Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/4f0551-6922-45bf-97d3-7cf9a5fb6a9c/1/_tf4F9fm3tVu3txESIzUHAUqDcU.mft
File: _tf4F9fm3tVu3txESIzUHAUqDcU.mft (raw, json)
Hash identifier: AlbzN+HgRw++S76L2gu0/Bpkz8EMeKtMs5T7WJUvIH8=
Subject key identifier: 1D:53:0C:C9:F3:5D:A9:DC:FE:E1:E3:67:81:FC:47:94:10:7F:AF:7E
Authority key identifier: FE:D7:F8:17:D7:E6:DE:D5:6E:DE:DC:44:48:8C:D4:1C:05:2A:0D:C5
Certificate issuer: /CN=fed7f817d7e6ded56ededc44488cd41c052a0dc5
Certificate serial: 019A71B77661EEE68B5E33EE22E50A30AAE4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_tf4F9fm3tVu3txESIzUHAUqDcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/4f0551-6922-45bf-97d3-7cf9a5fb6a9c/1/_tf4F9fm3tVu3txESIzUHAUqDcU.mft
Manifest number: 16AF
Signing time: Tue 11 Nov 2025 07:00:39 +0000
Manifest this update: Tue 11 Nov 2025 07:00:39 +0000
Manifest next update: Wed 12 Nov 2025 07:00:39 +0000
Files and hashes: 1: _tf4F9fm3tVu3txESIzUHAUqDcU.crl (hash: r2EqrWwv+E1dMJC42o8d0PaH0CNfB2uzJc4zmaTvuIA=)
2: jlmeoUxgI0KhFHV99BItMxAYMbc.roa (hash: NI9SzLu0aApCsGkR0hpBvVimZxaK1yHkWwQafkG2nq8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/4f0551-6922-45bf-97d3-7cf9a5fb6a9c/1/_tf4F9fm3tVu3txESIzUHAUqDcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/4f0551-6922-45bf-97d3-7cf9a5fb6a9c/1/_tf4F9fm3tVu3txESIzUHAUqDcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/_tf4F9fm3tVu3txESIzUHAUqDcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b7:76:61:ee:e6:8b:5e:33:ee:22:e5:0a:30:aa:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fed7f817d7e6ded56ededc44488cd41c052a0dc5
Validity
Not Before: Nov 11 07:00:39 2025 GMT
Not After : Nov 12 07:00:39 2025 GMT
Subject: CN=1d530cc9f35da9dcfee1e36781fc4794107faf7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:d5:68:14:0f:b1:69:ff:ce:6a:13:b8:61:75:
e4:90:c9:11:47:b3:01:cb:b1:f0:5a:d5:ae:1b:cd:
e0:65:14:17:43:fe:e0:30:ad:15:b9:8f:39:d0:f3:
6f:d4:db:71:10:4d:f1:8f:10:7b:28:36:40:1b:c5:
c9:65:49:75:de:a8:ac:7a:00:58:0e:42:9f:07:39:
36:9f:bb:8e:0e:20:93:db:49:b6:5d:50:4b:d4:68:
c8:d2:52:31:2d:27:f4:6f:df:63:05:e3:02:36:e2:
07:98:cf:e2:da:e7:75:f0:58:4b:5a:51:91:63:67:
27:88:a5:2e:af:09:20:12:09:4d:13:55:40:2e:43:
03:dc:57:aa:04:f3:91:91:1e:fa:ea:80:61:3c:09:
65:38:21:8e:16:24:ac:91:b3:85:36:fe:37:5d:66:
a4:01:9d:47:7e:fc:fb:f4:dd:19:06:3e:db:e3:2a:
d1:ad:1d:52:13:79:71:6f:a3:22:77:f9:cc:4a:9e:
70:20:79:67:99:d0:10:00:e0:cc:90:eb:62:e4:af:
9b:d4:f0:6b:ad:66:55:e2:3d:45:30:df:bf:17:12:
af:41:d1:c1:56:05:67:98:f9:d9:9a:05:ed:ab:20:
95:2d:93:31:02:f8:9d:83:22:b4:c5:4b:8a:81:b8:
08:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:53:0C:C9:F3:5D:A9:DC:FE:E1:E3:67:81:FC:47:94:10:7F:AF:7E
X509v3 Authority Key Identifier:
keyid:FE:D7:F8:17:D7:E6:DE:D5:6E:DE:DC:44:48:8C:D4:1C:05:2A:0D:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_tf4F9fm3tVu3txESIzUHAUqDcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/4f0551-6922-45bf-97d3-7cf9a5fb6a9c/1/_tf4F9fm3tVu3txESIzUHAUqDcU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/4f0551-6922-45bf-97d3-7cf9a5fb6a9c/1/_tf4F9fm3tVu3txESIzUHAUqDcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:70:a7:4f:61:23:94:8f:13:88:8e:01:c1:d3:21:fc:90:43:
ac:e9:6f:77:b4:f9:38:96:2b:01:40:f8:50:48:b4:fe:5e:f8:
63:c2:85:bc:70:6d:2b:d1:c0:23:57:66:42:e4:03:86:97:a6:
a8:0e:b2:db:ae:16:d2:c0:fe:04:d7:b0:f6:f9:cb:2c:b4:bf:
07:5c:5b:bc:76:e0:a1:3f:bd:6f:67:43:dc:54:4c:b7:75:39:
4c:b3:85:dc:d4:8d:b2:c2:02:17:f1:3f:a0:ba:46:e0:66:85:
23:92:84:be:f3:db:cb:c8:d1:79:c5:92:7e:27:d0:4c:01:37:
8f:a4:58:a2:da:fc:13:31:8d:b9:95:5e:d8:3e:5d:64:b6:0b:
2a:e8:ec:fc:20:f8:49:d5:1f:ff:43:60:43:7d:7b:c9:cc:7d:
2b:b0:fa:04:95:57:f3:dd:ea:e5:50:8c:e3:f3:07:de:50:c9:
d8:2e:4f:44:39:f1:24:2b:cb:08:84:6d:fc:57:b1:25:64:de:
b0:3a:79:3e:71:de:9e:ea:17:3e:66:ef:59:0b:01:6b:e5:62:
9a:03:34:8c:c7:e9:e3:6d:f6:52:15:4a:27:45:3d:1b:f8:9e:
0b:70:62:8a:8e:e1:18:d7:40:c6:6f:35:52:a2:49:91:1d:b1:
c2:9c:1a:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:11:26 2025 by rpki-client