Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/179ed5-d253-4255-9017-88df125ba663/1/TOmGBryaXUQHT_jL7cvbz8NfBWI.mft
File: TOmGBryaXUQHT_jL7cvbz8NfBWI.mft (raw, json)
Hash identifier: BPWFvOSuLYkjJHM2JSlVxE2XWbZPU+QtLw5BYOn6Mtg=
Subject key identifier: 12:A3:62:21:E2:DE:B7:61:C0:3F:27:DF:F0:BD:8E:D0:C0:9E:25:34
Authority key identifier: 4C:E9:86:06:BC:9A:5D:44:07:4F:F8:CB:ED:CB:DB:CF:C3:5F:05:62
Certificate issuer: /CN=4ce98606bc9a5d44074ff8cbedcbdbcfc35f0562
Certificate serial: 019A730125E52E671DEABE5B50BB404E32C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TOmGBryaXUQHT_jL7cvbz8NfBWI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/179ed5-d253-4255-9017-88df125ba663/1/TOmGBryaXUQHT_jL7cvbz8NfBWI.mft
Manifest number: 1722
Signing time: Tue 11 Nov 2025 13:00:46 +0000
Manifest this update: Tue 11 Nov 2025 13:00:46 +0000
Manifest next update: Wed 12 Nov 2025 13:00:46 +0000
Files and hashes: 1: TOmGBryaXUQHT_jL7cvbz8NfBWI.crl (hash: TBlumrn2g23Y2wjt9s9+GuKiVNqs27OfYU7Dcb14EIY=)
2: _2jPSPlgYJsD4ywwlbMtnQzhjck.roa (hash: dPt4vhrAZj1gNIW23Wk2/nT1GhYcZvAFuVHXtMeqVMs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/179ed5-d253-4255-9017-88df125ba663/1/TOmGBryaXUQHT_jL7cvbz8NfBWI.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/179ed5-d253-4255-9017-88df125ba663/1/TOmGBryaXUQHT_jL7cvbz8NfBWI.mft
rsync://rpki.ripe.net/repository/DEFAULT/TOmGBryaXUQHT_jL7cvbz8NfBWI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:73:01:25:e5:2e:67:1d:ea:be:5b:50:bb:40:4e:32:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ce98606bc9a5d44074ff8cbedcbdbcfc35f0562
Validity
Not Before: Nov 11 13:00:46 2025 GMT
Not After : Nov 12 13:00:46 2025 GMT
Subject: CN=12a36221e2deb761c03f27dff0bd8ed0c09e2534
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:09:75:0f:0d:63:28:56:e4:be:02:74:0b:94:
b1:a3:d1:1d:b6:52:86:39:96:85:db:1d:77:07:b3:
12:b1:ee:9e:c7:bf:53:d4:06:91:1e:42:22:71:82:
1b:2a:af:3d:ba:9c:8d:cb:01:73:1f:62:7d:fe:17:
fb:55:8d:3c:9c:b7:bd:ed:3a:6f:39:7c:79:6e:fd:
de:75:7a:b9:d2:5f:2e:b1:63:5e:d1:46:56:5f:76:
d9:41:6b:81:f1:5a:53:8e:b7:4d:d7:43:2e:99:70:
1f:c0:87:fa:b5:ad:aa:e3:ca:c3:07:a1:92:88:0a:
cc:4f:23:00:fb:7f:53:ec:46:1e:14:3a:41:dc:c1:
80:f2:20:e7:ba:61:d8:98:94:ce:31:57:c2:4e:63:
49:9a:f6:dd:65:6b:f7:48:a4:4a:99:d7:a4:a2:78:
82:a7:8b:e4:88:43:33:3e:6b:8f:14:37:60:ab:bd:
8b:82:dc:85:e5:86:2b:b6:89:f2:36:71:00:1b:cc:
41:01:46:30:af:4f:a6:5f:b3:76:4a:ce:ee:34:3d:
24:f6:cb:4f:aa:dc:97:56:26:c1:99:e0:27:3c:42:
a0:b0:16:ba:e4:3e:8d:39:e3:90:9d:cb:29:20:ac:
2b:0b:71:68:d2:04:69:e3:96:bb:aa:d0:40:3a:21:
42:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:A3:62:21:E2:DE:B7:61:C0:3F:27:DF:F0:BD:8E:D0:C0:9E:25:34
X509v3 Authority Key Identifier:
keyid:4C:E9:86:06:BC:9A:5D:44:07:4F:F8:CB:ED:CB:DB:CF:C3:5F:05:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TOmGBryaXUQHT_jL7cvbz8NfBWI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/179ed5-d253-4255-9017-88df125ba663/1/TOmGBryaXUQHT_jL7cvbz8NfBWI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/179ed5-d253-4255-9017-88df125ba663/1/TOmGBryaXUQHT_jL7cvbz8NfBWI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:92:ad:21:c1:17:7b:b1:1c:37:24:42:c1:3f:24:e8:18:ce:
89:93:70:32:c4:b5:62:e3:bc:4f:33:b1:c9:83:32:bf:10:42:
ff:26:40:5b:74:aa:fb:6e:b5:4a:e8:82:22:59:d6:3a:65:15:
2d:7a:75:95:c7:a4:32:41:0a:2a:7b:64:96:20:25:50:8c:7c:
d3:eb:0b:fc:d4:80:85:50:25:ff:56:31:3e:3c:2a:9e:e0:82:
36:1d:fe:8a:e1:f3:9d:59:7a:2a:cf:43:c4:57:49:57:53:48:
52:ad:0a:ea:43:34:c6:12:67:4c:ef:db:81:5c:4d:e3:74:54:
75:d9:4d:32:5f:af:c6:4b:6c:98:4e:0a:77:cc:7f:2b:1c:f5:
5b:64:07:41:88:3b:3c:30:47:5e:4e:b1:7e:bf:3d:22:9a:2e:
ec:cf:e3:d0:bb:68:c5:25:2b:2b:63:40:fc:a5:65:b1:04:98:
46:e7:40:91:a6:4b:b3:fd:72:54:af:4c:fa:c7:56:0a:f3:0c:
c5:6f:8f:0a:82:5b:1d:70:24:2f:05:d3:ae:e8:f9:14:aa:83:
dd:92:16:5e:bd:7e:43:1b:24:d5:57:6c:0c:88:9d:2f:d9:d0:
cf:54:0f:6a:a4:cb:50:74:98:63:46:ed:38:ad:05:72:ab:40:
0b:0f:bd:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:16:23 2025 by rpki-client