Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/278398-7339-44b2-b0b0-73a01ae5de8f/1/TNcfWgBQ-K5kRMY4dpujdf3bzhk.mft
File: TNcfWgBQ-K5kRMY4dpujdf3bzhk.mft (raw, json)
Hash identifier: q2BGsFwtOAn3Kzmkogk9gsStRoKjxTjQ+UfQNrYt2+g=
Subject key identifier: 16:4B:2C:55:BD:FE:F9:59:68:C4:23:3B:98:30:B7:2A:47:0C:E6:7E
Authority key identifier: 4C:D7:1F:5A:00:50:F8:AE:64:44:C6:38:76:9B:A3:75:FD:DB:CE:19
Certificate issuer: /CN=4cd71f5a0050f8ae6444c638769ba375fddbce19
Certificate serial: 019A3534FD1D62EEBC7355F9513D3654AC9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TNcfWgBQ-K5kRMY4dpujdf3bzhk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/278398-7339-44b2-b0b0-73a01ae5de8f/1/TNcfWgBQ-K5kRMY4dpujdf3bzhk.mft
Manifest number: 13EB
Signing time: Thu 30 Oct 2025 13:00:56 +0000
Manifest this update: Thu 30 Oct 2025 13:00:56 +0000
Manifest next update: Fri 31 Oct 2025 13:00:56 +0000
Files and hashes: 1: R8OfYueHd1P1AWWtdGiixwllIMs.roa (hash: ZKzgreBUlCJXbuPQDDLtfbqfZaf5YaZJohzFfYmemPA=)
2: TNcfWgBQ-K5kRMY4dpujdf3bzhk.crl (hash: xSL+HnZN6UqtA28k6fRkhkVG3kqGbKBK7hoXHuuX8NU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/278398-7339-44b2-b0b0-73a01ae5de8f/1/TNcfWgBQ-K5kRMY4dpujdf3bzhk.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/278398-7339-44b2-b0b0-73a01ae5de8f/1/TNcfWgBQ-K5kRMY4dpujdf3bzhk.mft
rsync://rpki.ripe.net/repository/DEFAULT/TNcfWgBQ-K5kRMY4dpujdf3bzhk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 31 Oct 2025 13:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:35:34:fd:1d:62:ee:bc:73:55:f9:51:3d:36:54:ac:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4cd71f5a0050f8ae6444c638769ba375fddbce19
Validity
Not Before: Oct 30 13:00:56 2025 GMT
Not After : Oct 31 13:00:56 2025 GMT
Subject: CN=164b2c55bdfef95968c4233b9830b72a470ce67e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:92:9f:7c:23:7a:0c:0a:06:90:35:93:94:9f:
70:e8:e9:84:37:ac:59:ae:0a:36:8d:b4:5a:ac:77:
91:43:61:0d:64:26:e2:22:36:61:38:bd:e5:a4:4f:
f2:89:1d:88:a1:5a:37:d4:86:7c:6a:cf:54:ab:ac:
5e:c1:dc:21:2d:51:19:21:7b:18:4f:17:0b:60:4b:
ad:5d:a4:21:81:3f:61:58:21:5c:75:05:cc:37:c8:
98:18:01:19:01:2a:36:6c:60:e3:a4:b2:76:37:d2:
44:6a:d2:ad:5a:43:8b:14:07:88:09:a9:65:b4:56:
a6:9a:b9:87:e4:b1:55:d9:1e:04:f4:08:7d:34:f9:
b1:93:1c:cb:31:8f:56:3f:de:3b:2c:84:c1:ec:35:
ac:73:2a:fb:ee:2b:93:1b:23:bc:99:8a:c2:fa:db:
bc:e8:7d:af:f6:94:42:4e:99:95:1f:3b:85:8a:04:
77:92:e4:44:2f:95:6e:76:80:9a:66:9f:a6:9e:21:
74:fe:ad:ad:8f:44:0c:30:05:1f:0a:86:43:e1:19:
9f:94:4c:67:33:c9:2a:08:03:31:b9:b2:51:df:5f:
57:76:87:d2:e0:78:52:bf:ce:00:36:bd:17:8a:a2:
4f:0d:79:cc:06:9e:9c:68:32:56:bd:72:ed:9b:e2:
ae:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:4B:2C:55:BD:FE:F9:59:68:C4:23:3B:98:30:B7:2A:47:0C:E6:7E
X509v3 Authority Key Identifier:
keyid:4C:D7:1F:5A:00:50:F8:AE:64:44:C6:38:76:9B:A3:75:FD:DB:CE:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TNcfWgBQ-K5kRMY4dpujdf3bzhk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/278398-7339-44b2-b0b0-73a01ae5de8f/1/TNcfWgBQ-K5kRMY4dpujdf3bzhk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/278398-7339-44b2-b0b0-73a01ae5de8f/1/TNcfWgBQ-K5kRMY4dpujdf3bzhk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:ec:e3:17:af:74:c5:5c:1d:8f:5f:98:f5:4c:e3:1f:49:7d:
6d:f6:4a:f6:d6:30:dd:15:07:37:9e:b7:10:b2:89:9d:85:39:
0e:77:4c:8f:00:a0:5c:90:cd:9e:c1:33:f1:1a:36:5f:60:d7:
b6:7e:82:37:e0:b7:7a:7e:25:b3:16:39:19:3e:e9:1e:98:88:
1d:4d:59:d8:f5:21:da:4a:a2:e9:18:35:90:84:db:1c:dd:05:
3c:b0:e1:e5:10:50:66:25:90:8b:11:10:20:19:9e:9a:92:dc:
23:82:21:76:97:60:58:8e:cb:14:f7:cd:84:91:95:9a:dc:e2:
4b:dd:94:d1:64:63:4e:d9:35:de:23:f0:c8:91:99:de:40:fa:
3c:c2:6b:b2:b5:e8:cd:1e:ac:af:d8:ab:fe:5e:91:f2:6d:16:
00:fc:bb:73:09:3d:1c:76:8f:63:f6:90:57:f7:17:40:63:53:
eb:d3:98:2e:f1:5d:7c:71:81:e2:d8:2d:ca:14:b9:d1:d8:38:
cd:f7:38:e2:9c:7f:13:09:c6:4c:1f:84:9a:07:d0:0d:a4:24:
ef:28:68:d9:d5:2b:b9:f9:ae:77:23:fc:36:57:20:95:00:fc:
41:28:15:eb:45:ac:49:9a:94:bb:58:63:fe:6a:a7:b3:0a:7a:
d2:d8:b0:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 30 21:52:09 2025 by rpki-client