Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/3ae541-57f4-4466-91d5-02a3be4773a3/1/TWFl5PGBPks_XEhyBjHHzAsjdNI.mft
File: TWFl5PGBPks_XEhyBjHHzAsjdNI.mft (raw, json)
Hash identifier: QAO7sehJ41O+WRTzoKYjxposlHuJjaz5NFCIIviGWos=
Subject key identifier: FF:C4:1E:1B:75:DA:81:7B:01:3E:86:41:EC:22:5B:27:8E:43:79:C0
Authority key identifier: 4D:61:65:E4:F1:81:3E:4B:3F:5C:48:72:06:31:C7:CC:0B:23:74:D2
Certificate issuer: /CN=4d6165e4f1813e4b3f5c48720631c7cc0b2374d2
Certificate serial: 019A72258AB861F7BF964EDF8F74771C5D4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TWFl5PGBPks_XEhyBjHHzAsjdNI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/3ae541-57f4-4466-91d5-02a3be4773a3/1/TWFl5PGBPks_XEhyBjHHzAsjdNI.mft
Manifest number: 0D1A
Signing time: Tue 11 Nov 2025 09:00:54 +0000
Manifest this update: Tue 11 Nov 2025 09:00:54 +0000
Manifest next update: Wed 12 Nov 2025 09:00:54 +0000
Files and hashes: 1: NvJ8oLDEBqhT1H-zCdKolqnypws.roa (hash: aLhfn5rS031yK9YSuCvXO/dQvbflGZGOUFgblOZMFc4=)
2: TWFl5PGBPks_XEhyBjHHzAsjdNI.crl (hash: YbmpraXcipQ6KKCORL+QSxsKFsp5udFmPByieiTKy2s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/3ae541-57f4-4466-91d5-02a3be4773a3/1/TWFl5PGBPks_XEhyBjHHzAsjdNI.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/3ae541-57f4-4466-91d5-02a3be4773a3/1/TWFl5PGBPks_XEhyBjHHzAsjdNI.mft
rsync://rpki.ripe.net/repository/DEFAULT/TWFl5PGBPks_XEhyBjHHzAsjdNI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:25:8a:b8:61:f7:bf:96:4e:df:8f:74:77:1c:5d:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d6165e4f1813e4b3f5c48720631c7cc0b2374d2
Validity
Not Before: Nov 11 09:00:54 2025 GMT
Not After : Nov 12 09:00:54 2025 GMT
Subject: CN=ffc41e1b75da817b013e8641ec225b278e4379c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:2e:29:ac:bb:c3:2a:cd:eb:b0:a7:b2:f1:a3:
41:11:2a:3d:d2:77:2f:aa:84:eb:9b:ee:86:c2:f1:
d8:27:67:23:59:11:7a:48:b6:4a:b3:a6:80:0c:c2:
ca:f6:5c:85:6f:a0:07:a0:75:aa:f6:d2:88:6c:12:
f1:ea:0f:bf:d7:c4:0f:e3:70:89:5f:00:9a:99:f5:
84:25:82:e4:4d:a9:7d:a3:e3:bf:9a:f5:41:f7:10:
d3:7f:af:e2:1f:14:99:29:f3:8e:fe:db:7c:f3:88:
3d:8c:0d:a1:df:b7:49:ac:37:07:32:99:1b:d7:52:
3c:42:eb:81:b3:2c:0f:ee:e5:0c:dd:d0:bc:9d:39:
5d:3e:76:2a:10:9c:31:39:d2:be:60:c3:0d:ef:5a:
f8:d1:44:8e:b0:8f:78:49:9a:77:1d:fe:d2:cd:9a:
8c:88:57:cb:9e:f1:fd:0e:20:3f:6a:ab:4e:1d:a5:
c0:42:22:d5:b5:9e:ca:59:8a:d9:55:8e:35:c5:65:
55:b7:41:26:75:2e:7b:d0:7d:c3:29:8b:af:43:24:
81:16:b6:52:7f:fb:64:cd:c1:33:23:aa:c0:68:b1:
98:7f:6b:09:36:6e:d3:62:f9:3c:9c:1d:20:97:e3:
2b:18:d2:bf:02:66:22:36:10:2b:e7:e2:b4:f8:19:
c8:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:C4:1E:1B:75:DA:81:7B:01:3E:86:41:EC:22:5B:27:8E:43:79:C0
X509v3 Authority Key Identifier:
keyid:4D:61:65:E4:F1:81:3E:4B:3F:5C:48:72:06:31:C7:CC:0B:23:74:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TWFl5PGBPks_XEhyBjHHzAsjdNI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/3ae541-57f4-4466-91d5-02a3be4773a3/1/TWFl5PGBPks_XEhyBjHHzAsjdNI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/3ae541-57f4-4466-91d5-02a3be4773a3/1/TWFl5PGBPks_XEhyBjHHzAsjdNI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:9e:8c:50:e5:e1:c9:d2:0e:c6:e2:40:76:bf:fd:a4:f1:f1:
3f:c1:36:2f:57:df:a9:96:1f:e8:95:e9:dd:b4:14:2a:e2:72:
22:ad:49:5c:4d:34:37:9c:b7:89:7d:fc:7b:6f:f6:73:f4:dd:
ea:71:4a:46:92:58:33:18:3b:8f:d2:14:ae:36:a0:17:93:c5:
18:0f:25:48:ec:2d:6e:a9:86:65:4c:64:30:6d:59:3e:fb:75:
8b:9f:8d:58:94:64:8d:7f:e7:4f:70:6c:aa:af:2e:a9:2b:cd:
e3:86:51:95:60:4c:50:ed:62:9a:97:27:f1:3c:9a:93:2f:9a:
b3:18:0f:b8:8a:16:23:3c:b6:90:d4:f6:e0:a2:e9:d3:c6:98:
7b:ab:a7:6f:81:b5:47:76:5e:3f:95:d8:47:14:3b:30:36:03:
76:d4:8a:e6:19:f0:0f:01:f5:72:ec:14:26:38:57:e5:5a:63:
d5:2d:21:35:03:b2:4b:9d:e2:55:47:97:62:6f:79:d1:92:30:
d2:c9:4b:42:ee:0f:51:9f:35:3d:9b:db:e1:da:14:c0:53:74:
f1:54:ff:2f:26:94:32:91:19:e5:e2:26:91:c2:c6:03:f2:ec:
fb:48:84:a2:7b:cc:83:0c:87:76:3d:df:b8:89:7c:7e:7e:e4:
a4:5e:59:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:46:37 2025 by rpki-client