Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/92be6a-92c5-4537-ac32-139536952896/1/TD9Cj9mDTNXsm7Fg-Lbc9EbvXZM.mft
File: TD9Cj9mDTNXsm7Fg-Lbc9EbvXZM.mft (raw, json)
Hash identifier: BUhu5mfOJd3N8xdotYX94mUkxz9+ZCf265dR3a3d9z8=
Subject key identifier: 7D:56:61:03:E7:43:71:35:F6:F9:8B:15:31:E3:E1:8D:CB:CD:C8:CA
Authority key identifier: 4C:3F:42:8F:D9:83:4C:D5:EC:9B:B1:60:F8:B6:DC:F4:46:EF:5D:93
Certificate issuer: /CN=4c3f428fd9834cd5ec9bb160f8b6dcf446ef5d93
Certificate serial: 019A7225B0D4A6755F14813C349DD37484E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TD9Cj9mDTNXsm7Fg-Lbc9EbvXZM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/92be6a-92c5-4537-ac32-139536952896/1/TD9Cj9mDTNXsm7Fg-Lbc9EbvXZM.mft
Manifest number: 1119
Signing time: Tue 11 Nov 2025 09:01:03 +0000
Manifest this update: Tue 11 Nov 2025 09:01:03 +0000
Manifest next update: Wed 12 Nov 2025 09:01:03 +0000
Files and hashes: 1: GJVV3SoEfsa0pgtLtiw7hYQqnlY.roa (hash: X3L+IE/tHK5/79Ef7HYRs6p2vD8nOugSbhs0gMsz8zU=)
2: TD9Cj9mDTNXsm7Fg-Lbc9EbvXZM.crl (hash: mxv9PR+uqljWereHbYF1J2ru99aQhCkmO6UxcKVQxiY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/92be6a-92c5-4537-ac32-139536952896/1/TD9Cj9mDTNXsm7Fg-Lbc9EbvXZM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/92be6a-92c5-4537-ac32-139536952896/1/TD9Cj9mDTNXsm7Fg-Lbc9EbvXZM.mft
rsync://rpki.ripe.net/repository/DEFAULT/TD9Cj9mDTNXsm7Fg-Lbc9EbvXZM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:25:b0:d4:a6:75:5f:14:81:3c:34:9d:d3:74:84:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c3f428fd9834cd5ec9bb160f8b6dcf446ef5d93
Validity
Not Before: Nov 11 09:01:03 2025 GMT
Not After : Nov 12 09:01:03 2025 GMT
Subject: CN=7d566103e7437135f6f98b1531e3e18dcbcdc8ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:27:07:19:eb:c8:28:fb:42:dd:d8:d4:05:5a:
eb:37:db:1d:4b:cc:79:4b:16:19:73:2a:ed:3d:20:
89:fd:29:04:53:34:49:75:ec:13:49:ce:28:72:06:
cd:77:76:27:bc:de:2c:f6:d8:a2:e2:8d:97:8d:db:
12:47:b8:6e:8a:71:74:57:c5:55:da:e1:f0:07:60:
1e:14:bc:eb:96:05:e2:ab:ae:c6:29:43:66:fb:88:
9f:41:25:37:a5:a4:4e:60:d4:f8:31:25:36:9d:47:
2b:50:fc:6c:b6:1d:3f:ac:66:1c:71:5c:d4:ef:0b:
2a:9d:7b:e3:36:74:d7:3d:be:39:84:76:5d:90:39:
d5:8c:ed:ff:56:20:98:3d:73:e0:ca:51:bd:7e:96:
14:6a:fb:44:98:58:a1:f6:46:32:94:1c:2d:3f:bb:
c9:c4:ac:48:1a:b1:75:62:c5:86:12:7d:40:71:e6:
21:76:9b:ae:61:54:f8:b9:80:c6:ed:1e:40:fa:da:
65:be:ed:f5:9a:9d:95:9b:56:93:0f:6e:cd:35:12:
f7:e4:f3:9b:1c:6f:41:83:2c:96:26:5e:cb:1d:35:
6e:e6:34:66:1e:88:d6:eb:a8:82:9d:4b:c0:8d:f0:
be:4c:d2:93:72:a3:7f:03:b7:41:c4:aa:17:e8:36:
68:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:56:61:03:E7:43:71:35:F6:F9:8B:15:31:E3:E1:8D:CB:CD:C8:CA
X509v3 Authority Key Identifier:
keyid:4C:3F:42:8F:D9:83:4C:D5:EC:9B:B1:60:F8:B6:DC:F4:46:EF:5D:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TD9Cj9mDTNXsm7Fg-Lbc9EbvXZM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/92be6a-92c5-4537-ac32-139536952896/1/TD9Cj9mDTNXsm7Fg-Lbc9EbvXZM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/92be6a-92c5-4537-ac32-139536952896/1/TD9Cj9mDTNXsm7Fg-Lbc9EbvXZM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:e6:67:7a:de:d8:4e:ab:4e:ea:5d:91:ad:5f:5c:51:68:d0:
bf:11:eb:c3:1e:b6:d1:c1:6d:93:0c:0b:09:c7:9b:3e:3e:c8:
66:b8:58:88:da:fb:a0:84:c5:1f:3a:83:41:02:1a:84:d0:ba:
2e:1e:ea:b8:86:32:66:b1:36:86:2c:12:84:be:8e:f2:2c:13:
a8:a0:3e:1a:6d:04:81:9d:27:93:09:7c:7d:69:75:4e:f8:99:
2f:ef:0e:a7:e8:2e:77:91:84:7f:9d:c4:15:21:10:16:9e:30:
b8:4f:99:02:41:0d:2d:b0:fb:1f:44:d5:11:da:b3:14:05:15:
13:2e:60:00:4b:96:ee:b3:3e:89:18:43:e1:81:03:53:8c:57:
7f:3e:fc:a5:d9:19:f0:80:8b:c6:7c:3b:a9:4f:4b:61:bb:c0:
90:d1:08:b8:51:79:aa:7a:cc:a1:f2:cf:7a:e1:b0:37:c0:2c:
7b:4f:87:7b:28:5b:a4:5f:ef:e0:47:24:cf:32:44:f4:69:49:
5f:d3:fc:fc:8c:a2:e6:a0:2b:44:7d:7a:cf:eb:c4:1f:99:13:
00:8a:94:88:d5:e4:68:1b:d6:eb:12:97:14:a4:c7:48:6c:68:
18:7c:39:00:bd:74:d6:20:ce:df:4b:c4:be:ac:9c:93:3b:29:
b1:b1:80:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:51:01 2025 by rpki-client