Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/648c75-2be8-4bfd-a1b1-cb8b3a094209/1/Ts9TAHx5zF4vLXNWupEhp4wMdxQ.mft
File: Ts9TAHx5zF4vLXNWupEhp4wMdxQ.mft (raw, json)
Hash identifier: X34z0hJXfr5DArHesh2hnhojqGHHXbN9Ew//MWFEWns=
Subject key identifier: 15:38:B9:A7:DE:06:BC:A6:05:54:A2:1A:63:8E:33:AE:AB:D5:CF:4B
Authority key identifier: 4E:CF:53:00:7C:79:CC:5E:2F:2D:73:56:BA:91:21:A7:8C:0C:77:14
Certificate issuer: /CN=4ecf53007c79cc5e2f2d7356ba9121a78c0c7714
Certificate serial: 019A0E5DE42AA3606F7A3ABCDAE12223952A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ts9TAHx5zF4vLXNWupEhp4wMdxQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/648c75-2be8-4bfd-a1b1-cb8b3a094209/1/Ts9TAHx5zF4vLXNWupEhp4wMdxQ.mft
Manifest number: 174D
Signing time: Thu 23 Oct 2025 00:00:25 +0000
Manifest this update: Thu 23 Oct 2025 00:00:25 +0000
Manifest next update: Fri 24 Oct 2025 00:00:25 +0000
Files and hashes: 1: 1-n-9hD734eUWTfI1sQzb2mm0u70.roa (hash: prY6VkL1Otme9e/iQnbu0E7x7kgOdTIuBs01J6UM6iw=)
2: 77nHJ74F1fFAwUbmMeRLrxeDdWA.roa (hash: 2Mtt2AaUFR4ZOfRNdKyuPT3cj2EQ+qy46BQe2ut00YY=)
3: G7v3pCkQ6hmfhpbVxzOwUWwmzDY.roa (hash: nVHjBCeWZEPbhgav/+qfuSQLmW0a+8zRMZx9D7jY6PU=)
4: Ts9TAHx5zF4vLXNWupEhp4wMdxQ.crl (hash: uzDKkJTgPzYuxtJyv9MnLgPH2LNdUIkhJ+hGndNIeOg=)
5: ZLnsYJrehSHy13eQaMRY1Tbep5I.roa (hash: beMY8QS7fWlkYI5VTaRGjskfF3hsi1HR7CrNo9yaWBM=)
6: ikzzB-TS7fbu_e8Jm20uc--Bfbk.roa (hash: L3G3izasb6pEF2T5imYXwo1rhko1cZpeUonzNyfE5G4=)
7: jUW3uJuzvpMts6ZS_PpOE0-vHy4.roa (hash: QVsKQjI9Ob132etLfwnFEQDpraGA87DL9fvaD59Kiac=)
8: s2kaxqyHVyCTqaRomO4ohfBebsc.roa (hash: vuPF+RwNPBvTGLZXAOB0JJk86Umi+Vc+1JKtKmoQbqM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/648c75-2be8-4bfd-a1b1-cb8b3a094209/1/Ts9TAHx5zF4vLXNWupEhp4wMdxQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/648c75-2be8-4bfd-a1b1-cb8b3a094209/1/Ts9TAHx5zF4vLXNWupEhp4wMdxQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ts9TAHx5zF4vLXNWupEhp4wMdxQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 23 Oct 2025 22:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:0e:5d:e4:2a:a3:60:6f:7a:3a:bc:da:e1:22:23:95:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ecf53007c79cc5e2f2d7356ba9121a78c0c7714
Validity
Not Before: Oct 23 00:00:25 2025 GMT
Not After : Oct 24 00:00:25 2025 GMT
Subject: CN=1538b9a7de06bca60554a21a638e33aeabd5cf4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:5c:de:f7:34:0d:55:fb:30:a5:35:d4:de:8a:
24:42:5d:d5:67:22:f2:3a:fb:e2:48:93:ed:0b:25:
b5:3e:7a:3a:9e:0f:80:3c:b1:ec:7e:08:62:76:c0:
61:33:fd:d3:6c:53:ed:09:b0:72:34:a1:87:0f:a6:
73:59:a9:9b:84:dc:df:29:3f:84:a1:29:fd:e2:e2:
37:dc:1b:de:02:e8:e1:fb:17:61:fa:be:31:1d:85:
18:57:56:a9:9e:22:d5:4b:5f:8f:56:36:40:ee:6f:
39:16:39:47:57:6c:e0:28:a1:a1:ad:26:7d:bc:b4:
54:b7:2e:14:41:01:72:a7:95:7f:9d:fb:92:50:dd:
03:ef:b9:cd:cd:e7:72:63:b1:d2:0c:d2:2a:bb:57:
9e:de:c2:7e:c1:da:d1:e0:7c:f6:ec:a5:55:79:c2:
6e:5b:05:ff:7e:79:93:01:c3:db:05:7f:f9:f3:f8:
9e:35:98:5b:0b:be:88:6f:eb:b6:96:2a:13:ee:99:
65:89:1f:56:77:e2:a1:58:98:44:d2:12:6e:f0:2a:
e3:b6:30:47:59:14:04:b0:74:42:e1:bd:0f:81:58:
41:c8:d4:3b:f0:d0:c1:e2:b7:b8:18:61:ab:a8:de:
2f:30:d1:ad:83:d0:a7:ae:fc:c9:3e:05:04:75:b0:
d2:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:38:B9:A7:DE:06:BC:A6:05:54:A2:1A:63:8E:33:AE:AB:D5:CF:4B
X509v3 Authority Key Identifier:
keyid:4E:CF:53:00:7C:79:CC:5E:2F:2D:73:56:BA:91:21:A7:8C:0C:77:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ts9TAHx5zF4vLXNWupEhp4wMdxQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/648c75-2be8-4bfd-a1b1-cb8b3a094209/1/Ts9TAHx5zF4vLXNWupEhp4wMdxQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/648c75-2be8-4bfd-a1b1-cb8b3a094209/1/Ts9TAHx5zF4vLXNWupEhp4wMdxQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:d1:1a:97:37:23:86:5f:0a:ab:f4:d7:b1:6a:a1:d2:c5:4b:
d6:61:8c:bb:e6:7f:05:02:e2:72:6f:8c:f0:ae:02:c2:82:95:
7b:45:79:30:51:51:66:b8:69:e4:f0:22:36:47:04:c1:ba:3f:
7f:cf:22:82:bd:44:84:3b:a0:61:79:83:96:db:b9:45:b7:68:
c4:d2:50:d2:06:09:36:03:a3:8b:9a:ad:37:2b:f9:3c:87:4c:
1d:56:38:28:76:73:55:5d:73:3e:fd:35:81:40:8c:b7:0d:e0:
e3:d6:1a:57:de:b8:a2:8e:11:e8:fb:9f:33:16:61:46:00:f8:
df:b1:95:25:ed:97:b6:01:df:45:0d:46:68:54:29:d0:36:27:
8b:10:26:7e:78:b7:76:31:66:62:18:d1:86:99:3f:05:6d:ea:
d3:b7:b7:ac:15:ae:1d:e4:9a:06:44:79:c0:f0:d7:dc:d5:56:
89:41:94:42:51:68:e2:86:67:19:30:79:88:0a:4c:34:ef:75:
fc:cf:b7:6f:f1:30:61:5a:fa:56:ff:48:88:3b:b9:13:94:20:
ba:af:60:0e:9f:da:d2:72:8b:58:9c:27:a3:8f:f0:56:fb:2a:
44:53:96:d6:20:5f:29:ef:82:cb:0e:79:24:02:68:a5:af:0c:
fe:22:1d:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 23 02:04:35 2025 by rpki-client