Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/4f943f-d16a-48da-b93a-1487c6020c46/1/Tj_pDw-taiXUa9fDNbki2gMbLHg.mft
File: Tj_pDw-taiXUa9fDNbki2gMbLHg.mft (raw, json)
Hash identifier: rP0AXz+iHabB0NCtQFi5B/L7w1CYbCuCTgGXQIcW2Uk=
Subject key identifier: FE:2B:8A:5B:D6:3A:2F:73:03:91:77:BA:C2:22:AD:A1:51:06:FB:74
Authority key identifier: 4E:3F:E9:0F:0F:AD:6A:25:D4:6B:D7:C3:35:B9:22:DA:03:1B:2C:78
Certificate issuer: /CN=4e3fe90f0fad6a25d46bd7c335b922da031b2c78
Certificate serial: 019A71EEB676901C043B8FFB2CD97BF758FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tj_pDw-taiXUa9fDNbki2gMbLHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/4f943f-d16a-48da-b93a-1487c6020c46/1/Tj_pDw-taiXUa9fDNbki2gMbLHg.mft
Manifest number: 0BC7
Signing time: Tue 11 Nov 2025 08:01:00 +0000
Manifest this update: Tue 11 Nov 2025 08:01:00 +0000
Manifest next update: Wed 12 Nov 2025 08:01:00 +0000
Files and hashes: 1: A8YDmTBK0K140SrVGjKT4rgJaBs.roa (hash: dZ2I5la+5OGaL56JsGr6ibfQkik4DvtIbwTHLacKDFU=)
2: Tj_pDw-taiXUa9fDNbki2gMbLHg.crl (hash: BE8KAMvpaKmn9G2ifqD/8MHSu4cHHlnk5uqYmyvyrB4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/4f943f-d16a-48da-b93a-1487c6020c46/1/Tj_pDw-taiXUa9fDNbki2gMbLHg.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/4f943f-d16a-48da-b93a-1487c6020c46/1/Tj_pDw-taiXUa9fDNbki2gMbLHg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Tj_pDw-taiXUa9fDNbki2gMbLHg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:b6:76:90:1c:04:3b:8f:fb:2c:d9:7b:f7:58:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e3fe90f0fad6a25d46bd7c335b922da031b2c78
Validity
Not Before: Nov 11 08:01:00 2025 GMT
Not After : Nov 12 08:01:00 2025 GMT
Subject: CN=fe2b8a5bd63a2f73039177bac222ada15106fb74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:68:94:37:44:19:47:c6:2d:cd:5d:c4:cd:1a:
98:9f:a3:49:7f:62:3e:34:63:3b:ce:71:b0:bb:a4:
8b:69:1e:9f:d4:72:b9:90:38:d5:4f:62:df:be:cd:
46:12:81:e4:0c:8e:f0:3e:30:9c:42:3d:83:99:60:
94:2d:9f:8e:d3:3a:f9:29:1a:a6:d6:ee:3d:eb:31:
62:8d:04:29:f4:42:6a:4b:b7:c5:da:03:e3:5f:03:
2f:5d:8d:b1:03:99:65:bc:52:04:cd:1c:ad:4f:4c:
32:1d:48:07:58:4f:cd:0d:eb:24:09:47:70:2c:b3:
e7:f8:da:a3:54:72:28:eb:3e:4f:f5:32:cb:51:e5:
be:3e:ad:7e:ef:19:d7:3e:7e:92:2d:69:28:76:35:
3e:0e:b4:db:fa:af:c3:32:d2:ff:2d:3f:0a:26:1c:
64:11:ec:ac:04:45:f0:bf:87:4a:5d:d9:0c:75:3b:
75:f3:53:37:02:02:f7:b4:66:f6:84:62:44:be:fa:
33:9d:f2:20:c6:fa:e1:a4:cd:ae:0a:bf:11:bc:fd:
f0:20:13:98:38:38:22:d0:36:01:cc:b6:ce:24:bd:
e7:88:ef:7e:3a:13:ac:90:1e:b3:a7:b0:15:f2:2b:
8a:82:58:67:3b:ea:57:6a:d8:dd:be:66:bd:7a:e6:
06:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:2B:8A:5B:D6:3A:2F:73:03:91:77:BA:C2:22:AD:A1:51:06:FB:74
X509v3 Authority Key Identifier:
keyid:4E:3F:E9:0F:0F:AD:6A:25:D4:6B:D7:C3:35:B9:22:DA:03:1B:2C:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tj_pDw-taiXUa9fDNbki2gMbLHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/4f943f-d16a-48da-b93a-1487c6020c46/1/Tj_pDw-taiXUa9fDNbki2gMbLHg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/4f943f-d16a-48da-b93a-1487c6020c46/1/Tj_pDw-taiXUa9fDNbki2gMbLHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:34:bc:85:5f:90:02:3b:ac:90:1e:38:0f:9d:bd:09:dd:d1:
9c:ba:29:f9:8c:f0:59:d8:2c:df:c0:3f:09:e4:06:72:9f:41:
0b:8c:52:9f:3c:95:9c:1a:e1:c6:6a:6a:3d:05:5e:8d:b3:e1:
14:e1:1e:87:8a:98:32:95:f0:94:3f:52:15:11:69:f8:b6:8d:
59:d4:a9:ec:58:70:e6:c3:a1:28:25:b6:e2:64:8a:bb:47:53:
21:3d:ca:3e:19:0a:be:73:43:ab:6d:e9:0e:be:e4:23:2a:59:
71:26:79:4b:47:d4:cd:c9:d8:3e:ac:45:66:63:ba:fa:14:22:
8d:20:69:10:eb:2f:75:09:88:dc:40:d1:79:7f:2e:07:15:af:
2a:d9:41:66:bb:5f:b6:27:dc:75:08:c0:8f:1c:4b:2e:cf:3f:
d3:af:ee:5c:77:07:cc:2f:6a:d3:73:21:22:a7:d8:5d:bf:7b:
a9:47:cb:4c:f3:bc:31:d4:b3:a0:31:1e:36:b2:40:6a:ff:1f:
e4:06:d0:44:db:ea:51:58:65:9b:97:62:73:42:66:a4:65:7b:
c6:3a:ee:2d:87:40:78:9d:ab:18:9a:48:ed:33:08:65:84:08:
a5:4b:f4:6b:93:2e:85:25:f9:14:a9:3c:3d:be:0f:9d:8f:3f:
55:ec:44:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:23:52 2025 by rpki-client