Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/66e6ba-0177-42f3-aa90-09a2c9ca7155/1/TsVuJbACVuJM2jJN6yGqnRMBX2U.mft
File: TsVuJbACVuJM2jJN6yGqnRMBX2U.mft (raw, json)
Hash identifier: pgOREfqORJm7pqYGlzGnXMdsxe0bCYYVFLycqBmmeiA=
Subject key identifier: 58:78:77:95:BC:F4:5D:AE:E4:46:7C:C2:B3:A1:28:66:DD:C5:9A:EB
Authority key identifier: 4E:C5:6E:25:B0:02:56:E2:4C:DA:32:4D:EB:21:AA:9D:13:01:5F:65
Certificate issuer: /CN=4ec56e25b00256e24cda324deb21aa9d13015f65
Certificate serial: 019A7293783B05AB0878321ED06EEB6E2707
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TsVuJbACVuJM2jJN6yGqnRMBX2U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/66e6ba-0177-42f3-aa90-09a2c9ca7155/1/TsVuJbACVuJM2jJN6yGqnRMBX2U.mft
Manifest number: DA
Signing time: Tue 11 Nov 2025 11:00:58 +0000
Manifest this update: Tue 11 Nov 2025 11:00:58 +0000
Manifest next update: Wed 12 Nov 2025 11:00:58 +0000
Files and hashes: 1: Ium09zmGvJCt2AU9c-Fdjqpa5l8.roa (hash: wf3B9W4I0o93C3K/6FUMd+RJ7+UQTH/bjXgr4nrzINY=)
2: TsVuJbACVuJM2jJN6yGqnRMBX2U.crl (hash: 30nOPnXWt4yUnl/ZWMaKISR93uVFaoT9pde4uSVmCoo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/66e6ba-0177-42f3-aa90-09a2c9ca7155/1/TsVuJbACVuJM2jJN6yGqnRMBX2U.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/66e6ba-0177-42f3-aa90-09a2c9ca7155/1/TsVuJbACVuJM2jJN6yGqnRMBX2U.mft
rsync://rpki.ripe.net/repository/DEFAULT/TsVuJbACVuJM2jJN6yGqnRMBX2U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:93:78:3b:05:ab:08:78:32:1e:d0:6e:eb:6e:27:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ec56e25b00256e24cda324deb21aa9d13015f65
Validity
Not Before: Nov 11 11:00:58 2025 GMT
Not After : Nov 12 11:00:58 2025 GMT
Subject: CN=58787795bcf45daee4467cc2b3a12866ddc59aeb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:df:b4:cb:13:0d:c2:83:64:d0:1e:38:06:e3:
8b:19:eb:b1:7f:44:3b:60:e2:1c:63:b7:96:ad:72:
85:63:80:ca:94:0b:04:cd:0a:c2:87:d3:e3:8c:56:
f2:06:8c:23:8a:68:35:cb:bf:af:a2:c9:40:78:f4:
de:6a:52:09:b0:a4:6e:f8:04:91:d4:04:19:b2:ac:
8b:a6:aa:2c:07:70:e7:d2:16:8a:af:86:9e:ab:cc:
70:c1:17:a9:92:3c:34:60:43:1c:0c:1b:2c:34:4f:
d8:6d:b3:68:e7:f2:df:16:ca:64:b7:a3:fe:ea:9a:
cf:04:e5:31:97:00:6d:bb:4e:68:e2:d5:7a:f4:48:
df:1c:c7:b3:95:96:a9:95:e1:21:70:8c:df:5d:16:
18:b9:53:20:60:93:7b:7c:2c:5d:40:79:b4:0d:c2:
75:bd:00:8d:11:3c:e3:e0:8c:e9:0e:af:1a:95:83:
29:cf:8c:06:a6:de:6d:5b:95:7a:05:03:a8:b3:c3:
40:81:12:13:6c:ff:91:14:1f:14:68:b4:98:95:c7:
f0:08:45:43:e5:75:eb:ff:f5:c6:4a:5e:f0:6b:6c:
fd:33:f9:76:80:c7:6c:cf:1e:7f:eb:ae:67:15:c3:
97:1b:cf:13:8f:92:d5:4b:c3:fc:ab:00:03:d7:50:
4c:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:78:77:95:BC:F4:5D:AE:E4:46:7C:C2:B3:A1:28:66:DD:C5:9A:EB
X509v3 Authority Key Identifier:
keyid:4E:C5:6E:25:B0:02:56:E2:4C:DA:32:4D:EB:21:AA:9D:13:01:5F:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TsVuJbACVuJM2jJN6yGqnRMBX2U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/66e6ba-0177-42f3-aa90-09a2c9ca7155/1/TsVuJbACVuJM2jJN6yGqnRMBX2U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/66e6ba-0177-42f3-aa90-09a2c9ca7155/1/TsVuJbACVuJM2jJN6yGqnRMBX2U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:16:7e:b6:34:b9:be:9d:35:0a:97:ed:a1:24:d0:4a:f3:08:
c2:2b:5f:8c:dd:29:03:06:c4:e7:c9:3f:e7:9a:0d:6f:4b:94:
1a:ba:d2:1c:fd:f3:9b:2d:cd:47:91:76:ad:54:91:b1:02:0c:
59:97:d9:5a:52:7c:3a:56:b9:56:f3:7e:ab:4f:08:2e:ce:fb:
37:81:3a:7b:f5:99:7b:b2:7f:ea:45:e4:ad:b8:49:a2:13:94:
f4:38:96:b5:7b:b6:38:62:47:b2:00:72:3b:8e:52:2c:d9:69:
39:9b:80:ef:7b:fe:3e:6f:e6:8f:95:5d:07:31:e0:18:4c:2b:
ed:f6:d4:7f:f9:22:eb:c9:2b:00:9c:e1:fe:a9:47:86:1e:7c:
31:55:22:3b:80:43:f8:93:7c:96:af:b4:e7:fd:b1:90:b7:e3:
88:c6:6d:a9:7f:e9:9f:09:a6:e8:a4:7c:71:5e:20:fc:ab:46:
5e:b8:10:a9:8d:61:2a:eb:fd:70:e0:8c:71:3d:ee:56:36:f2:
8e:f4:f2:a3:6a:ec:06:21:5e:1a:37:03:41:69:24:41:d0:1e:
1e:44:4d:8d:68:c6:08:65:bb:32:00:2c:a8:86:29:d1:ae:e4:
86:05:70:69:96:9d:97:f3:0b:6f:bb:57:5a:5b:d2:d8:51:e5:
3b:d9:00:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:02:39 2025 by rpki-client