Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/4f0551-6922-45bf-97d3-7cf9a5fb6a9c/1/_tf4F9fm3tVu3txESIzUHAUqDcU.mft
File: _tf4F9fm3tVu3txESIzUHAUqDcU.mft (raw, json)
Hash identifier: hfILU2OJzyIidUDVUV34IgPGus5O3TRx+l+1LJIqJIw=
Subject key identifier: 53:58:1B:C5:85:DE:BE:04:FA:41:AC:6C:B2:34:5C:6E:EE:1F:4C:6F
Authority key identifier: FE:D7:F8:17:D7:E6:DE:D5:6E:DE:DC:44:48:8C:D4:1C:05:2A:0D:C5
Certificate issuer: /CN=fed7f817d7e6ded56ededc44488cd41c052a0dc5
Certificate serial: 019A54C031B7713D01B69AF3F21DA31FCE08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_tf4F9fm3tVu3txESIzUHAUqDcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/4f0551-6922-45bf-97d3-7cf9a5fb6a9c/1/_tf4F9fm3tVu3txESIzUHAUqDcU.mft
Manifest number: 16A0
Signing time: Wed 05 Nov 2025 16:01:13 +0000
Manifest this update: Wed 05 Nov 2025 16:01:13 +0000
Manifest next update: Thu 06 Nov 2025 16:01:13 +0000
Files and hashes: 1: _tf4F9fm3tVu3txESIzUHAUqDcU.crl (hash: xYB4we59su2o/rDiar+j8R5Uf2IsG5nQ4M6rmnp5AtI=)
2: jlmeoUxgI0KhFHV99BItMxAYMbc.roa (hash: NI9SzLu0aApCsGkR0hpBvVimZxaK1yHkWwQafkG2nq8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/4f0551-6922-45bf-97d3-7cf9a5fb6a9c/1/_tf4F9fm3tVu3txESIzUHAUqDcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/4f0551-6922-45bf-97d3-7cf9a5fb6a9c/1/_tf4F9fm3tVu3txESIzUHAUqDcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/_tf4F9fm3tVu3txESIzUHAUqDcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:54:c0:31:b7:71:3d:01:b6:9a:f3:f2:1d:a3:1f:ce:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fed7f817d7e6ded56ededc44488cd41c052a0dc5
Validity
Not Before: Nov 5 16:01:13 2025 GMT
Not After : Nov 6 16:01:13 2025 GMT
Subject: CN=53581bc585debe04fa41ac6cb2345c6eee1f4c6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:f8:12:11:18:c8:c3:89:39:4a:9f:9c:d1:00:
c5:10:72:d4:8e:90:2e:ae:a7:31:14:fb:60:30:f4:
b1:fc:c2:df:33:de:15:19:14:be:e1:4f:dc:1d:d6:
f2:2e:0f:3e:01:2d:cf:b4:29:ba:2e:d0:f5:72:72:
e5:fe:b4:69:f4:24:d8:a7:33:f4:54:00:08:c2:95:
c8:9c:df:e4:ff:b6:00:de:f7:92:2b:98:3b:ac:d1:
59:7e:5a:b5:2e:9d:dd:36:87:65:c9:7b:42:e3:24:
80:8c:76:48:76:65:0e:eb:e4:b4:68:94:6e:e5:7e:
00:42:ed:14:f2:98:c2:f1:80:40:7e:80:25:18:d5:
63:45:b5:e1:fa:98:81:35:1a:32:a4:0f:12:52:cf:
c1:57:9c:4c:f0:22:34:4f:04:27:eb:46:dc:19:c0:
f9:11:1b:24:06:4d:f7:8c:d8:ab:18:c5:10:17:14:
71:34:9d:b4:48:11:2e:5b:24:b7:13:ee:cf:60:fb:
17:0b:94:18:39:a3:dc:fd:d0:dd:c7:48:82:3f:66:
bd:da:2b:04:2e:2b:f2:b4:4b:b8:cb:8e:fa:ac:09:
89:05:0f:86:7b:3b:8f:0c:fa:c3:8e:da:ac:5e:5b:
7a:1b:a5:28:49:bd:f6:a1:b6:b6:fb:3f:c7:e0:12:
98:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:58:1B:C5:85:DE:BE:04:FA:41:AC:6C:B2:34:5C:6E:EE:1F:4C:6F
X509v3 Authority Key Identifier:
keyid:FE:D7:F8:17:D7:E6:DE:D5:6E:DE:DC:44:48:8C:D4:1C:05:2A:0D:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_tf4F9fm3tVu3txESIzUHAUqDcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/4f0551-6922-45bf-97d3-7cf9a5fb6a9c/1/_tf4F9fm3tVu3txESIzUHAUqDcU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/4f0551-6922-45bf-97d3-7cf9a5fb6a9c/1/_tf4F9fm3tVu3txESIzUHAUqDcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:55:65:aa:01:58:43:ca:09:74:bd:32:2c:59:c9:b0:f3:da:
d8:aa:1f:ac:e4:ad:12:c8:1a:c7:63:e2:80:a0:a0:dd:f8:81:
6b:32:f1:15:2d:97:15:81:c0:fb:f3:09:9a:20:11:c3:36:a7:
14:d7:49:73:c1:03:ff:45:87:7c:67:15:36:a6:4d:d4:35:8d:
c7:cc:cf:d9:a1:59:d2:2a:11:b9:70:31:49:46:6b:58:d1:79:
6d:ca:f5:9c:78:5c:fa:26:b0:aa:57:11:20:52:f6:57:64:26:
22:44:88:06:45:b1:83:7f:37:b4:55:95:a7:4f:82:b5:16:ff:
53:77:d0:22:63:fa:bc:15:aa:cd:79:f9:a0:3d:42:2a:2b:81:
5d:f9:09:f0:dc:3b:5f:ae:e1:14:1c:93:f2:64:26:7a:12:9b:
f3:be:a3:ed:7e:a6:41:39:c2:bb:a9:73:eb:95:9e:ec:a8:11:
33:fc:ed:23:f5:47:d4:7b:99:ce:1e:25:fb:07:ac:85:ef:a2:
47:8d:58:84:64:7e:0f:23:45:bb:4d:a0:9e:98:1a:0d:99:a0:
2a:20:36:be:bb:08:e7:10:5c:78:58:61:fd:b7:50:68:c3:d0:
5e:b3:50:be:e2:4e:14:38:34:38:49:a4:6f:8c:1b:3a:1b:73:
1b:08:d7:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 17:50:41 2025 by rpki-client