Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/795ed9-8fad-4c44-8583-06ca709a3c59/1/tcsrXq88wV3Us7I62LlHKlJAwDs.mft
File: tcsrXq88wV3Us7I62LlHKlJAwDs.mft (raw, json)
Hash identifier: u9KnXmvLHQ/2EQ6hRKW8XG31Nqjw7IhQiDipdG9+EoI=
Subject key identifier: 5D:D1:BB:E7:27:73:6E:71:F5:2A:0D:F4:B2:0E:67:34:9B:7C:37:E2
Authority key identifier: B5:CB:2B:5E:AF:3C:C1:5D:D4:B3:B2:3A:D8:B9:47:2A:52:40:C0:3B
Certificate issuer: /CN=b5cb2b5eaf3cc15dd4b3b23ad8b9472a5240c03b
Certificate serial: 019A522CD5C0B2D6EFA34ABDD8672FB73794
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tcsrXq88wV3Us7I62LlHKlJAwDs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/795ed9-8fad-4c44-8583-06ca709a3c59/1/tcsrXq88wV3Us7I62LlHKlJAwDs.mft
Manifest number: F1
Signing time: Wed 05 Nov 2025 04:01:01 +0000
Manifest this update: Wed 05 Nov 2025 04:01:01 +0000
Manifest next update: Thu 06 Nov 2025 04:01:01 +0000
Files and hashes: 1: 4I0Ig-sZsSlS-ISQfhvyI-hIXNs.roa (hash: JlPqPVzZ1fRapenzkzSS/av8yhZnv6+RiIsubYAxBXc=)
2: Ay7JoslT6EAyHRaULsBRtIZWwog.roa (hash: gTv3k9NPlg2vVpHAiGMl3DtLPA9ZFxKifPWXSsGIZk8=)
3: a9i8eCPzOCR2a7g49i_eP0oTcMg.roa (hash: CLgIXtXHGLkSKlPAdABLQyRziV9nANmmCJ4xG0uixD8=)
4: tcsrXq88wV3Us7I62LlHKlJAwDs.crl (hash: Y5JW6r2bNJpaRwzIXplHok4xV+k5POm96CQm9n5UGLQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/795ed9-8fad-4c44-8583-06ca709a3c59/1/tcsrXq88wV3Us7I62LlHKlJAwDs.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/795ed9-8fad-4c44-8583-06ca709a3c59/1/tcsrXq88wV3Us7I62LlHKlJAwDs.mft
rsync://rpki.ripe.net/repository/DEFAULT/tcsrXq88wV3Us7I62LlHKlJAwDs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:2c:d5:c0:b2:d6:ef:a3:4a:bd:d8:67:2f:b7:37:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5cb2b5eaf3cc15dd4b3b23ad8b9472a5240c03b
Validity
Not Before: Nov 5 04:01:01 2025 GMT
Not After : Nov 6 04:01:01 2025 GMT
Subject: CN=5dd1bbe727736e71f52a0df4b20e67349b7c37e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:cf:0e:d0:b4:96:cc:d8:e9:64:23:a6:2b:7c:
9f:ba:9d:f4:e5:40:0c:1c:ec:89:c2:55:a8:f7:6c:
12:c7:ba:ae:67:6d:8e:62:32:3e:cd:ef:e1:00:32:
44:04:01:93:a9:fb:6a:8d:79:ca:0d:19:f9:49:e0:
98:04:7d:75:d8:36:b5:a7:49:cc:ea:9a:78:b2:5d:
39:52:0e:82:04:72:b8:55:a1:e5:9a:78:1d:0c:6e:
64:d1:66:b2:03:eb:ab:0a:37:c6:0c:47:f9:4c:c1:
b6:a2:72:81:6f:18:9e:d1:43:08:20:39:aa:ce:9e:
63:79:74:5b:b5:d8:63:73:22:f4:36:a2:37:ef:74:
80:6e:dd:37:8e:51:fd:64:b0:50:b6:99:1a:fb:30:
e0:fa:14:5b:f8:3d:21:81:80:70:6a:06:fd:48:4c:
4e:26:f9:36:ef:85:c5:53:41:bc:2e:62:ba:1e:cb:
f0:4f:6d:ea:91:16:50:3c:dc:eb:b8:26:05:2c:f5:
a0:7b:cb:14:0b:56:20:2e:5f:c9:3b:aa:9a:ec:ee:
db:3c:b7:1e:56:f5:d9:bb:cd:98:37:a1:3e:f1:3f:
77:30:67:5e:ae:10:41:1c:c7:70:e3:21:27:7b:f4:
15:8e:fa:06:67:b4:e5:54:c3:07:66:e4:3c:da:e2:
61:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:D1:BB:E7:27:73:6E:71:F5:2A:0D:F4:B2:0E:67:34:9B:7C:37:E2
X509v3 Authority Key Identifier:
keyid:B5:CB:2B:5E:AF:3C:C1:5D:D4:B3:B2:3A:D8:B9:47:2A:52:40:C0:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tcsrXq88wV3Us7I62LlHKlJAwDs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/795ed9-8fad-4c44-8583-06ca709a3c59/1/tcsrXq88wV3Us7I62LlHKlJAwDs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/795ed9-8fad-4c44-8583-06ca709a3c59/1/tcsrXq88wV3Us7I62LlHKlJAwDs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:82:88:bf:c0:f7:ee:c0:f4:60:b7:2d:0d:16:c4:fc:e5:4b:
f0:f2:9b:f3:aa:6a:b6:3b:ec:b8:0a:be:e8:02:c2:d6:45:6e:
01:97:f5:8e:c2:a9:58:67:10:a4:70:ad:08:f2:cc:e8:b4:1f:
e3:de:4c:62:32:da:ee:76:15:e8:7e:9f:bd:30:03:ac:98:c3:
33:db:f0:d4:45:67:76:3f:69:3d:17:4c:23:75:e7:81:1e:13:
c3:15:88:ab:98:37:0f:0e:3f:d7:07:c2:ed:62:19:3b:ae:f8:
e5:93:c1:d9:66:64:de:c9:4f:ff:34:e5:c8:7b:68:16:ff:67:
29:fb:76:68:97:4f:c9:00:c2:5a:75:16:a0:21:c9:63:36:3a:
9f:2b:60:32:4d:60:9b:6d:53:dd:0e:7c:1e:58:37:ca:dd:cc:
4b:38:9d:d5:06:77:56:4d:70:b2:6c:35:d6:b9:1f:7f:ce:44:
02:a1:e2:56:87:64:af:3a:9a:b7:2e:58:a6:0b:f3:55:1f:95:
ba:6a:90:9b:50:80:78:c6:34:f4:39:fb:56:03:23:ad:82:ce:
1a:d6:bc:51:cb:9e:8c:42:c2:5c:b9:a5:1b:25:d9:8b:62:1e:
48:a5:3d:69:63:db:3f:4f:7a:86:de:1f:95:52:1a:ec:d4:00:
89:31:dc:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 12:08:59 2025 by rpki-client