Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/59dcbd-78bf-48ed-954d-ccaa6eb3c513/1/TBAf9Rtn7v4NZ4AOdtNgbfTJRyE.mft
File: TBAf9Rtn7v4NZ4AOdtNgbfTJRyE.mft (raw, json)
Hash identifier: 6a8pWPRo11VgipfBTUAlNMeqYqwqsEjdPViMHvOeBCA=
Subject key identifier: D4:6A:76:85:EB:E3:48:D0:4D:3D:20:8E:1E:8E:AA:77:59:12:E9:30
Authority key identifier: 4C:10:1F:F5:1B:67:EE:FE:0D:67:80:0E:76:D3:60:6D:F4:C9:47:21
Certificate issuer: /CN=4c101ff51b67eefe0d67800e76d3606df4c94721
Certificate serial: 019A7226794F1D6EF88BBDBC5B165FE2F1C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TBAf9Rtn7v4NZ4AOdtNgbfTJRyE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/59dcbd-78bf-48ed-954d-ccaa6eb3c513/1/TBAf9Rtn7v4NZ4AOdtNgbfTJRyE.mft
Manifest number: 0690
Signing time: Tue 11 Nov 2025 09:01:55 +0000
Manifest this update: Tue 11 Nov 2025 09:01:55 +0000
Manifest next update: Wed 12 Nov 2025 09:01:55 +0000
Files and hashes: 1: TBAf9Rtn7v4NZ4AOdtNgbfTJRyE.crl (hash: 9geK5/Mqe/TkWgbWGrckrnrMFz4tX0pXL1udL7BDKLg=)
2: cri3ULh6Rj8r6ZDUmdSIkYBmP1o.roa (hash: Lisc7jMorS/4tIMBDxqrdkl7lwX530FUMpT0ozDszqE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/59dcbd-78bf-48ed-954d-ccaa6eb3c513/1/TBAf9Rtn7v4NZ4AOdtNgbfTJRyE.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/59dcbd-78bf-48ed-954d-ccaa6eb3c513/1/TBAf9Rtn7v4NZ4AOdtNgbfTJRyE.mft
rsync://rpki.ripe.net/repository/DEFAULT/TBAf9Rtn7v4NZ4AOdtNgbfTJRyE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:26:79:4f:1d:6e:f8:8b:bd:bc:5b:16:5f:e2:f1:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c101ff51b67eefe0d67800e76d3606df4c94721
Validity
Not Before: Nov 11 09:01:55 2025 GMT
Not After : Nov 12 09:01:55 2025 GMT
Subject: CN=d46a7685ebe348d04d3d208e1e8eaa775912e930
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:4d:f2:57:77:dc:f9:82:36:d8:a4:94:60:f6:
06:b3:b3:31:b4:37:c4:ff:c5:b9:82:9a:f9:49:a0:
fc:7d:1e:bb:16:fd:bd:79:30:ec:ab:2a:aa:de:dd:
77:78:68:fb:28:51:4e:55:9f:ef:e1:7d:7f:d2:db:
bb:ac:81:6f:19:ae:ee:73:bf:99:05:8d:57:21:ab:
7e:e1:36:ac:3b:45:ae:b0:d5:3a:c8:17:fe:de:09:
52:b8:5e:62:bd:50:5e:b7:67:45:ae:ea:ac:35:a4:
78:e0:28:99:9c:df:10:10:d1:e2:c5:b5:a2:56:f8:
a4:3b:28:ff:19:0d:17:21:23:6a:7c:31:71:28:ec:
6c:d3:d1:d9:04:4d:0e:20:98:7e:1f:ae:1d:9f:cc:
69:a7:fe:85:3b:b4:d6:ae:6b:87:23:50:cb:eb:5c:
f1:2e:93:d5:5a:08:43:ff:00:a9:81:fe:f6:8d:48:
67:fd:2b:ad:67:1c:40:b3:38:24:dd:1e:18:48:03:
e6:1d:71:5a:06:f8:1c:f5:b0:3f:d7:82:4a:07:1f:
bb:38:91:f0:64:1f:60:bd:da:52:1d:16:30:35:25:
af:de:ec:89:87:97:56:eb:0f:93:6b:d8:10:58:79:
9f:3a:24:fe:d1:5b:7a:fd:ce:e4:ed:be:f1:a0:79:
0c:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:6A:76:85:EB:E3:48:D0:4D:3D:20:8E:1E:8E:AA:77:59:12:E9:30
X509v3 Authority Key Identifier:
keyid:4C:10:1F:F5:1B:67:EE:FE:0D:67:80:0E:76:D3:60:6D:F4:C9:47:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TBAf9Rtn7v4NZ4AOdtNgbfTJRyE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/59dcbd-78bf-48ed-954d-ccaa6eb3c513/1/TBAf9Rtn7v4NZ4AOdtNgbfTJRyE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/59dcbd-78bf-48ed-954d-ccaa6eb3c513/1/TBAf9Rtn7v4NZ4AOdtNgbfTJRyE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:fe:bc:da:cc:ef:9d:5e:f8:4a:c0:28:20:0c:b6:2a:a5:7f:
53:cb:60:13:4a:fa:63:f9:c1:b1:48:5f:0a:f5:51:d3:cf:eb:
08:cc:f0:e8:14:85:45:33:25:4e:37:fc:7c:9f:aa:da:6f:84:
78:22:8c:36:b1:80:22:fe:07:07:84:2c:50:bf:5f:00:a4:4b:
3d:8c:70:ee:41:de:e1:c9:48:e3:d0:3a:44:9d:4a:b5:90:29:
b5:04:3b:1d:1e:20:2d:24:32:6f:00:c8:8f:5f:98:2e:e4:82:
83:32:27:06:85:17:05:db:f8:4c:b0:e9:d3:7c:e9:1f:7d:61:
a8:ea:3f:7c:8a:2e:9d:0d:b5:95:49:0e:b3:c9:04:b6:b1:4f:
7a:65:5b:0a:f1:12:58:f2:d0:c8:74:54:fa:91:02:d6:ca:2e:
65:12:cf:0c:05:bd:a5:1e:dd:a6:16:ec:08:9d:42:f4:98:b2:
9f:95:cc:06:b4:9e:4a:bc:17:42:c1:4a:7c:a5:3e:6f:27:b1:
2b:69:ef:d1:29:6a:15:e8:75:b3:26:e5:91:0d:c3:9b:62:53:
46:23:1c:90:d0:65:73:5b:68:6b:bb:2f:69:66:5a:c9:3c:95:
04:65:95:73:28:21:7a:26:fd:c0:2d:2e:59:10:e1:00:4e:c9:
31:45:18:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:50:38 2025 by rpki-client