Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/961f64-837c-4811-aa42-58f215bca53a/1/TjQBh8D85f_wN87ZplCCQ-QE2nE.mft
File: TjQBh8D85f_wN87ZplCCQ-QE2nE.mft (raw, json)
Hash identifier: r2CC8n6dLq0ETh52LsJYsVxyXBY8TwcJWrW+fqmce98=
Subject key identifier: 23:50:73:A7:17:3B:6B:AB:70:FE:68:59:38:0F:62:D3:B3:76:FD:D9
Authority key identifier: 4E:34:01:87:C0:FC:E5:FF:F0:37:CE:D9:A6:50:82:43:E4:04:DA:71
Certificate issuer: /CN=4e340187c0fce5fff037ced9a6508243e404da71
Certificate serial: 019A72258D693AE6A30472A58E8CA0E19193
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TjQBh8D85f_wN87ZplCCQ-QE2nE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/961f64-837c-4811-aa42-58f215bca53a/1/TjQBh8D85f_wN87ZplCCQ-QE2nE.mft
Manifest number: 0A4B
Signing time: Tue 11 Nov 2025 09:00:54 +0000
Manifest this update: Tue 11 Nov 2025 09:00:54 +0000
Manifest next update: Wed 12 Nov 2025 09:00:54 +0000
Files and hashes: 1: CpuMVh4uJ1tcoj_OkQygaUN_hh8.roa (hash: yhnMpFW3oI3a8/KGPX3tjlLUQZvGsHrg1LJyUrjeFm8=)
2: TjQBh8D85f_wN87ZplCCQ-QE2nE.crl (hash: AqoMXOwh2j2QMdChUP4O54V/vKTJNlx7lCSvkwqzP0g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/961f64-837c-4811-aa42-58f215bca53a/1/TjQBh8D85f_wN87ZplCCQ-QE2nE.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/961f64-837c-4811-aa42-58f215bca53a/1/TjQBh8D85f_wN87ZplCCQ-QE2nE.mft
rsync://rpki.ripe.net/repository/DEFAULT/TjQBh8D85f_wN87ZplCCQ-QE2nE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:25:8d:69:3a:e6:a3:04:72:a5:8e:8c:a0:e1:91:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e340187c0fce5fff037ced9a6508243e404da71
Validity
Not Before: Nov 11 09:00:54 2025 GMT
Not After : Nov 12 09:00:54 2025 GMT
Subject: CN=235073a7173b6bab70fe6859380f62d3b376fdd9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:09:54:12:6d:79:07:e8:48:d0:67:26:72:a2:
4b:7e:c9:a4:fd:66:91:de:db:93:34:e3:0f:09:df:
50:d2:96:a5:00:31:62:2f:bd:49:94:67:0a:2b:d3:
db:74:21:8a:70:dd:69:1b:c1:58:e2:28:8a:22:ed:
6d:0b:0c:38:74:0c:31:01:95:3f:28:aa:6a:38:37:
ee:b0:cd:ba:8f:0c:ce:77:25:70:8c:92:65:84:7a:
9a:fe:9a:4c:89:df:3a:c5:c7:9b:31:bf:2a:23:a4:
22:8e:fc:f6:13:3c:5f:f7:0a:7c:d3:2f:af:17:c5:
a7:91:b3:9d:fa:0a:23:3d:c8:7a:2f:df:67:61:f3:
7d:3e:dd:90:7b:9d:5e:ce:fe:c5:6c:29:e4:75:30:
60:4a:3f:11:32:68:8c:03:5d:82:38:6b:58:77:bc:
51:f4:54:95:87:9d:65:dc:32:cb:c6:f5:a5:c7:f0:
a7:cf:79:b3:b8:78:53:d1:15:7d:07:71:86:df:2e:
00:65:5d:7e:a9:4e:0d:9a:bb:c1:d4:47:1e:ec:e5:
16:22:e6:c7:76:54:49:32:64:f6:12:92:c2:40:77:
7c:54:4e:f9:3d:2e:d7:c2:fb:b9:a9:25:23:0e:fd:
b1:aa:9f:2b:4c:d4:62:74:e7:e5:54:16:1a:9d:0a:
ca:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:50:73:A7:17:3B:6B:AB:70:FE:68:59:38:0F:62:D3:B3:76:FD:D9
X509v3 Authority Key Identifier:
keyid:4E:34:01:87:C0:FC:E5:FF:F0:37:CE:D9:A6:50:82:43:E4:04:DA:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TjQBh8D85f_wN87ZplCCQ-QE2nE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/961f64-837c-4811-aa42-58f215bca53a/1/TjQBh8D85f_wN87ZplCCQ-QE2nE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/961f64-837c-4811-aa42-58f215bca53a/1/TjQBh8D85f_wN87ZplCCQ-QE2nE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:ef:ce:b1:b9:6a:9c:f5:ed:4b:65:2d:02:00:b6:0e:b4:3b:
9c:4e:be:62:e8:3f:87:7e:80:93:0c:fd:20:65:3b:c3:47:9e:
d1:2b:ff:42:4c:1d:8a:5f:d2:fe:90:26:41:89:b7:70:54:f6:
e9:01:d2:93:f9:f1:62:4b:96:d0:35:6e:98:8d:a3:d8:87:86:
a3:38:9e:f9:34:78:d5:d8:8b:3a:71:a1:4f:73:ec:61:32:f6:
cc:05:a1:25:c9:1e:ad:95:56:d1:57:1f:3d:8c:a1:9c:04:e0:
88:11:72:ec:5e:c3:2a:31:30:d3:fb:52:a8:ab:f8:e2:f9:56:
d7:01:0d:3d:f5:9a:06:0e:ea:ec:c7:85:a4:06:2c:af:3f:28:
73:1c:61:24:e2:a9:1b:d0:c7:de:4e:45:43:02:2f:e9:64:e9:
0e:95:f4:78:34:ca:00:88:30:33:73:c3:93:e4:f7:d0:81:32:
c2:77:23:d8:4c:ba:2c:d4:cc:24:96:fc:97:0c:8f:96:13:cd:
d3:5e:dd:fa:d9:84:00:c8:d8:dc:8b:aa:a9:1b:30:87:58:f7:
70:1f:dc:96:35:6c:92:1f:5f:95:ee:69:fe:91:ce:f8:06:30:
82:eb:a3:52:6d:aa:82:29:d2:fe:a0:04:bc:5e:41:36:65:29:
38:c0:d9:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:47:41 2025 by rpki-client