Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/0cfe3e-729f-4418-9cf4-863daecfc2e8/1/tPpNCBs2iH8-XKZTf3Rp7uIdca4.mft
File: tPpNCBs2iH8-XKZTf3Rp7uIdca4.mft (raw, json)
Hash identifier: Ldv8ZRFDbQp/fVWZB2tYeenjoe0pWz4BVAgp79DFSiw=
Subject key identifier: 85:33:68:E0:AD:EE:69:EB:9C:35:8B:C6:70:B4:D8:39:4E:A5:48:CD
Authority key identifier: B4:FA:4D:08:1B:36:88:7F:3E:5C:A6:53:7F:74:69:EE:E2:1D:71:AE
Certificate issuer: /CN=b4fa4d081b36887f3e5ca6537f7469eee21d71ae
Certificate serial: 019A72262BAB336643149E9CF5731D76E6F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tPpNCBs2iH8-XKZTf3Rp7uIdca4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/0cfe3e-729f-4418-9cf4-863daecfc2e8/1/tPpNCBs2iH8-XKZTf3Rp7uIdca4.mft
Manifest number: 1721
Signing time: Tue 11 Nov 2025 09:01:35 +0000
Manifest this update: Tue 11 Nov 2025 09:01:35 +0000
Manifest next update: Wed 12 Nov 2025 09:01:35 +0000
Files and hashes: 1: HeDUncvNrC9DXvqHmX3LCuEEQFk.roa (hash: pkL8awVC+vif3Sv8BEo/gQroGPTBLCBBOJrEXIA/gLU=)
2: tPpNCBs2iH8-XKZTf3Rp7uIdca4.crl (hash: 7dJTae7+5BEZDO081l6P2e8KFWMXZ+9iB024PIlP7rU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/0cfe3e-729f-4418-9cf4-863daecfc2e8/1/tPpNCBs2iH8-XKZTf3Rp7uIdca4.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/0cfe3e-729f-4418-9cf4-863daecfc2e8/1/tPpNCBs2iH8-XKZTf3Rp7uIdca4.mft
rsync://rpki.ripe.net/repository/DEFAULT/tPpNCBs2iH8-XKZTf3Rp7uIdca4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:26:2b:ab:33:66:43:14:9e:9c:f5:73:1d:76:e6:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4fa4d081b36887f3e5ca6537f7469eee21d71ae
Validity
Not Before: Nov 11 09:01:35 2025 GMT
Not After : Nov 12 09:01:35 2025 GMT
Subject: CN=853368e0adee69eb9c358bc670b4d8394ea548cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:9b:42:35:20:c0:ae:11:6f:e1:48:ce:1f:19:
09:57:c3:1f:97:67:a0:89:e9:92:04:a6:73:5c:9e:
05:96:08:55:90:23:88:3c:d9:00:a3:f2:2f:a5:93:
77:56:57:6f:d1:2b:5b:f1:93:3d:d4:8c:29:18:bf:
b0:74:2f:72:01:f5:b2:f8:ef:c9:e6:1a:f8:d1:18:
67:79:7f:13:db:c3:12:cb:cb:c1:b4:fd:0f:a1:15:
bb:a3:7d:99:f0:e0:66:ff:c8:8b:e4:8c:1f:39:ba:
7e:db:97:7c:6a:d0:e7:74:0c:7d:9c:65:1a:f8:35:
fb:62:1c:74:b8:6e:06:a1:1c:bf:6b:23:8c:a1:59:
6e:26:03:2b:26:5d:fb:cd:1d:53:80:b5:a5:17:ac:
30:d9:e3:84:a3:1f:a6:5c:21:12:ac:42:00:b0:93:
93:34:e8:ee:9a:48:67:8d:6d:2f:76:ab:cb:22:89:
f8:a0:29:d7:43:18:ac:13:db:8b:44:28:45:77:cc:
fe:02:f5:4d:8f:26:ca:72:a2:d8:cc:55:82:86:e9:
35:dd:a5:f9:30:ae:fc:b8:1f:52:93:03:cd:72:a2:
52:b3:e3:ec:d1:ff:28:1a:fb:8d:3e:1a:b2:1d:f2:
b1:52:f5:7e:97:bb:46:88:23:18:d7:f3:e0:98:91:
c5:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:33:68:E0:AD:EE:69:EB:9C:35:8B:C6:70:B4:D8:39:4E:A5:48:CD
X509v3 Authority Key Identifier:
keyid:B4:FA:4D:08:1B:36:88:7F:3E:5C:A6:53:7F:74:69:EE:E2:1D:71:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tPpNCBs2iH8-XKZTf3Rp7uIdca4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/0cfe3e-729f-4418-9cf4-863daecfc2e8/1/tPpNCBs2iH8-XKZTf3Rp7uIdca4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/0cfe3e-729f-4418-9cf4-863daecfc2e8/1/tPpNCBs2iH8-XKZTf3Rp7uIdca4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:f4:10:49:4c:7e:da:8e:4a:ed:18:b4:af:16:6c:3b:98:2e:
d2:1a:cb:7e:ce:64:9a:42:f2:99:8f:f6:e5:d9:e3:cb:58:7b:
23:26:63:8f:20:57:11:94:fe:83:7a:c6:ee:fe:88:e4:56:db:
2a:80:99:d9:03:f1:af:6d:f4:64:c7:cb:a3:30:cd:6b:3c:6f:
be:d5:43:8f:e0:1e:39:ce:c2:e2:6e:40:0b:50:39:7e:d6:4e:
e8:58:92:ff:44:ad:39:96:a9:56:f3:f3:b3:37:de:f3:e5:f7:
cd:aa:cf:17:5f:78:ac:0f:97:55:f3:d3:6a:30:c2:6d:73:e8:
ee:93:e0:1c:f6:15:2f:d8:6a:3f:90:41:43:53:0d:94:35:c5:
66:47:a9:71:e5:dd:f1:db:a4:fd:1c:ec:7a:90:45:dd:69:38:
7d:b2:73:dd:0a:97:53:b7:33:29:1a:21:be:99:e7:54:3a:b4:
26:4e:9f:02:4e:e3:91:e7:0a:50:79:dc:32:95:d4:ad:58:bf:
1c:58:ff:3b:85:6a:4b:7d:f7:27:39:d9:70:b3:ca:93:d1:68:
58:ef:a6:da:64:61:e8:99:92:03:ad:62:de:af:98:86:fa:57:
f7:81:84:51:43:2a:70:70:f2:ac:97:4e:23:39:d3:b2:f4:2a:
1b:86:74:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 16:55:53 2025 by rpki-client