Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/4c1f59-0c12-4153-a15c-715f9cd63086/1/TJiLk6t6KZmjJV7q5OGKsjsuDz4.mft
File: TJiLk6t6KZmjJV7q5OGKsjsuDz4.mft (raw, json)
Hash identifier: AGzuCXTMDybMn2T7x4tdwcp6BaOgh9sPm9AS1IdZJzM=
Subject key identifier: 35:45:C4:86:EB:61:0D:13:C7:84:02:C5:D2:C3:0E:96:5A:5D:48:BA
Authority key identifier: 4C:98:8B:93:AB:7A:29:99:A3:25:5E:EA:E4:E1:8A:B2:3B:2E:0F:3E
Certificate issuer: /CN=4c988b93ab7a2999a3255eeae4e18ab23b2e0f3e
Certificate serial: 019A71B7A3DA331FE35C27572B76875C2200
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TJiLk6t6KZmjJV7q5OGKsjsuDz4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/4c1f59-0c12-4153-a15c-715f9cd63086/1/TJiLk6t6KZmjJV7q5OGKsjsuDz4.mft
Manifest number: 1721
Signing time: Tue 11 Nov 2025 07:00:51 +0000
Manifest this update: Tue 11 Nov 2025 07:00:51 +0000
Manifest next update: Wed 12 Nov 2025 07:00:51 +0000
Files and hashes: 1: 5XqYz3igdHBUJOarhV6UCk20p4g.roa (hash: OiTQYPv4ItBCPhGaoL4ocDwYxXkvxpj8Eo+XMn3YAwI=)
2: BWzUAYzWxehGB0sc7Hoq3s64-5A.roa (hash: Y2Cmk2o0Bi2v58k/tp8mbuKNOVbGQJJqiMnQXIqfVfA=)
3: TJiLk6t6KZmjJV7q5OGKsjsuDz4.crl (hash: hmcVHSkyL7zMtcnLxcXLfU2l7gz5crhA1qBKdxORT7A=)
4: uJBF8l1YNTX1rQwpWIP4iAOZYes.roa (hash: W5zW790ApNcbjg521YyvqbQ8pFLrwOkcD0CU1yoVHdc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/4c1f59-0c12-4153-a15c-715f9cd63086/1/TJiLk6t6KZmjJV7q5OGKsjsuDz4.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/4c1f59-0c12-4153-a15c-715f9cd63086/1/TJiLk6t6KZmjJV7q5OGKsjsuDz4.mft
rsync://rpki.ripe.net/repository/DEFAULT/TJiLk6t6KZmjJV7q5OGKsjsuDz4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b7:a3:da:33:1f:e3:5c:27:57:2b:76:87:5c:22:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c988b93ab7a2999a3255eeae4e18ab23b2e0f3e
Validity
Not Before: Nov 11 07:00:51 2025 GMT
Not After : Nov 12 07:00:51 2025 GMT
Subject: CN=3545c486eb610d13c78402c5d2c30e965a5d48ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:45:d5:52:32:92:d1:f9:b8:53:a9:03:23:c3:
9b:1c:85:4a:ca:54:f4:ec:74:18:91:1d:34:45:c4:
1b:cc:c9:15:52:22:6f:b9:90:74:24:31:17:bc:13:
4e:f8:8a:36:0c:81:d2:88:f8:da:a8:d3:fe:cf:f3:
6c:db:a0:d1:3d:7d:40:f2:9b:d3:af:eb:e6:69:62:
d4:2f:34:bc:5f:8e:46:a0:73:de:ed:d8:d3:e6:e2:
4c:a4:38:47:b8:ff:8b:d3:16:80:1c:9a:39:fd:90:
15:9d:ed:52:39:04:6c:81:9c:c8:77:2c:8a:60:f7:
1f:26:5f:46:62:e9:39:3f:e2:40:23:80:cc:f1:1a:
24:eb:03:b0:dc:68:c1:d7:c9:86:b9:aa:a5:7c:03:
7e:d3:48:a0:1d:6d:a1:de:33:ee:5f:69:d8:ff:d0:
91:cf:ac:35:b7:53:29:c1:ff:70:9f:dc:e2:74:7a:
86:59:41:b8:6f:e7:74:7b:ba:26:a9:9a:3e:20:60:
04:b2:ba:3d:76:cc:bf:52:38:d8:f3:c4:cc:be:54:
e1:9a:13:20:d1:ce:ec:0a:c1:8a:18:d9:6c:22:10:
82:1e:5e:09:43:40:3b:63:92:c7:c3:28:76:45:03:
3e:92:f4:d5:3d:a2:67:54:d4:a2:28:33:49:f5:c5:
f3:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:45:C4:86:EB:61:0D:13:C7:84:02:C5:D2:C3:0E:96:5A:5D:48:BA
X509v3 Authority Key Identifier:
keyid:4C:98:8B:93:AB:7A:29:99:A3:25:5E:EA:E4:E1:8A:B2:3B:2E:0F:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TJiLk6t6KZmjJV7q5OGKsjsuDz4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/4c1f59-0c12-4153-a15c-715f9cd63086/1/TJiLk6t6KZmjJV7q5OGKsjsuDz4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/4c1f59-0c12-4153-a15c-715f9cd63086/1/TJiLk6t6KZmjJV7q5OGKsjsuDz4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:79:72:9b:8f:7d:b5:7b:94:7d:b7:d5:59:74:38:0c:8a:00:
95:41:f5:1f:dd:39:67:db:cb:22:d9:2a:57:af:94:0a:36:e4:
c8:f8:fa:bd:fd:27:6b:e6:0e:14:da:0d:85:fb:e0:b4:3f:54:
a6:50:73:0e:7d:11:8e:d2:05:5e:d4:d7:f2:fb:00:b6:93:69:
86:8e:1d:62:71:07:16:03:da:33:85:16:5b:61:79:b3:65:55:
15:88:bd:1e:54:77:52:14:80:d0:44:60:6f:89:78:25:4c:ba:
42:f6:dc:0f:b3:0e:d6:28:60:36:5e:17:9c:d6:eb:7f:d0:28:
a8:21:ec:d9:33:e0:d8:77:c6:50:b2:ec:72:9a:fc:8e:57:2a:
63:30:e1:7f:27:70:07:b5:4d:62:e1:de:34:cd:b6:2e:b6:34:
b9:dd:9c:2e:17:6d:bb:c9:48:d1:cb:b0:62:4f:3a:d6:cb:6f:
63:f1:2e:90:77:af:4f:1b:26:27:2e:80:e5:a9:77:65:93:b8:
ae:85:2a:e8:07:41:ac:cb:23:33:36:4f:d2:d0:75:34:3e:c9:
c3:43:06:46:33:43:8f:1e:f1:1e:e1:de:01:d5:35:36:1e:97:
fe:c4:3a:6d:b1:44:dc:7a:55:b6:36:a5:f7:40:40:84:10:fd:
06:a3:ea:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:43:15 2025 by rpki-client