Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/ed384e-9949-4cc0-8a37-3bb2cd80a2c9/1/Tq5vUk7tD3PISbBkOCe4DjfEbHE.mft
File: Tq5vUk7tD3PISbBkOCe4DjfEbHE.mft (raw, json)
Hash identifier: es1nLHHO3XkI0npp3bNDtnVL0KvBnZExpgB6xog19pU=
Subject key identifier: 2B:F5:66:7D:9C:B1:D0:A5:F5:9F:C4:D5:E8:0F:32:6E:23:62:1C:8B
Authority key identifier: 4E:AE:6F:52:4E:ED:0F:73:C8:49:B0:64:38:27:B8:0E:37:C4:6C:71
Certificate issuer: /CN=4eae6f524eed0f73c849b0643827b80e37c46c71
Certificate serial: 019A725C785591BAA5619476007EF72F9809
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tq5vUk7tD3PISbBkOCe4DjfEbHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/ed384e-9949-4cc0-8a37-3bb2cd80a2c9/1/Tq5vUk7tD3PISbBkOCe4DjfEbHE.mft
Manifest number: 1720
Signing time: Tue 11 Nov 2025 10:00:53 +0000
Manifest this update: Tue 11 Nov 2025 10:00:53 +0000
Manifest next update: Wed 12 Nov 2025 10:00:53 +0000
Files and hashes: 1: Tq5vUk7tD3PISbBkOCe4DjfEbHE.crl (hash: bTyOWXY7O8kJTU+fvyIoNcx+/5pCSnkIJp0ZShxPttE=)
2: ZPx2mzUkeOD00cVnYPqjI9aytDo.roa (hash: 9BSbx2wnbDuYyWn09oP3MayodoEwoQbrU6xTUmUCOR8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/ed384e-9949-4cc0-8a37-3bb2cd80a2c9/1/Tq5vUk7tD3PISbBkOCe4DjfEbHE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/ed384e-9949-4cc0-8a37-3bb2cd80a2c9/1/Tq5vUk7tD3PISbBkOCe4DjfEbHE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Tq5vUk7tD3PISbBkOCe4DjfEbHE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:78:55:91:ba:a5:61:94:76:00:7e:f7:2f:98:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4eae6f524eed0f73c849b0643827b80e37c46c71
Validity
Not Before: Nov 11 10:00:53 2025 GMT
Not After : Nov 12 10:00:53 2025 GMT
Subject: CN=2bf5667d9cb1d0a5f59fc4d5e80f326e23621c8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:61:17:df:9f:71:a0:6c:92:a6:a6:b4:28:6d:
bc:4c:39:bc:37:28:07:0c:d1:fb:11:57:9c:c4:11:
d0:04:ad:e7:ae:d7:a9:3a:ad:9d:b5:27:97:71:71:
4a:56:34:77:42:63:30:c1:14:93:ab:51:54:73:43:
b5:f5:24:8f:a2:2e:ae:c4:95:aa:dc:10:02:6e:f1:
34:ab:8d:84:a1:b4:01:65:f9:b8:4e:ae:54:52:df:
7f:3f:c2:45:49:14:29:a8:93:fa:d1:4a:e4:72:a5:
74:2e:f9:da:2f:fc:72:32:98:b0:b4:45:35:1b:59:
29:74:92:e7:87:65:5f:61:a8:5b:33:f9:60:e0:6b:
0d:29:39:86:3f:82:9a:76:9b:fa:0b:92:eb:84:f3:
b9:ab:da:89:f0:81:ae:08:73:17:9b:68:bc:22:4a:
fa:5a:9b:47:97:18:76:6c:df:c2:4f:6e:74:f8:75:
ec:c7:23:ce:a9:31:8a:d6:6d:ee:d3:cc:c2:4d:d8:
ff:56:fb:1f:f9:bf:51:a8:f3:6b:63:9c:22:fa:16:
41:6c:31:3a:c1:b9:6e:92:82:31:a5:73:7a:7b:60:
fe:23:c5:fb:a2:33:1e:8e:66:76:93:90:a3:07:7c:
3a:9b:77:56:f9:fe:d6:71:0f:3b:f7:34:c2:13:38:
11:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:F5:66:7D:9C:B1:D0:A5:F5:9F:C4:D5:E8:0F:32:6E:23:62:1C:8B
X509v3 Authority Key Identifier:
keyid:4E:AE:6F:52:4E:ED:0F:73:C8:49:B0:64:38:27:B8:0E:37:C4:6C:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tq5vUk7tD3PISbBkOCe4DjfEbHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/ed384e-9949-4cc0-8a37-3bb2cd80a2c9/1/Tq5vUk7tD3PISbBkOCe4DjfEbHE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/ed384e-9949-4cc0-8a37-3bb2cd80a2c9/1/Tq5vUk7tD3PISbBkOCe4DjfEbHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:61:49:36:88:35:36:cf:b3:12:c2:ca:bf:14:06:e2:5c:0b:
1b:e8:cd:d2:42:a6:16:d9:3f:74:33:e4:8c:88:50:55:f2:25:
45:dc:e3:be:aa:36:10:a4:6e:55:66:0c:1d:48:fc:49:fe:37:
5a:c4:db:86:b8:f8:6c:62:e0:0f:e3:5b:64:b2:b9:ba:f9:da:
d8:08:a9:0c:71:22:72:08:0c:13:4c:b1:33:36:4f:ed:21:ad:
55:38:f8:ba:37:54:95:42:fb:ae:65:83:d7:44:ac:b2:68:0a:
90:17:c0:03:08:12:d6:cc:b0:28:b2:07:50:00:03:67:95:1e:
7a:0a:af:d8:e3:18:26:5f:54:88:b2:1e:28:03:01:40:52:62:
00:ce:0c:e4:f3:b0:22:20:e4:ff:e7:75:b1:58:8d:31:af:05:
e8:69:62:04:a8:08:dc:7c:fd:1a:66:77:d5:7d:a6:1c:e6:3d:
17:39:8e:b3:d1:d0:fa:9a:6e:25:55:34:e6:43:c6:d0:86:b4:
a1:b0:cf:12:a4:ea:7f:f4:9e:d2:41:16:a6:3b:27:91:54:20:
d0:57:c2:f2:0e:6e:78:d5:71:7f:c6:ae:c9:ae:ea:af:2c:f0:
ea:ea:f8:c9:64:84:fe:5b:a2:38:fd:5a:ed:c7:5f:f6:11:88:
92:8f:ed:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:45:12 2025 by rpki-client