Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/151705-0b0c-48bf-a40e-b7ca1fe6c184/1/tXZXfSAIXEwi_IARyNGpP2MhHA8.mft
File: tXZXfSAIXEwi_IARyNGpP2MhHA8.mft (raw, json)
Hash identifier: 1UKYseyUpndhuEHBvn1SRlE9p5RL/IIBqXFQzgQyfac=
Subject key identifier: E8:AF:04:5A:CF:D7:38:FE:11:E4:FE:7C:54:1B:F2:C2:7E:37:BA:D9
Authority key identifier: B5:76:57:7D:20:08:5C:4C:22:FC:80:11:C8:D1:A9:3F:63:21:1C:0F
Certificate issuer: /CN=b576577d20085c4c22fc8011c8d1a93f63211c0f
Certificate serial: 019A4FCFCD73B338D8C32C6203CE62699EF7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tXZXfSAIXEwi_IARyNGpP2MhHA8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/151705-0b0c-48bf-a40e-b7ca1fe6c184/1/tXZXfSAIXEwi_IARyNGpP2MhHA8.mft
Manifest number: 0233
Signing time: Tue 04 Nov 2025 17:00:09 +0000
Manifest this update: Tue 04 Nov 2025 17:00:09 +0000
Manifest next update: Wed 05 Nov 2025 17:00:09 +0000
Files and hashes: 1: 0NGpBZClfqdkwT-g1SQX2TG7Voo.roa (hash: SbCdNlkd4RVvBhJ9C9nlFY+4pjkHAYs+BVh1BZ1ld+c=)
2: FrJWtoZemJx4JKpSKfeY_d7A8KU.roa (hash: mn6H512YQAxp8Xgyg/tGQdGcCEfihV9UXWWT70uzA50=)
3: tXZXfSAIXEwi_IARyNGpP2MhHA8.crl (hash: 9ywIJJU+li9YOBAnpPRglIUHbXoOZUsffP1r4GHVnYQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/151705-0b0c-48bf-a40e-b7ca1fe6c184/1/tXZXfSAIXEwi_IARyNGpP2MhHA8.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/151705-0b0c-48bf-a40e-b7ca1fe6c184/1/tXZXfSAIXEwi_IARyNGpP2MhHA8.mft
rsync://rpki.ripe.net/repository/DEFAULT/tXZXfSAIXEwi_IARyNGpP2MhHA8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 17:00:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:cf:cd:73:b3:38:d8:c3:2c:62:03:ce:62:69:9e:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b576577d20085c4c22fc8011c8d1a93f63211c0f
Validity
Not Before: Nov 4 17:00:09 2025 GMT
Not After : Nov 5 17:00:09 2025 GMT
Subject: CN=e8af045acfd738fe11e4fe7c541bf2c27e37bad9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:76:6d:44:85:be:af:87:72:84:19:4c:1c:fc:
ba:bc:5c:27:33:a9:70:33:b7:ac:a2:9a:a2:51:67:
b3:b1:c5:63:47:6c:66:37:60:2d:fb:e0:c7:7a:4c:
e0:af:ae:1f:0d:d4:39:4b:3d:af:2c:46:fc:cc:9f:
5f:eb:23:e9:9d:30:54:ee:67:61:be:12:b1:9c:d8:
04:39:d1:c8:20:88:78:2f:25:6d:bd:3c:15:6e:1d:
17:ec:09:0b:5b:cd:40:1c:70:d8:ac:82:26:d2:f8:
f1:c2:e6:e6:e6:01:87:98:04:31:28:96:d5:22:94:
6a:7f:40:be:ed:d9:bd:26:d6:df:18:b6:36:42:9a:
82:e7:b6:de:ad:3e:bd:8e:6c:d9:9b:df:a4:88:73:
4f:e0:de:b4:e7:a6:d5:26:e0:4a:1b:31:c2:bc:cb:
14:c2:7e:7d:6b:61:ba:e1:8b:df:c9:65:b5:af:11:
fb:9f:89:90:d2:25:e1:42:38:66:59:f0:ca:e7:60:
ac:68:4a:3c:84:70:d6:d7:7b:04:3c:59:9f:7e:45:
cd:f2:47:16:bc:84:9a:f5:27:da:fd:22:a7:ed:fa:
b7:3b:c2:1e:db:78:b8:ba:a1:9e:29:96:66:cf:5c:
78:21:8f:4e:e3:41:f9:b8:d1:4b:3b:0c:ad:46:06:
ef:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:AF:04:5A:CF:D7:38:FE:11:E4:FE:7C:54:1B:F2:C2:7E:37:BA:D9
X509v3 Authority Key Identifier:
keyid:B5:76:57:7D:20:08:5C:4C:22:FC:80:11:C8:D1:A9:3F:63:21:1C:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tXZXfSAIXEwi_IARyNGpP2MhHA8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/151705-0b0c-48bf-a40e-b7ca1fe6c184/1/tXZXfSAIXEwi_IARyNGpP2MhHA8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/151705-0b0c-48bf-a40e-b7ca1fe6c184/1/tXZXfSAIXEwi_IARyNGpP2MhHA8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:57:e5:7f:8f:f1:38:66:45:03:1b:d9:a4:86:61:d1:f1:75:
50:9c:a4:90:b1:27:9e:fc:46:54:ca:48:1d:b0:f1:a0:ca:51:
dc:7e:4b:6b:57:56:72:cf:85:27:ca:ba:66:11:a1:ae:5d:ed:
4e:91:4a:83:6d:eb:43:f3:6a:eb:7c:65:c5:e8:fb:0e:4f:cf:
7e:ee:21:15:19:06:05:54:65:4f:19:45:9f:7f:5e:7d:cd:b9:
1c:cb:15:4d:d5:3b:12:a7:0c:60:72:48:67:fb:d1:d8:ab:0b:
b1:ab:cb:84:24:ee:a0:d3:f3:4b:5a:b6:b9:78:db:01:42:b7:
2d:9e:ae:22:c7:45:63:95:21:d5:9f:aa:71:23:2d:3c:27:34:
fb:47:ce:3a:b0:51:c8:97:b3:cd:ab:6a:a0:b5:73:54:77:0e:
4a:10:bd:00:f1:ae:4f:fb:66:ac:5e:db:95:90:d4:9a:90:fe:
eb:53:2c:5c:84:57:7b:37:24:b9:f0:e5:f6:27:38:26:5f:c9:
2c:d3:a3:2b:a6:c0:46:fb:58:2b:68:5b:7a:b5:ff:4d:7b:24:
e5:f8:12:6e:51:de:de:40:5f:c1:47:22:73:cd:3c:7b:b3:a3:
ee:7d:4e:00:0a:d3:fb:99:59:5d:de:4b:8a:3b:07:a2:e6:70:
4e:2f:78:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 02:36:28 2025 by rpki-client