Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/672a2f-ac2b-4631-ab3d-c2bc1451f271/1/tcfYHsTEBVxnP_VxzK0Hw6aZEF4.mft
File: tcfYHsTEBVxnP_VxzK0Hw6aZEF4.mft (raw, json)
Hash identifier: GOK/anIUT5huWw68YIhw9oe7afEh7L8I7WYnhGXeUBw=
Subject key identifier: DC:6C:2B:93:88:51:88:82:FA:9B:DD:62:E1:0D:99:49:20:AE:A9:05
Authority key identifier: B5:C7:D8:1E:C4:C4:05:5C:67:3F:F5:71:CC:AD:07:C3:A6:99:10:5E
Certificate issuer: /CN=b5c7d81ec4c4055c673ff571ccad07c3a699105e
Certificate serial: 019A4C985C31039C30175E9B8884523917B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tcfYHsTEBVxnP_VxzK0Hw6aZEF4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/672a2f-ac2b-4631-ab3d-c2bc1451f271/1/tcfYHsTEBVxnP_VxzK0Hw6aZEF4.mft
Manifest number: 0A66
Signing time: Tue 04 Nov 2025 02:00:44 +0000
Manifest this update: Tue 04 Nov 2025 02:00:44 +0000
Manifest next update: Wed 05 Nov 2025 02:00:44 +0000
Files and hashes: 1: ZFlE4CwGV5oXv28o6nsvolZlI_Y.roa (hash: S5Q4DAjjTKxkiafJ6he6yLpO30RXNUCaXjGnLWKadCQ=)
2: a3EraYk05VPEffLc6KjCZtg0uOM.roa (hash: MkXr1kaZ6Jwr9qIlXjAkJ2Xml1hQyvkyv9rct4pH8co=)
3: fJY20OuQ1IuJYeyVIHU1EBJ0rFM.roa (hash: +X81MlM0oUdVo08v6gDJj1EWTtIWJ/ia51w5FCk6+3U=)
4: tcfYHsTEBVxnP_VxzK0Hw6aZEF4.crl (hash: MBI+3K4RO4wd/8uHeksKRdx6yFt+0Wu7DPcTh2gakGk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/672a2f-ac2b-4631-ab3d-c2bc1451f271/1/tcfYHsTEBVxnP_VxzK0Hw6aZEF4.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/672a2f-ac2b-4631-ab3d-c2bc1451f271/1/tcfYHsTEBVxnP_VxzK0Hw6aZEF4.mft
rsync://rpki.ripe.net/repository/DEFAULT/tcfYHsTEBVxnP_VxzK0Hw6aZEF4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 00:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4c:98:5c:31:03:9c:30:17:5e:9b:88:84:52:39:17:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5c7d81ec4c4055c673ff571ccad07c3a699105e
Validity
Not Before: Nov 4 02:00:44 2025 GMT
Not After : Nov 5 02:00:44 2025 GMT
Subject: CN=dc6c2b9388518882fa9bdd62e10d994920aea905
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:74:e8:b8:e4:52:82:8d:0d:74:36:57:99:7a:
06:c1:cb:b6:83:b1:ef:31:f8:59:34:a4:27:1f:03:
59:28:31:5e:e3:8c:be:85:a1:22:08:64:2a:d3:00:
b5:83:ca:9d:05:ab:ec:b6:09:37:a7:d1:35:96:0c:
29:24:aa:8c:7e:2f:73:5f:80:1d:74:1a:4a:68:25:
ef:10:93:bb:b0:1b:71:e5:ae:c9:cd:d4:14:07:2f:
0e:18:44:e4:57:5d:e1:6d:8d:71:1c:27:7d:ef:6a:
80:13:df:80:0c:fd:f9:52:d1:71:09:ac:24:01:9a:
be:7f:06:7b:f0:64:e6:94:4e:b1:3c:fc:10:f1:2c:
a1:c2:37:5f:35:32:8d:b1:3f:02:08:98:2b:7b:26:
db:53:15:52:d6:19:d8:7a:64:2d:c0:51:3b:71:61:
81:f2:56:20:9b:58:71:86:5b:dc:fd:65:3b:53:bd:
09:29:f6:9d:92:7f:ae:da:6b:1d:d6:20:40:4d:de:
74:a5:33:6b:b6:b3:93:f2:b2:67:13:e6:b4:84:de:
8d:4d:b2:54:0d:b4:e5:4e:d3:a2:6d:5e:f9:ba:4f:
16:b6:53:c4:4f:cd:cd:b0:1e:a0:71:50:3b:09:8a:
a0:1b:87:8d:b1:21:61:2a:3b:bb:a6:12:01:33:c9:
c3:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:6C:2B:93:88:51:88:82:FA:9B:DD:62:E1:0D:99:49:20:AE:A9:05
X509v3 Authority Key Identifier:
keyid:B5:C7:D8:1E:C4:C4:05:5C:67:3F:F5:71:CC:AD:07:C3:A6:99:10:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tcfYHsTEBVxnP_VxzK0Hw6aZEF4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/672a2f-ac2b-4631-ab3d-c2bc1451f271/1/tcfYHsTEBVxnP_VxzK0Hw6aZEF4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/672a2f-ac2b-4631-ab3d-c2bc1451f271/1/tcfYHsTEBVxnP_VxzK0Hw6aZEF4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:4c:bd:c5:75:65:c8:6a:c9:a8:ab:9b:0d:73:90:7b:08:e2:
8d:32:63:40:4e:c9:3c:da:2e:39:20:4a:ec:bb:a2:b5:86:c8:
9d:15:a2:bc:84:45:71:fd:89:16:56:ad:f2:2c:98:be:b0:81:
ff:e1:35:ae:d8:4b:5c:2a:9a:95:80:15:8c:be:27:ad:0b:df:
6a:b4:7c:4d:47:20:35:22:2d:f5:e8:12:e8:e5:55:16:b6:0e:
4f:ee:81:a1:50:6a:13:56:34:e8:0b:3d:aa:7e:1f:11:5f:82:
20:62:e2:f2:b8:88:2e:03:a3:4b:53:c0:46:2b:28:a2:6b:cc:
2e:84:9c:cb:92:55:5f:e6:e8:51:5f:bc:0e:ee:aa:a6:58:a6:
45:b2:98:22:e7:10:e9:87:e8:95:b8:1b:ea:62:d1:a2:a5:01:
37:59:1b:4b:85:3f:74:e6:ad:b6:98:d1:ca:1c:39:f8:92:d7:
1c:9f:c6:0b:74:67:eb:fb:6c:d2:eb:01:4d:28:dd:75:66:0b:
b9:e9:26:df:a3:3b:dd:6b:3e:9f:8a:80:81:d8:52:27:85:b9:
66:48:87:e3:08:66:4e:ff:36:d8:4b:be:64:08:df:e1:9e:d1:
10:33:b0:fc:47:fa:ed:dd:16:cd:86:87:e1:ab:4e:c9:50:6d:
ff:b1:fc:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 09:09:02 2025 by rpki-client