Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/ce876c-2c02-4775-8095-78d4a64d22d9/1/Ti0g8t5NV-G8ZFy2KH_4END1pL8.mft
File: Ti0g8t5NV-G8ZFy2KH_4END1pL8.mft (raw, json)
Hash identifier: kpDYcOzSriHoyW6S8kMS2Ajyy2G+aaNMsB89Mko9O34=
Subject key identifier: D8:CF:65:6F:26:48:EC:D6:BD:65:8B:C9:A0:17:80:D6:0F:B3:16:F3
Authority key identifier: 4E:2D:20:F2:DE:4D:57:E1:BC:64:5C:B6:28:7F:F8:10:D0:F5:A4:BF
Certificate issuer: /CN=4e2d20f2de4d57e1bc645cb6287ff810d0f5a4bf
Certificate serial: 019A729403DBE5CE761FAB56AB86223F7837
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ti0g8t5NV-G8ZFy2KH_4END1pL8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/ce876c-2c02-4775-8095-78d4a64d22d9/1/Ti0g8t5NV-G8ZFy2KH_4END1pL8.mft
Manifest number: 05D2
Signing time: Tue 11 Nov 2025 11:01:34 +0000
Manifest this update: Tue 11 Nov 2025 11:01:34 +0000
Manifest next update: Wed 12 Nov 2025 11:01:34 +0000
Files and hashes: 1: Ti0g8t5NV-G8ZFy2KH_4END1pL8.crl (hash: pU1fdrfp4SS7IkpeFnQ/LqBincilh1jplDEKdseKmCk=)
2: Zx7o0NJ7lPcPWusoEu-hir0u3sI.roa (hash: RaHzV4CwJ05D0LodvMcl63WAfLK7uU2RzT47rVSSlwM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/ce876c-2c02-4775-8095-78d4a64d22d9/1/Ti0g8t5NV-G8ZFy2KH_4END1pL8.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/ce876c-2c02-4775-8095-78d4a64d22d9/1/Ti0g8t5NV-G8ZFy2KH_4END1pL8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ti0g8t5NV-G8ZFy2KH_4END1pL8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:94:03:db:e5:ce:76:1f:ab:56:ab:86:22:3f:78:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e2d20f2de4d57e1bc645cb6287ff810d0f5a4bf
Validity
Not Before: Nov 11 11:01:34 2025 GMT
Not After : Nov 12 11:01:34 2025 GMT
Subject: CN=d8cf656f2648ecd6bd658bc9a01780d60fb316f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:7c:0f:e4:e5:24:68:c6:85:d2:c6:96:1d:c7:
dc:86:54:45:a1:47:4a:cf:d3:49:66:a5:54:24:ce:
02:33:0c:44:cf:b5:00:a1:1e:1c:e2:5e:ff:04:b5:
b8:82:ae:a9:ba:7f:3b:95:34:85:06:0c:7f:cf:af:
8b:5e:fe:78:2d:6c:4a:06:55:46:16:60:9a:d9:f1:
a8:67:fe:70:6b:16:b9:20:30:ed:25:7e:9a:59:4b:
f9:f7:35:2e:de:94:61:62:e4:55:d5:b7:16:99:3e:
7d:4a:cd:3f:5b:05:49:37:03:f9:db:f0:f2:bc:37:
20:e8:35:8e:4b:49:4f:27:e6:a3:82:04:fc:e6:c3:
d3:0b:a9:59:f3:db:6c:5c:12:95:60:2d:32:55:54:
06:37:f2:48:3e:ea:c0:fb:ad:25:c0:2e:2a:19:a0:
34:4d:fd:41:f6:bd:7e:3a:a6:60:0b:84:b2:0f:c0:
c1:a1:00:95:f3:11:a3:2c:cd:7a:a2:d9:a8:41:df:
88:ff:7d:cc:56:1b:39:3c:fd:48:46:52:30:2a:78:
f9:c0:f1:af:1e:23:30:d0:60:6e:05:e5:5c:c2:d2:
6d:bb:d0:3a:f1:86:7a:0c:62:96:5e:c2:77:1e:65:
02:07:ef:2c:57:d1:c6:86:f9:62:20:1a:93:af:7e:
0c:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:CF:65:6F:26:48:EC:D6:BD:65:8B:C9:A0:17:80:D6:0F:B3:16:F3
X509v3 Authority Key Identifier:
keyid:4E:2D:20:F2:DE:4D:57:E1:BC:64:5C:B6:28:7F:F8:10:D0:F5:A4:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ti0g8t5NV-G8ZFy2KH_4END1pL8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/ce876c-2c02-4775-8095-78d4a64d22d9/1/Ti0g8t5NV-G8ZFy2KH_4END1pL8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/ce876c-2c02-4775-8095-78d4a64d22d9/1/Ti0g8t5NV-G8ZFy2KH_4END1pL8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:db:d5:2f:6a:0e:f4:15:8e:17:68:3c:1b:9c:1d:5c:2b:1a:
cf:96:60:f9:da:2c:02:cb:7f:a8:84:7a:b7:7f:e7:48:d0:18:
62:b7:11:a0:02:27:c7:1e:ee:46:e2:15:71:82:b6:72:e9:4f:
d0:d4:f9:56:60:e5:a8:23:57:83:2d:d4:58:50:8f:fd:92:7a:
e8:19:5c:c9:cc:56:f8:56:83:16:cb:3d:9c:7d:c9:5d:cb:1b:
75:9f:c3:80:2f:7f:bb:b3:31:3e:15:c9:74:fd:42:14:ed:7e:
d1:ac:90:66:36:8b:43:ac:24:d6:3b:28:60:96:ce:42:30:29:
bf:bc:e2:e2:37:56:5c:77:6a:3b:d8:ba:b3:57:0f:6b:9b:57:
86:87:00:24:54:1f:35:52:59:90:bf:d5:a5:f2:2e:7d:d0:be:
11:81:31:79:d4:f6:14:ea:61:e8:2b:d2:11:ab:be:ec:cd:3c:
1c:ae:61:56:9c:62:d0:10:ff:5e:75:bb:d8:4a:73:07:ac:e1:
fd:11:db:00:b8:e8:68:2c:53:56:19:6b:ae:39:24:35:0e:75:
b9:8e:a9:a2:ac:0e:48:0c:51:41:17:e3:4e:a4:d7:26:f2:b7:
49:d5:22:e7:78:4b:b8:96:8d:e9:b6:a8:8d:5b:9b:f5:ba:93:
8f:31:10:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 17:15:38 2025 by rpki-client