Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/ffe7d5-d91d-48ae-8ee5-ce94e38e82d6/1/ToWU69x9fPfaLgA8hNhqfBr4cbw.mft
File: ToWU69x9fPfaLgA8hNhqfBr4cbw.mft (raw, json)
Hash identifier: YU/Mb6E8Yq41PoYXajY4+pbSEsX+mpkxS0+IiJCYW6c=
Subject key identifier: 26:95:FC:E5:CF:29:78:30:74:0A:13:96:8E:36:BB:63:B3:10:87:07
Authority key identifier: 4E:85:94:EB:DC:7D:7C:F7:DA:2E:00:3C:84:D8:6A:7C:1A:F8:71:BC
Certificate issuer: /CN=4e8594ebdc7d7cf7da2e003c84d86a7c1af871bc
Certificate serial: 019A70DC87026DFED3A5CA8057A4DE07C2EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ToWU69x9fPfaLgA8hNhqfBr4cbw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/ffe7d5-d91d-48ae-8ee5-ce94e38e82d6/1/ToWU69x9fPfaLgA8hNhqfBr4cbw.mft
Manifest number: 05C1
Signing time: Tue 11 Nov 2025 03:01:31 +0000
Manifest this update: Tue 11 Nov 2025 03:01:31 +0000
Manifest next update: Wed 12 Nov 2025 03:01:31 +0000
Files and hashes: 1: GanlBJdb2pr7VV04ogaTHUPUlUg.roa (hash: Vbl6ZyOGtSJws1SpPK0y8iRHBk5yj2N+r0ihm4gCy0w=)
2: ToWU69x9fPfaLgA8hNhqfBr4cbw.crl (hash: ZK7IpifK959nszvmY5JTAYYnorlBUH9t/LZlUcyFagY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/ffe7d5-d91d-48ae-8ee5-ce94e38e82d6/1/ToWU69x9fPfaLgA8hNhqfBr4cbw.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/ffe7d5-d91d-48ae-8ee5-ce94e38e82d6/1/ToWU69x9fPfaLgA8hNhqfBr4cbw.mft
rsync://rpki.ripe.net/repository/DEFAULT/ToWU69x9fPfaLgA8hNhqfBr4cbw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 03:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:dc:87:02:6d:fe:d3:a5:ca:80:57:a4:de:07:c2:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e8594ebdc7d7cf7da2e003c84d86a7c1af871bc
Validity
Not Before: Nov 11 03:01:31 2025 GMT
Not After : Nov 12 03:01:31 2025 GMT
Subject: CN=2695fce5cf297830740a13968e36bb63b3108707
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:99:a0:fc:0a:55:e1:7a:15:16:48:22:ff:c9:
98:a0:4c:0c:e3:3e:ef:fe:86:be:a6:79:9c:f5:20:
38:a2:c3:30:39:40:b8:6e:26:0e:d3:53:cf:32:37:
41:0f:7f:36:9f:1d:97:d5:30:c8:e3:1c:c2:e5:eb:
03:80:e6:d7:c2:32:ae:9e:3f:2c:20:f1:98:66:b5:
f4:d6:60:cd:3c:e9:38:24:a3:bd:a6:ff:65:22:77:
93:b3:ed:d5:76:70:7b:b7:7c:cd:46:89:f1:d5:61:
04:f4:99:c0:13:e9:77:6f:52:b8:53:10:23:26:21:
dd:06:7d:b5:cb:1c:d2:2a:1a:09:44:5b:58:7f:1d:
ca:e1:77:93:83:8d:6a:8e:12:2f:ba:73:1a:28:3f:
94:00:0d:1c:1f:ef:6e:9f:ae:b0:0b:65:48:ee:16:
2e:da:2a:70:14:ad:01:d7:be:a8:08:73:68:12:af:
72:77:83:5f:bb:6f:8e:1d:54:88:c4:69:0b:2f:f6:
1f:ad:34:15:51:66:7e:ca:fd:43:66:39:68:81:22:
34:85:cf:1a:06:97:eb:e7:86:80:fb:4d:4f:62:4e:
54:31:64:61:51:71:bf:d3:c8:e8:54:41:9a:ab:13:
4f:7b:b5:ee:d3:71:3a:25:74:1c:fc:52:f8:4c:b0:
9e:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:95:FC:E5:CF:29:78:30:74:0A:13:96:8E:36:BB:63:B3:10:87:07
X509v3 Authority Key Identifier:
keyid:4E:85:94:EB:DC:7D:7C:F7:DA:2E:00:3C:84:D8:6A:7C:1A:F8:71:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ToWU69x9fPfaLgA8hNhqfBr4cbw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/ffe7d5-d91d-48ae-8ee5-ce94e38e82d6/1/ToWU69x9fPfaLgA8hNhqfBr4cbw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/ffe7d5-d91d-48ae-8ee5-ce94e38e82d6/1/ToWU69x9fPfaLgA8hNhqfBr4cbw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:78:d8:76:66:02:4f:83:73:80:0b:35:a2:04:4a:b8:fb:d1:
e7:1f:72:e4:96:88:29:45:fd:78:f8:88:70:a5:ce:0b:f8:d2:
40:ad:ec:17:93:7a:18:47:1a:ec:0e:4f:a8:52:53:1b:8f:8b:
60:32:79:e4:11:d6:06:28:f9:ca:35:47:e4:92:67:14:0d:e2:
40:f2:0c:a0:88:12:27:73:9c:49:cc:cd:c0:ec:75:24:84:14:
10:3c:42:a5:ea:00:55:ea:ab:c2:80:60:6a:1a:2d:d4:ef:f4:
c3:16:95:65:af:63:5e:84:e3:cd:5d:98:fb:e6:a7:be:e0:89:
dd:6a:28:8a:52:94:74:39:ca:16:66:54:3f:85:64:d6:d5:0d:
69:60:03:ed:cf:8f:94:5a:bb:31:42:51:a9:26:2a:a4:a1:85:
19:8f:23:49:29:72:57:97:20:ef:15:bc:f3:9b:5a:dd:0b:e7:
a3:9b:8a:30:b5:22:3f:44:0a:b1:64:7e:ff:36:b8:47:8f:ec:
ee:f9:1c:27:ac:89:17:2c:2f:0e:9b:43:2f:1b:0e:20:39:47:
ab:61:da:ea:72:af:39:a8:2c:29:16:96:e4:7b:47:c2:ce:8e:
66:49:38:6a:d1:d4:a3:b4:c2:17:ec:69:b5:4f:38:f0:3c:54:
6f:ba:e5:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:39:12 2025 by rpki-client