Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/1f82e5-3098-453a-af64-cab717a809e7/1/tmd58gVbJU9dWzKS7q8N1Xl3N6Y.mft
File: tmd58gVbJU9dWzKS7q8N1Xl3N6Y.mft (raw, json)
Hash identifier: Kadc0xzSUx5/7vJTl+Q46qmR5oT6SA2Bc3Vb5vQOV58=
Subject key identifier: 90:65:B2:E6:8B:22:34:89:58:92:A9:4D:35:91:B1:3F:01:8E:BE:2A
Authority key identifier: B6:67:79:F2:05:5B:25:4F:5D:5B:32:92:EE:AF:0D:D5:79:77:37:A6
Certificate issuer: /CN=b66779f2055b254f5d5b3292eeaf0dd5797737a6
Certificate serial: 019A4DAA8BEEF56855DEF8193FE2BF029EB6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tmd58gVbJU9dWzKS7q8N1Xl3N6Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/1f82e5-3098-453a-af64-cab717a809e7/1/tmd58gVbJU9dWzKS7q8N1Xl3N6Y.mft
Manifest number: 0C67
Signing time: Tue 04 Nov 2025 07:00:13 +0000
Manifest this update: Tue 04 Nov 2025 07:00:13 +0000
Manifest next update: Wed 05 Nov 2025 07:00:13 +0000
Files and hashes: 1: DWyS6ktuYXD1HWtRdim_tw6aAHw.roa (hash: ZpPs8QmClGInLrYdfgabA/tiTnRpT7Agrz+vwk6fAyc=)
2: ebklZqmx0-dRJX-3stcdCCjPSZQ.roa (hash: oxCqtL4IdqqluHjcszErTou8uGJlC2MCnMVsPPzgZCM=)
3: tmd58gVbJU9dWzKS7q8N1Xl3N6Y.crl (hash: DJ7lMa4AfW9fbvkux3rthkhgXEZp4CJ7+XWfSDbon6U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/1f82e5-3098-453a-af64-cab717a809e7/1/tmd58gVbJU9dWzKS7q8N1Xl3N6Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/1f82e5-3098-453a-af64-cab717a809e7/1/tmd58gVbJU9dWzKS7q8N1Xl3N6Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/tmd58gVbJU9dWzKS7q8N1Xl3N6Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 07:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:aa:8b:ee:f5:68:55:de:f8:19:3f:e2:bf:02:9e:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b66779f2055b254f5d5b3292eeaf0dd5797737a6
Validity
Not Before: Nov 4 07:00:13 2025 GMT
Not After : Nov 5 07:00:13 2025 GMT
Subject: CN=9065b2e68b2234895892a94d3591b13f018ebe2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:0f:a2:9e:04:d0:eb:26:08:91:b9:53:d4:8e:
2e:ce:41:eb:0e:fb:47:99:5d:84:33:1b:79:8a:7e:
1c:5f:ac:45:2c:61:ba:da:41:6a:26:54:71:66:83:
94:b7:ca:51:b2:6d:71:4e:9d:07:ae:83:f9:d8:2f:
2f:0e:df:f8:5b:e9:17:07:ab:5d:ba:5b:8e:1d:c1:
d7:d7:3e:c4:ce:11:0d:d2:4d:23:3c:44:ea:8a:a8:
c2:25:ba:0a:96:e6:d9:da:07:23:6a:7b:25:41:a5:
ea:05:e3:16:2f:5c:25:8a:8c:d1:5e:c5:b4:c3:6a:
58:3e:11:dd:9f:67:6b:29:49:59:59:44:49:cb:00:
fd:b4:aa:76:94:49:54:57:d8:2d:99:ae:7b:db:ec:
27:b8:f7:a1:22:d7:12:b4:5a:ee:78:56:7d:2a:bf:
80:dd:92:d2:ca:c8:9f:ef:43:79:62:76:82:32:58:
6a:a1:5a:50:4c:e9:f8:cf:47:8e:c1:d0:b3:28:ec:
8f:1e:31:22:8e:ad:07:13:84:b9:bb:07:74:f8:e0:
55:f0:ec:28:5a:95:d3:da:88:70:b4:ae:4e:cc:a0:
a6:19:26:c0:7c:0b:65:a3:c7:f0:1e:d3:2a:75:a2:
96:a8:5e:f2:63:4b:8c:7e:52:bd:fd:33:40:1f:c3:
8c:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:65:B2:E6:8B:22:34:89:58:92:A9:4D:35:91:B1:3F:01:8E:BE:2A
X509v3 Authority Key Identifier:
keyid:B6:67:79:F2:05:5B:25:4F:5D:5B:32:92:EE:AF:0D:D5:79:77:37:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tmd58gVbJU9dWzKS7q8N1Xl3N6Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/1f82e5-3098-453a-af64-cab717a809e7/1/tmd58gVbJU9dWzKS7q8N1Xl3N6Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/1f82e5-3098-453a-af64-cab717a809e7/1/tmd58gVbJU9dWzKS7q8N1Xl3N6Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:2e:a8:62:a8:60:63:a6:d8:d1:3d:43:66:80:7f:79:73:96:
4a:97:dd:84:ec:04:c8:b3:b3:e5:f7:c8:8a:88:45:e6:11:d3:
80:a1:72:5e:ab:ea:4d:c4:db:9b:f5:38:d2:67:01:5e:f1:7a:
60:2e:47:94:95:30:8b:9f:4b:c1:49:f4:ca:0e:f2:e9:aa:63:
12:55:53:76:2c:ef:8f:49:9d:83:c1:04:84:8e:fd:df:0a:c1:
9a:59:04:5c:65:f1:83:93:09:ed:94:53:4d:08:02:d8:59:ed:
46:de:e7:fb:56:68:f6:62:e3:19:71:9d:71:f5:6d:ec:9f:1e:
e7:69:a9:ae:44:52:97:f2:4a:42:63:f1:0c:96:8f:57:b5:a0:
1d:55:1b:17:1a:30:bd:c5:9a:1f:e6:9f:82:cf:7d:fe:2b:e7:
80:53:92:fd:a8:b0:78:9c:43:10:18:23:af:f1:f4:95:e7:e6:
b8:ca:d6:e3:26:97:bf:18:43:46:11:d6:d1:a6:8e:f0:bd:f6:
7b:46:dc:7c:a1:15:e4:0a:0d:82:02:5a:ab:cf:59:73:54:b6:
0f:ba:60:04:fe:f7:5c:29:f4:33:b2:f5:d7:59:cb:05:a9:2e:
5d:6f:8b:dd:11:42:b7:2a:3a:c2:fc:cd:00:14:7b:53:d6:69:
19:8d:8d:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:38:08 2025 by rpki-client