Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/f5c6ba-170d-47c5-9c7c-1766a277d85b/1/TdI0IiZKecAxVILtTyfHUTU_Jrs.mft
File: TdI0IiZKecAxVILtTyfHUTU_Jrs.mft (raw, json)
Hash identifier: IP+JvXEZF6UdbEvmKPqHBhJadAkDMc5qTu1ABRevTb4=
Subject key identifier: 5C:AF:D7:96:E6:82:54:DF:20:AD:CA:97:90:54:0A:ED:76:E6:F2:8F
Authority key identifier: 4D:D2:34:22:26:4A:79:C0:31:54:82:ED:4F:27:C7:51:35:3F:26:BB
Certificate issuer: /CN=4dd23422264a79c0315482ed4f27c751353f26bb
Certificate serial: 019A503E373284DD400D3D8FF231A239E049
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TdI0IiZKecAxVILtTyfHUTU_Jrs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/f5c6ba-170d-47c5-9c7c-1766a277d85b/1/TdI0IiZKecAxVILtTyfHUTU_Jrs.mft
Manifest number: 085A
Signing time: Tue 04 Nov 2025 19:00:45 +0000
Manifest this update: Tue 04 Nov 2025 19:00:45 +0000
Manifest next update: Wed 05 Nov 2025 19:00:45 +0000
Files and hashes: 1: TdI0IiZKecAxVILtTyfHUTU_Jrs.crl (hash: 4Ih5jaiOb+TYTEdpFctTp1mUbFQM8YyeQQq66kcT5NI=)
2: bJM_lGyoCdHM4Ew-bll92CWr05o.roa (hash: /LNeEVaQM+dKQQyk+FaHOgVJEKHJjoz/8u1g5mTs7vw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/f5c6ba-170d-47c5-9c7c-1766a277d85b/1/TdI0IiZKecAxVILtTyfHUTU_Jrs.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/f5c6ba-170d-47c5-9c7c-1766a277d85b/1/TdI0IiZKecAxVILtTyfHUTU_Jrs.mft
rsync://rpki.ripe.net/repository/DEFAULT/TdI0IiZKecAxVILtTyfHUTU_Jrs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 16:49:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:3e:37:32:84:dd:40:0d:3d:8f:f2:31:a2:39:e0:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4dd23422264a79c0315482ed4f27c751353f26bb
Validity
Not Before: Nov 4 19:00:45 2025 GMT
Not After : Nov 5 19:00:45 2025 GMT
Subject: CN=5cafd796e68254df20adca9790540aed76e6f28f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:e9:a5:66:d3:a9:50:be:9d:b3:d6:a8:d3:a0:
8c:67:0a:d7:a0:f5:75:d4:93:2e:df:58:68:92:cf:
8a:ca:ae:f8:3d:7e:93:4b:db:d0:87:d6:a9:0e:f6:
1f:0a:2b:87:04:79:7a:41:bc:86:3e:1e:66:e2:9a:
a2:06:1c:64:57:77:29:c7:99:34:58:09:f1:02:69:
da:d7:7c:19:0b:ac:ff:f7:fa:8e:5b:33:62:e7:76:
ca:d8:14:0e:b4:a6:cf:38:ae:fa:69:32:dd:0a:7f:
bd:7c:86:92:0c:7a:d9:ad:d6:5e:c8:c5:58:e0:d9:
ae:0a:ed:09:82:6c:e4:c5:ab:3d:a7:c0:e1:e4:eb:
e2:ae:5d:b1:bf:12:3c:60:1a:67:33:91:42:cd:63:
1b:26:38:b1:c1:e7:88:28:47:b9:51:7f:19:f7:c8:
53:c8:ae:c7:b2:f1:61:01:c1:32:a2:ad:d3:de:a1:
94:0b:a5:77:15:0d:f5:60:da:41:0b:d7:d7:28:2f:
a7:9b:7e:52:73:fe:ad:e8:f6:ef:2c:58:c7:08:a4:
d0:cd:2e:ec:8a:39:bd:87:04:4d:4f:ab:ba:1d:9f:
82:c0:95:32:2a:70:3a:0e:b2:7a:8b:ff:1d:1d:ed:
de:af:c4:a3:81:0e:5d:89:8e:12:76:ca:ed:73:df:
4a:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:AF:D7:96:E6:82:54:DF:20:AD:CA:97:90:54:0A:ED:76:E6:F2:8F
X509v3 Authority Key Identifier:
keyid:4D:D2:34:22:26:4A:79:C0:31:54:82:ED:4F:27:C7:51:35:3F:26:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TdI0IiZKecAxVILtTyfHUTU_Jrs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/f5c6ba-170d-47c5-9c7c-1766a277d85b/1/TdI0IiZKecAxVILtTyfHUTU_Jrs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/f5c6ba-170d-47c5-9c7c-1766a277d85b/1/TdI0IiZKecAxVILtTyfHUTU_Jrs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:d4:d4:bf:52:14:c5:ce:f5:a6:35:b0:db:86:bd:12:86:5f:
d8:37:41:87:57:95:81:fb:9e:46:f7:f0:b2:62:5f:db:69:45:
74:bc:7a:5d:c0:f3:35:13:c5:a8:d8:c3:be:18:10:e7:6d:1b:
e2:3a:6c:2c:41:f8:0d:28:80:3e:29:aa:98:8c:fe:36:fb:d1:
3c:f0:39:ea:47:12:73:2e:d2:cc:5f:ae:d4:f9:98:a5:6f:1e:
2c:93:3a:6c:1a:6c:7b:0b:59:f4:8d:f5:86:84:10:b5:36:a3:
91:80:3b:c3:b6:69:7e:de:35:09:9c:bb:c4:26:87:d2:9b:7d:
c8:c5:33:b4:8e:6e:e3:f6:f6:98:78:16:ef:99:cf:e6:75:5c:
af:be:2e:1e:2f:f1:4d:63:19:6f:44:27:5d:dd:2a:d3:5b:b3:
9d:57:5b:70:e1:84:e8:81:51:0f:f3:d9:09:02:4a:e0:23:a1:
52:76:f2:9b:70:7e:fa:ec:0d:12:06:87:06:c5:bc:2e:52:c8:
4d:04:36:b8:73:85:91:20:dd:e5:2b:6f:ee:8c:b9:62:3f:34:
7d:12:07:bc:02:ef:c5:48:91:6f:41:6c:00:b9:63:f9:91:30:
69:5d:75:2b:e3:c4:a2:ee:88:91:63:82:32:1c:c9:2d:8f:df:
b2:c3:ae:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:55:14 2025 by rpki-client