Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/7358bd-c72f-4d9b-bb0d-0b4f717aa363/1/TVg7b1bPCSco3lk62VKuoZzjGIY.mft
File: TVg7b1bPCSco3lk62VKuoZzjGIY.mft (raw, json)
Hash identifier: a7Te6P0C6QnpIsQVI7wxF+wKwrvtqTm+uxMZfFR/glA=
Subject key identifier: 72:6F:81:9F:6A:D1:32:57:3F:6E:C0:26:BD:01:48:C4:95:A7:45:B7
Authority key identifier: 4D:58:3B:6F:56:CF:09:27:28:DE:59:3A:D9:52:AE:A1:9C:E3:18:86
Certificate issuer: /CN=4d583b6f56cf092728de593ad952aea19ce31886
Certificate serial: 019A2E20A582E624FE12E596CF39B0299051
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TVg7b1bPCSco3lk62VKuoZzjGIY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/7358bd-c72f-4d9b-bb0d-0b4f717aa363/1/TVg7b1bPCSco3lk62VKuoZzjGIY.mft
Manifest number: 1652
Signing time: Wed 29 Oct 2025 04:01:22 +0000
Manifest this update: Wed 29 Oct 2025 04:01:22 +0000
Manifest next update: Thu 30 Oct 2025 04:01:22 +0000
Files and hashes: 1: TVg7b1bPCSco3lk62VKuoZzjGIY.crl (hash: J26LBBYC2TW5Yu29ludbcYLT+8IUPVSGfrdf4VyzC9w=)
2: bOLohqMKHagd_oJ4fhpVo7NmmeM.roa (hash: zc2jSYa3eGI9kHGQfF97SUcixmU4Ya6CBO+chtxYjPg=)
3: rAEXG8LVncu-VzH6pWQ3O-v7vJk.roa (hash: pHtLRGskuQm7vCqkOegxgViLMoHSueDTg44n3jic3FY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/7358bd-c72f-4d9b-bb0d-0b4f717aa363/1/TVg7b1bPCSco3lk62VKuoZzjGIY.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/7358bd-c72f-4d9b-bb0d-0b4f717aa363/1/TVg7b1bPCSco3lk62VKuoZzjGIY.mft
rsync://rpki.ripe.net/repository/DEFAULT/TVg7b1bPCSco3lk62VKuoZzjGIY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:2e:20:a5:82:e6:24:fe:12:e5:96:cf:39:b0:29:90:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d583b6f56cf092728de593ad952aea19ce31886
Validity
Not Before: Oct 29 04:01:22 2025 GMT
Not After : Oct 30 04:01:22 2025 GMT
Subject: CN=726f819f6ad132573f6ec026bd0148c495a745b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:a5:7e:3c:20:46:bb:2c:87:76:c3:92:53:75:
3d:a4:a8:3d:a8:68:2b:4a:1d:2d:95:15:3c:1a:a3:
cb:00:9c:58:7b:dc:e2:7a:1e:d7:aa:17:4c:a6:0b:
7d:1c:fd:95:c9:38:91:1c:8d:ad:32:f0:ec:d1:86:
56:a2:3a:e8:2e:17:80:39:23:c2:d6:d1:49:da:03:
52:12:de:2d:89:cc:6d:db:88:b6:db:bd:da:8c:6d:
1f:f6:be:7c:5a:b5:81:10:4d:3a:8b:0a:eb:fe:84:
11:0a:ca:9f:9c:2a:1e:33:34:fc:63:73:69:fe:9a:
bf:9c:2d:35:2f:24:6a:8f:a9:e8:b7:6e:6d:4d:5c:
bf:24:3a:ec:50:fa:c1:b5:aa:75:05:62:eb:82:2d:
12:1f:a6:7a:28:5f:9f:e5:ae:71:6a:6e:a2:51:25:
d0:75:6b:a8:be:c8:1a:86:44:d7:57:ba:6b:a8:3f:
c1:5b:a4:54:d1:52:62:b2:97:01:01:c7:7b:1c:c0:
61:54:5f:3b:1c:ce:59:be:9b:9f:21:5f:7a:54:66:
da:d7:d6:6b:c3:c1:1b:e4:1b:44:2e:32:22:48:03:
08:96:87:5e:dc:87:a9:46:7f:c7:02:62:8f:eb:68:
30:8c:28:0a:18:46:52:d8:89:c7:99:28:0a:4d:83:
a4:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:6F:81:9F:6A:D1:32:57:3F:6E:C0:26:BD:01:48:C4:95:A7:45:B7
X509v3 Authority Key Identifier:
keyid:4D:58:3B:6F:56:CF:09:27:28:DE:59:3A:D9:52:AE:A1:9C:E3:18:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TVg7b1bPCSco3lk62VKuoZzjGIY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/7358bd-c72f-4d9b-bb0d-0b4f717aa363/1/TVg7b1bPCSco3lk62VKuoZzjGIY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/7358bd-c72f-4d9b-bb0d-0b4f717aa363/1/TVg7b1bPCSco3lk62VKuoZzjGIY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:76:82:18:c8:56:6c:9e:1f:3e:43:84:41:5e:69:db:12:71:
9e:a0:36:5b:0b:f9:71:34:86:d0:2b:9b:8d:e6:b1:b7:54:e2:
6e:13:e8:a6:61:2a:ac:af:14:c1:1b:09:cc:05:20:a4:96:bf:
59:f2:ed:db:2c:71:16:67:78:0c:50:97:24:da:98:72:25:53:
84:13:3c:9a:81:83:1e:2a:6a:63:0f:1f:11:ec:d1:d2:35:05:
e1:a8:32:63:be:fa:c0:84:ac:1f:b3:5f:cb:61:91:e0:8e:7e:
9c:08:9a:74:ae:f3:e5:a1:c4:9b:5e:2d:34:6b:da:a1:59:dd:
3d:df:17:f0:6d:37:fb:75:b3:be:c5:9c:9f:db:87:b1:f7:b8:
a3:09:90:10:2c:1c:23:15:8c:6b:2a:63:6f:98:f0:32:9c:44:
9f:d7:64:bb:78:f4:f7:e5:18:77:cf:d4:88:25:5b:88:77:fc:
a5:73:a0:46:a5:d2:6a:35:ec:3c:cc:6f:b7:aa:33:09:91:1e:
de:cf:42:b3:8e:ec:2f:e5:4e:4b:dc:bd:59:38:2c:36:23:79:
58:19:eb:c6:4d:6c:4d:37:44:b2:31:1a:71:d6:46:b1:20:db:
02:65:31:4a:d4:c1:11:57:32:f6:f4:3e:4d:e8:3a:eb:89:5e:
f8:c8:67:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 29 06:37:23 2025 by rpki-client