Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/1a15fa-ace6-464d-8969-e4928180033c/1/TBdAzvl0ncKw9fiM3xA02oHWBtw.mft
File: TBdAzvl0ncKw9fiM3xA02oHWBtw.mft (raw, json)
Hash identifier: bOV2s+zvI1qGZN3iT0lGuNsKxM2u+ShN1VXYzMdlm5s=
Subject key identifier: 4B:48:91:7E:F7:A7:A3:5A:78:3B:13:FD:FC:96:3D:1A:B4:58:5F:1C
Authority key identifier: 4C:17:40:CE:F9:74:9D:C2:B0:F5:F8:8C:DF:10:34:DA:81:D6:06:DC
Certificate issuer: /CN=4c1740cef9749dc2b0f5f88cdf1034da81d606dc
Certificate serial: 019A72CA1792CB4D55BE467B32FB55CD1AEE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TBdAzvl0ncKw9fiM3xA02oHWBtw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/1a15fa-ace6-464d-8969-e4928180033c/1/TBdAzvl0ncKw9fiM3xA02oHWBtw.mft
Manifest number: 109E
Signing time: Tue 11 Nov 2025 12:00:38 +0000
Manifest this update: Tue 11 Nov 2025 12:00:38 +0000
Manifest next update: Wed 12 Nov 2025 12:00:38 +0000
Files and hashes: 1: 9UfG7ZfqsnxXdNjOVBB4EufGuiU.roa (hash: nBGGqWZhxqHLJh+Oq/1SCIlZ0ENh9e+rLU6y/LQvQNA=)
2: TBdAzvl0ncKw9fiM3xA02oHWBtw.crl (hash: 943ADCh3IGYs8htXrTSE3BH2pl+hYFQ9gOiVmGIBuI8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/1a15fa-ace6-464d-8969-e4928180033c/1/TBdAzvl0ncKw9fiM3xA02oHWBtw.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/1a15fa-ace6-464d-8969-e4928180033c/1/TBdAzvl0ncKw9fiM3xA02oHWBtw.mft
rsync://rpki.ripe.net/repository/DEFAULT/TBdAzvl0ncKw9fiM3xA02oHWBtw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:ca:17:92:cb:4d:55:be:46:7b:32:fb:55:cd:1a:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c1740cef9749dc2b0f5f88cdf1034da81d606dc
Validity
Not Before: Nov 11 12:00:38 2025 GMT
Not After : Nov 12 12:00:38 2025 GMT
Subject: CN=4b48917ef7a7a35a783b13fdfc963d1ab4585f1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:4f:02:f9:1c:71:6d:a0:e7:da:c1:a0:6c:31:
49:98:61:f2:5b:48:43:fb:d9:29:e5:ef:ce:ea:74:
91:51:93:5c:02:2e:ff:20:76:21:5a:df:cb:84:c3:
11:2e:29:ab:25:ac:85:3f:9a:62:f2:5f:b6:fb:63:
46:81:2e:94:9f:5a:1d:61:77:7b:63:97:a1:23:71:
2f:67:a4:26:f0:70:e2:a3:4f:f5:3b:2e:95:33:5c:
23:a0:63:ad:df:4e:0f:37:e0:3e:62:7e:1c:2b:3a:
a7:54:18:eb:9a:a3:b5:ab:e7:64:6b:35:d9:0d:4e:
34:c0:08:5e:ec:fb:2d:54:3d:e6:2f:47:20:b2:16:
12:da:4f:cb:08:a6:c0:ce:11:38:fb:ce:1d:8c:e2:
c1:56:6a:4e:f0:51:ff:95:25:19:c5:f9:2a:34:19:
cd:77:cd:86:b5:03:75:c3:7d:e1:fe:6d:7a:72:de:
50:35:0a:f9:c6:89:dc:50:8d:05:b4:25:6f:c9:77:
d9:fe:1e:70:f6:a0:85:d7:55:c4:03:00:94:17:fd:
74:98:f1:2e:41:8e:81:7c:8e:ac:09:0b:70:11:7e:
00:cd:83:af:73:07:c8:46:e0:c8:47:5b:0c:e1:74:
d3:57:17:87:c9:d6:72:b3:11:ea:d0:ca:f7:62:b6:
48:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:48:91:7E:F7:A7:A3:5A:78:3B:13:FD:FC:96:3D:1A:B4:58:5F:1C
X509v3 Authority Key Identifier:
keyid:4C:17:40:CE:F9:74:9D:C2:B0:F5:F8:8C:DF:10:34:DA:81:D6:06:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TBdAzvl0ncKw9fiM3xA02oHWBtw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/1a15fa-ace6-464d-8969-e4928180033c/1/TBdAzvl0ncKw9fiM3xA02oHWBtw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/1a15fa-ace6-464d-8969-e4928180033c/1/TBdAzvl0ncKw9fiM3xA02oHWBtw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:2c:2f:2d:dc:fd:fa:8c:c8:13:d5:01:f6:e7:29:40:ac:a9:
0a:ef:d3:63:d7:08:9c:5f:b5:a8:7b:29:82:09:0e:3d:0a:93:
8f:1e:52:27:c7:04:ef:a2:b6:82:6e:34:64:f4:4e:5c:15:7d:
7f:aa:ae:a6:05:3f:17:81:15:d7:2b:e8:28:92:69:5a:09:2e:
a0:85:6b:0c:fc:e4:a1:df:51:5b:aa:2f:d1:5c:74:82:2b:01:
3e:d3:0b:f7:8c:86:d0:5a:96:a6:7f:1b:4a:06:29:1c:0e:78:
94:a6:a3:da:1a:63:c0:55:ad:52:c7:ed:95:ae:62:3d:aa:e6:
68:92:41:24:da:5a:4c:54:75:91:28:40:0a:c9:28:f2:32:82:
18:86:d0:6b:68:86:01:a5:fd:11:b6:2e:94:56:5d:e8:d1:27:
f4:a5:4d:06:3b:78:1e:66:ea:4f:16:58:8f:a3:17:87:77:54:
aa:42:e7:fb:1a:84:36:5e:6b:83:66:51:eb:c0:6e:da:cb:c5:
f1:3a:e0:c4:0d:bf:37:6b:da:85:95:79:a9:fb:e9:e3:ca:07:
98:ef:89:be:59:31:5e:e4:67:6c:52:f7:61:92:fd:2b:fe:d7:
01:a7:c7:0c:3a:33:bd:26:d6:2f:e0:ed:8c:17:99:96:95:78:
c9:f1:ce:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 16:52:31 2025 by rpki-client