Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/ca4c34-2704-4f82-bff8-a7ccd0098477/1/TmIrxVBoe20O9geIzq2w_IIKOB8.mft
File: TmIrxVBoe20O9geIzq2w_IIKOB8.mft (raw, json)
Hash identifier: ce7hHAs/oXTJHYADYl9X/CMbaRFsm4JapS+U3UI4gRw=
Subject key identifier: 3A:AA:BE:DA:A4:21:E4:DD:86:7A:ED:8D:2B:D6:A2:81:6F:13:E5:46
Authority key identifier: 4E:62:2B:C5:50:68:7B:6D:0E:F6:07:88:CE:AD:B0:FC:82:0A:38:1F
Certificate issuer: /CN=4e622bc550687b6d0ef60788ceadb0fc820a381f
Certificate serial: 019A72938D6A1B9BCE815CE5C604506924BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TmIrxVBoe20O9geIzq2w_IIKOB8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/ca4c34-2704-4f82-bff8-a7ccd0098477/1/TmIrxVBoe20O9geIzq2w_IIKOB8.mft
Manifest number: 0A65
Signing time: Tue 11 Nov 2025 11:01:03 +0000
Manifest this update: Tue 11 Nov 2025 11:01:03 +0000
Manifest next update: Wed 12 Nov 2025 11:01:03 +0000
Files and hashes: 1: TmIrxVBoe20O9geIzq2w_IIKOB8.crl (hash: BGNzCAAUFcA4OfRxVn1Uy499tffTDTGKs9rQBhNFedc=)
2: t4aglK9u5BBs2nCD-lvEdZGnyNE.roa (hash: poJOpqUdh9mquobj4xZre8xkqBntoXYzhaUhNLYqXsg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/ca4c34-2704-4f82-bff8-a7ccd0098477/1/TmIrxVBoe20O9geIzq2w_IIKOB8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/ca4c34-2704-4f82-bff8-a7ccd0098477/1/TmIrxVBoe20O9geIzq2w_IIKOB8.mft
rsync://rpki.ripe.net/repository/DEFAULT/TmIrxVBoe20O9geIzq2w_IIKOB8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:93:8d:6a:1b:9b:ce:81:5c:e5:c6:04:50:69:24:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e622bc550687b6d0ef60788ceadb0fc820a381f
Validity
Not Before: Nov 11 11:01:03 2025 GMT
Not After : Nov 12 11:01:03 2025 GMT
Subject: CN=3aaabedaa421e4dd867aed8d2bd6a2816f13e546
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:a0:c2:4b:68:a8:28:52:ea:c3:fc:a8:6b:49:
a9:35:45:f2:91:2b:85:36:7b:30:80:07:4a:06:5d:
d8:b1:39:d2:f7:7b:6c:7d:f6:e9:80:66:73:4e:a0:
b7:79:23:9d:67:b2:2d:6c:15:14:90:35:8c:b7:6e:
36:c7:db:f1:ed:c7:15:f1:36:cd:1a:1e:5c:ad:c8:
2c:84:3c:a8:29:4e:d0:da:3b:dd:25:28:c4:e4:87:
ee:74:86:56:33:4b:20:28:24:89:1f:76:1f:f0:1c:
a8:fa:92:93:1f:6f:ba:de:38:93:ec:a2:45:f3:1c:
53:e5:a1:67:d0:77:79:7f:75:43:1f:34:20:4d:12:
9b:6f:6a:59:c1:40:89:d4:5f:60:dd:2a:dc:6f:16:
38:df:a1:d8:ec:28:ff:3c:c7:2e:92:d7:01:4f:bf:
40:97:42:f1:93:1b:62:b3:e0:3a:e2:4e:36:d8:35:
d7:12:09:16:13:5c:3f:0f:31:ab:16:10:26:24:eb:
10:94:9c:8f:24:69:79:6a:fc:e2:ac:82:9c:f9:88:
45:d1:74:2b:95:48:ff:48:19:24:52:8b:ec:4d:b2:
fb:1e:28:a2:51:1c:94:89:7d:a9:28:59:43:6c:aa:
d8:d1:77:07:17:6a:45:50:0d:6f:37:f7:e3:1e:ed:
ff:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:AA:BE:DA:A4:21:E4:DD:86:7A:ED:8D:2B:D6:A2:81:6F:13:E5:46
X509v3 Authority Key Identifier:
keyid:4E:62:2B:C5:50:68:7B:6D:0E:F6:07:88:CE:AD:B0:FC:82:0A:38:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TmIrxVBoe20O9geIzq2w_IIKOB8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/ca4c34-2704-4f82-bff8-a7ccd0098477/1/TmIrxVBoe20O9geIzq2w_IIKOB8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/ca4c34-2704-4f82-bff8-a7ccd0098477/1/TmIrxVBoe20O9geIzq2w_IIKOB8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:c7:af:63:36:2e:09:02:96:bd:d1:50:96:80:6b:0f:3b:40:
d7:5d:5c:0f:f7:39:ee:fc:ff:7f:6c:ec:c2:02:bd:58:ff:32:
15:0c:44:f2:09:fa:28:76:d6:25:00:12:79:ba:7e:25:df:da:
99:92:e5:eb:64:b9:3a:64:2f:73:f5:84:5c:72:06:6a:62:8f:
aa:4c:13:ba:5d:a1:4b:b4:3f:95:79:c9:4f:a3:6a:50:d7:85:
4d:87:8f:86:2b:7f:95:59:f3:d4:5d:93:66:52:64:42:93:2f:
b4:da:d6:c9:c7:b2:82:fa:2a:34:fa:16:e6:d3:5d:67:9a:18:
1b:95:42:ea:d7:bf:fe:a2:22:ba:63:d2:0b:38:38:fe:6c:fc:
9e:31:92:ad:50:ae:4c:a8:f8:2e:8e:1a:74:9b:16:0a:d7:71:
66:f6:d9:3c:dd:0a:b4:46:e3:51:e3:c6:b1:ca:f8:81:2d:fb:
d2:4c:f4:f7:6f:08:82:9f:36:45:46:2f:a4:d4:6b:a7:74:43:
bf:a6:6b:25:28:2a:97:c4:b7:2a:03:eb:79:f2:24:2b:0c:66:
b9:e9:b7:66:8d:e1:50:8b:4e:28:a4:93:a3:01:fb:21:f5:ec:
16:b8:d8:11:4e:a7:a1:5b:b9:12:76:2b:fa:28:2f:86:ef:de:
82:3e:a0:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:08:04 2025 by rpki-client