Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/aca790-6329-414a-bed5-bad2cb480912/1/Tg8xxu_bmkRbjxcvC-Df1RQr4AA.mft
File: Tg8xxu_bmkRbjxcvC-Df1RQr4AA.mft (raw, json)
Hash identifier: U/6KH8y0za64JyHCDBljTJpWWqcX6uXox7MhNKK8gh0=
Subject key identifier: 5D:85:85:C1:D7:CD:FF:17:F8:7D:10:E0:F6:9A:B9:00:3F:B2:3A:44
Authority key identifier: 4E:0F:31:C6:EF:DB:9A:44:5B:8F:17:2F:0B:E0:DF:D5:14:2B:E0:00
Certificate issuer: /CN=4e0f31c6efdb9a445b8f172f0be0dfd5142be000
Certificate serial: 019A5074FC7F58F8C178BF4BCB9BD718BDA5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tg8xxu_bmkRbjxcvC-Df1RQr4AA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/aca790-6329-414a-bed5-bad2cb480912/1/Tg8xxu_bmkRbjxcvC-Df1RQr4AA.mft
Manifest number: 0129
Signing time: Tue 04 Nov 2025 20:00:35 +0000
Manifest this update: Tue 04 Nov 2025 20:00:35 +0000
Manifest next update: Wed 05 Nov 2025 20:00:35 +0000
Files and hashes: 1: 1-U8-4zu6FwPD_h-JBtHqluBUugc.roa (hash: B3V6UvPy+Yv+8toI+28gvW2unDO4YgNU77Me0s0gt9U=)
2: Tg8xxu_bmkRbjxcvC-Df1RQr4AA.crl (hash: obtciDKg8mOwB0djtLkdjAOMiouDfB8XFbR9m1UTfOs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/aca790-6329-414a-bed5-bad2cb480912/1/Tg8xxu_bmkRbjxcvC-Df1RQr4AA.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/aca790-6329-414a-bed5-bad2cb480912/1/Tg8xxu_bmkRbjxcvC-Df1RQr4AA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Tg8xxu_bmkRbjxcvC-Df1RQr4AA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:74:fc:7f:58:f8:c1:78:bf:4b:cb:9b:d7:18:bd:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e0f31c6efdb9a445b8f172f0be0dfd5142be000
Validity
Not Before: Nov 4 20:00:35 2025 GMT
Not After : Nov 5 20:00:35 2025 GMT
Subject: CN=5d8585c1d7cdff17f87d10e0f69ab9003fb23a44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:1c:f0:f3:fd:19:a9:d0:86:20:73:c2:88:16:
99:d4:04:97:86:61:45:0f:a0:80:42:18:a0:f2:d7:
8b:bd:f0:61:cc:02:fe:08:7c:08:33:65:80:38:58:
8f:83:43:c8:94:0e:1b:0e:c8:2f:6c:a9:47:fc:b7:
5a:83:9b:c1:cc:68:4e:ad:06:7d:7b:dc:26:65:d9:
40:2e:20:f3:ec:b2:e3:75:15:31:10:ec:7d:de:67:
ae:24:92:f7:aa:a8:9b:93:fd:37:12:ad:89:7e:41:
be:55:b4:b0:52:a2:57:b9:62:a7:9b:16:85:63:22:
68:55:f7:da:1b:9f:57:a7:87:cb:59:f1:be:6f:2d:
92:5b:37:dc:ba:c1:93:60:2f:2e:a7:be:46:d6:1d:
fa:1d:36:bf:ad:28:db:9c:27:27:6e:b9:f3:f9:78:
8f:0c:70:d1:c0:e8:b0:1d:bd:4c:8b:25:c6:43:c6:
19:da:31:04:d5:ac:20:d6:97:8a:cf:d8:48:69:92:
c2:c8:11:ec:e4:ef:be:d7:8e:8e:38:39:7d:91:9f:
12:c5:89:04:23:4c:b3:52:ca:58:6e:d8:33:21:ab:
79:27:37:48:aa:3f:bf:dd:3b:6d:73:ff:f3:f4:10:
bf:04:33:de:6a:a3:b3:05:46:23:89:5c:6e:51:a0:
05:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:85:85:C1:D7:CD:FF:17:F8:7D:10:E0:F6:9A:B9:00:3F:B2:3A:44
X509v3 Authority Key Identifier:
keyid:4E:0F:31:C6:EF:DB:9A:44:5B:8F:17:2F:0B:E0:DF:D5:14:2B:E0:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tg8xxu_bmkRbjxcvC-Df1RQr4AA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/aca790-6329-414a-bed5-bad2cb480912/1/Tg8xxu_bmkRbjxcvC-Df1RQr4AA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/aca790-6329-414a-bed5-bad2cb480912/1/Tg8xxu_bmkRbjxcvC-Df1RQr4AA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:9f:b6:c8:93:7c:27:f3:47:09:62:33:f2:63:62:69:74:dd:
72:ef:ae:4c:da:aa:7c:30:c5:c2:66:85:5e:2c:48:e8:e8:63:
76:a1:61:cc:0c:2c:95:76:5b:8b:69:c2:1d:17:71:ef:eb:5a:
f2:36:a4:96:00:7e:c7:01:5a:35:9a:93:bd:70:9a:55:4c:ad:
97:81:a4:94:d4:6e:fb:fe:5a:ae:95:fa:4e:0d:79:cb:dd:3f:
b6:5e:fb:bd:22:5f:80:4c:5e:14:ec:47:9b:85:30:fe:4a:51:
4d:8a:57:f2:8f:21:a4:3d:8f:ee:42:48:f1:42:39:89:c3:a0:
16:72:26:8b:58:3c:27:61:b7:60:7e:d7:69:dd:42:de:aa:1e:
31:ca:08:03:59:42:d9:95:29:0a:21:b5:8f:9a:1f:4a:29:a9:
b2:9e:4b:2a:e7:a1:2b:40:bc:bf:18:51:e1:d6:3f:22:67:2c:
48:de:1b:39:c8:e6:b6:f7:de:e6:d2:f2:5e:3f:6e:3e:7b:97:
ff:cf:f6:c0:ea:31:b2:fa:e1:e2:49:48:be:d3:30:e2:e3:30:
5b:5d:a3:22:39:52:0c:13:8c:68:a3:79:f0:02:32:06:c8:d4:
a6:45:95:03:f5:d5:f0:4d:7a:b0:2c:f5:84:58:0f:32:64:15:
a6:7b:83:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 02:17:38 2025 by rpki-client