Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/dbc472-6e0a-411c-af8f-0888eb42744c/1/TGr5hrJB2dJ-xySt-r8G1dIxeT8.mft
File: TGr5hrJB2dJ-xySt-r8G1dIxeT8.mft (raw, json)
Hash identifier: y4LLJGKZoLiHYuHarVAX947AuU78PuR2OD04Lr3B2Tg=
Subject key identifier: 97:05:DB:48:97:60:01:F2:96:44:D9:DE:FA:B3:45:31:BD:69:53:4B
Authority key identifier: 4C:6A:F9:86:B2:41:D9:D2:7E:C7:24:AD:FA:BF:06:D5:D2:31:79:3F
Certificate issuer: /CN=4c6af986b241d9d27ec724adfabf06d5d231793f
Certificate serial: 019A503DBBB7D7E1C951394FC5A6FC19BF7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TGr5hrJB2dJ-xySt-r8G1dIxeT8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/dbc472-6e0a-411c-af8f-0888eb42744c/1/TGr5hrJB2dJ-xySt-r8G1dIxeT8.mft
Manifest number: 13C1
Signing time: Tue 04 Nov 2025 19:00:14 +0000
Manifest this update: Tue 04 Nov 2025 19:00:14 +0000
Manifest next update: Wed 05 Nov 2025 19:00:14 +0000
Files and hashes: 1: 7mVZwCskyJUQ7gPBL_F_4nbKWrk.roa (hash: Spe2b/mS1SAvEHCJH7XwFJrcW3b1Bvz1bY1SvDC0yz8=)
2: TGr5hrJB2dJ-xySt-r8G1dIxeT8.crl (hash: hIQ2wPmd7abfjZc7L30eUkCE3dUy03LxyJHFEr3G08I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/dbc472-6e0a-411c-af8f-0888eb42744c/1/TGr5hrJB2dJ-xySt-r8G1dIxeT8.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/dbc472-6e0a-411c-af8f-0888eb42744c/1/TGr5hrJB2dJ-xySt-r8G1dIxeT8.mft
rsync://rpki.ripe.net/repository/DEFAULT/TGr5hrJB2dJ-xySt-r8G1dIxeT8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:3d:bb:b7:d7:e1:c9:51:39:4f:c5:a6:fc:19:bf:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c6af986b241d9d27ec724adfabf06d5d231793f
Validity
Not Before: Nov 4 19:00:14 2025 GMT
Not After : Nov 5 19:00:14 2025 GMT
Subject: CN=9705db48976001f29644d9defab34531bd69534b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:83:fd:ea:d6:b9:b4:e7:89:53:0b:a2:25:7b:
f6:e1:e8:c2:83:9f:4e:10:dc:ab:dd:8b:4f:34:c5:
96:3f:47:15:85:6f:da:49:46:e8:d8:f6:89:96:24:
95:89:d8:51:07:5d:2f:ef:ee:6a:23:99:af:dd:85:
4d:4e:16:23:4b:8c:6c:04:2b:08:e8:46:6c:eb:2d:
ae:95:4e:bf:7b:f9:32:26:64:b7:4b:f7:a6:e2:8f:
d2:44:54:cc:ae:9e:53:95:98:31:19:5b:bb:8e:77:
af:d4:89:28:6c:f8:02:bb:f2:e4:5f:6d:78:5d:55:
cc:8f:af:c1:ea:7b:69:d0:73:3d:c7:d5:f4:e6:1e:
1b:09:97:a2:33:f8:c7:ec:0b:f6:8a:65:c4:71:43:
44:de:05:93:bc:68:67:fb:a5:2b:cc:69:b9:23:1f:
4d:2a:20:1f:20:20:0e:02:08:c8:01:4b:21:6c:b4:
b8:cf:29:7a:31:0a:6a:88:77:7f:cc:05:58:d9:82:
dc:1f:73:76:09:9e:66:5b:70:64:81:46:0a:21:7c:
57:a2:aa:70:34:9f:74:f7:b4:40:e4:80:4a:2b:07:
f2:f8:ea:e2:62:2d:80:84:d4:b3:c4:b1:05:13:a3:
4f:08:00:46:f3:b4:da:b2:a7:61:dd:ef:ca:9e:94:
53:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:05:DB:48:97:60:01:F2:96:44:D9:DE:FA:B3:45:31:BD:69:53:4B
X509v3 Authority Key Identifier:
keyid:4C:6A:F9:86:B2:41:D9:D2:7E:C7:24:AD:FA:BF:06:D5:D2:31:79:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TGr5hrJB2dJ-xySt-r8G1dIxeT8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/dbc472-6e0a-411c-af8f-0888eb42744c/1/TGr5hrJB2dJ-xySt-r8G1dIxeT8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/dbc472-6e0a-411c-af8f-0888eb42744c/1/TGr5hrJB2dJ-xySt-r8G1dIxeT8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:47:40:ce:b0:85:4b:44:73:da:a0:e9:7d:09:17:6e:b2:63:
ff:aa:c6:ee:61:e8:f6:bb:b2:06:e4:13:9c:f0:68:39:aa:9b:
d1:55:b6:85:9b:01:e7:0c:f9:51:4b:03:1f:d3:cb:f0:e7:16:
64:ac:0a:a8:8a:06:63:58:e7:43:c7:f0:5b:17:6c:1d:51:c5:
4b:f9:1c:3e:c8:3a:5b:bd:13:92:eb:03:39:a3:1c:c9:b8:df:
3a:50:ff:24:1e:5c:b3:46:a6:79:28:a8:77:90:ca:4c:2a:28:
af:30:68:5f:12:18:88:ab:1b:d1:78:02:51:5f:1e:e7:02:c9:
6d:17:33:d8:f5:7f:8b:41:42:27:30:d1:99:77:c4:e4:ae:fa:
cf:08:2e:b7:8f:fa:10:c3:75:00:e3:b1:78:2d:8d:31:80:6d:
79:71:e0:ea:40:05:d2:df:63:a8:2f:ff:8f:96:ff:de:cf:3f:
3b:b4:84:60:f1:20:0a:c4:cb:a7:43:60:fd:19:7a:de:1b:d6:
ed:77:74:59:35:42:0b:c4:e2:03:91:45:8c:85:90:e2:1b:fd:
52:91:38:5a:9c:16:7b:d2:de:a0:e9:bc:3a:c6:60:f9:1b:b2:
8e:3d:e5:df:65:b9:a8:2f:7d:9a:99:4b:29:f2:ba:9d:b0:61:
51:07:66:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 22:38:19 2025 by rpki-client