c7-9d50-ca595e34d5ac/1/TphKWkt4CLtOoy0xC90H7MlXURM.mft
File: TphKWkt4CLtOoy0xC90H7MlXURM.mft (raw, json)
Hash identifier: 5ySvgBHHMlfvfhih+LZn7EcSj7cD6YpWL3ZMYMJkln4=
Subject key identifier: 7B:DC:F7:D4:52:33:41:CF:05:9C:C2:06:CB:BD:AD:51:31:8A:41:E6
Authority key identifier: 4E:98:4A:5A:4B:78:08:BB:4E:A3:2D:31:0B:DD:07:EC:C9:57:51:13
Certificate issuer: /CN=4e984a5a4b7808bb4ea32d310bdd07ecc9575113
Certificate serial: 019A4E18E8AF4056A2D9B5976E7A1D045B74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TphKWkt4CLtOoy0xC90H7MlXURM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/41dec1-1eb1-49c7-9d50-ca595e34d5ac/1/TphKWkt4CLtOoy0xC90H7MlXURM.mft
Manifest number: 1710
Signing time: Tue 04 Nov 2025 09:00:46 +0000
Manifest this update: Tue 04 Nov 2025 09:00:46 +0000
Manifest next update: Wed 05 Nov 2025 09:00:46 +0000
Files and hashes: 1: 8ZKbnPniu913SnjXvn3kXFXoTm0.roa (hash: 5HixzWr+kvtOLRKOe0GySJFEoBIN8n7Szdz/SR3iCoA=)
2: TphKWkt4CLtOoy0xC90H7MlXURM.crl (hash: vD30zEmTlzPKklgcL+JZWZgVivYBOexwCKi/hZzqKXI=)
3: c5p1cEEnGb5RFBRHp7Sxm_tjKvM.roa (hash: M29Br9NKk77+hhhlGq1bhWv7l0daFqIJWaEI7ntt2wY=)
4: iDLcfc6aCabj7RN8rRXRQoXvHeA.roa (hash: UvXUgafoqKLsjB+HeAD02OLRE2t5kuX7jZTUuLZ1nRA=)
5: u6tKtCCW-Dj0-HkdzJ6yaeEuRAI.roa (hash: dfQrij6E/OioNCwBaUVfNrimg1NkdqgGbAXbWqoJr0s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/41dec1-1eb1-49c7-9d50-ca595e34d5ac/1/TphKWkt4CLtOoy0xC90H7MlXURM.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/41dec1-1eb1-49c7-9d50-ca595e34d5ac/1/TphKWkt4CLtOoy0xC90H7MlXURM.mft
rsync://rpki.ripe.net/repository/DEFAULT/TphKWkt4CLtOoy0xC90H7MlXURM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:18:e8:af:40:56:a2:d9:b5:97:6e:7a:1d:04:5b:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e984a5a4b7808bb4ea32d310bdd07ecc9575113
Validity
Not Before: Nov 4 09:00:46 2025 GMT
Not After : Nov 5 09:00:46 2025 GMT
Subject: CN=7bdcf7d4523341cf059cc206cbbdad51318a41e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:74:6b:ed:ad:39:59:07:38:c5:a9:3b:cd:84:
27:c1:55:01:23:6c:8c:5e:64:49:1a:9f:1e:b4:9e:
8a:db:47:11:7b:91:7d:31:c5:67:63:62:5a:43:74:
2e:d5:48:bb:ae:f4:67:73:99:d0:35:ec:87:c4:13:
5a:6d:72:2b:d3:0f:13:2d:0f:29:60:06:94:af:28:
15:46:7c:7b:2c:91:71:cf:2e:ed:3e:9e:38:3e:8e:
46:7a:fb:30:2c:5b:30:dd:a5:de:15:0e:c5:04:6d:
23:64:f2:16:ee:93:9b:49:1d:8d:fd:59:72:13:08:
cf:f9:9b:37:f9:7e:1a:7f:61:37:10:f4:8d:f0:7b:
8b:87:b4:c7:b3:d6:45:57:c2:dc:35:5a:d2:8c:2c:
b8:db:18:ac:e4:06:37:56:9b:67:59:e7:fb:51:5f:
0a:3a:03:86:f1:73:69:04:73:96:34:75:2f:c9:11:
ce:46:44:58:ea:df:b5:08:6f:1b:dc:9e:c9:3b:35:
05:42:27:c3:07:55:c1:5c:21:62:21:63:05:43:6f:
32:6c:d3:31:74:87:1b:01:52:5d:6d:87:7a:84:f0:
0b:3f:c4:1c:ab:00:4a:a4:76:fe:9d:3c:04:ef:42:
56:e1:bc:c4:89:0f:c9:04:db:a5:5f:ba:7a:d4:34:
53:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:DC:F7:D4:52:33:41:CF:05:9C:C2:06:CB:BD:AD:51:31:8A:41:E6
X509v3 Authority Key Identifier:
keyid:4E:98:4A:5A:4B:78:08:BB:4E:A3:2D:31:0B:DD:07:EC:C9:57:51:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TphKWkt4CLtOoy0xC90H7MlXURM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/41dec1-1eb1-49c7-9d50-ca595e34d5ac/1/TphKWkt4CLtOoy0xC90H7MlXURM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/41dec1-1eb1-49c7-9d50-ca595e34d5ac/1/TphKWkt4CLtOoy0xC90H7MlXURM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:00:88:3f:1c:89:95:ef:dd:86:30:e2:d4:d6:05:02:9a:23:
1e:ed:8f:c7:31:74:5e:8e:10:5e:b8:37:27:f6:2e:2a:39:a1:
29:d1:c7:ad:b9:2c:05:49:d9:47:15:c1:59:9e:f7:6a:9f:6e:
b6:fb:fb:c1:fb:5f:a3:7a:45:46:e9:4b:4a:e6:10:11:55:9a:
6a:ea:6b:7d:c8:7e:59:6f:3d:ba:ad:a6:4e:74:98:be:c3:62:
7b:9e:a2:b4:cf:c2:34:18:a2:e2:94:eb:dd:5a:d1:48:7c:a4:
7c:93:56:46:6e:75:51:78:34:7d:13:ce:47:c2:5b:f4:4a:bc:
18:50:45:a3:70:cb:31:be:60:df:7b:b3:16:03:51:ac:19:6f:
b8:03:92:f0:dc:44:5e:4f:98:a5:36:f2:23:49:56:07:4a:46:
5a:d3:3a:37:cb:d1:3e:3c:50:62:93:d7:68:2d:96:8c:54:72:
30:99:57:f1:14:28:63:c0:af:a7:da:6c:ba:25:48:6e:8b:e1:
52:af:7e:04:69:4e:46:2f:47:40:76:ec:82:84:d5:75:78:7e:
12:ac:8f:a6:e0:9d:37:5b:73:4f:9c:56:c6:a9:b8:ce:cb:31:
cf:bb:87:f0:13:e2:12:62:07:89:66:8f:33:ea:7c:e0:22:d3:
ea:18:a4:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:46:57 2025 by rpki-client