Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/68c296-69b2-4070-9ff9-4243decad360/1/tfrsS42ZLda5zYmoSJ08OmUq7NI.mft
File: tfrsS42ZLda5zYmoSJ08OmUq7NI.mft (raw, json)
Hash identifier: qogoeuiPCTqn8w4umdpA13OIA6oQsa0dfx5Lrnm9CAE=
Subject key identifier: 63:41:1F:4B:34:29:B8:A5:BD:5C:A0:90:BD:B3:B9:FC:12:2D:D6:A6
Authority key identifier: B5:FA:EC:4B:8D:99:2D:D6:B9:CD:89:A8:48:9D:3C:3A:65:2A:EC:D2
Certificate issuer: /CN=b5faec4b8d992dd6b9cd89a8489d3c3a652aecd2
Certificate serial: 019A4DE22B683118F023A41CFA8955E5166B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tfrsS42ZLda5zYmoSJ08OmUq7NI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/68c296-69b2-4070-9ff9-4243decad360/1/tfrsS42ZLda5zYmoSJ08OmUq7NI.mft
Manifest number: 170B
Signing time: Tue 04 Nov 2025 08:00:59 +0000
Manifest this update: Tue 04 Nov 2025 08:00:59 +0000
Manifest next update: Wed 05 Nov 2025 08:00:59 +0000
Files and hashes: 1: 4yLFcyM54Hv8nF5ON-TIrD-1oYQ.roa (hash: hE+OT4FiIcXi0TRuDiRDYqpuBeR4hhUYci4sdFCd/CY=)
2: jKEy0LJLh7AqTPNLnCDWho1dIJ0.roa (hash: BKRsVG5h+FxIv9YJSObhtgL9EqcN1BIPxpc/4d7NHx4=)
3: tfrsS42ZLda5zYmoSJ08OmUq7NI.crl (hash: 06EzVb90q8JgQURAbbz2dWpSr/bCdBrMMF37Q3tyIuc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/68c296-69b2-4070-9ff9-4243decad360/1/tfrsS42ZLda5zYmoSJ08OmUq7NI.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/68c296-69b2-4070-9ff9-4243decad360/1/tfrsS42ZLda5zYmoSJ08OmUq7NI.mft
rsync://rpki.ripe.net/repository/DEFAULT/tfrsS42ZLda5zYmoSJ08OmUq7NI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e2:2b:68:31:18:f0:23:a4:1c:fa:89:55:e5:16:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5faec4b8d992dd6b9cd89a8489d3c3a652aecd2
Validity
Not Before: Nov 4 08:00:59 2025 GMT
Not After : Nov 5 08:00:59 2025 GMT
Subject: CN=63411f4b3429b8a5bd5ca090bdb3b9fc122dd6a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:f8:76:24:bc:bc:e0:52:40:3e:e4:1f:6b:c2:
59:9f:bf:b2:01:80:da:ad:84:73:96:7d:c3:72:19:
75:b5:ce:db:68:e4:15:53:48:1c:eb:c4:d5:ee:19:
dd:fb:9a:99:d5:ae:38:0a:f0:7a:fe:bd:e8:3f:dc:
f6:45:b1:c2:6d:4c:69:02:0d:69:4e:0d:20:f2:2e:
4b:fa:28:cf:cf:df:d9:45:17:59:76:30:40:0b:c3:
0f:e7:ae:9f:25:35:97:e7:22:6e:57:30:92:93:ec:
2b:6c:14:19:25:14:e8:d1:35:b4:d3:32:f5:32:df:
bc:08:d6:95:3a:a2:b3:07:88:5c:70:22:ed:92:86:
05:9f:3a:32:25:6d:f6:1e:70:1d:fa:8d:5f:c6:98:
4d:fd:1a:10:b7:96:41:4d:98:44:ea:c2:d1:bb:75:
6d:55:bf:00:84:23:ef:e1:97:b0:0d:07:c7:77:92:
2a:7e:8c:ad:0c:6a:a1:c9:33:82:f5:84:4d:52:b8:
0c:4f:e9:b7:08:96:ef:e8:2a:f0:27:0b:a3:80:3c:
76:7c:b2:05:31:2f:a8:40:b6:cb:72:70:f5:93:01:
85:b9:53:8c:91:a1:0b:69:be:74:1e:7d:d7:1b:75:
8d:b7:9d:ed:e1:ff:ad:65:3c:2d:82:5c:1f:0c:71:
25:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:41:1F:4B:34:29:B8:A5:BD:5C:A0:90:BD:B3:B9:FC:12:2D:D6:A6
X509v3 Authority Key Identifier:
keyid:B5:FA:EC:4B:8D:99:2D:D6:B9:CD:89:A8:48:9D:3C:3A:65:2A:EC:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tfrsS42ZLda5zYmoSJ08OmUq7NI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/68c296-69b2-4070-9ff9-4243decad360/1/tfrsS42ZLda5zYmoSJ08OmUq7NI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/68c296-69b2-4070-9ff9-4243decad360/1/tfrsS42ZLda5zYmoSJ08OmUq7NI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:70:a3:cd:1d:b5:28:4e:0a:fd:26:34:ec:30:f2:89:a0:f0:
46:0f:1e:2f:16:42:18:a0:77:e9:59:0a:b8:c8:cf:ca:4b:c3:
9a:e8:2a:63:5b:30:98:32:15:e9:3b:9f:ae:5d:ed:61:10:3c:
c5:76:db:ee:90:a8:5d:ce:b9:43:32:a7:27:1b:bc:2b:c6:32:
b8:33:84:35:8d:30:4e:55:3d:cf:71:3a:ad:76:04:bb:68:19:
ea:e7:aa:3b:19:19:9e:99:71:71:af:be:48:29:d1:af:18:91:
65:de:35:72:f6:77:42:4a:78:a5:51:51:1a:cf:1c:a4:94:55:
84:4b:81:5a:94:38:3a:09:77:c4:6e:e0:89:a3:a4:0b:b0:bc:
ff:f6:16:37:46:a6:59:43:21:a2:a9:e2:24:dd:bc:96:a4:55:
29:a3:ed:24:38:a2:2d:8e:a7:01:a9:51:f1:1d:b8:f4:6b:b8:
90:65:82:f1:0e:18:9a:1a:91:96:e3:22:ce:1d:6c:82:14:74:
da:71:7e:b4:5f:1e:22:7c:65:35:2e:02:9c:a6:49:6b:c2:e9:
fa:f2:0f:9d:81:d7:ac:df:1a:ac:3c:4f:40:16:aa:6d:98:e0:
7e:83:6b:f5:ae:ee:79:3a:6f:df:16:ad:04:a9:3c:70:64:96:
d7:ca:fb:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:50:49 2025 by rpki-client