Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/0a131e-37c6-45cb-9682-0b0c12b22bf9/1/TKUJs1AR7XFmOVK6Dgw8OEV_nQc.mft
File: TKUJs1AR7XFmOVK6Dgw8OEV_nQc.mft (raw, json)
Hash identifier: MYMLbERlbR0kWeznxVG8w2w7gJkz41rM7h7rMiX6+B8=
Subject key identifier: EC:34:72:2C:BF:B3:1C:5F:F4:DD:3A:AF:26:01:71:A3:D7:EB:10:FF
Authority key identifier: 4C:A5:09:B3:50:11:ED:71:66:39:52:BA:0E:0C:3C:38:45:7F:9D:07
Certificate issuer: /CN=4ca509b35011ed71663952ba0e0c3c38457f9d07
Certificate serial: 019A725C7112252F44A4A1C45A6654445FCB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TKUJs1AR7XFmOVK6Dgw8OEV_nQc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/0a131e-37c6-45cb-9682-0b0c12b22bf9/1/TKUJs1AR7XFmOVK6Dgw8OEV_nQc.mft
Manifest number: 16B1
Signing time: Tue 11 Nov 2025 10:00:52 +0000
Manifest this update: Tue 11 Nov 2025 10:00:52 +0000
Manifest next update: Wed 12 Nov 2025 10:00:52 +0000
Files and hashes: 1: TKUJs1AR7XFmOVK6Dgw8OEV_nQc.crl (hash: IOR9CQd9vqEevXcUdHGq7doUKsLgnVuseyWVAgKmlhc=)
2: ilNe5KDmG0o6LZVjHMLtOGd-0DQ.roa (hash: JkEgQ36ayeHC4m0mo3MRV7E4gABrbKLeaaxVJdDM2eE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/0a131e-37c6-45cb-9682-0b0c12b22bf9/1/TKUJs1AR7XFmOVK6Dgw8OEV_nQc.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/0a131e-37c6-45cb-9682-0b0c12b22bf9/1/TKUJs1AR7XFmOVK6Dgw8OEV_nQc.mft
rsync://rpki.ripe.net/repository/DEFAULT/TKUJs1AR7XFmOVK6Dgw8OEV_nQc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:71:12:25:2f:44:a4:a1:c4:5a:66:54:44:5f:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ca509b35011ed71663952ba0e0c3c38457f9d07
Validity
Not Before: Nov 11 10:00:52 2025 GMT
Not After : Nov 12 10:00:52 2025 GMT
Subject: CN=ec34722cbfb31c5ff4dd3aaf260171a3d7eb10ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:72:f1:ae:1b:80:7b:b4:e5:82:cf:95:4d:91:
a8:33:98:68:29:6c:4e:a3:80:1f:bf:97:48:bb:a3:
d2:5e:54:da:a4:84:fb:7c:ef:9a:ce:df:bd:ef:5a:
f7:20:a2:71:46:73:92:79:51:3a:12:7e:b6:0a:4a:
1a:c9:fe:ca:13:68:4d:38:42:2a:b1:b1:43:e6:eb:
52:41:c0:69:d2:23:34:d4:80:1e:a4:c3:7f:2d:35:
ca:db:e2:ff:2d:c8:7e:53:8d:3c:0c:4b:a5:26:a3:
80:51:7e:30:9f:73:0f:2a:b5:df:cc:0f:43:c0:bf:
e5:50:f8:e5:df:8d:69:eb:26:e4:5f:b5:b0:d0:02:
df:ec:03:bc:85:66:81:03:92:4a:d0:63:73:94:22:
5b:7b:0a:44:08:09:b2:e7:44:c4:89:1e:6e:94:00:
75:41:82:aa:33:d5:31:47:8d:44:f2:c9:42:27:48:
d7:ca:1e:bc:99:4e:f2:a7:83:04:c6:ba:03:37:82:
86:4e:49:10:af:28:96:3f:54:93:f8:5f:a0:4e:72:
dc:33:0b:24:9f:5a:1b:7b:6d:a9:24:ef:4e:45:73:
91:ae:fa:72:54:6f:7d:35:bd:21:42:40:07:39:cd:
73:36:ad:db:c2:ee:c3:c7:cd:59:c1:60:dc:d9:d3:
61:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:34:72:2C:BF:B3:1C:5F:F4:DD:3A:AF:26:01:71:A3:D7:EB:10:FF
X509v3 Authority Key Identifier:
keyid:4C:A5:09:B3:50:11:ED:71:66:39:52:BA:0E:0C:3C:38:45:7F:9D:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TKUJs1AR7XFmOVK6Dgw8OEV_nQc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/0a131e-37c6-45cb-9682-0b0c12b22bf9/1/TKUJs1AR7XFmOVK6Dgw8OEV_nQc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/0a131e-37c6-45cb-9682-0b0c12b22bf9/1/TKUJs1AR7XFmOVK6Dgw8OEV_nQc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:eb:64:a1:f1:dc:71:dd:18:ce:1f:00:b7:94:89:a0:3e:b3:
33:9b:fe:20:e8:34:fa:cc:8e:e6:38:8d:35:03:f4:0d:ac:38:
b7:9d:05:ba:9c:0d:af:7c:a8:38:6c:b7:3b:5e:b1:ac:a2:c8:
b2:27:8c:d9:1d:ff:e3:69:21:f0:ff:51:7b:a9:ec:a5:c6:e6:
c0:44:82:3b:04:1c:44:5b:ac:21:24:4d:e6:6c:89:57:6d:7e:
22:86:ff:71:65:51:83:1d:51:0c:d5:6d:88:53:26:7b:0a:00:
80:8c:70:40:97:d8:ee:28:f0:98:26:34:79:c1:80:c9:3e:1c:
e5:77:57:34:7b:59:3a:e6:84:73:44:3d:51:50:75:29:a8:21:
db:73:4d:42:ce:70:3e:97:43:52:5d:2b:56:1d:cf:5b:cd:9e:
5e:ed:c1:8b:77:3e:a1:b0:cf:ff:5d:e4:92:d2:c0:06:dd:89:
7a:4f:5e:e4:1a:53:5f:3d:0c:ae:1a:b4:1b:a3:6b:16:75:5e:
5a:95:46:69:6e:ea:5f:86:72:d4:fb:4f:f9:2a:63:e8:c7:74:
42:d5:1c:f3:99:25:62:2b:8c:cc:37:c4:fe:38:fc:fb:2d:30:
56:3a:fb:5d:2d:c8:bc:1c:9c:7b:81:b8:6e:75:fc:3c:97:85:
c4:55:38:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:08:45 2025 by rpki-client