Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/a3baca-437d-4607-9c1a-557a4c31e02e/1/tMQeWYNNphLYPKJBlPAsptdgJEg.mft
File: tMQeWYNNphLYPKJBlPAsptdgJEg.mft (raw, json)
Hash identifier: TWDa9Zm4NrcCe/2TcMeXfg6tzTAvGTK6Np+WI1yWVYQ=
Subject key identifier: E4:AC:5B:BB:B0:E2:CD:B6:09:42:47:17:9E:0F:22:49:35:28:63:49
Authority key identifier: B4:C4:1E:59:83:4D:A6:12:D8:3C:A2:41:94:F0:2C:A6:D7:60:24:48
Certificate issuer: /CN=b4c41e59834da612d83ca24194f02ca6d7602448
Certificate serial: 019A71B80647C06752469A93F1D09D9985AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tMQeWYNNphLYPKJBlPAsptdgJEg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/a3baca-437d-4607-9c1a-557a4c31e02e/1/tMQeWYNNphLYPKJBlPAsptdgJEg.mft
Manifest number: 0544
Signing time: Tue 11 Nov 2025 07:01:16 +0000
Manifest this update: Tue 11 Nov 2025 07:01:16 +0000
Manifest next update: Wed 12 Nov 2025 07:01:16 +0000
Files and hashes: 1: hrqEKTykKr09BUd_K3mCMU0oC6Q.roa (hash: pufSFJ+QVHIcFkxQwEPRtygVlxFuvFk+kfnkYeAvjWg=)
2: tMQeWYNNphLYPKJBlPAsptdgJEg.crl (hash: +oqtNARjzJZMxFNgNGiq8ssgjrWyrQxscWMdygXzOzY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/a3baca-437d-4607-9c1a-557a4c31e02e/1/tMQeWYNNphLYPKJBlPAsptdgJEg.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/a3baca-437d-4607-9c1a-557a4c31e02e/1/tMQeWYNNphLYPKJBlPAsptdgJEg.mft
rsync://rpki.ripe.net/repository/DEFAULT/tMQeWYNNphLYPKJBlPAsptdgJEg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:06:47:c0:67:52:46:9a:93:f1:d0:9d:99:85:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4c41e59834da612d83ca24194f02ca6d7602448
Validity
Not Before: Nov 11 07:01:16 2025 GMT
Not After : Nov 12 07:01:16 2025 GMT
Subject: CN=e4ac5bbbb0e2cdb6094247179e0f224935286349
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:3f:a1:64:a0:24:c6:37:4d:8b:9f:84:52:ae:
02:80:94:ce:78:e1:06:40:f3:25:72:fc:71:89:43:
a8:a7:7d:88:cc:5f:40:e8:cb:58:b3:13:b1:c5:ab:
66:57:90:0a:d8:db:6e:9a:82:4e:2f:e1:50:f4:59:
b4:55:cc:3e:32:53:28:b8:fb:dc:31:d9:67:b1:40:
69:5a:47:e3:e0:4e:3e:d5:56:d2:4e:db:54:3a:97:
92:7b:83:8a:95:ba:54:98:3f:57:a9:eb:80:af:44:
69:f2:bf:73:c2:6f:7d:8d:bc:29:d2:b9:a8:27:3a:
02:f2:4a:71:44:44:3c:7c:05:b7:bf:4e:44:bb:04:
8c:82:58:c2:da:01:7a:22:85:8e:d9:23:d3:ee:39:
05:3a:bb:a5:f2:e3:d0:72:58:db:2f:5c:6b:1b:28:
ef:cf:3b:4c:a9:ee:c8:92:1a:8a:f6:18:46:6d:ae:
07:33:12:8f:cf:05:9c:5f:38:33:45:af:b3:09:55:
b9:23:7e:2d:45:86:8a:d5:e3:ee:5d:20:0c:b4:71:
a4:96:3d:5b:da:2a:92:f3:74:35:07:c7:de:47:69:
0e:fd:43:ab:7c:b6:58:29:af:00:ce:54:c0:1b:9a:
08:fb:96:6a:57:1b:42:ad:b5:2e:ad:f7:be:d5:1e:
91:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:AC:5B:BB:B0:E2:CD:B6:09:42:47:17:9E:0F:22:49:35:28:63:49
X509v3 Authority Key Identifier:
keyid:B4:C4:1E:59:83:4D:A6:12:D8:3C:A2:41:94:F0:2C:A6:D7:60:24:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tMQeWYNNphLYPKJBlPAsptdgJEg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/a3baca-437d-4607-9c1a-557a4c31e02e/1/tMQeWYNNphLYPKJBlPAsptdgJEg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/a3baca-437d-4607-9c1a-557a4c31e02e/1/tMQeWYNNphLYPKJBlPAsptdgJEg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:44:26:96:08:86:cf:4e:94:e7:a5:7b:d0:cf:97:23:30:3d:
47:5f:38:07:12:69:17:e2:88:71:cd:74:93:c8:bf:44:ed:7e:
fd:f4:47:8c:60:66:61:e8:cd:47:9f:f5:47:d5:2e:e1:80:2d:
09:5a:73:89:8c:24:04:f6:9f:2e:c0:cc:0d:f8:f5:45:3a:37:
50:ed:c5:94:ab:1e:9e:88:0f:6f:d0:f2:a9:39:6f:91:a0:72:
a2:ed:1a:fd:8a:bc:ed:79:58:49:e0:b3:5a:5a:07:75:1f:69:
e1:02:8f:88:12:b4:a9:26:5c:b1:d7:dc:7e:6c:ae:a7:4d:52:
12:0b:c4:66:40:b5:a6:f4:1b:d6:da:56:f4:67:d1:f3:1a:11:
3b:03:e0:ce:13:de:86:76:2e:c2:7d:71:08:47:06:04:f0:11:
92:4a:30:28:41:75:81:c9:0c:5b:5d:2b:e5:ca:ba:16:ff:b0:
a5:ac:e3:3a:65:a6:cc:7b:34:f3:b3:76:37:7d:18:df:f3:5d:
e5:3a:83:27:e4:b8:8b:16:a5:05:18:64:32:a2:cb:0e:a8:30:
1d:ba:db:0e:2c:8a:13:8f:dc:e1:13:9e:26:35:17:b0:4a:88:
a9:1e:bf:b3:50:8e:bf:f3:a3:78:1f:21:c5:e6:e1:23:65:4b:
91:4b:c7:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:33:53 2025 by rpki-client