Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/5687c1-df9f-4ae5-a4cc-ec03ebd19000/1/TIp4hmYiVL456hrdcnKOAA6ywlo.mft
File: TIp4hmYiVL456hrdcnKOAA6ywlo.mft (raw, json)
Hash identifier: U79qC+3LBGvJwoQR5tJx5lcZVIthr4pWmWyRQa6QU9U=
Subject key identifier: 91:6C:B1:7D:C7:C5:C1:20:13:E5:FB:E7:C7:3F:83:EA:29:F3:05:EB
Authority key identifier: 4C:8A:78:86:66:22:54:BE:39:EA:1A:DD:72:72:8E:00:0E:B2:C2:5A
Certificate issuer: /CN=4c8a7886662254be39ea1add72728e000eb2c25a
Certificate serial: 019A300E4D50A6004A3F77EA62EE311FE192
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TIp4hmYiVL456hrdcnKOAA6ywlo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/5687c1-df9f-4ae5-a4cc-ec03ebd19000/1/TIp4hmYiVL456hrdcnKOAA6ywlo.mft
Manifest number: 1700
Signing time: Wed 29 Oct 2025 13:00:34 +0000
Manifest this update: Wed 29 Oct 2025 13:00:34 +0000
Manifest next update: Thu 30 Oct 2025 13:00:34 +0000
Files and hashes: 1: JjwEZWBFYdro1bclN7oB-fRyAwA.roa (hash: k4IvqBYPxW6gaMsyO55esYb4IVeV/xHT6lju64eLGfA=)
2: TIp4hmYiVL456hrdcnKOAA6ywlo.crl (hash: bGpxxBigdLY+ZG9idGNzICVbSrcewWJd8xF26lqpEFE=)
3: a9wio39nY7HA5Emvyn8dQazuTJQ.roa (hash: NmO/lOJq3pD1F19fAJROTywj9iP7yhDSrwvmQCnkS38=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/5687c1-df9f-4ae5-a4cc-ec03ebd19000/1/TIp4hmYiVL456hrdcnKOAA6ywlo.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/5687c1-df9f-4ae5-a4cc-ec03ebd19000/1/TIp4hmYiVL456hrdcnKOAA6ywlo.mft
rsync://rpki.ripe.net/repository/DEFAULT/TIp4hmYiVL456hrdcnKOAA6ywlo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Oct 2025 13:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:30:0e:4d:50:a6:00:4a:3f:77:ea:62:ee:31:1f:e1:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c8a7886662254be39ea1add72728e000eb2c25a
Validity
Not Before: Oct 29 13:00:34 2025 GMT
Not After : Oct 30 13:00:34 2025 GMT
Subject: CN=916cb17dc7c5c12013e5fbe7c73f83ea29f305eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:40:4d:49:bd:21:a1:4d:4b:f9:fc:58:4e:cf:
11:0c:c0:08:50:40:d5:16:77:27:55:75:f8:10:8d:
74:96:21:87:23:d5:17:35:94:cb:d8:f5:b9:93:88:
77:ef:aa:0a:dc:f1:25:4f:08:fc:75:44:20:2e:aa:
0e:6b:41:f3:a7:84:dc:bc:18:9d:97:77:54:8b:98:
09:b4:d1:27:96:37:1f:60:01:67:79:4d:b7:cf:81:
ba:d9:63:78:c2:47:8c:e0:3f:ad:68:b4:5c:02:a1:
15:b9:65:4f:dd:7c:4f:16:8a:5e:95:73:9f:9c:a2:
35:ef:77:48:f0:78:63:5b:6d:c5:5c:1b:ec:63:4c:
36:00:f8:f8:17:dc:9d:ee:d4:fb:08:7b:59:d5:36:
f6:30:a1:62:fe:6e:6d:d1:29:c0:b6:b7:58:df:8b:
03:5d:c8:71:2f:d9:a4:1b:54:3b:bb:07:8a:40:4a:
82:95:9b:f7:8a:17:63:81:a2:de:b7:30:50:e4:59:
94:73:df:70:2a:5a:f6:dc:3a:d6:12:6f:2b:5c:f3:
36:d7:c7:b5:6f:4a:eb:cd:ee:c4:56:a7:22:1d:11:
64:8f:9b:92:c8:fa:1b:d3:05:e0:53:69:5d:e7:a6:
f5:e2:5b:1a:10:12:0a:e0:ac:a6:3e:22:1a:ba:39:
f8:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:6C:B1:7D:C7:C5:C1:20:13:E5:FB:E7:C7:3F:83:EA:29:F3:05:EB
X509v3 Authority Key Identifier:
keyid:4C:8A:78:86:66:22:54:BE:39:EA:1A:DD:72:72:8E:00:0E:B2:C2:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TIp4hmYiVL456hrdcnKOAA6ywlo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/5687c1-df9f-4ae5-a4cc-ec03ebd19000/1/TIp4hmYiVL456hrdcnKOAA6ywlo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/5687c1-df9f-4ae5-a4cc-ec03ebd19000/1/TIp4hmYiVL456hrdcnKOAA6ywlo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:de:f6:14:13:4b:69:bc:fd:77:0e:5b:4e:1e:de:97:74:a4:
f4:06:cd:54:5b:6a:86:b4:03:8c:91:ce:16:6c:56:b5:c5:0f:
5c:48:80:2c:01:9a:7f:64:5a:ad:2a:80:b9:4b:07:6a:1d:e3:
94:81:66:c3:2f:c6:a7:3a:b0:ad:f4:28:0e:2f:40:a1:e7:23:
4f:a0:ba:dd:18:22:a2:3c:1b:00:f8:11:53:86:ae:81:93:cc:
26:f6:ce:1e:67:b8:77:9c:3f:6e:3c:63:20:66:b5:31:9a:01:
db:24:70:53:d0:9f:90:cc:e2:40:aa:4a:af:c4:0f:f5:c5:6c:
5b:a6:1c:7a:5d:4e:44:b9:97:0c:50:38:54:82:9b:d2:ea:f1:
c6:e0:b3:98:8f:f6:37:15:9e:f9:91:4c:86:03:da:83:cc:0a:
9b:b4:29:da:09:fa:98:a8:54:e5:b0:10:9c:05:d6:57:c3:20:
d5:f2:46:5f:f0:3e:3c:bc:b0:16:27:4f:2f:1e:13:92:20:2a:
17:1c:4b:88:e3:f8:64:31:8a:5f:7b:cc:a4:cd:11:d9:52:6c:
91:c7:46:dc:d7:f6:87:1f:75:42:5a:51:a8:f9:02:e1:bb:66:
81:29:28:ae:10:48:9a:88:90:c6:21:26:5c:c3:75:4b:c9:74:
8c:85:32:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 29 18:31:09 2025 by rpki-client