Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/ed384e-9949-4cc0-8a37-3bb2cd80a2c9/1/Tq5vUk7tD3PISbBkOCe4DjfEbHE.mft
File: Tq5vUk7tD3PISbBkOCe4DjfEbHE.mft (raw, json)
Hash identifier: f/dFy0h71fvotQi7/HMd15ha8+2TZGeufva/UZM2rrc=
Subject key identifier: 7C:53:6D:E0:5E:DF:68:F9:62:13:9F:69:0D:C3:D2:9F:92:9C:69:E4
Authority key identifier: 4E:AE:6F:52:4E:ED:0F:73:C8:49:B0:64:38:27:B8:0E:37:C4:6C:71
Certificate issuer: /CN=4eae6f524eed0f73c849b0643827b80e37c46c71
Certificate serial: 019A4DAB002863C9F002D4C977F7E82055A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tq5vUk7tD3PISbBkOCe4DjfEbHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/ed384e-9949-4cc0-8a37-3bb2cd80a2c9/1/Tq5vUk7tD3PISbBkOCe4DjfEbHE.mft
Manifest number: 170D
Signing time: Tue 04 Nov 2025 07:00:43 +0000
Manifest this update: Tue 04 Nov 2025 07:00:43 +0000
Manifest next update: Wed 05 Nov 2025 07:00:43 +0000
Files and hashes: 1: Tq5vUk7tD3PISbBkOCe4DjfEbHE.crl (hash: kL1TpLQF/7Lji2l/j8hffZhl5qxc2XGHqxfQO7Yoccw=)
2: ZPx2mzUkeOD00cVnYPqjI9aytDo.roa (hash: 9BSbx2wnbDuYyWn09oP3MayodoEwoQbrU6xTUmUCOR8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/ed384e-9949-4cc0-8a37-3bb2cd80a2c9/1/Tq5vUk7tD3PISbBkOCe4DjfEbHE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/ed384e-9949-4cc0-8a37-3bb2cd80a2c9/1/Tq5vUk7tD3PISbBkOCe4DjfEbHE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Tq5vUk7tD3PISbBkOCe4DjfEbHE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 07:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:ab:00:28:63:c9:f0:02:d4:c9:77:f7:e8:20:55:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4eae6f524eed0f73c849b0643827b80e37c46c71
Validity
Not Before: Nov 4 07:00:43 2025 GMT
Not After : Nov 5 07:00:43 2025 GMT
Subject: CN=7c536de05edf68f962139f690dc3d29f929c69e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:24:8d:07:15:c4:61:f9:b8:da:c6:6c:e7:5d:
85:5c:9e:ab:bf:8d:64:b4:92:45:b3:b9:cd:e6:02:
4a:ff:42:3b:b9:0d:a9:6d:1b:e7:1d:a8:e6:2e:81:
71:3d:f3:8b:21:63:69:89:12:4c:fa:91:62:f1:50:
31:39:2d:34:31:c1:56:da:60:17:66:85:33:59:49:
e0:61:e4:c3:10:b6:7d:41:15:7b:7d:78:6a:f9:c6:
9f:1b:00:d4:61:62:56:38:4c:87:f4:39:2f:39:d9:
bf:89:90:ec:c7:5c:5a:a8:75:b9:e0:9e:5b:4c:3f:
43:55:e4:e2:5d:f9:92:d3:c7:3d:75:98:e0:e6:dc:
80:0c:bc:71:f3:4b:11:e9:04:13:fb:61:bf:ef:ac:
43:66:17:e9:18:c9:d1:40:41:9a:bb:a8:15:a4:22:
da:fc:7b:9e:91:ad:a3:1f:55:da:09:ce:1f:21:66:
c1:79:f9:44:9d:6d:90:14:87:d5:1d:32:a6:2b:21:
77:8d:4b:c8:e7:84:ee:de:97:10:0b:f6:5f:cd:07:
07:92:16:39:a9:cb:6b:c4:79:52:1c:17:02:b0:30:
50:8a:58:3a:28:d4:1d:77:e6:f3:9a:23:e1:56:7d:
39:7e:e1:8a:0a:7b:d7:96:6f:3c:4d:6e:ed:f1:42:
cc:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:53:6D:E0:5E:DF:68:F9:62:13:9F:69:0D:C3:D2:9F:92:9C:69:E4
X509v3 Authority Key Identifier:
keyid:4E:AE:6F:52:4E:ED:0F:73:C8:49:B0:64:38:27:B8:0E:37:C4:6C:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tq5vUk7tD3PISbBkOCe4DjfEbHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/ed384e-9949-4cc0-8a37-3bb2cd80a2c9/1/Tq5vUk7tD3PISbBkOCe4DjfEbHE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/ed384e-9949-4cc0-8a37-3bb2cd80a2c9/1/Tq5vUk7tD3PISbBkOCe4DjfEbHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:59:66:37:61:ab:34:f1:44:6f:99:20:d6:39:70:ff:a7:43:
4a:72:09:6a:9d:1a:24:8d:16:e5:11:b9:53:2e:9e:de:f5:7a:
7b:aa:11:0e:c9:ad:48:85:66:b5:0a:a5:fb:6d:12:af:11:4a:
86:39:13:d4:d2:d5:70:a6:25:fd:f9:8e:79:cf:76:18:0b:f6:
1e:98:31:38:70:7d:23:45:11:ce:68:df:68:d3:c9:a4:9f:3d:
1f:e2:a5:2a:de:43:37:38:6a:75:9f:fa:e4:56:e2:b0:d4:8d:
f0:71:e0:2d:6a:47:05:6d:8a:45:e8:c6:4d:df:c7:0b:af:f9:
69:da:94:65:3c:e9:71:90:8d:a3:72:53:3d:80:2b:ea:93:dc:
f5:a9:09:27:31:24:3c:ac:5d:2b:9a:d7:65:91:b6:2c:21:5e:
4d:62:b1:86:11:65:47:69:9f:93:15:93:09:f3:09:61:3e:de:
c5:b9:58:c7:45:5a:c3:c5:84:aa:56:58:d4:a4:b7:cf:d6:b6:
05:40:d0:5c:40:77:2d:ab:48:35:43:1c:89:b6:f0:48:c3:83:
27:b8:b7:24:57:6c:25:2f:d0:42:8e:af:2d:75:c4:5a:d1:16:
c8:2d:57:31:d5:ce:28:26:91:75:e0:f1:cd:b9:76:af:de:5c:
cb:e7:40:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:41:18 2025 by rpki-client