Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/795ed9-8fad-4c44-8583-06ca709a3c59/1/tcsrXq88wV3Us7I62LlHKlJAwDs.mft
File: tcsrXq88wV3Us7I62LlHKlJAwDs.mft (raw, json)
Hash identifier: k1qNSBg8lUBruZYJaaZuKOT1mOvstttslzXQ0+fxgUg=
Subject key identifier: 80:7A:12:DC:D8:1B:DE:DA:22:D0:47:8C:25:B2:68:C4:27:44:E4:25
Authority key identifier: B5:CB:2B:5E:AF:3C:C1:5D:D4:B3:B2:3A:D8:B9:47:2A:52:40:C0:3B
Certificate issuer: /CN=b5cb2b5eaf3cc15dd4b3b23ad8b9472a5240c03b
Certificate serial: 019A7113309AC6558FD6EC27B61D0AA8A33C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tcsrXq88wV3Us7I62LlHKlJAwDs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/795ed9-8fad-4c44-8583-06ca709a3c59/1/tcsrXq88wV3Us7I62LlHKlJAwDs.mft
Manifest number: 0101
Signing time: Tue 11 Nov 2025 04:01:14 +0000
Manifest this update: Tue 11 Nov 2025 04:01:14 +0000
Manifest next update: Wed 12 Nov 2025 04:01:14 +0000
Files and hashes: 1: 4I0Ig-sZsSlS-ISQfhvyI-hIXNs.roa (hash: JlPqPVzZ1fRapenzkzSS/av8yhZnv6+RiIsubYAxBXc=)
2: Ay7JoslT6EAyHRaULsBRtIZWwog.roa (hash: gTv3k9NPlg2vVpHAiGMl3DtLPA9ZFxKifPWXSsGIZk8=)
3: a9i8eCPzOCR2a7g49i_eP0oTcMg.roa (hash: CLgIXtXHGLkSKlPAdABLQyRziV9nANmmCJ4xG0uixD8=)
4: tcsrXq88wV3Us7I62LlHKlJAwDs.crl (hash: VzGf7yx5qK5DafhLQti9cJizltAv5Qk6iM+Xu6Zg+uA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/795ed9-8fad-4c44-8583-06ca709a3c59/1/tcsrXq88wV3Us7I62LlHKlJAwDs.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/795ed9-8fad-4c44-8583-06ca709a3c59/1/tcsrXq88wV3Us7I62LlHKlJAwDs.mft
rsync://rpki.ripe.net/repository/DEFAULT/tcsrXq88wV3Us7I62LlHKlJAwDs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:13:30:9a:c6:55:8f:d6:ec:27:b6:1d:0a:a8:a3:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5cb2b5eaf3cc15dd4b3b23ad8b9472a5240c03b
Validity
Not Before: Nov 11 04:01:14 2025 GMT
Not After : Nov 12 04:01:14 2025 GMT
Subject: CN=807a12dcd81bdeda22d0478c25b268c42744e425
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:b9:8a:05:fb:d1:a4:93:36:c0:3c:18:03:e5:
e6:d6:32:c5:ba:12:78:e3:c7:7d:75:27:6a:34:d6:
e6:86:0e:dd:d1:37:e6:59:d6:32:b8:3f:71:e2:a7:
ec:a3:b8:6b:5a:50:b0:1f:e6:87:f9:f5:59:8b:24:
08:92:00:b6:49:08:94:de:54:ae:24:6d:33:d7:75:
ce:f8:7d:40:09:79:de:3e:5b:1b:94:ca:36:73:63:
df:23:66:c1:79:bd:f8:a8:0b:5d:54:88:4e:e0:7c:
77:38:26:f7:a0:e7:07:80:f5:d0:b5:c1:7b:68:e4:
22:ba:ab:67:34:68:a9:5b:94:b1:60:7b:f0:ec:47:
af:cf:74:14:c3:80:f5:b2:32:30:4b:9e:70:5f:2d:
82:38:66:c5:0d:2f:77:37:6b:15:a3:a5:52:2d:5c:
14:e3:70:bf:42:43:0d:6d:8c:ed:ba:97:7d:ed:aa:
40:3c:91:52:f2:9e:62:01:0b:9f:2d:e9:89:f6:32:
e0:f6:99:1d:cf:c8:a5:08:0b:82:c9:10:27:85:c2:
b8:c8:18:d4:61:3a:a2:02:ec:6f:ce:73:c1:76:9b:
86:6f:b8:70:bc:73:68:a3:d2:18:f7:ff:f8:66:24:
7f:c4:38:05:ce:87:f4:06:cf:d8:df:3e:60:d8:d3:
30:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:7A:12:DC:D8:1B:DE:DA:22:D0:47:8C:25:B2:68:C4:27:44:E4:25
X509v3 Authority Key Identifier:
keyid:B5:CB:2B:5E:AF:3C:C1:5D:D4:B3:B2:3A:D8:B9:47:2A:52:40:C0:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tcsrXq88wV3Us7I62LlHKlJAwDs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/795ed9-8fad-4c44-8583-06ca709a3c59/1/tcsrXq88wV3Us7I62LlHKlJAwDs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/795ed9-8fad-4c44-8583-06ca709a3c59/1/tcsrXq88wV3Us7I62LlHKlJAwDs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:53:06:58:30:48:2f:2a:cd:12:16:32:44:68:a4:31:79:3b:
4d:e6:40:df:b8:dc:f9:a8:cf:3d:9d:3d:5c:5d:09:5e:e2:1c:
e3:34:3f:34:ea:23:e2:84:d7:5d:95:da:99:d1:37:ca:a2:3c:
43:7f:d6:b9:ed:2d:23:68:38:f1:7b:c6:65:c9:bc:8d:53:2f:
bf:c1:c4:35:05:65:35:8e:ec:36:3b:fe:4a:21:7d:94:40:34:
1e:2a:90:74:8e:fb:85:7c:98:62:f3:61:9c:48:82:97:f9:6f:
df:07:55:cc:5c:e6:07:72:4d:d3:8f:27:53:c9:18:3f:75:f2:
24:8e:3e:1c:c3:04:fc:eb:b3:00:4e:b5:27:7d:45:58:72:13:
4a:e2:da:32:af:75:5f:36:82:9f:0a:65:1e:43:df:14:87:dd:
fe:cb:be:58:8a:21:df:eb:ff:a2:77:e3:90:56:61:f7:b6:ee:
c3:d0:46:8f:af:fc:bb:ae:23:4c:2e:9d:2f:45:62:e9:a1:a5:
a7:42:46:de:8c:f8:f5:7b:a9:58:4e:6d:39:b2:bb:f5:4b:ee:
a0:8a:bc:04:17:54:fd:23:51:6e:83:72:8f:22:b4:69:33:a6:
4a:24:9a:60:e2:2b:47:a7:8a:5c:1b:2f:df:22:36:f5:94:5b:
cc:c8:69:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:07:03 2025 by rpki-client