Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/9041b7-f543-4c63-8e2b-366a9761ea20/1/TqWy83Ukw9ONyApx2PAB7SxF6Jw.mft
File: TqWy83Ukw9ONyApx2PAB7SxF6Jw.mft (raw, json)
Hash identifier: k84J881sBkSHIIS5CzBYmHdAowW4OskFFX7/7s83QaQ=
Subject key identifier: C7:2B:91:0B:5C:A7:05:9D:2F:57:4C:73:9C:63:56:00:EC:37:62:68
Authority key identifier: 4E:A5:B2:F3:75:24:C3:D3:8D:C8:0A:71:D8:F0:01:ED:2C:45:E8:9C
Certificate issuer: /CN=4ea5b2f37524c3d38dc80a71d8f001ed2c45e89c
Certificate serial: 019A725C395D7BD228A939F75D20741390BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TqWy83Ukw9ONyApx2PAB7SxF6Jw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/9041b7-f543-4c63-8e2b-366a9761ea20/1/TqWy83Ukw9ONyApx2PAB7SxF6Jw.mft
Manifest number: 14E5
Signing time: Tue 11 Nov 2025 10:00:37 +0000
Manifest this update: Tue 11 Nov 2025 10:00:37 +0000
Manifest next update: Wed 12 Nov 2025 10:00:37 +0000
Files and hashes: 1: HJZuFg-aBDGic40vRoWhakH94Zo.roa (hash: b1vEsVgABbRc+hOZI2FcJP4+qO85CVqkQZmViTsB2bU=)
2: TqWy83Ukw9ONyApx2PAB7SxF6Jw.crl (hash: MaCJ96H+ALHm/TnXzI/DD04cxfarWB7sCRNTCL5Ti1g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/9041b7-f543-4c63-8e2b-366a9761ea20/1/TqWy83Ukw9ONyApx2PAB7SxF6Jw.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/9041b7-f543-4c63-8e2b-366a9761ea20/1/TqWy83Ukw9ONyApx2PAB7SxF6Jw.mft
rsync://rpki.ripe.net/repository/DEFAULT/TqWy83Ukw9ONyApx2PAB7SxF6Jw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:39:5d:7b:d2:28:a9:39:f7:5d:20:74:13:90:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ea5b2f37524c3d38dc80a71d8f001ed2c45e89c
Validity
Not Before: Nov 11 10:00:37 2025 GMT
Not After : Nov 12 10:00:37 2025 GMT
Subject: CN=c72b910b5ca7059d2f574c739c635600ec376268
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:f8:0a:6b:6c:77:95:48:33:99:4b:d5:23:7b:
57:cf:95:d2:24:03:5d:1f:b4:a6:e9:65:4e:e4:df:
70:7a:30:85:ae:08:c0:a8:f4:20:a7:34:b2:66:80:
ae:9e:a3:ac:fa:9d:76:48:65:47:79:59:6d:8e:17:
6d:f1:25:8a:cc:11:57:cb:42:53:52:fb:e3:a7:13:
36:4f:ae:36:d3:6e:f8:c0:e1:fe:3f:f3:e5:cb:72:
82:c9:09:fd:70:a6:18:bc:7c:1d:dd:19:27:48:c1:
bb:c9:98:82:62:58:fa:d2:73:1a:6c:19:10:7c:ff:
4d:45:6e:6c:45:b2:b6:67:a8:40:6c:d5:65:f9:54:
15:c5:65:24:c8:60:b7:e5:57:f7:3b:76:a8:85:de:
33:2e:83:de:7e:a4:e5:15:0f:a3:51:61:32:69:8e:
64:c3:d7:ca:58:0f:70:74:2d:ae:46:a6:16:b1:6d:
dc:ab:50:bb:51:7a:bf:7d:83:59:f5:b0:fa:06:5d:
7e:88:bb:eb:ec:37:af:62:1b:76:f5:91:b2:47:f7:
ba:f6:e9:b0:31:cd:bc:85:e1:51:f3:65:4d:7b:79:
6a:a1:8c:5f:e7:62:4e:ab:49:a9:8b:f6:33:8c:e6:
48:fa:b7:63:55:f0:06:d7:65:7b:08:04:7a:13:79:
d4:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:2B:91:0B:5C:A7:05:9D:2F:57:4C:73:9C:63:56:00:EC:37:62:68
X509v3 Authority Key Identifier:
keyid:4E:A5:B2:F3:75:24:C3:D3:8D:C8:0A:71:D8:F0:01:ED:2C:45:E8:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TqWy83Ukw9ONyApx2PAB7SxF6Jw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/9041b7-f543-4c63-8e2b-366a9761ea20/1/TqWy83Ukw9ONyApx2PAB7SxF6Jw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/9041b7-f543-4c63-8e2b-366a9761ea20/1/TqWy83Ukw9ONyApx2PAB7SxF6Jw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:f8:90:ba:8e:d3:28:0b:51:2a:2b:86:b1:3d:98:f9:0f:9a:
aa:4d:a3:41:d2:08:4c:27:49:02:eb:19:b7:70:32:1d:e3:25:
bd:21:84:2f:a8:c2:24:09:08:83:1e:c9:de:9b:36:67:11:a1:
a7:a0:50:de:cd:0d:84:17:09:e0:43:9a:ce:05:58:2f:7b:87:
ae:e8:b6:6c:96:30:b6:9a:4d:2d:ca:04:5c:6a:1c:4f:d8:7a:
cb:10:3f:13:68:48:62:79:56:ef:38:e9:f0:13:56:e3:68:a9:
3e:4c:2c:3c:34:e0:24:5d:3d:7d:a5:53:9e:ab:b9:3d:8a:e4:
02:fe:15:11:26:75:9a:ed:0b:7c:10:f7:ca:38:13:43:9c:c0:
a4:7e:56:cd:bd:00:84:14:e2:b3:45:e6:12:fa:b5:d6:95:71:
b8:19:85:98:76:25:cf:30:0b:b7:e9:5b:38:ec:81:ed:1b:72:
14:a5:1e:1b:20:24:7c:65:9f:d1:e7:05:6d:ec:fd:f4:09:be:
90:1e:f3:60:8e:12:4f:d4:30:38:a3:37:88:8a:3d:88:20:f7:
7f:f1:75:f6:e5:c4:63:40:61:22:08:de:56:c4:17:4d:c7:79:
58:29:d2:e8:89:a8:1c:a4:a7:73:53:46:c4:78:43:d0:ba:b9:
12:4d:cd:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:53:58 2025 by rpki-client