Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/a53644-9da6-4d29-b9b6-e78cfa79eff1/1/TnVF7uZtqjlEP_n4j1IkR_eGN4M.mft
File: TnVF7uZtqjlEP_n4j1IkR_eGN4M.mft (raw, json)
Hash identifier: Qx3g5eGstH5Iblb5ctpTldNihc1aQQ/9Jw3NVoDpSWc=
Subject key identifier: 8E:7F:3C:36:D7:BD:7B:7C:D9:B5:5D:A2:64:79:4D:6A:73:C6:54:A2
Authority key identifier: 4E:75:45:EE:E6:6D:AA:39:44:3F:F9:F8:8F:52:24:47:F7:86:37:83
Certificate issuer: /CN=4e7545eee66daa39443ff9f88f522447f7863783
Certificate serial: 019A71B7B8ACAB435023236731B64FA20E4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TnVF7uZtqjlEP_n4j1IkR_eGN4M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/a53644-9da6-4d29-b9b6-e78cfa79eff1/1/TnVF7uZtqjlEP_n4j1IkR_eGN4M.mft
Manifest number: 1276
Signing time: Tue 11 Nov 2025 07:00:57 +0000
Manifest this update: Tue 11 Nov 2025 07:00:57 +0000
Manifest next update: Wed 12 Nov 2025 07:00:57 +0000
Files and hashes: 1: NRxH6LDQFnqwlvTIsGf-f3zdgZM.roa (hash: 45q8sJ0aVkz5DnC4TEh7gH+UDuL3EgyXgzbbWcDZotI=)
2: TnVF7uZtqjlEP_n4j1IkR_eGN4M.crl (hash: TnvMnibr/RYnIkHu/T0y/FJDClzEMDLG6SAbSCGdh84=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/a53644-9da6-4d29-b9b6-e78cfa79eff1/1/TnVF7uZtqjlEP_n4j1IkR_eGN4M.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/a53644-9da6-4d29-b9b6-e78cfa79eff1/1/TnVF7uZtqjlEP_n4j1IkR_eGN4M.mft
rsync://rpki.ripe.net/repository/DEFAULT/TnVF7uZtqjlEP_n4j1IkR_eGN4M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b7:b8:ac:ab:43:50:23:23:67:31:b6:4f:a2:0e:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e7545eee66daa39443ff9f88f522447f7863783
Validity
Not Before: Nov 11 07:00:57 2025 GMT
Not After : Nov 12 07:00:57 2025 GMT
Subject: CN=8e7f3c36d7bd7b7cd9b55da264794d6a73c654a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:f8:8b:8d:90:1f:02:e0:14:02:fb:95:a3:ed:
72:fd:5a:17:f4:a3:8a:59:89:b2:55:35:c2:ad:01:
f7:74:ed:07:81:c5:f9:24:1b:b5:c1:7f:6c:50:a4:
02:c9:49:a7:b2:d0:90:5b:21:13:78:72:a5:5f:44:
87:59:6a:a3:27:da:ad:5e:2c:e7:eb:a0:31:27:34:
26:b1:7c:35:a5:d1:69:be:50:ae:1d:96:ae:79:57:
5a:45:8c:6e:95:cf:39:52:f1:fa:f0:20:ec:80:8a:
3f:b7:1e:6d:14:a4:00:40:b2:9a:34:01:52:9e:0c:
93:e6:db:fb:6b:e0:96:a4:3c:04:45:52:6a:f0:64:
93:58:08:c1:14:b5:68:63:d7:76:05:a2:da:43:67:
ba:46:6d:58:03:ab:f8:05:31:d5:37:ba:e6:fe:f3:
b5:81:59:5f:26:32:67:c7:60:d6:52:9b:a6:e8:03:
2d:14:c3:5e:f6:5f:d4:e1:f2:57:19:fe:48:8b:ac:
f0:f5:9a:56:5a:9c:5e:a8:ca:cf:5a:4d:3c:fd:19:
e3:af:a5:24:84:09:3e:bc:2e:5c:30:f5:6d:97:44:
35:81:4d:2e:ca:3e:03:d4:d3:8c:d1:3b:6f:83:51:
b9:48:ec:4f:f9:55:ce:95:fd:01:97:33:8c:2d:b7:
84:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:7F:3C:36:D7:BD:7B:7C:D9:B5:5D:A2:64:79:4D:6A:73:C6:54:A2
X509v3 Authority Key Identifier:
keyid:4E:75:45:EE:E6:6D:AA:39:44:3F:F9:F8:8F:52:24:47:F7:86:37:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TnVF7uZtqjlEP_n4j1IkR_eGN4M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/a53644-9da6-4d29-b9b6-e78cfa79eff1/1/TnVF7uZtqjlEP_n4j1IkR_eGN4M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/a53644-9da6-4d29-b9b6-e78cfa79eff1/1/TnVF7uZtqjlEP_n4j1IkR_eGN4M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:f0:db:4a:e0:ff:58:cd:98:dd:80:fd:b8:55:f4:54:e8:d5:
4f:6d:7f:69:d7:25:e4:75:36:b9:2f:ad:02:a2:0c:c0:1c:8a:
e6:cc:c4:c3:8d:88:70:d7:d8:43:82:bf:94:8b:bb:5e:05:68:
9d:96:ab:82:e5:f7:21:84:d5:19:bd:5d:21:a0:ed:be:88:67:
85:5b:66:47:f1:1a:83:57:b3:fa:53:00:5a:41:92:76:f6:e1:
2d:4f:a6:ec:33:9e:73:63:42:26:aa:7e:62:6d:a1:87:82:65:
cd:80:b5:25:89:f0:21:31:bd:9e:42:04:de:9f:4a:22:94:f6:
3f:15:06:a6:4c:e0:05:e2:ab:4f:4e:4c:39:06:19:bb:24:d6:
3d:a0:59:dd:b0:da:43:e5:78:49:c4:a7:06:a3:80:9a:04:29:
a4:0d:b0:19:c0:b8:17:63:17:40:67:32:58:b8:63:a8:c7:45:
50:10:cd:13:43:03:c3:c8:ac:95:b7:d0:24:7d:3a:bf:ba:12:
fc:33:87:c0:ec:b1:9d:e4:2c:49:cb:96:61:65:9e:3b:8b:13:
0d:70:0a:74:92:c6:2a:ab:b7:52:14:be:e9:19:61:7e:2b:fc:
05:f5:be:8c:e3:56:a7:2a:70:be:6d:79:e2:54:80:d0:ff:19:
40:2c:47:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:41:56 2025 by rpki-client