Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/02c5ec-7c6f-4ae2-9897-3059c89b72ea/1/TFTszmy8nFSSnqpLIrM3sP2bNr8.mft
File: TFTszmy8nFSSnqpLIrM3sP2bNr8.mft (raw, json)
Hash identifier: ToU8LNzO8Vf/amO/+PVO+45ytAo41wtPuTUeML/nR1A=
Subject key identifier: D8:8D:86:B1:F9:9F:C6:07:B8:17:D0:A4:F5:01:CA:E2:86:B5:01:F0
Authority key identifier: 4C:54:EC:CE:6C:BC:9C:54:92:9E:AA:4B:22:B3:37:B0:FD:9B:36:BF
Certificate issuer: /CN=4c54ecce6cbc9c54929eaa4b22b337b0fd9b36bf
Certificate serial: 019A54515990E3ABDFC14AEE3EBA96A525ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TFTszmy8nFSSnqpLIrM3sP2bNr8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/02c5ec-7c6f-4ae2-9897-3059c89b72ea/1/TFTszmy8nFSSnqpLIrM3sP2bNr8.mft
Manifest number: 1711
Signing time: Wed 05 Nov 2025 14:00:08 +0000
Manifest this update: Wed 05 Nov 2025 14:00:08 +0000
Manifest next update: Thu 06 Nov 2025 14:00:08 +0000
Files and hashes: 1: FthrDhWKQKwEzNN5rbEKo0Gle9U.roa (hash: g0UDkg5eszKLKNeW9Nu0ccpcl/R27yXYXJn3G2Co7Z4=)
2: TFTszmy8nFSSnqpLIrM3sP2bNr8.crl (hash: 9F1N/SQ1XxjqueTbVw0+QPnNqGhK3J6yHdpwe9snZTo=)
3: eHPqpiMAvfqI-We9VzdWjZPR_bY.roa (hash: 2EtKDvjgQC4QGGaHfks3HUfVQC7NvALc/OB3oROL6rM=)
4: ePZ7Yuu3-_aTMfNEBfmL4fdhXII.roa (hash: ho6FnqARFfeawc2fVl+6U/A9evk5Ck/9UluGTSWRaEw=)
5: jEFUKY2bhw_vuBM1OshauBn8mvg.roa (hash: ZeWPCxGU+ldLXwfBechPAx21XNMieJ0auUVK9LjYs/8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/02c5ec-7c6f-4ae2-9897-3059c89b72ea/1/TFTszmy8nFSSnqpLIrM3sP2bNr8.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/02c5ec-7c6f-4ae2-9897-3059c89b72ea/1/TFTszmy8nFSSnqpLIrM3sP2bNr8.mft
rsync://rpki.ripe.net/repository/DEFAULT/TFTszmy8nFSSnqpLIrM3sP2bNr8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:54:51:59:90:e3:ab:df:c1:4a:ee:3e:ba:96:a5:25:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c54ecce6cbc9c54929eaa4b22b337b0fd9b36bf
Validity
Not Before: Nov 5 14:00:08 2025 GMT
Not After : Nov 6 14:00:08 2025 GMT
Subject: CN=d88d86b1f99fc607b817d0a4f501cae286b501f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:96:41:0b:db:28:77:d9:6f:e7:54:c1:47:e0:
08:3b:ff:80:84:c2:be:f2:a9:50:04:d5:99:4b:f1:
d1:8c:dd:2e:a7:f3:95:45:47:18:b7:f4:f6:92:7d:
15:70:3e:0f:f2:f2:8f:32:04:87:c4:99:c3:ee:2b:
99:28:53:e4:a7:fd:39:f2:37:09:b7:68:db:98:c1:
fd:4a:38:4f:66:ee:63:4c:e9:c9:34:49:49:93:61:
e6:85:bf:a0:fa:52:6f:ad:dc:08:03:d4:94:d2:4a:
2e:d8:ca:10:f0:47:f6:94:13:41:13:48:6d:8e:dc:
79:f7:ac:58:1b:e4:11:74:0b:78:a4:bc:55:c2:8d:
f1:4b:a6:ac:08:7f:3e:09:3a:ba:3f:09:dc:3a:3b:
e3:f4:33:69:01:f4:41:95:7e:22:4b:de:40:fd:0a:
73:cd:e6:61:92:2c:ca:b8:fb:62:56:2c:81:92:54:
fb:7c:68:dc:bc:cd:f6:99:3f:10:87:dc:9d:ce:03:
ed:3e:88:12:ec:74:f1:fb:87:3f:dd:fa:78:18:d5:
4d:6c:2b:6c:45:7f:a3:91:cb:71:1b:71:4c:7e:f5:
f8:48:22:a1:ec:67:33:cb:6a:31:80:9b:2c:ac:f3:
17:28:5b:34:bd:ed:01:4a:d1:30:90:27:1f:68:90:
29:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:8D:86:B1:F9:9F:C6:07:B8:17:D0:A4:F5:01:CA:E2:86:B5:01:F0
X509v3 Authority Key Identifier:
keyid:4C:54:EC:CE:6C:BC:9C:54:92:9E:AA:4B:22:B3:37:B0:FD:9B:36:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TFTszmy8nFSSnqpLIrM3sP2bNr8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/02c5ec-7c6f-4ae2-9897-3059c89b72ea/1/TFTszmy8nFSSnqpLIrM3sP2bNr8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/02c5ec-7c6f-4ae2-9897-3059c89b72ea/1/TFTszmy8nFSSnqpLIrM3sP2bNr8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:08:0d:72:cf:5e:28:18:58:78:e0:9c:c0:f1:71:ca:4c:d2:
58:af:73:3a:91:66:00:75:78:a2:4b:be:57:c5:a4:4c:f8:47:
ae:8d:ba:79:cb:e7:f2:09:2c:05:e0:0b:f3:91:da:b8:e9:9f:
33:59:aa:b3:24:4b:82:f0:df:6b:0d:f6:19:64:c0:97:45:d8:
5e:80:87:4f:f3:fc:2b:d0:b6:d1:8e:ff:fd:20:cc:09:f4:71:
ec:39:87:0c:01:23:a4:3d:14:2c:9e:ff:b0:89:a2:c1:23:d5:
b0:1a:e6:23:ba:f7:7a:a6:43:1f:3f:ce:04:42:8f:c4:c5:b5:
d0:b5:8c:5a:79:7e:21:73:9e:0d:f5:9b:3b:8b:ee:46:b9:44:
77:a0:0c:a0:4a:47:4e:ca:fc:ab:d7:37:62:e1:b0:1f:a2:8d:
ff:50:fb:74:b9:4b:9d:47:6c:6a:89:4d:af:e0:55:05:aa:bb:
76:e9:81:de:56:34:17:7a:fa:e2:a6:27:97:9b:87:01:2d:7c:
2f:df:34:e6:08:4f:76:03:0e:31:0b:ad:7a:b7:39:06:96:b5:
3b:7d:65:fc:f0:c3:ff:eb:8b:30:c7:43:f0:5a:a1:06:2a:d0:
bb:c9:13:27:9e:7d:2d:20:36:47:67:ed:ed:2b:fa:cb:83:cc:
4d:4b:a5:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 21:10:26 2025 by rpki-client