Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/a5a6b3-3ec3-487e-aba0-b8b1e4b4ecb9/1/tSCiBPTgnMg6YljXqkT30vD6RKA.mft
File: tSCiBPTgnMg6YljXqkT30vD6RKA.mft (raw, json)
Hash identifier: A7N/iD5UfUBfhvYaCjAzs1VWwcNG/QB7ihX/ECEeYVU=
Subject key identifier: C3:A7:E2:8A:C3:CC:9A:69:28:F1:C6:1F:3B:B9:C8:B9:31:41:74:08
Authority key identifier: B5:20:A2:04:F4:E0:9C:C8:3A:62:58:D7:AA:44:F7:D2:F0:FA:44:A0
Certificate issuer: /CN=b520a204f4e09cc83a6258d7aa44f7d2f0fa44a0
Certificate serial: 019A4E4FA832E51A7E2249671F66C0E1CF0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tSCiBPTgnMg6YljXqkT30vD6RKA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/a5a6b3-3ec3-487e-aba0-b8b1e4b4ecb9/1/tSCiBPTgnMg6YljXqkT30vD6RKA.mft
Manifest number: 117D
Signing time: Tue 04 Nov 2025 10:00:34 +0000
Manifest this update: Tue 04 Nov 2025 10:00:34 +0000
Manifest next update: Wed 05 Nov 2025 10:00:34 +0000
Files and hashes: 1: 7oTB9A6lOtEjQEsvoA-hCkKE_kU.roa (hash: CgqHCnrNWT0vsnk0wl9rl++PdFLv2TYzmWCCrA7fBCY=)
2: MfO1xzaCGvzf-Tdk8sWipKC3t-8.roa (hash: TSPXY1leU0O4gZ6iWESlm1g1sCeRvbsOHxtBl16fH1g=)
3: tSCiBPTgnMg6YljXqkT30vD6RKA.crl (hash: MW1/0q6vESactA4sTU8Q7EsD2XFpbYrQAiS4VgtxTik=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/a5a6b3-3ec3-487e-aba0-b8b1e4b4ecb9/1/tSCiBPTgnMg6YljXqkT30vD6RKA.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/a5a6b3-3ec3-487e-aba0-b8b1e4b4ecb9/1/tSCiBPTgnMg6YljXqkT30vD6RKA.mft
rsync://rpki.ripe.net/repository/DEFAULT/tSCiBPTgnMg6YljXqkT30vD6RKA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:4f:a8:32:e5:1a:7e:22:49:67:1f:66:c0:e1:cf:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b520a204f4e09cc83a6258d7aa44f7d2f0fa44a0
Validity
Not Before: Nov 4 10:00:34 2025 GMT
Not After : Nov 5 10:00:34 2025 GMT
Subject: CN=c3a7e28ac3cc9a6928f1c61f3bb9c8b931417408
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:bd:9f:5d:c9:b2:14:fb:e2:30:9d:1c:a2:75:
24:82:c6:1c:c5:04:15:c0:05:6c:f1:35:a2:ce:85:
92:65:59:ae:73:01:aa:b7:01:97:65:44:ae:aa:93:
ca:e5:3e:af:c8:34:09:56:c6:52:17:8e:93:7b:69:
4d:c4:f2:b5:be:16:07:6d:12:67:7a:a3:a5:9d:27:
cd:22:93:d8:1c:cc:dd:16:b5:24:7a:55:72:2c:2b:
50:d6:db:3d:7f:64:5b:4d:e9:25:21:ed:13:15:42:
b7:be:fb:27:92:9e:ae:73:cf:b4:e4:b6:5f:b7:73:
86:75:29:0d:72:c4:86:0f:7a:ec:27:16:74:2a:1b:
7e:a4:50:4d:f3:5f:87:ed:60:e8:6a:8b:ff:97:f2:
f8:87:00:f6:4a:e6:4d:f8:7b:81:fa:6b:6a:ed:fb:
b6:da:ec:6f:e6:4c:41:b8:03:dc:f5:24:09:e1:6c:
89:e3:18:20:b9:7a:23:a0:e8:5b:86:96:0e:24:c0:
af:ca:d0:c4:8c:34:2e:ce:e7:e5:b1:93:9b:2a:67:
6a:2d:5e:62:46:50:35:36:b0:70:d3:e4:e7:cf:cf:
6e:84:a7:a0:6a:72:7f:d5:02:be:04:c1:e6:f5:36:
70:3a:09:28:b5:1e:35:2c:94:a1:7f:47:61:02:2f:
44:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:A7:E2:8A:C3:CC:9A:69:28:F1:C6:1F:3B:B9:C8:B9:31:41:74:08
X509v3 Authority Key Identifier:
keyid:B5:20:A2:04:F4:E0:9C:C8:3A:62:58:D7:AA:44:F7:D2:F0:FA:44:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tSCiBPTgnMg6YljXqkT30vD6RKA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/a5a6b3-3ec3-487e-aba0-b8b1e4b4ecb9/1/tSCiBPTgnMg6YljXqkT30vD6RKA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/a5a6b3-3ec3-487e-aba0-b8b1e4b4ecb9/1/tSCiBPTgnMg6YljXqkT30vD6RKA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:d4:94:08:ac:16:37:5b:fb:7b:12:d3:34:f8:9b:a0:1c:96:
1f:2a:bf:c8:c0:9e:e7:ff:2f:1b:d3:99:b4:23:03:d8:5c:a6:
2e:e0:80:43:26:3e:61:49:14:c7:7e:53:49:24:8e:f4:74:55:
d9:42:04:e7:d6:e2:b9:be:de:99:2e:c9:8a:44:b6:76:6c:48:
fe:e2:6e:e5:fd:2a:e8:81:57:f1:84:c0:f8:9f:88:1c:c1:f2:
0e:eb:29:09:9c:63:b6:1a:4e:1a:52:0a:bc:03:32:89:1d:1c:
7d:ed:c2:1c:41:f9:fb:b4:10:97:cf:5e:9f:35:9f:79:92:d3:
92:1e:aa:3f:4b:4f:16:80:c1:da:8b:1b:2e:45:68:d7:8a:af:
2f:84:3d:4e:da:81:13:d8:af:21:0c:b6:5e:2b:7e:9f:65:38:
22:5c:bc:b7:21:bc:80:2e:32:5d:1a:cd:a5:79:3d:8c:84:e0:
ee:58:5a:d6:7d:bb:6c:94:4c:18:be:3f:2e:6e:72:b0:0f:bc:
5b:0a:e9:a1:ae:df:fa:d6:30:ea:84:0c:34:b2:8a:16:76:cb:
77:90:0a:ca:9a:a3:b3:3a:94:8d:00:00:57:f3:70:7f:ce:25:
a6:cc:85:fa:64:11:60:93:1e:b4:87:d6:00:d5:58:f1:94:b4:
02:da:79:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 15:06:20 2025 by rpki-client