Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/3e8e42-dffb-435d-bd2b-eb8b1ecc4741/1/TdL8TSP9nCQgxASRhxgI7FQkpnA.mft
File: TdL8TSP9nCQgxASRhxgI7FQkpnA.mft (raw, json)
Hash identifier: Ex7CZvpFs1NGzd7GGKMDwQGJWbqVXQZvH/pCzPxgVJg=
Subject key identifier: 43:C6:5E:63:50:3C:F9:98:B7:B5:A3:20:3E:55:19:AB:C5:A3:4B:62
Authority key identifier: 4D:D2:FC:4D:23:FD:9C:24:20:C4:04:91:87:18:08:EC:54:24:A6:70
Certificate issuer: /CN=4dd2fc4d23fd9c2420c40491871808ec5424a670
Certificate serial: 019A51BEC6B9B97761496FDEDE381EDA0F00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TdL8TSP9nCQgxASRhxgI7FQkpnA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/3e8e42-dffb-435d-bd2b-eb8b1ecc4741/1/TdL8TSP9nCQgxASRhxgI7FQkpnA.mft
Manifest number: 1712
Signing time: Wed 05 Nov 2025 02:00:48 +0000
Manifest this update: Wed 05 Nov 2025 02:00:48 +0000
Manifest next update: Thu 06 Nov 2025 02:00:48 +0000
Files and hashes: 1: 6PYHTPLOKPA_a6iVYvGQByWG7yU.roa (hash: w5WzWtoII8U9oezorMTaJGrRrTvsQaItUP16lTCSY7s=)
2: TdL8TSP9nCQgxASRhxgI7FQkpnA.crl (hash: 9JbWU7XgNqtiJ3aLi/ehyvm7ZSyNGg48w059c1ylrlg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/3e8e42-dffb-435d-bd2b-eb8b1ecc4741/1/TdL8TSP9nCQgxASRhxgI7FQkpnA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/3e8e42-dffb-435d-bd2b-eb8b1ecc4741/1/TdL8TSP9nCQgxASRhxgI7FQkpnA.mft
rsync://rpki.ripe.net/repository/DEFAULT/TdL8TSP9nCQgxASRhxgI7FQkpnA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 02:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:be:c6:b9:b9:77:61:49:6f:de:de:38:1e:da:0f:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4dd2fc4d23fd9c2420c40491871808ec5424a670
Validity
Not Before: Nov 5 02:00:48 2025 GMT
Not After : Nov 6 02:00:48 2025 GMT
Subject: CN=43c65e63503cf998b7b5a3203e5519abc5a34b62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:8d:43:86:8f:47:68:46:d1:51:0a:4b:5b:7a:
e1:40:7b:62:21:16:fa:fb:77:a2:e0:4f:5d:ee:14:
dd:80:ef:ba:56:c9:9e:bc:8a:10:17:54:88:26:77:
31:b9:c8:e4:6d:e2:c8:8b:4c:13:c4:27:ad:00:f1:
b2:50:e7:a4:5c:5d:05:73:dd:be:43:5a:88:06:f4:
bb:c0:f0:bc:a9:3c:a0:e9:7c:68:b9:19:55:44:9e:
9b:65:b1:d2:3e:80:27:65:99:81:2f:e5:9a:12:cb:
41:61:b2:ce:fc:f4:fb:1f:66:e6:b8:d5:43:21:4c:
a4:1e:98:73:78:d5:a6:90:c1:a5:6e:9b:90:a1:47:
6b:2b:c4:81:7c:3a:73:94:87:42:87:09:69:e1:ed:
13:47:2d:38:4b:0f:fb:0c:86:80:02:b6:10:65:e0:
7f:87:6e:a2:a2:92:34:86:ec:1d:1c:dc:d4:15:c9:
6a:51:3a:89:db:d2:71:5e:08:36:ca:b6:8f:38:a8:
e9:58:af:5e:48:2e:6b:cc:35:73:5e:c8:f4:a1:25:
cf:49:97:dc:48:2c:93:ab:a7:f1:af:b5:06:5d:7a:
a2:f7:ee:94:b5:84:f3:44:f1:5e:cc:bb:31:fe:24:
35:08:9b:b5:af:3a:f9:39:89:a5:38:f0:98:cc:81:
50:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:C6:5E:63:50:3C:F9:98:B7:B5:A3:20:3E:55:19:AB:C5:A3:4B:62
X509v3 Authority Key Identifier:
keyid:4D:D2:FC:4D:23:FD:9C:24:20:C4:04:91:87:18:08:EC:54:24:A6:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TdL8TSP9nCQgxASRhxgI7FQkpnA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/3e8e42-dffb-435d-bd2b-eb8b1ecc4741/1/TdL8TSP9nCQgxASRhxgI7FQkpnA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/3e8e42-dffb-435d-bd2b-eb8b1ecc4741/1/TdL8TSP9nCQgxASRhxgI7FQkpnA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:49:80:f7:cc:e9:c1:b4:e2:69:9e:db:61:85:9c:ae:14:d8:
bc:3d:42:20:14:a4:4d:26:ee:1e:0e:f1:de:1b:6a:98:f8:fa:
63:9a:a1:fc:f1:82:7e:10:fa:38:1c:2b:d8:eb:41:d8:96:68:
61:a5:8e:6e:79:e1:97:57:56:45:15:40:47:05:19:43:a6:af:
6c:c6:8f:b3:af:ad:69:10:c5:e3:c4:ef:77:91:90:aa:1f:5f:
87:e1:35:36:f6:22:7d:fe:04:cd:79:d6:03:3c:fc:8c:3c:8b:
a2:c3:9c:e7:7d:3f:3d:4e:6c:69:4e:07:b2:99:4f:18:19:07:
4c:12:c0:df:1c:6a:40:03:0b:24:e5:bd:3b:30:b3:17:76:19:
72:6d:2f:12:40:a5:84:7b:9f:6a:cb:f5:b1:67:40:c9:03:aa:
53:7a:ad:ca:b6:fc:57:20:12:ef:57:d1:d5:98:39:d4:ef:e2:
1d:b7:b4:b1:32:96:4b:78:16:81:11:2f:e1:1a:a7:ed:33:52:
32:24:50:41:16:4e:06:21:b8:af:69:16:aa:cd:68:93:3d:38:
bb:b4:f2:87:e9:6a:8b:44:5f:2b:79:4b:f8:6c:d1:ce:2c:b7:
b3:49:32:d1:94:3c:51:eb:a9:24:d1:df:02:37:ad:fb:ce:9a:
05:35:a1:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 11:43:26 2025 by rpki-client