Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/cbfd1e-1202-40c1-bdf0-c24ee0494541/1/TZRvTfIjdJGmjfpAe-QfroS72mY.mft
File: TZRvTfIjdJGmjfpAe-QfroS72mY.mft (raw, json)
Hash identifier: JTatnG0tdhd4VY+z0MROQ8W99E4/06nWMHm5EwkIK28=
Subject key identifier: 0A:FA:7A:07:B4:18:2A:89:D6:BB:34:DF:58:1E:D7:C4:EF:86:7D:C8
Authority key identifier: 4D:94:6F:4D:F2:23:74:91:A6:8D:FA:40:7B:E4:1F:AE:84:BB:DA:66
Certificate issuer: /CN=4d946f4df2237491a68dfa407be41fae84bbda66
Certificate serial: 019A71EEBA9AE74EB73F8C0FAFEDF9B7CADD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TZRvTfIjdJGmjfpAe-QfroS72mY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/cbfd1e-1202-40c1-bdf0-c24ee0494541/1/TZRvTfIjdJGmjfpAe-QfroS72mY.mft
Manifest number: 1081
Signing time: Tue 11 Nov 2025 08:01:01 +0000
Manifest this update: Tue 11 Nov 2025 08:01:01 +0000
Manifest next update: Wed 12 Nov 2025 08:01:01 +0000
Files and hashes: 1: C8PR4XXWsjpP8PHYuoN78zoE9nY.roa (hash: uu2Jn3Slz9u+yGZ22j4LqOkp9lCOWyyfMINckydLJ3E=)
2: TZRvTfIjdJGmjfpAe-QfroS72mY.crl (hash: X/XoSWWdIcC6++iH+Kl/N2BKSfQlqM4aiJ5OPXQWy+Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/cbfd1e-1202-40c1-bdf0-c24ee0494541/1/TZRvTfIjdJGmjfpAe-QfroS72mY.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/cbfd1e-1202-40c1-bdf0-c24ee0494541/1/TZRvTfIjdJGmjfpAe-QfroS72mY.mft
rsync://rpki.ripe.net/repository/DEFAULT/TZRvTfIjdJGmjfpAe-QfroS72mY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:ba:9a:e7:4e:b7:3f:8c:0f:af:ed:f9:b7:ca:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d946f4df2237491a68dfa407be41fae84bbda66
Validity
Not Before: Nov 11 08:01:01 2025 GMT
Not After : Nov 12 08:01:01 2025 GMT
Subject: CN=0afa7a07b4182a89d6bb34df581ed7c4ef867dc8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:15:ac:cc:1d:c1:94:fb:84:69:bc:75:3b:f9:
f9:7a:d0:ff:09:76:49:65:52:f1:be:2b:a9:b9:5a:
c3:ca:b1:37:65:ed:39:7f:52:8a:20:23:6b:91:fc:
d2:b8:99:6b:49:47:6b:9d:0b:d1:89:8a:32:b7:44:
87:7c:2b:34:3e:c8:53:f9:2b:9a:8a:a2:09:b8:36:
32:58:69:40:72:34:b1:08:13:c2:f5:b5:b9:ea:33:
83:1c:0e:4e:07:e8:ae:c2:43:cc:30:cc:93:ba:ca:
91:36:d5:2d:95:75:90:ca:09:0f:1e:43:32:96:4b:
d9:db:b0:06:74:6d:d9:54:d5:97:db:aa:18:28:ad:
be:89:ec:75:23:01:17:57:21:86:dd:27:6d:02:01:
b3:1b:77:f7:55:44:13:21:87:b0:77:c1:68:6c:a8:
35:f0:fd:28:48:fc:f3:87:fc:a9:4b:ad:74:5c:8a:
8f:21:ab:b1:6f:02:a1:a7:8c:15:64:60:4c:40:3b:
34:06:fa:59:ef:1a:96:5b:ad:ea:8e:ee:79:2d:bf:
bd:ae:34:a3:8b:13:56:71:f9:cb:29:99:2d:5d:3b:
d3:0b:f4:23:f2:df:24:08:15:dd:79:86:ea:2f:f8:
ab:a1:8a:4c:d0:95:04:30:08:2c:45:64:03:d3:ea:
0b:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:FA:7A:07:B4:18:2A:89:D6:BB:34:DF:58:1E:D7:C4:EF:86:7D:C8
X509v3 Authority Key Identifier:
keyid:4D:94:6F:4D:F2:23:74:91:A6:8D:FA:40:7B:E4:1F:AE:84:BB:DA:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TZRvTfIjdJGmjfpAe-QfroS72mY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/cbfd1e-1202-40c1-bdf0-c24ee0494541/1/TZRvTfIjdJGmjfpAe-QfroS72mY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/cbfd1e-1202-40c1-bdf0-c24ee0494541/1/TZRvTfIjdJGmjfpAe-QfroS72mY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:31:02:9e:6d:a5:11:8f:32:d5:98:ee:2f:c0:85:7b:f3:e7:
18:cd:87:ad:a6:c6:e3:7b:d6:9c:a0:20:9a:0d:79:25:79:13:
37:c3:a7:e3:cf:61:09:fc:44:6f:6b:65:9a:99:24:9b:ef:26:
2d:90:34:fa:c1:63:22:66:7f:91:3c:a9:e1:64:5b:1b:78:ea:
09:de:7f:68:bd:db:b7:cb:f1:7d:22:9b:17:af:3d:14:a6:ff:
75:da:79:0d:ad:52:54:2f:d9:c2:c1:a3:1c:a9:da:c3:68:4b:
08:f9:c6:b0:8b:81:90:8e:51:81:f4:f7:7a:7d:15:af:bc:98:
2a:c9:86:01:32:ed:86:ab:2b:91:e5:66:1e:1b:21:2d:24:73:
34:03:61:2c:8b:1e:53:34:2b:8a:37:2a:c9:d9:de:0b:7c:1b:
1d:e9:d4:7c:f3:fe:03:64:54:9b:8f:2b:05:3a:56:8c:e7:89:
a1:bd:c6:c5:77:be:b4:f3:c1:62:0d:5e:77:f8:a4:1b:2c:ef:
f6:52:9b:24:05:14:65:fb:5a:97:52:f1:5f:c0:4c:e2:f6:c5:
81:c1:c9:ff:28:0b:bd:dc:fd:a3:3c:60:1d:e6:7d:2f:a1:28:
91:f4:ec:42:6a:e3:a8:43:5f:9c:a8:7d:27:e1:d2:d2:66:07:
50:8f:59:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:46:11 2025 by rpki-client