Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/b3fa64-f8b1-44e8-aba6-8601663395eb/1/TPnD7Ef8zwHZMF_g19SBswaw1Iw.mft
File: TPnD7Ef8zwHZMF_g19SBswaw1Iw.mft (raw, json)
Hash identifier: C8Q0nM/Kahwz5LL26DCgRiUgj5uxCQV9sASYPSAGZtA=
Subject key identifier: 51:51:6B:5A:0B:66:6E:F2:C7:38:C6:B9:B4:E9:0B:A9:67:BB:B4:E7
Authority key identifier: 4C:F9:C3:EC:47:FC:CF:01:D9:30:5F:E0:D7:D4:81:B3:06:B0:D4:8C
Certificate issuer: /CN=4cf9c3ec47fccf01d9305fe0d7d481b306b0d48c
Certificate serial: 019A7112B20BF19AFDD40D9E076D1F55F265
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TPnD7Ef8zwHZMF_g19SBswaw1Iw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/b3fa64-f8b1-44e8-aba6-8601663395eb/1/TPnD7Ef8zwHZMF_g19SBswaw1Iw.mft
Manifest number: 07DF
Signing time: Tue 11 Nov 2025 04:00:41 +0000
Manifest this update: Tue 11 Nov 2025 04:00:41 +0000
Manifest next update: Wed 12 Nov 2025 04:00:41 +0000
Files and hashes: 1: TPnD7Ef8zwHZMF_g19SBswaw1Iw.crl (hash: nmgHYd7EzL38cDI8eu1bjtFYlyWyJ+qOwRvZie9IOCM=)
2: UJ9_FeIGOOjgZRJDmb3mfb4BJZs.roa (hash: Iv5M96f/4AyXNBfTo49Zxh554cDlKiW0Et8FXEewisM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/b3fa64-f8b1-44e8-aba6-8601663395eb/1/TPnD7Ef8zwHZMF_g19SBswaw1Iw.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/b3fa64-f8b1-44e8-aba6-8601663395eb/1/TPnD7Ef8zwHZMF_g19SBswaw1Iw.mft
rsync://rpki.ripe.net/repository/DEFAULT/TPnD7Ef8zwHZMF_g19SBswaw1Iw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:12:b2:0b:f1:9a:fd:d4:0d:9e:07:6d:1f:55:f2:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4cf9c3ec47fccf01d9305fe0d7d481b306b0d48c
Validity
Not Before: Nov 11 04:00:41 2025 GMT
Not After : Nov 12 04:00:41 2025 GMT
Subject: CN=51516b5a0b666ef2c738c6b9b4e90ba967bbb4e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:47:dd:c5:f3:76:46:78:fb:ed:fe:9f:14:2d:
e6:5e:bf:6a:08:c9:05:b8:46:a7:b0:75:af:0b:dc:
36:99:f2:76:b9:03:b7:b2:64:80:87:d3:cb:c1:bc:
19:e9:e0:84:8d:c1:de:4e:ee:fe:83:20:c9:21:50:
37:ee:fc:3a:3a:47:9f:f6:50:2b:1a:35:00:b5:ed:
51:1d:21:53:df:ee:ae:dd:76:79:5a:13:e3:1d:64:
7c:76:76:d2:bc:5d:d1:8a:d3:77:27:76:71:06:d7:
a3:28:1d:99:74:6e:a6:eb:7a:c0:03:0b:56:02:f1:
2c:57:5b:0c:0d:47:d3:76:57:ac:e7:d7:89:2b:10:
21:6c:fb:8e:be:fb:6d:ed:04:69:10:dc:82:d4:0d:
40:3a:97:a6:be:7f:f2:f4:a5:40:e1:d5:8c:cf:e9:
95:b7:e2:94:c7:09:09:9c:3d:19:4b:53:ed:15:5c:
2b:35:cc:2f:e3:8d:26:35:de:6b:c0:32:c1:3b:5c:
eb:55:b9:97:d2:97:67:7f:37:61:f7:70:f3:e3:53:
02:b2:72:f2:33:9a:2d:a9:12:76:1c:b8:07:36:68:
1a:7f:a5:0d:6e:62:4f:8e:33:bf:6d:4a:aa:1b:e2:
91:eb:c6:63:fd:db:07:76:89:d5:6e:e8:df:70:d4:
ee:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:51:6B:5A:0B:66:6E:F2:C7:38:C6:B9:B4:E9:0B:A9:67:BB:B4:E7
X509v3 Authority Key Identifier:
keyid:4C:F9:C3:EC:47:FC:CF:01:D9:30:5F:E0:D7:D4:81:B3:06:B0:D4:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TPnD7Ef8zwHZMF_g19SBswaw1Iw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/b3fa64-f8b1-44e8-aba6-8601663395eb/1/TPnD7Ef8zwHZMF_g19SBswaw1Iw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/b3fa64-f8b1-44e8-aba6-8601663395eb/1/TPnD7Ef8zwHZMF_g19SBswaw1Iw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:08:f1:a6:00:74:ce:1f:1c:f2:a8:18:5c:51:54:5a:e1:bb:
f5:84:95:02:72:67:89:05:e6:ce:b3:62:99:92:1b:37:62:ee:
3c:3e:af:81:84:6e:c5:0c:fa:40:fc:89:0b:20:5a:36:02:b1:
d2:4b:8e:42:ac:8f:6b:ba:97:bc:92:9c:a0:f7:c7:8f:9d:ff:
e3:0e:bd:48:fa:31:d5:d4:8a:ed:f1:18:cb:38:6d:cd:df:65:
0d:d4:20:16:92:19:6e:37:d7:02:3b:8d:8f:ec:db:e5:7d:0d:
21:4c:b5:05:98:e5:54:a0:88:31:ed:6d:50:e4:e9:8b:4c:3b:
b6:be:07:bb:12:c7:b5:98:e0:bc:95:57:c1:7c:81:01:7c:76:
64:ae:25:02:54:55:fb:8f:5b:b8:9b:03:c2:77:05:71:ee:08:
f9:a0:31:d0:fc:65:f2:f8:87:76:98:f9:ab:44:35:d4:da:0c:
c1:c9:1b:2d:50:cf:2b:40:19:f9:d0:61:b3:f1:08:21:35:1b:
c4:90:02:76:a4:09:7d:62:d0:a7:05:07:53:49:e6:d8:e8:af:
f6:e3:1f:ac:f8:b4:11:1f:d9:59:d2:db:fb:16:78:f2:b5:7a:
bd:14:2c:cc:a1:f9:25:84:c8:38:ed:6e:9c:99:6a:9e:eb:9a:
f1:4f:84:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:46:14 2025 by rpki-client