Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/a07523-8392-47f5-82b3-30c430a398e6/1/TnKscetFB6wKZSpUWY2uRR_jP0c.mft
File: TnKscetFB6wKZSpUWY2uRR_jP0c.mft (raw, json)
Hash identifier: fe4dMmoWMGUV20xzVSqDKFb+h46O7QW+SYOJSTWMnlc=
Subject key identifier: 3C:9B:0E:E9:99:B6:40:DC:2A:6A:50:4D:32:7A:69:CC:A4:A5:5F:BC
Authority key identifier: 4E:72:AC:71:EB:45:07:AC:0A:65:2A:54:59:8D:AE:45:1F:E3:3F:47
Certificate issuer: /CN=4e72ac71eb4507ac0a652a54598dae451fe33f47
Certificate serial: 019A71EEE137270AA9A4949F97EA9A724E3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TnKscetFB6wKZSpUWY2uRR_jP0c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/a07523-8392-47f5-82b3-30c430a398e6/1/TnKscetFB6wKZSpUWY2uRR_jP0c.mft
Manifest number: 144A
Signing time: Tue 11 Nov 2025 08:01:11 +0000
Manifest this update: Tue 11 Nov 2025 08:01:11 +0000
Manifest next update: Wed 12 Nov 2025 08:01:11 +0000
Files and hashes: 1: 4zuoqc0Glu6ApY4rQHmNAlxxavo.roa (hash: qDD4JCBpI34S2Q624/ndlMxJa6qHAv5moxaFgFJvL3I=)
2: TnKscetFB6wKZSpUWY2uRR_jP0c.crl (hash: CUMND4XRP//WVLMrKyGfCXFMoceTEhzhtTF9I9lzkYA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/a07523-8392-47f5-82b3-30c430a398e6/1/TnKscetFB6wKZSpUWY2uRR_jP0c.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/a07523-8392-47f5-82b3-30c430a398e6/1/TnKscetFB6wKZSpUWY2uRR_jP0c.mft
rsync://rpki.ripe.net/repository/DEFAULT/TnKscetFB6wKZSpUWY2uRR_jP0c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:e1:37:27:0a:a9:a4:94:9f:97:ea:9a:72:4e:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e72ac71eb4507ac0a652a54598dae451fe33f47
Validity
Not Before: Nov 11 08:01:11 2025 GMT
Not After : Nov 12 08:01:11 2025 GMT
Subject: CN=3c9b0ee999b640dc2a6a504d327a69cca4a55fbc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:f7:8c:d3:b2:c9:ae:65:16:fe:f3:0b:7a:91:
8f:a3:bd:2a:dc:6d:18:3d:fb:91:79:8a:b7:7a:5b:
71:3f:87:9e:66:7c:3c:88:80:91:b4:10:c5:bc:35:
0c:bd:84:4a:14:ec:51:7f:b8:c4:c8:0c:1a:d3:28:
ff:50:53:81:b0:40:02:11:ff:b0:34:fa:b5:6a:f7:
19:c1:83:4b:c7:b0:3b:db:1f:5f:49:a6:98:eb:87:
aa:c9:80:c5:dc:05:a3:c4:45:5d:b6:0d:af:71:76:
ac:21:01:e7:99:f3:ec:32:a7:8b:07:ae:99:ce:de:
f0:b4:60:9e:7b:20:32:ac:06:0e:b1:f5:2d:8e:8b:
d7:84:b2:4b:4f:e9:59:72:d8:a6:0b:82:22:ca:db:
44:74:b4:48:93:e4:a1:ad:df:79:0e:1c:c8:fe:7c:
0e:8e:a7:dc:66:0b:11:4b:34:a9:01:44:32:70:cc:
84:4e:a6:80:d8:92:b7:eb:73:a8:1a:8e:be:e1:df:
e6:57:06:8a:b0:e7:7c:69:a0:e4:25:c1:d5:a8:55:
be:9d:0e:97:33:85:a6:99:16:f7:5a:fe:c2:36:ae:
e4:65:b6:7b:30:b4:39:33:a4:08:91:01:11:d8:4f:
22:5e:4b:9b:e1:5b:62:72:f5:b3:89:61:fa:f2:0a:
95:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:9B:0E:E9:99:B6:40:DC:2A:6A:50:4D:32:7A:69:CC:A4:A5:5F:BC
X509v3 Authority Key Identifier:
keyid:4E:72:AC:71:EB:45:07:AC:0A:65:2A:54:59:8D:AE:45:1F:E3:3F:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TnKscetFB6wKZSpUWY2uRR_jP0c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/a07523-8392-47f5-82b3-30c430a398e6/1/TnKscetFB6wKZSpUWY2uRR_jP0c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/a07523-8392-47f5-82b3-30c430a398e6/1/TnKscetFB6wKZSpUWY2uRR_jP0c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:58:2f:d8:7b:43:5f:96:c2:49:5b:7a:ec:a6:26:fb:64:fd:
03:d5:86:c6:df:f6:cb:87:3e:b8:d6:ed:fc:9e:5c:7d:5f:5d:
5d:a4:0e:c6:87:bf:93:e0:eb:b9:56:05:7a:61:6b:c7:79:aa:
3c:7d:cb:89:de:57:18:e3:6a:34:82:8e:af:5e:e6:f7:10:c8:
12:02:ad:c4:44:a3:26:1a:14:50:77:67:bb:ff:4e:9e:18:c3:
b6:6c:73:07:97:0a:44:b9:58:fe:35:72:fe:8b:3a:71:56:06:
93:01:34:74:77:eb:2e:04:fb:1e:c9:31:11:ab:e2:33:84:de:
fa:c8:71:53:0c:7b:f3:99:ea:7e:aa:e7:8b:e8:f2:a7:31:43:
01:81:e7:4e:93:67:09:eb:c8:8c:95:70:5b:b3:a9:df:5d:ea:
d5:d7:0f:61:e7:09:37:89:7e:53:7e:d3:23:63:49:f8:e1:06:
65:a0:9d:35:75:f7:a1:ae:c3:86:f4:e7:e7:ef:6e:00:b9:5e:
66:92:ba:82:6a:1c:3c:d0:a6:cc:e1:ae:a1:49:b5:29:2f:06:
37:ab:f3:1c:6e:11:0b:63:8e:11:f4:c6:cb:64:27:71:c2:13:
d4:29:bb:78:02:20:10:68:45:71:24:9a:5d:f0:9f:7a:a5:85:
db:2b:60:97
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpx7uE3JwqppJSfl+qack47MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRlNzJhYzcxZWI0NTA3YWMwYTY1MmE1NDU5OGRhZTQ1MWZl
MzNmNDcwHhcNMjUxMTExMDgwMTExWhcNMjUxMTEyMDgwMTExWjAzMTEwLwYDVQQD
EygzYzliMGVlOTk5YjY0MGRjMmE2YTUwNGQzMjdhNjljY2E0YTU1ZmJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxfeM07LJrmUW/vMLepGPo70q3G0Y
PfuReYq3eltxP4eeZnw8iICRtBDFvDUMvYRKFOxRf7jEyAwa0yj/UFOBsEACEf+w
NPq1avcZwYNLx7A72x9fSaaY64eqyYDF3AWjxEVdtg2vcXasIQHnmfPsMqeLB66Z
zt7wtGCeeyAyrAYOsfUtjovXhLJLT+lZctimC4IiyttEdLRIk+Shrd95DhzI/nwO
jqfcZgsRSzSpAUQycMyETqaA2JK363OoGo6+4d/mVwaKsOd8aaDkJcHVqFW+nQ6X
M4WmmRb3Wv7CNq7kZbZ7MLQ5M6QIkQER2E8iXkub4VticvWziWH68gqVwwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDybDumZtkDcKmpQTTJ6acykpV+8MB8GA1UdIwQY
MBaAFE5yrHHrRQesCmUqVFmNrkUf4z9HMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVG5Lc2NldEZCNndLWlNwVVdZMnVSUl9qUDBjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS9hMDc1MjMtODM5Mi00N2Y1LTgyYjMt
MzBjNDMwYTM5OGU2LzEvVG5Lc2NldEZCNndLWlNwVVdZMnVSUl9qUDBjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZS9hMDc1MjMtODM5Mi00N2Y1LTgyYjMtMzBjNDMwYTM5OGU2
LzEvVG5Lc2NldEZCNndLWlNwVVdZMnVSUl9qUDBjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVlgv2HtD
X5bCSVt67KYm+2T9A9WGxt/2y4c+uNbt/J5cfV9dXaQOxoe/k+DruVYFemFrx3mq
PH3Lid5XGONqNIKOr17m9xDIEgKtxESjJhoUUHdnu/9OnhjDtmxzB5cKRLlY/jVy
/os6cVYGkwE0dHfrLgT7HskxEaviM4Te+shxUwx785nqfqrni+jypzFDAYHnTpNn
CevIjJVwW7Op313q1dcPYecJN4l+U37TI2NJ+OEGZaCdNXX3oa7DhvTn5+9uALle
ZpK6gmocPNCmzOGuoUm1KS8GN6vzHG4RC2OOEfTGy2QnccIT1Cm7eAIgEGhFcSSa
XfCfeqWF2ytglw==
-----END CERTIFICATE-----
Generated at Tue Nov 11 14:08:36 2025 by rpki-client