Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/68c296-69b2-4070-9ff9-4243decad360/1/tfrsS42ZLda5zYmoSJ08OmUq7NI.mft
File: tfrsS42ZLda5zYmoSJ08OmUq7NI.mft (raw, json)
Hash identifier: NVKMBmv1FfAjIZrc+RDOEJzDFPAqvBf8leynYQxa12k=
Subject key identifier: 7D:8C:C3:38:C3:83:DD:13:20:61:9E:46:8C:49:D1:41:DE:5B:B5:E8
Authority key identifier: B5:FA:EC:4B:8D:99:2D:D6:B9:CD:89:A8:48:9D:3C:3A:65:2A:EC:D2
Certificate issuer: /CN=b5faec4b8d992dd6b9cd89a8489d3c3a652aecd2
Certificate serial: 019A7293C32095046992B43D6C98FBE09B4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tfrsS42ZLda5zYmoSJ08OmUq7NI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/68c296-69b2-4070-9ff9-4243decad360/1/tfrsS42ZLda5zYmoSJ08OmUq7NI.mft
Manifest number: 171E
Signing time: Tue 11 Nov 2025 11:01:17 +0000
Manifest this update: Tue 11 Nov 2025 11:01:17 +0000
Manifest next update: Wed 12 Nov 2025 11:01:17 +0000
Files and hashes: 1: 4yLFcyM54Hv8nF5ON-TIrD-1oYQ.roa (hash: hE+OT4FiIcXi0TRuDiRDYqpuBeR4hhUYci4sdFCd/CY=)
2: jKEy0LJLh7AqTPNLnCDWho1dIJ0.roa (hash: BKRsVG5h+FxIv9YJSObhtgL9EqcN1BIPxpc/4d7NHx4=)
3: tfrsS42ZLda5zYmoSJ08OmUq7NI.crl (hash: 8FB87uzEegdlsqVBWJotzSgZ32iCNSl+pqxR8uNcmOE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/68c296-69b2-4070-9ff9-4243decad360/1/tfrsS42ZLda5zYmoSJ08OmUq7NI.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/68c296-69b2-4070-9ff9-4243decad360/1/tfrsS42ZLda5zYmoSJ08OmUq7NI.mft
rsync://rpki.ripe.net/repository/DEFAULT/tfrsS42ZLda5zYmoSJ08OmUq7NI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:93:c3:20:95:04:69:92:b4:3d:6c:98:fb:e0:9b:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5faec4b8d992dd6b9cd89a8489d3c3a652aecd2
Validity
Not Before: Nov 11 11:01:17 2025 GMT
Not After : Nov 12 11:01:17 2025 GMT
Subject: CN=7d8cc338c383dd1320619e468c49d141de5bb5e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:4e:c3:df:bf:e4:7f:a4:29:d9:0b:d7:8b:96:
b7:fb:9a:2d:d4:26:36:32:91:c7:31:cf:ca:6a:c8:
29:c0:88:04:a4:9d:12:89:de:90:8e:f7:7e:bd:69:
7e:1c:f3:a2:44:5e:82:8f:2f:4d:1c:c9:92:e4:50:
f3:1e:11:7b:a1:5f:9a:11:0f:94:8a:b0:5a:dd:ed:
e1:26:7c:b5:c9:f5:f8:f5:cd:6f:91:fa:50:87:54:
50:c4:6e:1b:30:57:b4:19:1f:c5:d8:77:6f:76:0e:
94:49:d9:54:9c:48:91:dc:0d:5a:d7:1f:0c:6a:4d:
38:ed:b8:30:8d:df:52:00:8e:90:0f:04:59:89:ed:
65:8a:94:8c:4e:83:d2:e3:f1:62:af:cd:5c:df:38:
31:3e:2a:dd:0b:60:9f:a8:50:64:6e:08:6d:29:43:
f7:e2:22:29:78:0a:39:6f:03:f4:46:da:2c:8d:30:
88:39:a8:26:ca:85:92:ae:75:2c:e6:9b:f6:c7:c0:
37:3e:8c:6c:a2:c9:89:e9:f2:fb:9d:cc:fa:c3:6b:
9b:b3:83:d2:0a:67:63:69:a5:86:77:33:6c:2f:c2:
7a:f3:4d:e5:a3:c7:26:c0:d7:93:9a:2b:7c:44:bf:
d7:7d:bb:61:25:0b:ff:5d:a5:3f:df:02:2e:76:5f:
14:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:8C:C3:38:C3:83:DD:13:20:61:9E:46:8C:49:D1:41:DE:5B:B5:E8
X509v3 Authority Key Identifier:
keyid:B5:FA:EC:4B:8D:99:2D:D6:B9:CD:89:A8:48:9D:3C:3A:65:2A:EC:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tfrsS42ZLda5zYmoSJ08OmUq7NI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/68c296-69b2-4070-9ff9-4243decad360/1/tfrsS42ZLda5zYmoSJ08OmUq7NI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/68c296-69b2-4070-9ff9-4243decad360/1/tfrsS42ZLda5zYmoSJ08OmUq7NI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:40:23:e9:4e:a8:66:80:41:30:33:3a:f2:ad:bf:50:de:f4:
43:57:af:4d:5e:07:c7:44:e8:87:78:5e:99:4a:c2:d6:ad:06:
f2:aa:a5:36:1b:b0:47:30:22:80:51:36:b2:f0:2a:f9:95:31:
c7:d2:11:d6:28:cf:2b:df:4f:f9:5a:22:2d:19:c7:f4:5f:44:
93:8c:7a:84:f2:b9:de:7e:60:28:7e:de:71:72:01:6e:96:72:
34:15:95:86:7b:54:e7:fd:37:62:6b:13:82:51:4c:3d:4b:7c:
97:88:9d:31:3a:8a:dd:6b:3e:81:b0:a8:28:0c:32:51:b9:84:
2a:53:da:68:e9:b2:d0:9b:bd:56:50:de:e9:5b:a5:79:98:21:
c0:f2:95:33:ea:ba:6a:e4:01:d7:6e:f0:da:ef:a8:07:5a:56:
8e:8b:cd:de:2e:21:91:c9:a7:39:32:db:29:eb:cd:06:8a:a3:
2f:f2:47:be:d0:1e:89:ca:03:f3:09:2d:4d:93:19:71:9c:13:
40:8a:7a:81:43:07:12:2c:df:7b:bf:d7:f1:4a:e7:9f:51:ba:
1a:64:36:52:75:e5:e2:f6:5e:4e:8f:eb:4c:41:07:73:73:4f:
65:b2:06:f3:22:69:03:56:f8:f0:38:6d:23:38:f7:10:dd:07:
e4:ec:fa:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 16:56:50 2025 by rpki-client