Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/8008fe-175b-41bf-b1d6-2ce0eb458788/1/TFFjb96QX4Uh9BFHnoEyHNz0kEk.mft
File: TFFjb96QX4Uh9BFHnoEyHNz0kEk.mft (raw, json)
Hash identifier: qWg2gcGjJQEvZg0ts2EI2htZ9m2sOd2L455Ey9l1o7M=
Subject key identifier: 52:0F:B9:84:9C:9E:57:71:86:80:AD:BC:45:11:24:7C:66:24:80:3E
Authority key identifier: 4C:51:63:6F:DE:90:5F:85:21:F4:11:47:9E:81:32:1C:DC:F4:90:49
Certificate issuer: /CN=4c51636fde905f8521f411479e81321cdcf49049
Certificate serial: 0199FBEB36E493C988847AEF2435D5FE78DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TFFjb96QX4Uh9BFHnoEyHNz0kEk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/8008fe-175b-41bf-b1d6-2ce0eb458788/1/TFFjb96QX4Uh9BFHnoEyHNz0kEk.mft
Manifest number: 0972
Signing time: Sun 19 Oct 2025 10:02:00 +0000
Manifest this update: Sun 19 Oct 2025 10:02:00 +0000
Manifest next update: Mon 20 Oct 2025 10:02:00 +0000
Files and hashes: 1: TFFjb96QX4Uh9BFHnoEyHNz0kEk.crl (hash: WBo2wbd2JkFbyTAopuxgEgUlftOgPy5JNC7Dw+92uZo=)
2: k88eKZ3ggVkstFfz6v9jAollFdM.roa (hash: RToXutf5Qdv2Y+G73kPgZr6gfiGthSFW8G2eqnaoH64=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/8008fe-175b-41bf-b1d6-2ce0eb458788/1/TFFjb96QX4Uh9BFHnoEyHNz0kEk.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/8008fe-175b-41bf-b1d6-2ce0eb458788/1/TFFjb96QX4Uh9BFHnoEyHNz0kEk.mft
rsync://rpki.ripe.net/repository/DEFAULT/TFFjb96QX4Uh9BFHnoEyHNz0kEk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:36:e4:93:c9:88:84:7a:ef:24:35:d5:fe:78:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c51636fde905f8521f411479e81321cdcf49049
Validity
Not Before: Oct 19 10:02:00 2025 GMT
Not After : Oct 20 10:02:00 2025 GMT
Subject: CN=520fb9849c9e57718680adbc4511247c6624803e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:99:dc:0c:8b:08:2f:51:24:56:fe:20:18:fb:
c3:f2:3f:ee:da:e6:8c:0f:78:8b:b9:07:f9:9a:d4:
7f:88:91:9c:da:37:f2:35:97:3d:16:e9:29:db:e5:
b0:2e:6b:b8:be:59:de:80:03:7f:fe:0b:43:08:b6:
f4:0d:11:e9:4a:10:c2:68:5b:87:cc:55:85:af:75:
6a:ec:74:67:1c:bb:0a:1f:04:33:ec:12:4a:cc:d1:
2c:0e:2c:34:34:21:0f:b4:64:a3:72:2d:16:0f:57:
e0:a0:26:6c:12:09:45:d3:65:ce:a5:70:69:c4:ae:
3b:25:57:b5:67:dc:08:f2:38:d6:0c:ec:04:0e:c0:
d3:d9:75:41:ab:8f:da:45:85:b6:8b:8e:ef:2c:02:
9d:d8:a4:13:bf:14:54:14:85:1b:6f:ae:f5:f8:20:
3f:8d:2f:21:af:7d:9b:66:7e:d7:c6:f0:c3:c2:7b:
d7:26:ac:f6:a4:8f:6d:d9:ed:71:1d:0b:04:97:da:
e2:34:96:8f:47:81:d9:cb:31:89:16:ca:ab:ba:64:
c8:d4:f5:c3:b8:cf:3f:6e:82:e4:09:80:ee:3c:f9:
1f:80:05:ad:e9:95:71:9f:a2:f7:2f:3e:30:81:71:
59:74:76:3b:54:a1:16:27:1e:54:cf:c0:db:d8:8d:
8f:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:0F:B9:84:9C:9E:57:71:86:80:AD:BC:45:11:24:7C:66:24:80:3E
X509v3 Authority Key Identifier:
keyid:4C:51:63:6F:DE:90:5F:85:21:F4:11:47:9E:81:32:1C:DC:F4:90:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TFFjb96QX4Uh9BFHnoEyHNz0kEk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/8008fe-175b-41bf-b1d6-2ce0eb458788/1/TFFjb96QX4Uh9BFHnoEyHNz0kEk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/8008fe-175b-41bf-b1d6-2ce0eb458788/1/TFFjb96QX4Uh9BFHnoEyHNz0kEk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:31:b1:66:6f:29:10:a7:dc:eb:8d:8f:14:3a:f0:18:cd:a1:
cc:07:ab:35:45:a9:b5:56:9b:e3:29:0f:96:d2:f7:be:44:47:
6b:89:12:b6:8b:d5:63:08:4c:dc:d2:e5:ec:51:66:d8:e3:0f:
ad:91:13:46:20:85:7d:dd:16:19:a8:43:10:b4:ca:9d:42:0d:
21:c2:74:23:17:85:3a:03:51:37:d0:e5:d6:47:92:d4:f3:a4:
3d:9a:25:4d:62:87:be:ec:d2:5e:93:98:59:27:a8:cf:70:aa:
c0:91:b6:62:00:41:5b:6e:f7:19:0e:f1:30:fb:48:97:5b:08:
41:6f:9c:a0:99:b3:75:87:9c:c7:ca:76:fe:c5:5f:f4:df:b8:
ce:e2:a6:78:45:49:ed:37:9c:89:2d:54:1f:de:bb:26:04:ca:
42:ba:02:5e:40:1a:68:00:1e:39:4e:c4:13:b7:78:34:de:c2:
ef:91:26:24:04:77:5a:02:dc:55:65:a9:66:2c:ff:fa:29:df:
ea:a5:48:67:f0:30:19:5b:9e:6d:30:a4:95:8b:4e:c9:a0:01:
8d:f5:ed:92:fd:62:bf:97:c4:d3:49:da:0c:01:6a:cb:a6:54:
ac:db:f5:2d:9f:4e:7c:a2:44:ec:80:ed:8c:fe:d7:d5:cd:71:
9e:c4:76:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 12:56:57 2025 by rpki-client