Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/55d584-19a1-47c0-95a6-bc8e0b69ac12/1/tEjWJqkg5C2s0OlI6Wal5LzDwRw.mft
File: tEjWJqkg5C2s0OlI6Wal5LzDwRw.mft (raw, json)
Hash identifier: 3YC+7szZ+5urLcxdWsun7G6euUqKmtTLTM3yXV7F5lk=
Subject key identifier: 20:80:E0:F4:CF:63:49:E0:51:B4:C7:E0:13:44:0E:99:D2:63:26:2F
Authority key identifier: B4:48:D6:26:A9:20:E4:2D:AC:D0:E9:48:E9:66:A5:E4:BC:C3:C1:1C
Certificate issuer: /CN=b448d626a920e42dacd0e948e966a5e4bcc3c11c
Certificate serial: 019A4F2B2B09C1D5087B11359A6C08B31338
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tEjWJqkg5C2s0OlI6Wal5LzDwRw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/55d584-19a1-47c0-95a6-bc8e0b69ac12/1/tEjWJqkg5C2s0OlI6Wal5LzDwRw.mft
Manifest number: 116C
Signing time: Tue 04 Nov 2025 14:00:20 +0000
Manifest this update: Tue 04 Nov 2025 14:00:20 +0000
Manifest next update: Wed 05 Nov 2025 14:00:20 +0000
Files and hashes: 1: Tm8yT_3vBgLrxw1Lr4A3GN1Cjk4.roa (hash: cpwfuPoZQp9+xwJvstUEZKWWh0LDOj40EbCeSJBVSfw=)
2: tEjWJqkg5C2s0OlI6Wal5LzDwRw.crl (hash: fDXIpi2Gz4GJm6K+dSLZzo8yT29QyCImGeprOK5F4fI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/55d584-19a1-47c0-95a6-bc8e0b69ac12/1/tEjWJqkg5C2s0OlI6Wal5LzDwRw.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/55d584-19a1-47c0-95a6-bc8e0b69ac12/1/tEjWJqkg5C2s0OlI6Wal5LzDwRw.mft
rsync://rpki.ripe.net/repository/DEFAULT/tEjWJqkg5C2s0OlI6Wal5LzDwRw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 14:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:2b:2b:09:c1:d5:08:7b:11:35:9a:6c:08:b3:13:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b448d626a920e42dacd0e948e966a5e4bcc3c11c
Validity
Not Before: Nov 4 14:00:20 2025 GMT
Not After : Nov 5 14:00:20 2025 GMT
Subject: CN=2080e0f4cf6349e051b4c7e013440e99d263262f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:cf:b1:91:40:a6:cd:cf:e1:92:f2:78:22:55:
ed:6f:46:b7:0d:0c:e3:3f:0b:50:44:f4:35:21:e3:
7a:e0:21:2d:f8:b2:0a:88:ee:ae:6a:09:30:cc:30:
3d:3e:85:24:dd:32:4b:99:17:c6:cd:3d:3d:d3:80:
2a:af:30:c3:09:37:70:8d:c7:83:1b:47:b6:96:c2:
44:53:9c:b5:b2:34:49:e0:01:c2:71:7c:2d:aa:dc:
20:e8:db:92:5f:d0:32:9b:a1:f5:44:f2:73:63:68:
c9:8a:9c:1a:bc:3e:04:99:e6:44:56:88:38:ff:8c:
f0:b5:63:34:09:66:9b:3a:83:8e:ac:95:30:3b:87:
ff:66:cf:a6:b7:b4:d1:1d:dc:c5:30:3d:ad:48:10:
ed:93:33:39:96:2d:51:7b:c0:f2:27:2c:4f:51:83:
f4:ce:9b:43:b1:52:ad:6f:a6:79:40:1a:96:fc:72:
d5:00:9a:34:8a:6f:93:af:a1:44:bf:f3:82:c5:79:
da:ed:0e:0e:52:a1:4c:f7:53:86:55:97:34:f2:80:
85:e6:6c:84:89:85:17:ec:49:bb:c0:a4:a9:71:a6:
25:ab:e1:a3:e0:39:8b:93:4a:00:88:9d:d0:56:02:
0b:9c:26:bb:44:1c:35:ca:97:1c:34:01:e9:45:00:
d1:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:80:E0:F4:CF:63:49:E0:51:B4:C7:E0:13:44:0E:99:D2:63:26:2F
X509v3 Authority Key Identifier:
keyid:B4:48:D6:26:A9:20:E4:2D:AC:D0:E9:48:E9:66:A5:E4:BC:C3:C1:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tEjWJqkg5C2s0OlI6Wal5LzDwRw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/55d584-19a1-47c0-95a6-bc8e0b69ac12/1/tEjWJqkg5C2s0OlI6Wal5LzDwRw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/55d584-19a1-47c0-95a6-bc8e0b69ac12/1/tEjWJqkg5C2s0OlI6Wal5LzDwRw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:f1:30:67:30:66:ff:10:77:4b:33:8c:0b:b8:68:4f:f7:a8:
63:90:c6:ea:6e:a4:43:59:06:6b:39:59:7e:3d:42:c0:2f:ab:
ce:dd:be:87:2b:b6:59:3d:b2:a2:2a:c9:49:c2:e5:1d:69:e6:
34:67:8d:d1:87:36:5b:82:66:eb:28:e2:bb:f8:5e:dc:ec:50:
63:0f:d9:c9:03:fc:9a:bb:74:a3:33:f8:e9:64:01:65:8c:59:
58:a9:af:d3:1c:48:fe:ab:80:ec:31:59:c8:29:b2:2b:43:02:
da:3b:ad:9e:55:ce:17:cb:49:b2:64:e6:aa:e9:dd:ba:bd:6c:
e9:b8:5a:1b:e5:47:51:c8:25:bc:b1:b0:95:87:fc:4f:51:71:
d3:95:e7:44:46:e8:4e:e6:81:d5:d1:05:5f:5b:b5:d1:2c:55:
d0:c9:62:e8:6e:76:ab:56:e1:c5:c3:65:e0:df:77:70:7d:51:
1a:af:ed:e5:14:61:89:3e:f7:a7:45:b2:b5:40:69:e2:3a:cb:
a8:5c:92:de:59:de:33:80:dd:ba:09:fa:09:9d:99:69:59:e8:
46:1d:ef:1b:1b:62:44:50:af:c5:dc:d9:74:ab:19:72:9a:20:
3f:4a:c2:02:93:1f:ef:1c:9b:31:4a:ad:39:82:f9:e2:38:0e:
a0:da:4e:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 22:34:10 2025 by rpki-client