Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/270b89-7c47-4263-86a0-0073c2b7a7ee/1/Tk9mXUbWoqvwUh5csffEUcozeoc.mft
File: Tk9mXUbWoqvwUh5csffEUcozeoc.mft (raw, json)
Hash identifier: TnZcgFshyCflIvdX2H95OXxltpdXMDk3OMfIDFG1ZWw=
Subject key identifier: 98:12:62:9E:3E:D0:97:63:5B:57:BA:CF:30:BC:A4:62:82:B4:2A:A0
Authority key identifier: 4E:4F:66:5D:46:D6:A2:AB:F0:52:1E:5C:B1:F7:C4:51:CA:33:7A:87
Certificate issuer: /CN=4e4f665d46d6a2abf0521e5cb1f7c451ca337a87
Certificate serial: 019A72CA3525D9CCB2482EF1F6A089DDB80B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tk9mXUbWoqvwUh5csffEUcozeoc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/270b89-7c47-4263-86a0-0073c2b7a7ee/1/Tk9mXUbWoqvwUh5csffEUcozeoc.mft
Manifest number: 0301
Signing time: Tue 11 Nov 2025 12:00:45 +0000
Manifest this update: Tue 11 Nov 2025 12:00:45 +0000
Manifest next update: Wed 12 Nov 2025 12:00:45 +0000
Files and hashes: 1: 1KxZYvxri1sxva3r2G7KLnG5z_Y.roa (hash: 9JXmyyV6BbeWSwFTBJAUkp5UHelZgOhj8wsWM2RqVyk=)
2: HrSejbS-39NivWEqBB6_ezmUBgQ.roa (hash: 8T3MTXu6asTJ46RNeuQMt6iMOXHZ2zW1uZEJeSesDDw=)
3: Tk9mXUbWoqvwUh5csffEUcozeoc.crl (hash: QqXf8dLkAbiifYW56yoPLNrjXsv7ULb3YWDEs2ddc40=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/270b89-7c47-4263-86a0-0073c2b7a7ee/1/Tk9mXUbWoqvwUh5csffEUcozeoc.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/270b89-7c47-4263-86a0-0073c2b7a7ee/1/Tk9mXUbWoqvwUh5csffEUcozeoc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Tk9mXUbWoqvwUh5csffEUcozeoc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:ca:35:25:d9:cc:b2:48:2e:f1:f6:a0:89:dd:b8:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e4f665d46d6a2abf0521e5cb1f7c451ca337a87
Validity
Not Before: Nov 11 12:00:45 2025 GMT
Not After : Nov 12 12:00:45 2025 GMT
Subject: CN=9812629e3ed097635b57bacf30bca46282b42aa0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:84:3e:91:e3:c3:0b:2c:4e:da:58:bf:01:90:
ae:47:02:2c:e2:f1:55:bf:16:9e:9e:db:29:4c:db:
f4:fa:5c:f4:e6:9c:03:f2:af:85:d7:6e:50:b0:c4:
7c:4b:bc:d8:ae:c6:64:86:77:b7:ee:49:25:60:a5:
ef:fb:ef:63:c8:73:c1:3c:02:f9:04:f0:c6:c5:1f:
a9:19:6c:d6:68:69:24:ea:b8:de:13:8c:e5:f2:e9:
c8:9c:01:92:54:d0:06:2f:b5:d4:10:80:2f:d5:0c:
bb:96:14:2c:8d:4e:55:86:81:cd:b6:33:23:33:e7:
24:63:96:0c:34:a2:cd:4a:e7:4c:ba:ec:15:78:fd:
6e:60:dd:55:03:22:c1:df:ed:eb:75:72:64:3f:f0:
1c:c7:94:6b:33:75:71:f4:8a:48:c0:86:21:7a:64:
f7:d7:c0:1f:5a:6c:d8:c9:64:87:94:b0:02:a8:da:
e5:81:ec:0f:d0:69:2d:b4:f7:55:27:06:0a:2f:bf:
89:54:7c:43:c1:6b:03:cc:a1:75:0d:ad:18:1a:80:
b9:b9:57:bd:24:34:3f:8f:10:10:eb:8c:e8:06:db:
d4:90:d4:1c:8d:51:fa:90:62:29:60:e1:c2:90:91:
87:64:31:d6:8d:b9:10:d3:81:79:96:e9:d6:1c:cf:
d4:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:12:62:9E:3E:D0:97:63:5B:57:BA:CF:30:BC:A4:62:82:B4:2A:A0
X509v3 Authority Key Identifier:
keyid:4E:4F:66:5D:46:D6:A2:AB:F0:52:1E:5C:B1:F7:C4:51:CA:33:7A:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tk9mXUbWoqvwUh5csffEUcozeoc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/270b89-7c47-4263-86a0-0073c2b7a7ee/1/Tk9mXUbWoqvwUh5csffEUcozeoc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/270b89-7c47-4263-86a0-0073c2b7a7ee/1/Tk9mXUbWoqvwUh5csffEUcozeoc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:84:44:79:67:69:9d:3c:0d:a8:15:36:f2:95:21:57:1c:1c:
2b:6c:b0:a9:7f:f4:73:d4:94:d4:19:dd:31:9a:34:b9:15:45:
b7:4b:52:a5:d0:90:57:d1:91:58:6e:de:d1:e6:73:5d:de:1b:
86:09:51:4e:5c:92:ab:de:e1:d1:88:97:85:4b:48:d1:d4:78:
a1:08:41:42:a7:ef:ee:f3:d0:5d:61:69:12:14:c3:4d:f7:37:
c3:a6:94:6f:37:0a:2f:7d:9f:b7:95:07:f9:3a:45:04:59:71:
16:75:e6:89:a4:21:e7:c3:f3:00:23:f1:f7:6d:cd:86:80:d0:
29:5b:a3:41:d4:60:3a:b6:7a:f5:d6:8a:13:b2:7f:22:2b:7b:
9f:f8:ff:8d:36:3b:15:d7:76:5a:6e:98:05:79:8b:3d:d4:7e:
da:ad:c3:ad:68:e6:07:1a:ae:29:72:82:a0:92:3e:ce:63:11:
8e:3f:03:a7:e9:41:b7:5b:51:ff:67:46:86:8f:b9:6a:2f:51:
fe:fd:02:01:91:9d:74:e4:5e:85:8a:4c:fb:d2:ca:c9:ba:d8:
27:6c:82:6c:4a:62:73:9d:f1:e3:f7:e6:de:78:e5:cd:24:a9:
67:67:a0:27:9f:5b:1b:37:f5:2b:41:3b:03:3e:f3:98:db:ce:
d2:7b:7a:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:31:28 2025 by rpki-client