Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/ec5584-6618-4b12-a11c-3055cb729bcf/1/TDuIzbE_PrEqm-VKsZuqkFWbOWo.mft
File: TDuIzbE_PrEqm-VKsZuqkFWbOWo.mft (raw, json)
Hash identifier: 7PspjRsOQGQZyws5f9QrG6iKUX1lpBMrsrDVFK4QatY=
Subject key identifier: 9E:82:7C:49:B6:10:BF:08:47:7F:96:13:A0:A4:78:E3:11:E6:EB:1B
Authority key identifier: 4C:3B:88:CD:B1:3F:3E:B1:2A:9B:E5:4A:B1:9B:AA:90:55:9B:39:6A
Certificate issuer: /CN=4c3b88cdb13f3eb12a9be54ab19baa90559b396a
Certificate serial: 019A5676B8168DFB283FC6DB92515E533AD0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TDuIzbE_PrEqm-VKsZuqkFWbOWo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/ec5584-6618-4b12-a11c-3055cb729bcf/1/TDuIzbE_PrEqm-VKsZuqkFWbOWo.mft
Manifest number: 08A9
Signing time: Thu 06 Nov 2025 00:00:12 +0000
Manifest this update: Thu 06 Nov 2025 00:00:12 +0000
Manifest next update: Fri 07 Nov 2025 00:00:12 +0000
Files and hashes: 1: TDuIzbE_PrEqm-VKsZuqkFWbOWo.crl (hash: eAkFEck5Ga1xMDkUGPNXxID+pKSFrUAjBD5a2nvkmTY=)
2: eaPs4hBLMn8_uYbwGtb-aHFlTMw.roa (hash: J6ydyveQsR9vsUeW4Dd9AR32+AJgGbJK7r7hogwsc4Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/ec5584-6618-4b12-a11c-3055cb729bcf/1/TDuIzbE_PrEqm-VKsZuqkFWbOWo.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/ec5584-6618-4b12-a11c-3055cb729bcf/1/TDuIzbE_PrEqm-VKsZuqkFWbOWo.mft
rsync://rpki.ripe.net/repository/DEFAULT/TDuIzbE_PrEqm-VKsZuqkFWbOWo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 07 Nov 2025 00:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:56:76:b8:16:8d:fb:28:3f:c6:db:92:51:5e:53:3a:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c3b88cdb13f3eb12a9be54ab19baa90559b396a
Validity
Not Before: Nov 6 00:00:12 2025 GMT
Not After : Nov 7 00:00:12 2025 GMT
Subject: CN=9e827c49b610bf08477f9613a0a478e311e6eb1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:dc:8c:24:3c:2d:97:dc:c3:c7:f3:13:80:10:
11:80:87:48:8d:5d:c6:f9:2c:b2:a6:2d:e6:74:67:
e5:cc:0c:fd:dc:ed:f2:99:fa:69:80:7a:93:3e:5d:
8d:3d:9a:ac:1d:dd:50:70:5f:19:c8:b2:02:62:86:
89:9c:51:72:3c:4c:a2:81:ca:e6:00:00:c8:5f:79:
75:ce:37:89:10:e7:74:58:49:6b:c7:15:43:a6:50:
e0:20:53:4a:1f:23:85:34:3e:7c:28:7f:89:62:fb:
74:c5:b0:7a:30:0c:fb:53:f5:4c:79:42:ab:8b:16:
5c:77:c1:e5:77:1e:5c:21:3c:b4:d1:00:b1:19:bc:
18:da:7e:c6:89:97:19:ce:80:fe:1b:76:a3:95:1f:
88:20:da:4b:57:19:81:ea:f5:10:cc:7b:83:26:4f:
18:3f:1b:3a:e2:cc:85:39:d3:83:78:3d:85:c8:98:
f1:c5:dc:4d:10:dc:94:59:88:58:64:11:88:64:68:
e1:72:4d:12:44:39:c2:af:5a:a9:f2:a0:ac:90:8d:
0b:38:6d:81:4b:99:2e:73:91:2f:41:be:1c:1d:43:
c2:3f:ac:3a:a1:c2:c0:e2:c8:eb:64:f7:70:7e:3f:
9d:07:37:20:d3:68:39:95:da:4f:41:2f:ac:f5:aa:
d5:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:82:7C:49:B6:10:BF:08:47:7F:96:13:A0:A4:78:E3:11:E6:EB:1B
X509v3 Authority Key Identifier:
keyid:4C:3B:88:CD:B1:3F:3E:B1:2A:9B:E5:4A:B1:9B:AA:90:55:9B:39:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TDuIzbE_PrEqm-VKsZuqkFWbOWo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/ec5584-6618-4b12-a11c-3055cb729bcf/1/TDuIzbE_PrEqm-VKsZuqkFWbOWo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/ec5584-6618-4b12-a11c-3055cb729bcf/1/TDuIzbE_PrEqm-VKsZuqkFWbOWo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:0e:6c:a9:db:f1:af:b6:51:9e:c7:2d:4c:b7:b4:c0:e9:9f:
5d:a8:34:b7:36:9e:7f:24:69:9d:f8:3d:4e:0c:40:42:9d:e7:
4a:10:fb:6b:6b:c7:b9:f7:b5:54:96:d0:dc:00:f3:28:03:3b:
6d:02:77:57:f8:03:de:e8:69:a9:fb:7d:ab:3b:76:d6:76:8f:
72:e6:f2:e9:96:7b:db:62:f3:8a:db:7e:77:c5:db:f0:01:74:
28:4f:8b:41:5d:bd:f5:13:3b:c3:fa:71:22:ea:60:97:00:82:
ff:53:a1:05:43:d5:22:73:fe:e7:33:c9:f9:a8:f5:ae:bf:12:
81:a3:51:82:89:66:d9:d2:3d:eb:b8:3d:ba:2c:9e:08:39:6b:
00:82:af:24:1c:74:a4:76:94:1e:72:63:2d:30:64:c8:3e:83:
91:37:f5:f1:2d:d9:41:44:d2:ca:fd:d2:ca:4a:7b:55:a7:c8:
32:02:93:05:07:74:4f:e1:38:e9:9e:f7:13:91:25:6d:bc:42:
6c:12:e8:1b:52:66:83:0c:28:29:47:59:7a:21:d6:e7:53:b0:
69:55:9a:cc:b5:f5:46:89:7e:30:50:f6:5b:df:c3:f2:f5:d1:
b9:0e:39:ad:33:26:cf:97:37:4a:37:b3:a9:60:88:5e:67:d0:
41:a3:de:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 6 07:32:16 2025 by rpki-client