Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/b3961c-3f68-45c1-a04e-95469bf09340/1/To25ZDiURsq8r3lBzRmDQsIzbdA.mft
File: To25ZDiURsq8r3lBzRmDQsIzbdA.mft (raw, json)
Hash identifier: BhFL3Y7RldqkCMAku8XV5AEgboCx5emgbqeMiIBBZuM=
Subject key identifier: 4B:64:9D:21:C6:03:13:84:65:E0:4D:58:A0:13:F3:49:56:39:0A:C6
Authority key identifier: 4E:8D:B9:64:38:94:46:CA:BC:AF:79:41:CD:19:83:42:C2:33:6D:D0
Certificate issuer: /CN=4e8db964389446cabcaf7941cd198342c2336dd0
Certificate serial: 019A70DBDE08F91FD3F131BCFA4FCB66A1E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/To25ZDiURsq8r3lBzRmDQsIzbdA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/b3961c-3f68-45c1-a04e-95469bf09340/1/To25ZDiURsq8r3lBzRmDQsIzbdA.mft
Manifest number: 08D0
Signing time: Tue 11 Nov 2025 03:00:48 +0000
Manifest this update: Tue 11 Nov 2025 03:00:48 +0000
Manifest next update: Wed 12 Nov 2025 03:00:48 +0000
Files and hashes: 1: To25ZDiURsq8r3lBzRmDQsIzbdA.crl (hash: nbBQy2jUpZoeMrjQ2KbgCchJnJOuPynxHaV/Sx5QYPA=)
2: Z5QHoKQNr7K3ZZ1_pXiHs3_16g8.roa (hash: /CZOibzm07xlRo0dBVlbyqc4APuq7TkYKFvaBHtU91A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/b3961c-3f68-45c1-a04e-95469bf09340/1/To25ZDiURsq8r3lBzRmDQsIzbdA.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/b3961c-3f68-45c1-a04e-95469bf09340/1/To25ZDiURsq8r3lBzRmDQsIzbdA.mft
rsync://rpki.ripe.net/repository/DEFAULT/To25ZDiURsq8r3lBzRmDQsIzbdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 03:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:db:de:08:f9:1f:d3:f1:31:bc:fa:4f:cb:66:a1:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e8db964389446cabcaf7941cd198342c2336dd0
Validity
Not Before: Nov 11 03:00:48 2025 GMT
Not After : Nov 12 03:00:48 2025 GMT
Subject: CN=4b649d21c603138465e04d58a013f34956390ac6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:3f:4e:bd:0a:d8:63:5f:35:1d:a4:55:2f:3d:
24:9e:98:f3:9c:b3:28:04:9f:80:e1:a1:9b:7f:c1:
d8:d9:cd:4d:a3:39:c2:18:f4:67:ac:1a:83:80:88:
73:39:93:d5:f4:51:71:39:d4:29:54:f6:18:34:9d:
15:c5:2d:7c:c0:18:54:22:f2:88:73:9b:7c:8f:08:
dd:58:2c:bb:ca:83:f5:52:43:0b:47:da:5b:f2:41:
0e:9a:52:6c:f1:f8:93:37:dd:bf:35:74:95:59:23:
7a:fe:37:85:d5:9f:f3:da:c5:10:ff:a1:e8:4c:1a:
2f:e2:c6:17:ef:5d:ba:46:cb:57:8d:8b:cf:03:fd:
d8:eb:df:e4:64:d1:ea:4f:29:c7:a3:bc:19:2f:e8:
1e:39:2a:c1:fd:bb:dc:dc:8f:5c:fa:a5:81:1c:c9:
77:e4:35:0f:75:81:10:34:cd:c2:a1:05:45:95:a3:
d8:a3:77:c9:b9:b7:e2:4c:cb:ee:72:06:7d:1d:4e:
f4:28:00:5b:11:62:5f:36:02:08:3b:e6:b3:43:51:
e8:02:49:53:35:74:78:1c:37:0c:ec:a6:8e:c1:56:
f8:d9:38:71:76:b0:b5:cf:57:03:d1:d4:c5:e0:c3:
6e:3a:55:bc:61:3f:23:5c:53:c9:c4:7e:59:2e:b1:
2f:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:64:9D:21:C6:03:13:84:65:E0:4D:58:A0:13:F3:49:56:39:0A:C6
X509v3 Authority Key Identifier:
keyid:4E:8D:B9:64:38:94:46:CA:BC:AF:79:41:CD:19:83:42:C2:33:6D:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/To25ZDiURsq8r3lBzRmDQsIzbdA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/b3961c-3f68-45c1-a04e-95469bf09340/1/To25ZDiURsq8r3lBzRmDQsIzbdA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/b3961c-3f68-45c1-a04e-95469bf09340/1/To25ZDiURsq8r3lBzRmDQsIzbdA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:55:34:c9:66:ef:e8:16:7e:e7:c0:a3:38:32:e0:ea:01:51:
d7:5a:17:0a:47:ec:76:27:71:6f:02:16:df:8a:ff:1f:1b:5e:
03:f7:a7:83:29:f9:bb:4c:13:ca:77:da:69:df:f5:99:c8:c4:
23:3e:83:b6:84:91:39:ba:75:03:68:22:73:d9:0f:07:eb:8e:
93:c8:30:c9:74:b3:5c:ee:fb:59:d0:bc:64:66:2c:14:b5:2d:
5e:33:30:38:28:0e:e6:1b:d6:48:71:99:95:d5:f3:e5:10:8f:
b6:02:34:e2:35:a6:70:2d:b3:eb:40:2b:ca:f5:6b:63:95:54:
f7:b1:cd:46:3e:f1:dd:c7:87:ea:38:69:84:ae:b5:f7:34:3e:
90:fa:80:b2:3b:71:c5:ed:15:24:21:b8:fa:40:e6:73:4b:eb:
cc:47:fa:61:bd:bd:c5:ad:dd:a1:9d:13:3a:d7:73:77:92:aa:
7b:55:6f:bb:77:39:34:6d:3b:01:33:0d:8c:02:ef:34:ae:16:
0f:a2:aa:db:06:2d:de:e4:58:7b:c0:75:95:3b:f0:70:de:30:
ac:32:5c:7e:fd:91:a2:35:e0:c6:a4:38:a4:f9:56:89:35:ca:
37:a7:9d:3d:8e:2d:49:34:c7:64:b5:a1:fb:6d:50:39:fa:ec:
c1:c7:12:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:45:38 2025 by rpki-client