Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/e4e696-9d78-414c-af40-cf56c66a0ac0/1/TJMhPYj6h060Rg4sXPG7GpHakHg.mft
File: TJMhPYj6h060Rg4sXPG7GpHakHg.mft (raw, json)
Hash identifier: pKzY61G0QJgrQOlFloDp557EGnch0b6EkmmK0b5+4d4=
Subject key identifier: ED:15:5E:15:9C:A1:18:A1:4B:1A:7B:99:54:25:33:C5:F7:F2:F8:B3
Authority key identifier: 4C:93:21:3D:88:FA:87:4E:B4:46:0E:2C:5C:F1:BB:1A:91:DA:90:78
Certificate issuer: /CN=4c93213d88fa874eb4460e2c5cf1bb1a91da9078
Certificate serial: 019A706E3BB5445B8C7E639426154E393175
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TJMhPYj6h060Rg4sXPG7GpHakHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/e4e696-9d78-414c-af40-cf56c66a0ac0/1/TJMhPYj6h060Rg4sXPG7GpHakHg.mft
Manifest number: 171D
Signing time: Tue 11 Nov 2025 01:01:03 +0000
Manifest this update: Tue 11 Nov 2025 01:01:03 +0000
Manifest next update: Wed 12 Nov 2025 01:01:03 +0000
Files and hashes: 1: 1LkKTJE8VWFRjFVsY2vc5JNxUyo.roa (hash: gqvXE5VHGf5Er/eIvJDh+DnQ30d/N/LUShz/R2QWX8s=)
2: TJMhPYj6h060Rg4sXPG7GpHakHg.crl (hash: 1ubxf5dgny0ykbUF+HUWbq8uUL+toOsiai3KF/DNvFg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/e4e696-9d78-414c-af40-cf56c66a0ac0/1/TJMhPYj6h060Rg4sXPG7GpHakHg.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/e4e696-9d78-414c-af40-cf56c66a0ac0/1/TJMhPYj6h060Rg4sXPG7GpHakHg.mft
rsync://rpki.ripe.net/repository/DEFAULT/TJMhPYj6h060Rg4sXPG7GpHakHg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 01:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:6e:3b:b5:44:5b:8c:7e:63:94:26:15:4e:39:31:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c93213d88fa874eb4460e2c5cf1bb1a91da9078
Validity
Not Before: Nov 11 01:01:03 2025 GMT
Not After : Nov 12 01:01:03 2025 GMT
Subject: CN=ed155e159ca118a14b1a7b99542533c5f7f2f8b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:a5:6d:7c:fe:10:c5:07:46:14:ac:48:6f:cb:
84:5b:c0:80:9e:59:9c:9c:5b:1a:b0:b8:0c:48:6e:
66:ea:a8:63:96:84:37:cc:c1:b2:61:4b:4c:05:d5:
17:ed:a8:b9:1b:6c:2a:fe:41:51:47:ff:d7:85:05:
47:a8:c5:16:5d:b2:3b:e9:d4:34:85:65:9c:57:2b:
ed:9e:27:a4:c3:a0:cf:3e:d8:98:bd:a3:be:97:4a:
aa:bb:7f:69:d3:e6:fd:75:8d:23:65:9d:13:95:42:
4c:09:49:76:29:85:1a:e5:98:9f:12:d4:6a:dc:29:
02:92:30:4b:ee:40:b8:0e:88:91:30:eb:aa:c4:97:
1d:cf:09:28:2e:22:41:bc:0e:98:d8:70:37:52:12:
fb:a4:d0:0f:5c:fd:72:86:22:ec:16:9d:ad:8a:78:
28:b2:19:f8:7e:ef:1e:cd:c0:c6:9c:a2:c2:e2:aa:
2c:1e:b4:51:32:89:2d:3c:4b:e5:cc:0b:a7:1f:12:
76:3e:de:c4:bf:fe:11:5d:ed:ed:8f:76:5f:6e:93:
ee:1d:38:7c:e8:e7:bf:06:cd:c0:a1:23:fc:e3:3e:
cb:05:d6:f6:9e:b0:fd:ab:ff:06:91:0f:75:36:66:
5b:ab:3e:ee:bf:48:cd:7d:e0:a4:0a:d1:64:ef:71:
51:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:15:5E:15:9C:A1:18:A1:4B:1A:7B:99:54:25:33:C5:F7:F2:F8:B3
X509v3 Authority Key Identifier:
keyid:4C:93:21:3D:88:FA:87:4E:B4:46:0E:2C:5C:F1:BB:1A:91:DA:90:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TJMhPYj6h060Rg4sXPG7GpHakHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/e4e696-9d78-414c-af40-cf56c66a0ac0/1/TJMhPYj6h060Rg4sXPG7GpHakHg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/e4e696-9d78-414c-af40-cf56c66a0ac0/1/TJMhPYj6h060Rg4sXPG7GpHakHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:5a:72:6f:df:ac:7e:38:21:9c:1e:9e:42:06:ef:06:e2:e0:
f6:53:cd:db:1b:a2:b4:30:7f:8f:9c:9a:64:73:3c:12:c7:c1:
69:a9:64:5f:a1:4e:67:76:a7:a6:e7:5e:50:a0:f3:e0:31:a9:
cc:42:9a:9d:e9:ae:02:9c:a1:86:12:00:f8:98:45:7a:30:80:
dc:7d:d4:05:35:cc:cb:74:1a:d2:0d:1b:a1:9c:f0:0f:2b:dc:
63:66:08:55:36:47:96:aa:ef:ce:81:48:0c:b6:21:14:68:a8:
36:05:f4:aa:11:6a:41:39:76:60:e9:18:96:8d:47:d2:81:8d:
ca:ee:4d:b6:6e:ef:c3:46:02:0c:e3:ed:b5:22:5f:85:4e:73:
83:85:42:5a:c0:85:1d:eb:84:17:73:9e:c0:1e:2e:b5:94:f0:
0d:98:e5:90:c8:ea:09:52:64:54:2f:8a:94:ee:0d:ff:a3:fe:
77:24:fd:4f:65:1e:44:2c:bc:05:aa:f7:9d:d0:c2:5f:5c:80:
8a:da:17:d1:9a:95:ff:4a:17:17:bf:75:55:ea:f0:6d:9f:55:
f6:76:9a:98:cc:b4:c6:7c:26:3f:69:a3:b3:3d:b5:b3:63:6e:
07:dc:b8:cd:24:12:12:1d:02:f5:4f:38:c1:33:21:51:c6:92:
07:05:f9:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:32:57 2025 by rpki-client