Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/179ed5-d253-4255-9017-88df125ba663/1/TOmGBryaXUQHT_jL7cvbz8NfBWI.mft
File: TOmGBryaXUQHT_jL7cvbz8NfBWI.mft (raw, json)
Hash identifier: MenjtqKqJNbDUfV0GljPwPOuo8xNxZ4XqYC2Z1p2eMM=
Subject key identifier: EE:EF:61:28:45:75:08:9E:50:A5:D7:25:C3:58:3B:74:13:AD:88:67
Authority key identifier: 4C:E9:86:06:BC:9A:5D:44:07:4F:F8:CB:ED:CB:DB:CF:C3:5F:05:62
Certificate issuer: /CN=4ce98606bc9a5d44074ff8cbedcbdbcfc35f0562
Certificate serial: 019A4C61136C371A6E82246B0FEE199F3699
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TOmGBryaXUQHT_jL7cvbz8NfBWI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/179ed5-d253-4255-9017-88df125ba663/1/TOmGBryaXUQHT_jL7cvbz8NfBWI.mft
Manifest number: 170E
Signing time: Tue 04 Nov 2025 01:00:21 +0000
Manifest this update: Tue 04 Nov 2025 01:00:21 +0000
Manifest next update: Wed 05 Nov 2025 01:00:21 +0000
Files and hashes: 1: TOmGBryaXUQHT_jL7cvbz8NfBWI.crl (hash: 2vkDxFj8y9N2PMYW5w3/ag0bTr/lrT8mE8ERECQuQXQ=)
2: _2jPSPlgYJsD4ywwlbMtnQzhjck.roa (hash: dPt4vhrAZj1gNIW23Wk2/nT1GhYcZvAFuVHXtMeqVMs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/179ed5-d253-4255-9017-88df125ba663/1/TOmGBryaXUQHT_jL7cvbz8NfBWI.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/179ed5-d253-4255-9017-88df125ba663/1/TOmGBryaXUQHT_jL7cvbz8NfBWI.mft
rsync://rpki.ripe.net/repository/DEFAULT/TOmGBryaXUQHT_jL7cvbz8NfBWI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 01:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4c:61:13:6c:37:1a:6e:82:24:6b:0f:ee:19:9f:36:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ce98606bc9a5d44074ff8cbedcbdbcfc35f0562
Validity
Not Before: Nov 4 01:00:21 2025 GMT
Not After : Nov 5 01:00:21 2025 GMT
Subject: CN=eeef61284575089e50a5d725c3583b7413ad8867
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:c7:74:fd:d0:73:37:ce:8a:26:bb:93:a6:41:
4c:71:2c:46:0e:0c:ec:50:34:21:47:14:16:b1:a4:
2b:55:33:f6:bf:cf:d5:d2:82:d0:19:6a:0b:60:ea:
60:ee:2e:3c:6d:70:a7:de:28:9a:b8:9b:5d:fe:fd:
19:20:d8:92:81:11:70:c3:f6:e1:93:b2:dd:05:55:
21:a8:4b:53:bb:b0:aa:4b:80:35:6f:b6:49:c7:83:
b6:7c:7e:f1:a5:d1:e8:21:b0:e3:d8:d4:68:81:db:
63:01:b0:58:f3:fa:6d:6b:96:c0:c6:3a:06:39:67:
01:cb:6a:85:36:8e:61:cd:33:e9:de:3d:83:0d:f1:
19:bf:c2:4b:34:c2:66:82:d6:43:f8:f3:19:b2:82:
6e:b5:e0:8d:e7:e9:7f:8a:02:3e:61:7f:2d:d4:0e:
53:6e:3d:c3:af:a4:c0:0f:d3:41:52:ed:19:7d:f2:
90:77:97:cc:a6:5f:67:e2:03:c1:6c:4a:ae:dd:29:
52:13:84:2a:84:04:26:4c:3b:20:fe:54:85:b2:2a:
aa:8c:7e:0a:b9:de:8c:55:ef:f1:a7:cc:8c:85:dc:
71:90:a1:f9:79:f5:70:b8:5e:41:0d:4f:e7:8a:69:
37:f2:aa:8c:6f:9d:34:76:39:3e:ce:09:59:07:5e:
f9:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:EF:61:28:45:75:08:9E:50:A5:D7:25:C3:58:3B:74:13:AD:88:67
X509v3 Authority Key Identifier:
keyid:4C:E9:86:06:BC:9A:5D:44:07:4F:F8:CB:ED:CB:DB:CF:C3:5F:05:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TOmGBryaXUQHT_jL7cvbz8NfBWI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/179ed5-d253-4255-9017-88df125ba663/1/TOmGBryaXUQHT_jL7cvbz8NfBWI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/179ed5-d253-4255-9017-88df125ba663/1/TOmGBryaXUQHT_jL7cvbz8NfBWI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:9a:a6:cf:1c:56:eb:9e:bb:7a:1d:50:7d:42:60:6d:bf:df:
af:44:cd:e0:27:be:40:a5:6d:f6:96:8c:87:c2:96:6c:ee:9d:
b8:76:fd:be:46:c8:01:c4:39:86:19:52:5d:64:85:b6:c3:e1:
cc:8f:e0:44:bb:a2:5e:d8:c4:95:13:78:b6:81:87:d8:fe:38:
6c:f1:ed:9b:15:9f:ce:02:ec:ee:ad:ac:2a:36:f9:39:9d:85:
62:92:de:3a:73:b2:bb:63:86:78:0c:95:88:92:b9:06:d7:ac:
00:ce:1e:2d:8d:fc:02:8f:1b:2b:69:91:41:3f:ca:40:b8:99:
40:7b:e2:28:00:12:77:03:d1:85:f2:a2:c9:9e:13:c2:d0:5c:
8f:b8:0f:ce:73:a7:61:c9:37:5d:4b:f6:d4:8c:d0:da:4f:e1:
cf:50:cf:4b:d4:a1:f5:07:d3:13:3e:9e:fe:47:5d:dd:22:e0:
82:80:fa:27:de:55:d0:2d:33:e3:b3:0a:24:49:14:04:15:c3:
14:8f:e1:14:4f:a6:98:82:5f:e0:79:b1:20:79:f8:de:10:19:
89:af:75:bb:ad:82:6b:c6:4f:35:e0:1e:03:43:2b:a9:cf:1c:
12:56:33:64:d4:e8:4f:71:46:9a:79:4e:03:6b:a9:8f:ec:6d:
3c:2d:b6:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:52:28 2025 by rpki-client