Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/185a42-cb7f-4058-86f5-41ae5f4a5055/1/TKvzOws4CIj-HjuA7aSLF4G7dwk.mft
File: TKvzOws4CIj-HjuA7aSLF4G7dwk.mft (raw, json)
Hash identifier: VBFV+EHwfKN+F0EdxQsO48oNSPmExHaJ54YSGbLLLQ0=
Subject key identifier: 8A:49:8F:CB:CE:CB:2A:DC:0F:C6:9A:44:EF:F9:BE:A3:D6:D5:EE:C0
Authority key identifier: 4C:AB:F3:3B:0B:38:08:88:FE:1E:3B:80:ED:A4:8B:17:81:BB:77:09
Certificate issuer: /CN=4cabf33b0b380888fe1e3b80eda48b1781bb7709
Certificate serial: 019A71B8C8BCAFDB5FCEF52E954E7AF32461
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TKvzOws4CIj-HjuA7aSLF4G7dwk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/185a42-cb7f-4058-86f5-41ae5f4a5055/1/TKvzOws4CIj-HjuA7aSLF4G7dwk.mft
Manifest number: 171D
Signing time: Tue 11 Nov 2025 07:02:06 +0000
Manifest this update: Tue 11 Nov 2025 07:02:06 +0000
Manifest next update: Wed 12 Nov 2025 07:02:06 +0000
Files and hashes: 1: Ej6AGqgrDcCEmdxGQ51_3en2bK0.roa (hash: iJ7FETE7qwjnaLdIl0yVteeRiSysQ9U3gczbrqrkwXU=)
2: TKvzOws4CIj-HjuA7aSLF4G7dwk.crl (hash: 6NyX2vq/yj4M51QN/Zsd0QoQC6wMf0EwamkCv9h4biY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/185a42-cb7f-4058-86f5-41ae5f4a5055/1/TKvzOws4CIj-HjuA7aSLF4G7dwk.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/185a42-cb7f-4058-86f5-41ae5f4a5055/1/TKvzOws4CIj-HjuA7aSLF4G7dwk.mft
rsync://rpki.ripe.net/repository/DEFAULT/TKvzOws4CIj-HjuA7aSLF4G7dwk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:c8:bc:af:db:5f:ce:f5:2e:95:4e:7a:f3:24:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4cabf33b0b380888fe1e3b80eda48b1781bb7709
Validity
Not Before: Nov 11 07:02:06 2025 GMT
Not After : Nov 12 07:02:06 2025 GMT
Subject: CN=8a498fcbcecb2adc0fc69a44eff9bea3d6d5eec0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:fb:53:71:fd:55:f3:f4:6b:27:10:06:b1:02:
68:16:04:c1:84:21:a0:62:05:ea:a7:dd:22:52:f0:
c6:62:ed:56:9b:48:33:e5:67:5f:fa:14:18:01:e0:
52:10:f6:73:de:7c:48:bf:99:f0:6a:00:35:83:d3:
cd:83:3a:de:72:85:09:f7:4f:2f:d8:6a:d8:41:bb:
92:cf:dc:76:ab:4a:06:ec:03:79:51:1d:82:08:92:
07:f1:bb:03:a9:e2:61:30:f8:73:8a:14:8f:8c:44:
fe:f2:14:33:c9:6b:9f:a4:95:c0:e4:aa:33:f8:b4:
83:88:a3:0b:f6:61:1d:86:aa:79:7f:5e:a8:8f:69:
43:c9:0b:33:a8:52:69:85:33:0c:60:1c:6f:2b:82:
8f:59:3e:9b:aa:4e:6e:da:5d:64:bf:f9:d6:c0:d5:
84:39:6c:f8:9e:9c:75:29:76:da:2a:c8:34:ea:eb:
6d:94:00:a0:52:b8:30:74:1a:00:94:3d:77:44:ca:
b6:25:89:66:63:34:e5:8a:d9:8c:75:d6:86:82:cc:
9d:ce:dd:25:c4:13:70:6a:07:c6:69:78:84:7a:6a:
7f:b3:2b:91:ae:43:df:25:d5:8a:40:8f:68:52:22:
3c:3b:64:64:76:4d:09:06:9d:5b:f1:7f:d8:fa:44:
56:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:49:8F:CB:CE:CB:2A:DC:0F:C6:9A:44:EF:F9:BE:A3:D6:D5:EE:C0
X509v3 Authority Key Identifier:
keyid:4C:AB:F3:3B:0B:38:08:88:FE:1E:3B:80:ED:A4:8B:17:81:BB:77:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TKvzOws4CIj-HjuA7aSLF4G7dwk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/185a42-cb7f-4058-86f5-41ae5f4a5055/1/TKvzOws4CIj-HjuA7aSLF4G7dwk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/185a42-cb7f-4058-86f5-41ae5f4a5055/1/TKvzOws4CIj-HjuA7aSLF4G7dwk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:d3:d0:b0:e6:68:0d:60:b5:66:ec:95:71:cb:28:6c:95:d4:
e8:34:c0:73:dd:66:29:f2:d2:2a:fa:05:77:34:98:5a:62:2c:
7d:c3:93:19:45:13:bf:71:3f:73:3b:49:6a:70:73:06:c3:fd:
e1:8a:49:52:9f:73:22:52:ce:1c:cd:3f:4f:83:ee:67:a4:b7:
1b:0a:98:95:95:dd:78:35:1c:6d:d8:ec:d9:4b:b0:41:bb:ad:
a7:c9:0e:31:01:da:43:92:ee:f6:f5:01:44:4a:c7:da:5c:05:
aa:88:c1:31:82:31:ca:2c:47:4b:df:a7:4b:4c:91:a9:11:cc:
41:d6:e2:a3:fb:4e:17:0a:9d:ac:59:e1:34:34:e9:9a:b5:b5:
9c:f9:18:9f:d7:15:35:bc:d4:01:06:cf:77:6c:27:f9:fc:20:
db:4d:07:d2:5d:32:ce:81:19:8c:d9:45:72:01:69:e3:2d:cf:
c7:15:a4:1e:cb:40:87:a3:86:32:49:9c:b9:71:1a:f2:d8:48:
9c:76:04:be:94:80:d2:ff:ee:4f:b2:ac:46:e4:24:47:97:ea:
a6:f4:1c:ca:17:16:c3:c5:26:80:dc:16:09:c1:31:c9:e5:69:
af:d1:49:9d:d0:db:05:5e:2c:c7:9c:9e:57:50:6c:d6:b4:00:
e9:c1:f7:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:46:30 2025 by rpki-client