Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/7434e1-7413-4f6a-a29c-cdc81db77531/1/tIvY7E4wHJ57CkO-8PPd06RTFVo.mft
File: tIvY7E4wHJ57CkO-8PPd06RTFVo.mft (raw, json)
Hash identifier: YSqGE/+YRYflW7piyTDdTS49GOMhBHEZW9q4sQB2Wlw=
Subject key identifier: 8B:28:46:08:FF:BA:D8:80:4E:9A:C3:68:C9:3D:16:44:DC:D4:00:7A
Authority key identifier: B4:8B:D8:EC:4E:30:1C:9E:7B:0A:43:BE:F0:F3:DD:D3:A4:53:15:5A
Certificate issuer: /CN=b48bd8ec4e301c9e7b0a43bef0f3ddd3a453155a
Certificate serial: 019A4FD0591AF4A7B6B2ED08A0FE57CB1370
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tIvY7E4wHJ57CkO-8PPd06RTFVo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/7434e1-7413-4f6a-a29c-cdc81db77531/1/tIvY7E4wHJ57CkO-8PPd06RTFVo.mft
Manifest number: 03CE
Signing time: Tue 04 Nov 2025 17:00:45 +0000
Manifest this update: Tue 04 Nov 2025 17:00:45 +0000
Manifest next update: Wed 05 Nov 2025 17:00:45 +0000
Files and hashes: 1: RB7HUixrp2_fRnv8EOUDAJuY_s8.roa (hash: 8tnZtAu3C6mP5DEQfehN4BPaOTowIhr+JO1L2V82k9E=)
2: tIvY7E4wHJ57CkO-8PPd06RTFVo.crl (hash: bzIqzx9RFhAF0coz60ebs8yXwZL0WBoS4yQzn/3NRzE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/7434e1-7413-4f6a-a29c-cdc81db77531/1/tIvY7E4wHJ57CkO-8PPd06RTFVo.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/7434e1-7413-4f6a-a29c-cdc81db77531/1/tIvY7E4wHJ57CkO-8PPd06RTFVo.mft
rsync://rpki.ripe.net/repository/DEFAULT/tIvY7E4wHJ57CkO-8PPd06RTFVo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 17:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:d0:59:1a:f4:a7:b6:b2:ed:08:a0:fe:57:cb:13:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b48bd8ec4e301c9e7b0a43bef0f3ddd3a453155a
Validity
Not Before: Nov 4 17:00:45 2025 GMT
Not After : Nov 5 17:00:45 2025 GMT
Subject: CN=8b284608ffbad8804e9ac368c93d1644dcd4007a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:c0:3c:67:ff:5f:d6:50:b5:c0:e4:8d:a4:7d:
29:74:a6:d1:5f:3b:59:84:29:a0:ed:52:b8:54:82:
7e:c3:43:f3:9a:6c:c2:dc:5e:a4:fe:70:18:eb:01:
93:5b:da:42:b6:51:fa:62:ef:f1:b4:78:21:74:1d:
39:a1:35:3e:f9:a8:42:68:91:8c:ee:fb:8d:11:f2:
84:16:ed:42:d6:b5:a1:15:30:99:d4:f1:3b:5e:50:
38:a8:87:2d:68:05:99:4b:19:b0:bf:9f:c7:ce:11:
99:d1:80:cf:80:47:ab:74:30:c8:d9:80:2c:97:2a:
80:7a:d4:78:96:b0:eb:3e:48:e1:1b:84:a1:6e:a3:
f9:00:32:e5:26:f2:b8:e1:a7:51:a2:ee:21:dc:f7:
1b:fc:e4:bd:04:bd:3c:a8:c8:e2:fb:40:d9:67:6e:
8d:f6:09:00:62:34:2d:93:72:33:74:21:8e:7c:e3:
b1:e4:a6:d3:e4:02:fe:41:6b:f2:1e:0e:aa:1e:2b:
4a:11:63:90:47:21:6d:d9:b1:67:8a:fe:fe:1a:c2:
ca:18:58:46:60:a1:29:9a:9e:20:4e:11:92:71:ec:
cb:8c:96:55:fe:08:1e:0a:db:c4:63:6b:5e:c1:4e:
2f:c6:1b:8a:7d:0c:e1:00:b0:3e:00:59:7c:67:67:
11:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:28:46:08:FF:BA:D8:80:4E:9A:C3:68:C9:3D:16:44:DC:D4:00:7A
X509v3 Authority Key Identifier:
keyid:B4:8B:D8:EC:4E:30:1C:9E:7B:0A:43:BE:F0:F3:DD:D3:A4:53:15:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tIvY7E4wHJ57CkO-8PPd06RTFVo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/7434e1-7413-4f6a-a29c-cdc81db77531/1/tIvY7E4wHJ57CkO-8PPd06RTFVo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/7434e1-7413-4f6a-a29c-cdc81db77531/1/tIvY7E4wHJ57CkO-8PPd06RTFVo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:af:71:55:ee:21:a9:3a:9f:78:21:08:a3:5f:41:cf:b5:d8:
f9:a7:58:ed:f5:f8:e1:c7:ed:ff:32:c0:97:71:9d:92:b8:f9:
7d:d8:82:c3:58:a8:67:e7:78:83:e1:ac:9b:7e:98:29:4e:b2:
17:74:c7:c3:54:c4:cc:03:2b:3d:6c:8a:48:7b:78:e3:61:53:
26:fe:4d:ec:ed:ff:2b:55:80:ea:e5:7d:cf:c2:f0:fb:e8:cc:
02:eb:bb:e2:dd:f1:84:63:8b:00:7f:bc:4b:a6:00:26:13:28:
45:bc:54:d6:76:de:a4:91:7c:c2:c7:1e:8b:c6:4d:b1:7e:9c:
a4:ad:7f:89:b7:82:5b:29:aa:9d:5a:bf:d4:a9:2e:c9:58:28:
c4:9f:5d:3b:6a:7b:ce:94:b0:03:1a:3b:54:fc:a3:89:b0:bd:
4d:ea:dc:2b:19:61:c0:37:83:8e:0c:98:f3:f3:ee:cc:00:67:
1d:61:8e:c7:fe:b3:a7:55:b4:6c:75:94:73:0c:86:b7:f0:88:
71:e5:d3:d2:d2:f4:0c:41:12:68:ce:fb:96:f7:41:ac:89:13:
36:4f:04:bd:d9:35:99:44:b7:ec:ff:7e:bc:ca:97:7b:43:17:
d3:4c:7d:af:5e:34:4d:2a:41:4b:14:e2:d7:0a:2f:3f:91:6f:
8f:d2:ea:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 01:29:59 2025 by rpki-client