Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/ee71c6-1bae-4858-af3a-bc289dc17d20/1/TAf2nWArfrt_YzDXFcnsPlq6MPo.mft
File: TAf2nWArfrt_YzDXFcnsPlq6MPo.mft (raw, json)
Hash identifier: 0I4nSd3AK2akLnqI+FU0szWphDYY+YGIz2FS7+lHwFM=
Subject key identifier: 16:2C:A3:49:C8:DF:B0:7C:32:2B:DB:C3:74:93:94:2B:F6:06:CA:A5
Authority key identifier: 4C:07:F6:9D:60:2B:7E:BB:7F:63:30:D7:15:C9:EC:3E:5A:BA:30:FA
Certificate issuer: /CN=4c07f69d602b7ebb7f6330d715c9ec3e5aba30fa
Certificate serial: 019A70DC8733B6A3F7B061583E9F18D6A77B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TAf2nWArfrt_YzDXFcnsPlq6MPo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/ee71c6-1bae-4858-af3a-bc289dc17d20/1/TAf2nWArfrt_YzDXFcnsPlq6MPo.mft
Manifest number: 0B0E
Signing time: Tue 11 Nov 2025 03:01:31 +0000
Manifest this update: Tue 11 Nov 2025 03:01:31 +0000
Manifest next update: Wed 12 Nov 2025 03:01:31 +0000
Files and hashes: 1: TAf2nWArfrt_YzDXFcnsPlq6MPo.crl (hash: zkJR83oep7h8Aw1kasvpWE725zy2WZwzCsr+MUB2+z0=)
2: nXGx5bSqdUW_hrhQiJHYlpD8vR8.roa (hash: BZPTD4TDsLLlN6D+oiM71I+DEGQ39DwwkOK3NvmzOh8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/ee71c6-1bae-4858-af3a-bc289dc17d20/1/TAf2nWArfrt_YzDXFcnsPlq6MPo.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/ee71c6-1bae-4858-af3a-bc289dc17d20/1/TAf2nWArfrt_YzDXFcnsPlq6MPo.mft
rsync://rpki.ripe.net/repository/DEFAULT/TAf2nWArfrt_YzDXFcnsPlq6MPo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 03:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:dc:87:33:b6:a3:f7:b0:61:58:3e:9f:18:d6:a7:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c07f69d602b7ebb7f6330d715c9ec3e5aba30fa
Validity
Not Before: Nov 11 03:01:31 2025 GMT
Not After : Nov 12 03:01:31 2025 GMT
Subject: CN=162ca349c8dfb07c322bdbc37493942bf606caa5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:7e:95:e2:f6:ac:1e:26:86:6a:35:58:a1:81:
9d:4c:48:ca:bd:bb:7f:ef:37:9d:02:9a:cf:02:32:
c3:f3:4a:25:33:80:51:db:34:ad:78:b6:b7:9b:e3:
88:db:e3:f3:d5:f3:98:72:3e:05:c3:36:e4:ac:9e:
2e:33:d3:12:6b:37:8f:53:2d:17:72:5a:d8:38:c2:
26:4f:a5:47:02:14:da:6c:11:7f:a6:e0:10:6e:3a:
c8:71:90:27:9c:36:ba:07:35:d6:6e:f3:0c:d4:64:
23:05:1a:de:21:67:b5:74:9d:da:cb:f3:83:7c:cb:
69:48:3b:23:5f:a7:8c:1d:e2:50:bb:f6:98:0f:a8:
dd:c5:a9:0c:69:eb:8b:73:7e:2f:5b:db:c9:82:5c:
bf:88:35:df:6e:6e:69:19:e0:1d:10:51:fb:ca:02:
68:f5:0a:04:f2:c6:eb:8c:f6:2e:6b:ff:78:2b:93:
60:e5:18:a9:cb:38:cb:27:c5:c7:a3:b9:56:81:93:
02:f8:0f:bc:90:3a:ce:9e:52:6a:c3:ea:14:c0:8e:
2f:0b:0c:9d:c5:28:49:1c:1d:8c:2d:9c:4c:15:3a:
e8:8c:10:fa:26:aa:de:b9:02:ea:4f:08:ce:e8:7c:
e5:56:ea:7f:27:9e:9a:05:ec:64:de:74:7c:27:a0:
c1:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:2C:A3:49:C8:DF:B0:7C:32:2B:DB:C3:74:93:94:2B:F6:06:CA:A5
X509v3 Authority Key Identifier:
keyid:4C:07:F6:9D:60:2B:7E:BB:7F:63:30:D7:15:C9:EC:3E:5A:BA:30:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TAf2nWArfrt_YzDXFcnsPlq6MPo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/ee71c6-1bae-4858-af3a-bc289dc17d20/1/TAf2nWArfrt_YzDXFcnsPlq6MPo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/ee71c6-1bae-4858-af3a-bc289dc17d20/1/TAf2nWArfrt_YzDXFcnsPlq6MPo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:f4:b9:5c:f7:94:65:89:b1:1c:f1:03:35:7b:5e:93:d7:5d:
b7:1e:94:9c:16:7b:3d:5a:7e:dc:24:8e:cd:75:ca:53:3b:bb:
97:11:eb:65:ed:54:82:79:85:7f:a3:bb:ed:04:e6:52:7f:62:
79:3e:06:bc:97:5d:4a:87:58:0b:1f:82:bf:59:88:74:de:3a:
37:99:aa:54:70:71:72:69:72:75:11:9e:0e:27:16:68:fe:4c:
8b:c8:df:b5:17:85:1b:33:30:2f:d7:2d:67:f4:e0:42:96:67:
40:47:59:cd:13:95:fa:71:e9:c7:8c:ea:34:e5:45:5a:f7:90:
b3:11:bc:6e:d5:f0:cb:35:9b:70:e5:82:11:51:ac:1c:d6:5b:
b9:db:50:82:b0:3c:8e:36:f4:80:55:eb:7e:c6:4b:62:46:4d:
d8:19:15:af:86:0c:7d:e5:99:46:9c:5c:1f:34:31:14:fb:fd:
95:e6:07:01:aa:7b:3f:78:9c:ca:eb:ad:41:c8:45:65:5e:1b:
48:10:26:c3:f8:a5:72:94:25:a0:8a:4f:74:6c:7f:ba:76:c6:
06:b3:d6:af:06:32:41:b6:c1:43:da:e5:c1:41:4d:0b:48:e3:
36:77:85:f7:11:45:bf:7b:6d:20:54:1c:5b:16:ff:53:d3:57:
70:0f:4a:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:45:14 2025 by rpki-client