Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/2a6eaa-e437-43bc-972e-3e3bfaa190df/1/TcvvBq0F_W5ufnsQhMsdfWXmQm8.mft
File: TcvvBq0F_W5ufnsQhMsdfWXmQm8.mft (raw, json)
Hash identifier: JoMYk2bUQ5jCtqpsyx0LdSxmSJjDVQ9MWSsq5prsO8s=
Subject key identifier: 39:6E:11:FC:E6:F8:27:FF:01:B1:17:ED:88:DC:B2:AD:BB:C9:D3:37
Authority key identifier: 4D:CB:EF:06:AD:05:FD:6E:6E:7E:7B:10:84:CB:1D:7D:65:E6:42:6F
Certificate issuer: /CN=4dcbef06ad05fd6e6e7e7b1084cb1d7d65e6426f
Certificate serial: 019A73380E9C511502B2CA93E28616B3AA42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TcvvBq0F_W5ufnsQhMsdfWXmQm8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/2a6eaa-e437-43bc-972e-3e3bfaa190df/1/TcvvBq0F_W5ufnsQhMsdfWXmQm8.mft
Manifest number: 113A
Signing time: Tue 11 Nov 2025 14:00:44 +0000
Manifest this update: Tue 11 Nov 2025 14:00:44 +0000
Manifest next update: Wed 12 Nov 2025 14:00:44 +0000
Files and hashes: 1: TcvvBq0F_W5ufnsQhMsdfWXmQm8.crl (hash: Qhdf6w5bf9ZStL1xjQ4wESvN8uixsyi2ESHUyEfOYjY=)
2: WDEZ3ZaDac1rHXOITo0Y0_gA1WA.roa (hash: 2eqZynI8QAeqviBK64M0ctiXcb1WfCdmlsqvsre2oAM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/2a6eaa-e437-43bc-972e-3e3bfaa190df/1/TcvvBq0F_W5ufnsQhMsdfWXmQm8.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/2a6eaa-e437-43bc-972e-3e3bfaa190df/1/TcvvBq0F_W5ufnsQhMsdfWXmQm8.mft
rsync://rpki.ripe.net/repository/DEFAULT/TcvvBq0F_W5ufnsQhMsdfWXmQm8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:73:38:0e:9c:51:15:02:b2:ca:93:e2:86:16:b3:aa:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4dcbef06ad05fd6e6e7e7b1084cb1d7d65e6426f
Validity
Not Before: Nov 11 14:00:44 2025 GMT
Not After : Nov 12 14:00:44 2025 GMT
Subject: CN=396e11fce6f827ff01b117ed88dcb2adbbc9d337
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:e8:c0:f7:17:a6:e8:ac:d6:48:b9:6f:53:7b:
7d:4d:03:d1:89:e4:01:15:07:08:6a:34:d4:59:52:
46:e0:ef:32:8a:b4:fa:ba:47:0a:02:3c:e9:22:54:
0d:f6:eb:66:d9:9b:aa:4a:f4:ab:89:40:26:d3:24:
8c:14:fa:a9:1e:f0:53:10:f6:fa:76:43:d2:8c:87:
39:2c:26:cc:d8:49:9d:a3:fd:2e:cd:69:4d:9a:94:
d4:f2:92:00:89:a3:e1:63:56:64:eb:71:a3:67:d7:
84:95:58:11:67:34:c9:3d:fc:e4:6c:2e:80:1b:24:
97:c3:43:0a:b9:2c:0a:89:ae:ce:22:61:06:9b:3a:
91:b9:71:7f:7e:92:dd:1f:6a:e7:28:0b:76:3a:cf:
67:e0:71:c2:91:6f:81:63:be:23:05:a2:e7:6a:40:
49:f6:cb:24:86:97:d8:fa:3a:29:9b:15:69:6b:c9:
77:8c:7b:af:14:95:6b:76:ed:1c:a4:95:08:29:d6:
89:7d:73:9c:23:0a:5a:db:3b:98:11:f7:b1:d1:19:
17:a9:b0:79:cb:85:21:63:a1:cf:3d:ae:33:f1:cd:
11:4d:54:67:17:bc:34:a3:d1:2a:68:6d:78:e5:f7:
91:b9:46:f2:76:7b:48:de:65:1c:2b:05:53:70:94:
97:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:6E:11:FC:E6:F8:27:FF:01:B1:17:ED:88:DC:B2:AD:BB:C9:D3:37
X509v3 Authority Key Identifier:
keyid:4D:CB:EF:06:AD:05:FD:6E:6E:7E:7B:10:84:CB:1D:7D:65:E6:42:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TcvvBq0F_W5ufnsQhMsdfWXmQm8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/2a6eaa-e437-43bc-972e-3e3bfaa190df/1/TcvvBq0F_W5ufnsQhMsdfWXmQm8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/2a6eaa-e437-43bc-972e-3e3bfaa190df/1/TcvvBq0F_W5ufnsQhMsdfWXmQm8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:47:9c:80:d7:ba:8a:e7:ca:c1:cb:88:31:ed:0b:fe:25:14:
6d:42:7d:93:c7:2e:9c:20:b9:f4:2b:82:d0:aa:09:18:dc:64:
72:b3:f4:a4:c2:ca:11:ae:b9:a5:0c:10:45:25:00:af:2c:cb:
e4:86:fd:d6:6f:ba:22:8f:d4:38:11:9c:a9:fe:02:1b:af:02:
6b:e5:7d:17:fe:33:bc:80:4e:87:1f:39:7b:f5:c4:2b:65:e1:
c4:4c:e5:84:7a:c6:05:2b:3f:44:e5:4e:7d:8c:28:2f:18:6d:
3a:44:29:01:e8:db:1a:b8:f6:61:b8:05:6b:e9:e9:be:72:eb:
72:a3:6f:f3:9a:e0:0a:e0:96:b8:1c:7f:86:a4:82:a9:b8:ca:
fe:90:e8:1e:3e:b3:1e:87:60:d1:a4:5f:f5:39:72:8f:5a:15:
32:95:f9:a1:1d:6e:cc:eb:fa:48:c3:e9:0b:fb:64:9f:06:ca:
4b:6e:ac:45:38:37:07:86:cb:be:1d:b0:19:42:98:76:97:56:
29:a3:54:39:d5:5a:95:cf:ff:06:98:a9:f5:fd:d7:d0:31:0b:
4f:ab:3b:8b:c6:f5:9c:37:e9:5e:59:89:e7:88:5b:f8:53:41:
7b:48:ea:13:91:55:cc:02:67:2a:94:2e:2e:3e:f1:0c:a6:62:
8a:4c:fe:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:51:44 2025 by rpki-client