Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/d6ba8d-150e-450e-849c-f38fa0e71d99/1/Tp9S_VUGkr5-7Bkvw-0jJ_Wi-as.mft
File: Tp9S_VUGkr5-7Bkvw-0jJ_Wi-as.mft (raw, json)
Hash identifier: l07d9/Ximf1q0bpCT4qcVjRI8Lkc7baf0bmEpcb++Vk=
Subject key identifier: 46:6B:A7:01:4F:DF:18:94:C6:8F:E2:BA:7D:5D:88:14:A8:60:02:DD
Authority key identifier: 4E:9F:52:FD:55:06:92:BE:7E:EC:19:2F:C3:ED:23:27:F5:A2:F9:AB
Certificate issuer: /CN=4e9f52fd550692be7eec192fc3ed2327f5a2f9ab
Certificate serial: 019A7338424D6EE9D1D198CB30B92870E961
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tp9S_VUGkr5-7Bkvw-0jJ_Wi-as.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/d6ba8d-150e-450e-849c-f38fa0e71d99/1/Tp9S_VUGkr5-7Bkvw-0jJ_Wi-as.mft
Manifest number: 03DB
Signing time: Tue 11 Nov 2025 14:00:58 +0000
Manifest this update: Tue 11 Nov 2025 14:00:58 +0000
Manifest next update: Wed 12 Nov 2025 14:00:58 +0000
Files and hashes: 1: 1-KGFkp6-58CAfMM59AAzTBwEK5A.roa (hash: LpeybfjrfgjM/OjVBSR68hbsEhIa7z+y+IoR5F/Kfmc=)
2: Tp9S_VUGkr5-7Bkvw-0jJ_Wi-as.crl (hash: WJ86IzgOjLVVmPe7cp5uzygi7iIQ1TGkKBPmfoHqZOc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/d6ba8d-150e-450e-849c-f38fa0e71d99/1/Tp9S_VUGkr5-7Bkvw-0jJ_Wi-as.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/d6ba8d-150e-450e-849c-f38fa0e71d99/1/Tp9S_VUGkr5-7Bkvw-0jJ_Wi-as.mft
rsync://rpki.ripe.net/repository/DEFAULT/Tp9S_VUGkr5-7Bkvw-0jJ_Wi-as.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:73:38:42:4d:6e:e9:d1:d1:98:cb:30:b9:28:70:e9:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e9f52fd550692be7eec192fc3ed2327f5a2f9ab
Validity
Not Before: Nov 11 14:00:58 2025 GMT
Not After : Nov 12 14:00:58 2025 GMT
Subject: CN=466ba7014fdf1894c68fe2ba7d5d8814a86002dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:68:f5:3a:af:af:52:52:12:b7:17:30:6b:39:
5f:aa:7e:53:2a:87:20:d4:30:45:e4:70:2c:83:9b:
0e:f2:2d:61:22:e9:73:aa:d3:4c:51:19:71:cb:d1:
a7:8c:18:d4:52:ef:52:9e:c4:c8:85:57:c0:61:33:
fc:a6:04:08:e0:fc:a4:2c:f0:8e:2f:4f:1c:9e:f2:
a2:aa:99:f2:eb:23:bb:3f:6a:92:f7:4d:00:9d:c1:
3a:d0:1a:48:24:98:99:ed:98:cd:a5:18:ae:50:01:
af:8f:62:38:16:a9:57:30:17:8f:db:d3:9a:72:00:
fe:3d:4d:4e:95:de:8b:82:f9:ad:8f:47:0d:92:ec:
00:06:10:31:e8:74:64:1f:4d:d8:e9:fd:19:68:20:
cd:65:a2:28:2c:f7:bd:b3:9e:04:bf:c3:4b:99:6c:
ba:dd:1c:07:21:ac:ff:43:ec:1c:a2:de:78:21:f2:
60:10:57:66:be:9c:38:f5:d7:c5:4e:27:48:a2:9d:
85:de:e0:bb:bf:4d:3b:42:d7:78:15:3b:1d:8f:41:
2d:90:bf:70:70:ad:a7:38:d5:2b:25:bb:f9:d1:0b:
32:90:64:c7:c1:9e:28:a2:7c:03:85:9d:53:e7:fd:
79:c1:5b:d6:17:8f:08:0c:93:26:ce:e3:89:9e:1d:
09:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:6B:A7:01:4F:DF:18:94:C6:8F:E2:BA:7D:5D:88:14:A8:60:02:DD
X509v3 Authority Key Identifier:
keyid:4E:9F:52:FD:55:06:92:BE:7E:EC:19:2F:C3:ED:23:27:F5:A2:F9:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tp9S_VUGkr5-7Bkvw-0jJ_Wi-as.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/d6ba8d-150e-450e-849c-f38fa0e71d99/1/Tp9S_VUGkr5-7Bkvw-0jJ_Wi-as.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/d6ba8d-150e-450e-849c-f38fa0e71d99/1/Tp9S_VUGkr5-7Bkvw-0jJ_Wi-as.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:e5:6a:1a:4a:d0:09:b4:75:7f:71:7b:bc:9c:d9:09:1b:7d:
59:99:3b:b8:6f:33:43:c7:a2:64:27:a5:f3:a8:81:67:b6:b0:
14:e5:e3:60:ce:e6:10:9e:fd:52:45:14:91:a0:40:b4:9d:de:
f9:c8:69:9c:87:98:9e:7b:32:09:34:79:5f:28:07:d7:9c:ac:
90:86:e5:5c:29:63:c7:f4:c9:92:62:de:5e:a1:15:42:cb:b1:
08:39:04:12:6c:fc:ce:9d:d5:6a:1b:e8:58:15:60:0a:6b:b8:
a8:ba:8c:46:3a:fc:e0:f2:df:d2:69:c2:04:98:13:2f:d4:dd:
a3:b3:f9:51:73:e9:1f:c3:f8:01:b7:ef:28:2b:8e:c5:e1:69:
05:f6:43:23:62:d1:15:bb:63:24:c1:d5:9a:33:55:b9:c8:83:
61:ad:64:6e:ab:e9:86:e3:cf:7f:7e:bd:3c:da:f2:f6:6c:56:
2f:c8:18:f6:c1:2f:f6:a7:9f:b0:23:6e:b0:0d:a1:7e:95:b4:
44:45:09:de:08:27:2d:3e:f5:09:1d:c4:17:3b:85:ff:a2:86:
f1:51:11:19:eb:29:a8:d2:1c:e4:51:40:0b:da:5c:ba:8e:00:
d8:8b:f5:97:e2:49:3d:f0:4c:69:cc:e1:46:12:c2:5f:73:43:
8e:19:df:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 16:45:12 2025 by rpki-client