Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/778af2-b2c0-4704-9fa2-2841013bccb4/1/TCowVuYlkkn0ZvAFW7Ebg6ajCkI.mft
File: TCowVuYlkkn0ZvAFW7Ebg6ajCkI.mft (raw, json)
Hash identifier: cDYjRa2Qqo+A4dJK3gzIeuafpGkl/YNdIMpwYsju5D4=
Subject key identifier: 89:8E:A5:BA:40:0F:7B:25:0D:CB:18:EC:07:A4:7A:12:43:53:8F:3A
Authority key identifier: 4C:2A:30:56:E6:25:92:49:F4:66:F0:05:5B:B1:1B:83:A6:A3:0A:42
Certificate issuer: /CN=4c2a3056e6259249f466f0055bb11b83a6a30a42
Certificate serial: 019A7149B246CDD83D7D75A30A9710A88B72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TCowVuYlkkn0ZvAFW7Ebg6ajCkI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/778af2-b2c0-4704-9fa2-2841013bccb4/1/TCowVuYlkkn0ZvAFW7Ebg6ajCkI.mft
Manifest number: 066D
Signing time: Tue 11 Nov 2025 05:00:46 +0000
Manifest this update: Tue 11 Nov 2025 05:00:46 +0000
Manifest next update: Wed 12 Nov 2025 05:00:46 +0000
Files and hashes: 1: TCowVuYlkkn0ZvAFW7Ebg6ajCkI.crl (hash: i14NgQJMvBeL04JaPaKKSfJZ8wBcQl96JGmcqshIsVo=)
2: ypWsWp3lqcgm3orp5hClVetL1gs.roa (hash: gAI+ZENNE355QZzW1lVcF9M6FT+OGK0PoiiTAc8yFHM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/778af2-b2c0-4704-9fa2-2841013bccb4/1/TCowVuYlkkn0ZvAFW7Ebg6ajCkI.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/778af2-b2c0-4704-9fa2-2841013bccb4/1/TCowVuYlkkn0ZvAFW7Ebg6ajCkI.mft
rsync://rpki.ripe.net/repository/DEFAULT/TCowVuYlkkn0ZvAFW7Ebg6ajCkI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 05:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:49:b2:46:cd:d8:3d:7d:75:a3:0a:97:10:a8:8b:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c2a3056e6259249f466f0055bb11b83a6a30a42
Validity
Not Before: Nov 11 05:00:46 2025 GMT
Not After : Nov 12 05:00:46 2025 GMT
Subject: CN=898ea5ba400f7b250dcb18ec07a47a1243538f3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:1c:74:c9:49:45:e5:07:22:54:41:88:5e:d7:
6a:c8:6e:5a:32:ab:fe:b5:d5:bb:ef:bc:cd:c5:d4:
40:74:6a:c6:57:93:99:fa:cc:b7:7d:23:d1:0d:cb:
85:e3:2a:03:78:4e:1d:97:f8:3c:2e:dd:dc:73:25:
c7:e9:25:4a:af:94:f4:3a:b9:52:05:59:c1:21:6f:
c6:df:f5:52:b1:95:93:24:25:eb:18:42:a9:ae:cc:
2f:c1:4c:69:38:9e:06:36:fa:93:05:ff:05:78:df:
0d:d6:ca:40:83:cb:94:b9:a6:ff:54:45:69:ae:0d:
c6:22:b7:22:88:2c:20:1e:ef:21:8a:56:6f:f1:44:
32:99:c2:48:e4:b6:95:a1:c5:9b:06:00:23:8c:8d:
69:74:0d:33:40:4b:2e:b0:19:8e:15:88:7b:ea:85:
3c:42:46:64:b4:cf:7f:a8:1b:e8:0f:dd:27:b5:9b:
60:94:b4:53:4d:b2:86:23:6a:6d:33:d8:f1:16:11:
2b:e5:a8:f2:fc:16:e2:44:b8:9e:1c:f9:68:e7:70:
2b:ee:9b:e7:2a:35:ca:98:76:5e:cf:0b:71:b8:f1:
46:7a:b7:53:06:ff:9f:86:6d:0c:e8:08:19:d0:b4:
14:be:4d:86:c3:9a:f7:43:4d:b7:b6:28:b5:18:97:
f2:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:8E:A5:BA:40:0F:7B:25:0D:CB:18:EC:07:A4:7A:12:43:53:8F:3A
X509v3 Authority Key Identifier:
keyid:4C:2A:30:56:E6:25:92:49:F4:66:F0:05:5B:B1:1B:83:A6:A3:0A:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TCowVuYlkkn0ZvAFW7Ebg6ajCkI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/778af2-b2c0-4704-9fa2-2841013bccb4/1/TCowVuYlkkn0ZvAFW7Ebg6ajCkI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/778af2-b2c0-4704-9fa2-2841013bccb4/1/TCowVuYlkkn0ZvAFW7Ebg6ajCkI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:51:aa:83:e4:e1:bd:60:fb:a4:a2:24:c3:c8:5b:c2:73:a9:
5c:6f:2c:82:23:88:35:9e:4e:2c:b7:b0:64:5f:80:24:b4:08:
10:64:d6:f7:b2:b6:b4:1b:95:44:c9:6b:66:cd:7f:b0:a6:b1:
87:71:39:c9:bc:b9:c4:6d:21:f5:11:dd:f2:54:43:39:75:89:
3e:91:a0:e8:aa:f8:2a:0b:e2:00:e5:cf:9f:41:b0:ce:8e:dd:
d3:3c:26:f1:44:e1:c8:f1:76:97:3a:f3:5a:db:10:05:dc:fd:
19:ec:91:19:79:0f:65:de:27:66:31:27:15:b5:4d:a4:76:d3:
0b:8b:2e:ed:46:25:09:a2:16:7d:dd:12:b6:67:c6:d0:05:12:
76:c3:b7:bc:62:65:8a:98:93:e9:77:7e:b3:c6:28:a3:d7:08:
1d:c5:75:ca:a8:b2:28:e8:2f:0d:d9:1a:6a:33:9f:09:7c:42:
99:32:12:be:f4:7b:63:8d:86:36:1a:57:32:83:f6:28:21:2b:
6e:5e:a9:6c:52:f1:51:89:12:52:9a:68:26:75:10:c5:5f:2b:
f6:f1:87:b5:4e:2f:58:a7:75:f9:87:58:78:d6:ea:d4:99:37:
c9:3d:43:70:87:8d:d5:de:73:6a:5f:cd:81:e2:6f:6f:3f:a1:
59:b1:99:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:42:54 2025 by rpki-client