Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/8008fe-175b-41bf-b1d6-2ce0eb458788/1/TFFjb96QX4Uh9BFHnoEyHNz0kEk.mft
File: TFFjb96QX4Uh9BFHnoEyHNz0kEk.mft (raw, json)
Hash identifier: phwNPkOcdCIgOjkjbqw8s77EHR5bsQJi1Y8v+iyNZA0=
Subject key identifier: AF:60:56:49:30:DC:3E:25:5C:68:19:0C:50:75:77:63:FC:81:DF:27
Authority key identifier: 4C:51:63:6F:DE:90:5F:85:21:F4:11:47:9E:81:32:1C:DC:F4:90:49
Certificate issuer: /CN=4c51636fde905f8521f411479e81321cdcf49049
Certificate serial: 019A71B94AFF6AECB08CA46E2D5938874513
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TFFjb96QX4Uh9BFHnoEyHNz0kEk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/8008fe-175b-41bf-b1d6-2ce0eb458788/1/TFFjb96QX4Uh9BFHnoEyHNz0kEk.mft
Manifest number: 09AF
Signing time: Tue 11 Nov 2025 07:02:40 +0000
Manifest this update: Tue 11 Nov 2025 07:02:40 +0000
Manifest next update: Wed 12 Nov 2025 07:02:40 +0000
Files and hashes: 1: TFFjb96QX4Uh9BFHnoEyHNz0kEk.crl (hash: kVS7A5FOxUvxGHEqBjI3O6Y8JU+NJkIP2lLpjVmu4ig=)
2: k88eKZ3ggVkstFfz6v9jAollFdM.roa (hash: RToXutf5Qdv2Y+G73kPgZr6gfiGthSFW8G2eqnaoH64=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/8008fe-175b-41bf-b1d6-2ce0eb458788/1/TFFjb96QX4Uh9BFHnoEyHNz0kEk.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/8008fe-175b-41bf-b1d6-2ce0eb458788/1/TFFjb96QX4Uh9BFHnoEyHNz0kEk.mft
rsync://rpki.ripe.net/repository/DEFAULT/TFFjb96QX4Uh9BFHnoEyHNz0kEk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b9:4a:ff:6a:ec:b0:8c:a4:6e:2d:59:38:87:45:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c51636fde905f8521f411479e81321cdcf49049
Validity
Not Before: Nov 11 07:02:40 2025 GMT
Not After : Nov 12 07:02:40 2025 GMT
Subject: CN=af60564930dc3e255c68190c50757763fc81df27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:30:5f:3c:85:a4:8a:22:8d:0b:07:7f:24:5c:
01:45:8e:f8:1e:3b:24:39:a5:41:65:c9:39:5b:39:
6b:35:33:60:e1:56:a9:58:16:e0:06:d6:2c:53:7c:
97:52:5f:2d:ff:bd:74:9c:cf:f9:3a:57:98:43:e7:
2b:24:3b:eb:7a:a9:f0:22:66:d3:80:4c:b8:46:6b:
c4:ac:7f:fe:fd:1d:74:ee:d1:64:fe:11:bc:ad:c0:
da:94:51:0a:b7:f4:8e:f7:13:6c:3e:36:86:26:2c:
83:d7:cb:75:2a:21:c9:dc:ca:6d:58:cf:3b:bf:80:
a8:e7:e1:9c:b2:94:50:92:82:cc:d5:04:c1:4d:89:
b7:88:75:14:fd:b4:09:c4:6f:d6:a6:d1:1f:1e:f4:
33:3d:bc:16:94:b8:aa:68:1c:81:67:e4:59:97:1b:
67:e3:12:33:89:ea:a5:ef:69:80:1b:02:b6:d9:c1:
74:94:8b:0b:e5:90:53:4c:43:43:2d:79:83:f4:a1:
86:f4:d1:26:14:d2:24:a8:12:f1:d9:32:7d:c5:bb:
d2:d3:80:59:89:ac:0e:c3:53:49:46:2f:2e:27:33:
6e:95:d6:2f:33:b8:2f:62:db:f5:c8:bc:82:d0:e7:
d1:32:f7:51:f4:66:a2:87:e3:f7:33:bd:48:3e:6d:
03:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:60:56:49:30:DC:3E:25:5C:68:19:0C:50:75:77:63:FC:81:DF:27
X509v3 Authority Key Identifier:
keyid:4C:51:63:6F:DE:90:5F:85:21:F4:11:47:9E:81:32:1C:DC:F4:90:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TFFjb96QX4Uh9BFHnoEyHNz0kEk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/8008fe-175b-41bf-b1d6-2ce0eb458788/1/TFFjb96QX4Uh9BFHnoEyHNz0kEk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/8008fe-175b-41bf-b1d6-2ce0eb458788/1/TFFjb96QX4Uh9BFHnoEyHNz0kEk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d1:c0:38:c9:43:66:f1:47:0d:bc:f7:99:cd:59:b0:c9:ab:31:
18:97:95:5f:0e:82:e9:a7:8b:60:fe:c9:4e:99:63:10:0b:f2:
0c:e9:a5:48:10:d9:bd:2e:99:f8:77:80:9c:40:7d:c7:f8:39:
72:b6:56:69:9f:4d:b2:13:bd:02:77:b8:dc:25:2c:fe:04:5a:
9e:31:99:6b:47:7f:4c:44:dc:19:68:b4:54:04:92:c5:d1:f0:
d9:40:61:e1:69:9e:82:47:a3:ef:ac:3e:78:a6:2a:bf:ee:59:
db:d2:ab:bf:df:82:92:ec:ce:7e:56:e9:56:c5:84:fc:c4:73:
7b:70:d9:dc:f0:f6:3d:1d:bf:59:2b:a1:74:01:ef:64:28:95:
66:01:17:21:02:cd:da:00:48:c3:13:80:b6:f0:a6:98:57:d5:
32:11:76:1c:b5:c7:9b:71:6f:e4:e6:a0:d5:ce:bd:e7:3a:8c:
40:64:5a:d3:52:6e:bc:39:bf:33:3c:14:75:2a:86:d2:b7:70:
09:6c:28:f5:f2:9d:3d:6f:bd:12:6c:eb:74:3d:c3:f0:b9:e2:
33:4c:56:99:e6:3c:48:e6:70:30:18:36:09:af:86:6f:c1:c3:
cc:ef:e7:1e:b7:97:8b:99:99:b6:e7:1a:d3:55:68:0c:6f:5f:
88:54:e4:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:35:11 2025 by rpki-client