Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/7bd729-98e5-43ff-afe6-187b1f77c1a5/1/TJMCnFsmOc0pufndUpTMlO9S1q8.mft
File: TJMCnFsmOc0pufndUpTMlO9S1q8.mft (raw, json)
Hash identifier: JeH5B7nXXFNQNrGHTEg9aU4nsQW8zDmZQGaGZyhmHVw=
Subject key identifier: CC:84:BF:D0:25:03:27:05:EF:A0:FA:AC:61:8C:22:46:BE:C1:4A:BC
Authority key identifier: 4C:93:02:9C:5B:26:39:CD:29:B9:F9:DD:52:94:CC:94:EF:52:D6:AF
Certificate issuer: /CN=4c93029c5b2639cd29b9f9dd5294cc94ef52d6af
Certificate serial: 019A7293D10C404BAFC76D3D0321333CC0CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TJMCnFsmOc0pufndUpTMlO9S1q8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/7bd729-98e5-43ff-afe6-187b1f77c1a5/1/TJMCnFsmOc0pufndUpTMlO9S1q8.mft
Manifest number: 0D50
Signing time: Tue 11 Nov 2025 11:01:21 +0000
Manifest this update: Tue 11 Nov 2025 11:01:21 +0000
Manifest next update: Wed 12 Nov 2025 11:01:21 +0000
Files and hashes: 1: TJMCnFsmOc0pufndUpTMlO9S1q8.crl (hash: ldSLLQOi2wroLpSFQmKm8iLjPt/GkyeGmm9yMkMdhiU=)
2: gm0FjeCIRrnMhU3d57SvCilXQ6Y.roa (hash: uUS5qc0jED6lwxU3POQRNrHoJ8s1cSrD4ysUmIZNtjw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/7bd729-98e5-43ff-afe6-187b1f77c1a5/1/TJMCnFsmOc0pufndUpTMlO9S1q8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/7bd729-98e5-43ff-afe6-187b1f77c1a5/1/TJMCnFsmOc0pufndUpTMlO9S1q8.mft
rsync://rpki.ripe.net/repository/DEFAULT/TJMCnFsmOc0pufndUpTMlO9S1q8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:93:d1:0c:40:4b:af:c7:6d:3d:03:21:33:3c:c0:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c93029c5b2639cd29b9f9dd5294cc94ef52d6af
Validity
Not Before: Nov 11 11:01:21 2025 GMT
Not After : Nov 12 11:01:21 2025 GMT
Subject: CN=cc84bfd025032705efa0faac618c2246bec14abc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:b8:79:a9:ae:c0:be:ef:7b:0f:43:77:5e:40:
0c:53:77:58:78:54:e5:94:9a:93:f4:e0:33:a3:0d:
de:ef:06:3c:60:1e:d6:79:21:b4:96:fa:7b:fd:6d:
f0:0a:ef:3a:fd:ab:e0:d6:c1:65:3c:ae:8f:06:a1:
e0:e2:22:72:e7:f6:bf:46:68:16:a0:c3:1f:7e:78:
00:cc:3f:96:f9:6e:20:7c:05:58:c3:91:f7:d6:e4:
a1:99:fb:c6:cc:10:89:75:96:5f:9a:55:c4:21:49:
64:92:14:12:d6:a7:f6:20:30:be:55:b5:7e:1c:2a:
cc:09:a9:31:08:37:72:5a:ac:a6:95:26:d4:15:c2:
8e:84:08:5d:3e:60:3e:c3:81:3b:4c:8b:b4:c4:8f:
c4:00:aa:42:be:b3:1c:4a:4f:b1:da:a0:de:dd:06:
a2:57:8e:41:db:a7:a7:98:eb:69:5a:0c:12:37:d3:
e3:f6:45:9d:9b:ee:12:2d:90:32:d1:3b:e5:4f:18:
c9:eb:89:51:83:dd:eb:3e:1b:64:82:28:c9:c9:82:
0b:07:10:9d:cf:00:e8:f4:ea:57:7d:c9:07:2d:4f:
c0:43:7b:8a:3f:62:e7:7e:40:19:88:89:dd:4c:22:
35:b8:e7:5c:0c:0d:16:74:1e:80:86:63:bc:b2:c8:
45:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:84:BF:D0:25:03:27:05:EF:A0:FA:AC:61:8C:22:46:BE:C1:4A:BC
X509v3 Authority Key Identifier:
keyid:4C:93:02:9C:5B:26:39:CD:29:B9:F9:DD:52:94:CC:94:EF:52:D6:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TJMCnFsmOc0pufndUpTMlO9S1q8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/7bd729-98e5-43ff-afe6-187b1f77c1a5/1/TJMCnFsmOc0pufndUpTMlO9S1q8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/7bd729-98e5-43ff-afe6-187b1f77c1a5/1/TJMCnFsmOc0pufndUpTMlO9S1q8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:a3:36:b9:42:34:41:3d:3a:aa:e2:a2:eb:d8:fb:0e:6f:f5:
ad:b3:83:5c:61:d3:36:35:75:52:32:6b:62:20:61:95:2b:92:
15:38:45:b1:dd:3a:a7:1d:1f:8a:78:4d:cc:73:35:1c:fc:81:
49:fb:f4:78:c2:f5:f2:28:84:a1:2c:2f:66:16:76:5a:db:0c:
bb:8d:88:56:e5:ca:37:4c:2f:9c:fd:1b:20:b6:c0:06:5a:3d:
7b:73:ed:91:e8:6f:b1:6d:b9:d5:eb:2f:42:19:53:09:e2:ff:
11:43:2c:ee:ec:d6:e9:ad:38:c0:9f:10:e0:15:f2:66:be:d0:
f9:a9:0c:b7:5d:46:3a:86:02:b0:29:d5:ce:e5:79:fd:19:04:
bb:a4:90:f4:29:20:37:57:6a:f4:04:e5:25:3c:62:6d:00:26:
3f:ff:63:27:96:a8:05:40:d2:e0:5a:43:a5:81:1f:8e:62:76:
61:5a:2c:39:a0:03:fc:44:36:2b:e6:74:a0:b3:e4:af:57:c3:
4a:0f:de:d7:18:a1:ff:27:7e:e1:dd:ab:ac:e6:5b:25:4c:15:
ad:d0:d5:7c:bb:f7:dc:e9:cf:9b:62:78:ed:52:39:58:f5:16:
24:ff:03:96:9c:12:30:ee:a2:a8:c7:b3:e8:c0:f5:20:f4:29:
d0:03:36:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 18:39:09 2025 by rpki-client