Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/270b89-7c47-4263-86a0-0073c2b7a7ee/1/Tk9mXUbWoqvwUh5csffEUcozeoc.mft
File: Tk9mXUbWoqvwUh5csffEUcozeoc.mft (raw, json)
Hash identifier: BkfCmyG7iFytWI7FWj5QvCbjPRYDjMB867EGts2znPY=
Subject key identifier: 50:12:9E:88:E4:AC:50:9B:F3:12:91:26:FE:DB:08:84:82:C7:14:BF
Authority key identifier: 4E:4F:66:5D:46:D6:A2:AB:F0:52:1E:5C:B1:F7:C4:51:CA:33:7A:87
Certificate issuer: /CN=4e4f665d46d6a2abf0521e5cb1f7c451ca337a87
Certificate serial: 019A51F55587DB8732CB50F5EA9D56B1EC03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tk9mXUbWoqvwUh5csffEUcozeoc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/270b89-7c47-4263-86a0-0073c2b7a7ee/1/Tk9mXUbWoqvwUh5csffEUcozeoc.mft
Manifest number: 02F0
Signing time: Wed 05 Nov 2025 03:00:23 +0000
Manifest this update: Wed 05 Nov 2025 03:00:23 +0000
Manifest next update: Thu 06 Nov 2025 03:00:23 +0000
Files and hashes: 1: 1KxZYvxri1sxva3r2G7KLnG5z_Y.roa (hash: 9JXmyyV6BbeWSwFTBJAUkp5UHelZgOhj8wsWM2RqVyk=)
2: HrSejbS-39NivWEqBB6_ezmUBgQ.roa (hash: 8T3MTXu6asTJ46RNeuQMt6iMOXHZ2zW1uZEJeSesDDw=)
3: Tk9mXUbWoqvwUh5csffEUcozeoc.crl (hash: rpCSTd+roG1kbixfHUlNLRia6QDbalRhoNqCTTRklN0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/270b89-7c47-4263-86a0-0073c2b7a7ee/1/Tk9mXUbWoqvwUh5csffEUcozeoc.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/270b89-7c47-4263-86a0-0073c2b7a7ee/1/Tk9mXUbWoqvwUh5csffEUcozeoc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Tk9mXUbWoqvwUh5csffEUcozeoc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:37:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:f5:55:87:db:87:32:cb:50:f5:ea:9d:56:b1:ec:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e4f665d46d6a2abf0521e5cb1f7c451ca337a87
Validity
Not Before: Nov 5 03:00:23 2025 GMT
Not After : Nov 6 03:00:23 2025 GMT
Subject: CN=50129e88e4ac509bf3129126fedb088482c714bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:ba:5a:06:83:1d:c1:cb:e7:51:03:72:25:c1:
be:15:4f:da:b7:02:bf:39:50:5f:9e:71:63:60:67:
70:ce:c9:90:06:1a:d6:5e:04:a9:b4:3f:3d:e4:f6:
b5:62:e5:26:20:19:e1:47:c9:df:39:c0:38:23:e2:
3c:d0:be:7b:90:ca:a2:b4:3b:19:30:96:3d:88:eb:
29:02:80:02:5e:87:95:6b:98:8e:a2:c9:e7:14:ac:
a5:43:fb:c5:04:05:6e:31:9c:dc:2a:61:ec:a1:41:
8b:d6:21:d3:da:c2:e9:fa:43:c1:93:46:7f:71:d2:
22:f0:37:5b:bc:08:8a:ea:28:a6:a2:62:15:43:f6:
6b:4c:e3:36:0c:e8:14:a2:3a:dd:5f:88:69:e6:02:
dc:68:a9:0d:17:09:2c:71:bf:09:38:19:40:9b:a8:
7a:06:fc:0e:88:c6:01:12:62:a5:3a:87:31:f9:24:
57:7b:e3:35:18:89:1e:0f:95:92:ad:ac:a4:3f:37:
91:9e:e6:cd:66:4d:e5:c6:9d:5e:6a:74:08:21:70:
f3:2f:8d:df:f5:d2:e5:fd:0b:06:87:49:81:09:99:
b8:28:bd:29:59:23:19:74:a5:24:71:34:b0:68:5f:
f0:98:ca:94:f9:01:70:b4:6d:55:f9:dc:ca:e8:12:
bc:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:12:9E:88:E4:AC:50:9B:F3:12:91:26:FE:DB:08:84:82:C7:14:BF
X509v3 Authority Key Identifier:
keyid:4E:4F:66:5D:46:D6:A2:AB:F0:52:1E:5C:B1:F7:C4:51:CA:33:7A:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tk9mXUbWoqvwUh5csffEUcozeoc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/270b89-7c47-4263-86a0-0073c2b7a7ee/1/Tk9mXUbWoqvwUh5csffEUcozeoc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/270b89-7c47-4263-86a0-0073c2b7a7ee/1/Tk9mXUbWoqvwUh5csffEUcozeoc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:b1:96:0c:7b:87:b0:79:e4:95:44:2d:f5:ec:0f:98:49:18:
ef:78:fc:70:c3:cc:5e:d0:b0:83:87:76:e6:e5:af:14:07:4f:
50:c7:5b:1b:87:dd:ef:53:3b:9c:27:5f:6f:6e:42:a8:48:d1:
36:2e:6d:25:9a:b2:f6:57:55:8b:68:ed:fb:f2:a5:bb:a1:42:
46:7f:3e:b1:01:e3:3a:d7:31:de:71:90:f5:b4:09:c4:00:16:
b2:67:01:3d:1a:75:49:31:85:f8:78:eb:c1:ff:57:07:27:ea:
31:19:42:f0:fb:26:ba:18:fe:0a:28:73:93:c6:e4:b9:16:d1:
89:96:f0:b2:cf:55:c2:41:01:e0:b2:28:7f:3c:76:36:c1:0d:
ea:08:6d:da:eb:dd:5a:cf:41:ed:c7:19:d2:ef:64:df:48:8f:
1f:ac:48:bf:a8:54:99:b5:50:d1:ca:be:db:4f:59:10:df:28:
3e:a6:1e:98:2c:76:26:e8:48:86:e3:e5:2f:e4:0b:9f:53:e3:
2f:65:58:c3:a5:05:81:64:60:89:77:ff:21:78:72:ac:a5:6e:
f2:6e:69:2a:61:d3:bc:48:1e:de:81:41:70:e2:c4:e8:ec:8b:
a9:01:ca:d1:06:6b:4f:26:8e:60:04:6d:d2:ec:fa:4b:4d:5f:
86:11:f0:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 07:27:31 2025 by rpki-client