Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/6274d7-8d1c-493b-9c22-096ee29d997d/1/Tmsy2dPrxu5JvW-mzZDk9cfVROg.mft
File: Tmsy2dPrxu5JvW-mzZDk9cfVROg.mft (raw, json)
Hash identifier: snfXc7RqOUQ1n7e0n+SxauG4ED9jpTd+wPuxpcmP10M=
Subject key identifier: AA:B6:CF:BF:4F:AC:00:C3:6A:CE:96:D6:BE:38:83:6E:BF:95:CE:8D
Authority key identifier: 4E:6B:32:D9:D3:EB:C6:EE:49:BD:6F:A6:CD:90:E4:F5:C7:D5:44:E8
Certificate issuer: /CN=4e6b32d9d3ebc6ee49bd6fa6cd90e4f5c7d544e8
Certificate serial: 019A4D73D560C784F1B1F202662D70295F33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tmsy2dPrxu5JvW-mzZDk9cfVROg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/6274d7-8d1c-493b-9c22-096ee29d997d/1/Tmsy2dPrxu5JvW-mzZDk9cfVROg.mft
Manifest number: 04D5
Signing time: Tue 04 Nov 2025 06:00:27 +0000
Manifest this update: Tue 04 Nov 2025 06:00:27 +0000
Manifest next update: Wed 05 Nov 2025 06:00:27 +0000
Files and hashes: 1: Tmsy2dPrxu5JvW-mzZDk9cfVROg.crl (hash: muLTktZ1i0P12MXBd44GmrKVudU84Z/MTIVe9PqAuaA=)
2: dRB7xJtajjzk6UoGyoSGsT51giI.roa (hash: YcmDNZ/enUR0rChrVz40koeNmEa+q2s38R7f9KQbajo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/6274d7-8d1c-493b-9c22-096ee29d997d/1/Tmsy2dPrxu5JvW-mzZDk9cfVROg.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/6274d7-8d1c-493b-9c22-096ee29d997d/1/Tmsy2dPrxu5JvW-mzZDk9cfVROg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Tmsy2dPrxu5JvW-mzZDk9cfVROg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 06:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:73:d5:60:c7:84:f1:b1:f2:02:66:2d:70:29:5f:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e6b32d9d3ebc6ee49bd6fa6cd90e4f5c7d544e8
Validity
Not Before: Nov 4 06:00:27 2025 GMT
Not After : Nov 5 06:00:27 2025 GMT
Subject: CN=aab6cfbf4fac00c36ace96d6be38836ebf95ce8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:f7:50:ed:2d:27:97:52:35:92:86:ba:58:32:
20:a6:05:f0:7f:ef:e0:f4:de:81:02:80:55:d1:52:
cf:be:c0:a4:cc:6b:6f:64:d0:3e:57:2a:21:99:60:
7e:c4:61:7b:23:e0:fa:cf:be:2d:dd:46:23:63:76:
61:dd:4d:8a:50:d2:b0:e4:13:0e:7e:fc:ac:bd:64:
71:53:e5:41:0a:7b:85:d0:a6:41:77:84:84:c5:22:
8d:6d:eb:c7:1b:81:51:4b:f2:fb:fc:46:eb:04:a6:
20:45:a8:44:5f:ad:3f:bc:ca:98:26:02:6c:5f:30:
56:8f:95:4f:fa:29:e2:18:5c:7c:32:e8:0d:25:a9:
2c:e1:7f:2b:d9:32:0a:20:20:6a:d7:d4:c0:24:71:
a3:90:de:c6:58:54:28:e0:1e:de:eb:90:de:5b:07:
e0:ff:94:47:d1:1c:86:bb:73:ba:cb:03:28:b2:cb:
83:0f:21:63:f0:c9:d9:fa:ac:f9:e7:9e:b2:a0:96:
b8:3f:f4:4c:16:95:de:38:db:94:0a:85:bc:86:96:
33:af:1f:a5:19:85:88:69:c8:5b:f0:76:b2:53:aa:
9b:14:61:78:29:95:48:e1:35:46:da:4c:4e:e3:e8:
a3:df:f5:df:04:1e:11:fe:f8:65:e9:bd:1b:48:f7:
60:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:B6:CF:BF:4F:AC:00:C3:6A:CE:96:D6:BE:38:83:6E:BF:95:CE:8D
X509v3 Authority Key Identifier:
keyid:4E:6B:32:D9:D3:EB:C6:EE:49:BD:6F:A6:CD:90:E4:F5:C7:D5:44:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tmsy2dPrxu5JvW-mzZDk9cfVROg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/6274d7-8d1c-493b-9c22-096ee29d997d/1/Tmsy2dPrxu5JvW-mzZDk9cfVROg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/6274d7-8d1c-493b-9c22-096ee29d997d/1/Tmsy2dPrxu5JvW-mzZDk9cfVROg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:26:47:0e:85:4e:4b:f4:f6:cb:06:83:77:2c:34:bd:d5:c2:
2a:cd:2e:99:2b:a7:fc:93:12:67:98:3b:10:35:91:06:48:ac:
3a:83:31:b7:2a:1e:3b:fc:ae:44:15:c7:89:92:fa:65:b2:49:
f4:1e:37:f3:94:e9:ff:d7:99:67:d6:6e:03:fc:35:f6:76:d2:
81:03:58:a4:3e:19:62:63:91:cd:93:19:bc:27:72:a8:20:ea:
bc:9e:f0:45:b3:ea:44:bc:cc:f9:51:dc:d4:31:c5:1d:f1:d1:
5a:e4:e2:23:37:25:32:34:3e:d9:30:8b:2d:dc:d6:86:84:bb:
23:10:ab:eb:76:c0:82:e7:fa:7c:b1:63:4f:fd:c7:c4:3b:45:
10:90:37:1d:84:06:03:55:da:4f:0d:64:24:24:4e:5d:57:88:
00:be:09:e9:3a:4c:4e:69:46:18:37:f0:b2:88:22:e3:69:bd:
21:32:09:e8:b5:eb:64:c0:ff:6b:dc:41:3a:62:51:9f:d3:a6:
ee:ef:c2:62:50:fd:72:16:4b:3d:b5:10:7f:f3:a6:58:da:9f:
38:83:d8:61:96:32:cf:f0:a6:96:62:fa:f7:84:b8:45:85:d9:
31:f2:6f:42:53:cd:7f:e8:3b:53:5e:2f:89:b1:f3:77:92:22:
9e:79:cd:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:51:10 2025 by rpki-client