Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/c5c595-2673-4d5f-8a85-ae8c81f96f42/1/TOSIxkAcj16WnhXWRlH7Sy0tzfc.mft
File: TOSIxkAcj16WnhXWRlH7Sy0tzfc.mft (raw, json)
Hash identifier: oGdnB+b0YRN4YFWSMXi9xakWwYiuPQ5MDnabZS6xGAI=
Subject key identifier: AB:98:56:43:97:AA:56:98:F5:1D:C5:C9:62:54:DD:E9:C9:52:4B:3D
Authority key identifier: 4C:E4:88:C6:40:1C:8F:5E:96:9E:15:D6:46:51:FB:4B:2D:2D:CD:F7
Certificate issuer: /CN=4ce488c6401c8f5e969e15d64651fb4b2d2dcdf7
Certificate serial: 019A71B78518D56A0ACBDF16036BBA3C93B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TOSIxkAcj16WnhXWRlH7Sy0tzfc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/c5c595-2673-4d5f-8a85-ae8c81f96f42/1/TOSIxkAcj16WnhXWRlH7Sy0tzfc.mft
Manifest number: 1119
Signing time: Tue 11 Nov 2025 07:00:43 +0000
Manifest this update: Tue 11 Nov 2025 07:00:43 +0000
Manifest next update: Wed 12 Nov 2025 07:00:43 +0000
Files and hashes: 1: TOSIxkAcj16WnhXWRlH7Sy0tzfc.crl (hash: b/OpR1o4yFqM+XBXWuBPn81XgeDoAKBP2zM4a1usi88=)
2: ebErOTcxF8x0HRmokQpD8A9P798.roa (hash: hgALEdNUDsS4deffBsaMplhK9QNYL4vbKGcbf+NsbgE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/c5c595-2673-4d5f-8a85-ae8c81f96f42/1/TOSIxkAcj16WnhXWRlH7Sy0tzfc.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/c5c595-2673-4d5f-8a85-ae8c81f96f42/1/TOSIxkAcj16WnhXWRlH7Sy0tzfc.mft
rsync://rpki.ripe.net/repository/DEFAULT/TOSIxkAcj16WnhXWRlH7Sy0tzfc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b7:85:18:d5:6a:0a:cb:df:16:03:6b:ba:3c:93:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ce488c6401c8f5e969e15d64651fb4b2d2dcdf7
Validity
Not Before: Nov 11 07:00:43 2025 GMT
Not After : Nov 12 07:00:43 2025 GMT
Subject: CN=ab98564397aa5698f51dc5c96254dde9c9524b3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:e1:64:89:22:12:fd:94:81:9a:1d:c1:08:8f:
99:bf:b3:6b:c4:e8:8b:65:75:94:2e:6b:ec:bd:b6:
45:57:f5:21:cb:eb:93:41:61:05:d6:b1:5b:5a:4f:
6c:20:94:9d:c7:50:d2:9d:26:ec:89:d6:1c:2b:18:
0d:79:2a:be:eb:37:3a:58:fc:81:14:b4:87:70:13:
c8:a1:be:66:a1:c5:88:65:8a:10:8d:fd:8b:0b:7b:
6e:af:f1:0f:86:56:56:ae:87:db:51:f3:18:5f:68:
82:4d:b9:64:4f:69:fd:b4:a9:51:08:ca:c6:d1:71:
a0:1a:b2:01:de:3e:32:34:ef:a7:cf:6f:ae:1d:44:
52:3f:e8:b9:67:22:fc:24:30:d8:7c:a7:a2:92:01:
3a:3d:b0:c5:fd:8a:cb:8e:2a:e0:b9:0d:bb:9e:c4:
53:f3:b5:ba:4f:af:e2:60:b0:9e:c0:8e:39:b5:f2:
39:bc:30:20:92:7e:24:bb:04:84:53:16:b7:fe:ec:
c6:d6:73:ad:39:80:da:e0:8f:e9:34:9d:40:b4:e4:
bf:65:ed:37:9c:d2:ef:f4:99:bb:bf:ca:c3:79:f5:
13:8b:8b:61:9d:27:10:36:59:92:5d:11:51:fc:93:
f4:cb:4c:4e:cc:07:17:43:0f:ad:f7:be:b0:fe:06:
61:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:98:56:43:97:AA:56:98:F5:1D:C5:C9:62:54:DD:E9:C9:52:4B:3D
X509v3 Authority Key Identifier:
keyid:4C:E4:88:C6:40:1C:8F:5E:96:9E:15:D6:46:51:FB:4B:2D:2D:CD:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TOSIxkAcj16WnhXWRlH7Sy0tzfc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/c5c595-2673-4d5f-8a85-ae8c81f96f42/1/TOSIxkAcj16WnhXWRlH7Sy0tzfc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/c5c595-2673-4d5f-8a85-ae8c81f96f42/1/TOSIxkAcj16WnhXWRlH7Sy0tzfc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:43:46:ef:e0:38:7c:cf:45:72:cc:0a:bd:56:de:cf:1f:f1:
f8:18:d7:06:44:70:d4:7e:c5:02:52:16:a7:c8:3f:47:2d:08:
90:74:e4:7b:ad:0b:7d:41:e0:6e:26:89:59:07:4b:8c:da:b8:
cc:33:06:65:85:dd:57:e7:65:87:1a:3b:50:8f:65:e2:15:3f:
be:7a:48:5b:8d:2c:d4:c8:2d:52:40:d9:5b:0c:c9:e3:25:7f:
17:8d:3b:06:6e:b5:4b:24:7d:17:7d:32:de:6e:e7:00:9a:9a:
b1:37:80:e2:70:99:b0:41:9d:9f:c6:89:6b:aa:fd:f8:f4:31:
6e:ab:8c:ba:c4:09:e0:89:95:6f:9f:84:61:da:0d:b5:a7:98:
f8:d5:3e:34:fe:2f:2d:ff:00:72:32:6e:2b:a3:ed:61:6b:8b:
6d:c0:0d:dc:ee:ff:7c:15:a3:cc:e6:f2:bd:55:9c:35:d8:e7:
73:2e:be:e1:97:7b:13:af:f2:10:49:2d:a8:d9:4d:26:58:03:
d0:b1:26:80:e7:30:3d:ad:c1:21:6f:5e:48:25:cf:63:c9:d8:
9c:12:03:31:c3:5b:18:e8:53:d5:a4:85:3b:5e:ef:f7:8e:74:
f1:ad:4b:27:2d:4f:50:70:e4:2a:9f:bf:f5:00:29:ec:c4:ea:
b7:05:12:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:28:05 2025 by rpki-client