Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/8b5d2a-4bc4-406f-97d5-ba3947c9b22b/1/tYUi2sa83oxIEzNZkTKhYgDmpb4.mft
File: tYUi2sa83oxIEzNZkTKhYgDmpb4.mft (raw, json)
Hash identifier: xXZvcFsPqIopcc3jr4JezeNK01K6PVdupDNi5tSH0cI=
Subject key identifier: A5:20:B3:65:6C:05:02:1A:02:C0:58:74:FA:75:10:35:B3:85:26:66
Authority key identifier: B5:85:22:DA:C6:BC:DE:8C:48:13:33:59:91:32:A1:62:00:E6:A5:BE
Certificate issuer: /CN=b58522dac6bcde8c481333599132a16200e6a5be
Certificate serial: 019A4EBD4D4764849987F6987AFE503DC013
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tYUi2sa83oxIEzNZkTKhYgDmpb4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/8b5d2a-4bc4-406f-97d5-ba3947c9b22b/1/tYUi2sa83oxIEzNZkTKhYgDmpb4.mft
Manifest number: 0A67
Signing time: Tue 04 Nov 2025 12:00:19 +0000
Manifest this update: Tue 04 Nov 2025 12:00:19 +0000
Manifest next update: Wed 05 Nov 2025 12:00:19 +0000
Files and hashes: 1: 5moGvKAoN95-3rdirRXOwCahhvs.roa (hash: SkhAzMm5Jb5vcIiM14h4SYz3DQTRyqaR2eF+qq4Rdl0=)
2: RuuQV8FVAOprAh_8jcQjyKszeBc.roa (hash: kX89cdA0JPKtfSqgIarOumMCZ1cTxgD0uR8aSG1ObUs=)
3: tYUi2sa83oxIEzNZkTKhYgDmpb4.crl (hash: lAlNtfSmBU8xYub9m0s01oRR/v3/1nygqSRkyzYqPyM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/8b5d2a-4bc4-406f-97d5-ba3947c9b22b/1/tYUi2sa83oxIEzNZkTKhYgDmpb4.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/8b5d2a-4bc4-406f-97d5-ba3947c9b22b/1/tYUi2sa83oxIEzNZkTKhYgDmpb4.mft
rsync://rpki.ripe.net/repository/DEFAULT/tYUi2sa83oxIEzNZkTKhYgDmpb4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:bd:4d:47:64:84:99:87:f6:98:7a:fe:50:3d:c0:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b58522dac6bcde8c481333599132a16200e6a5be
Validity
Not Before: Nov 4 12:00:19 2025 GMT
Not After : Nov 5 12:00:19 2025 GMT
Subject: CN=a520b3656c05021a02c05874fa751035b3852666
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:ed:b4:18:9f:d5:58:10:89:db:44:92:df:b1:
db:3e:2a:b6:eb:b7:e2:ac:0e:cd:ea:22:c2:07:7d:
3f:66:84:04:ab:8a:45:5d:26:01:e3:e4:bf:b5:9b:
de:bc:3f:14:4c:f9:72:ef:94:9c:fb:f3:2b:d4:c9:
bb:1f:b8:27:0b:e8:20:01:e8:4e:3a:94:34:10:ab:
f5:b3:38:36:42:58:46:66:ad:da:bc:ee:16:ff:e3:
3e:6e:74:f0:52:bb:90:ef:6b:16:4d:fb:12:fd:9a:
81:60:34:c2:8b:38:4a:ac:da:8f:a4:b4:40:a2:54:
46:46:e0:a0:b0:28:58:51:6c:87:2d:37:4b:a9:16:
48:e9:c9:8b:47:e2:1f:95:bb:79:08:23:55:bc:2f:
32:dc:05:eb:ed:f2:6f:2e:a2:11:d8:76:c5:67:c9:
a0:26:54:13:6d:68:06:4e:20:02:97:0e:1c:13:c4:
d6:4c:0a:91:1a:30:81:8b:fd:71:0e:c0:0d:c2:a9:
6b:87:69:84:41:d3:ae:e8:66:fa:bf:e7:ee:13:ec:
dc:08:56:bf:33:fa:47:90:76:c2:f1:df:ea:0f:83:
04:a8:22:09:e4:6e:c7:09:3e:8b:a6:21:b9:d5:37:
da:22:66:e7:cb:b2:63:ba:7f:ac:26:dc:6f:e0:10:
4b:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:20:B3:65:6C:05:02:1A:02:C0:58:74:FA:75:10:35:B3:85:26:66
X509v3 Authority Key Identifier:
keyid:B5:85:22:DA:C6:BC:DE:8C:48:13:33:59:91:32:A1:62:00:E6:A5:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tYUi2sa83oxIEzNZkTKhYgDmpb4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/8b5d2a-4bc4-406f-97d5-ba3947c9b22b/1/tYUi2sa83oxIEzNZkTKhYgDmpb4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/8b5d2a-4bc4-406f-97d5-ba3947c9b22b/1/tYUi2sa83oxIEzNZkTKhYgDmpb4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c4:47:e7:8b:62:82:c1:f6:eb:8a:d1:6d:d8:ca:a9:aa:1d:ec:
5a:b9:e2:ec:e5:b0:51:e8:f2:b2:ec:12:75:35:4d:8c:73:63:
b5:b0:e4:83:68:63:50:b5:6a:f0:d1:2c:5f:86:45:5a:ef:30:
13:ea:98:b7:5e:bb:67:11:a4:65:19:6b:b3:c3:0a:2e:d7:a2:
12:9a:20:2a:f3:ac:ef:f9:1a:d2:d0:22:b7:db:e1:ef:9c:d6:
04:0d:d1:e8:60:15:e5:b2:de:84:20:b7:b4:b2:09:50:e3:e4:
42:66:59:8a:01:96:7b:c1:75:d0:9b:c2:f6:c4:20:6a:f3:a7:
3c:a9:90:0c:11:ec:bd:de:94:a0:ba:81:9a:4d:db:20:66:fe:
65:9d:f6:95:f6:4a:48:fd:d9:e1:19:35:23:e1:24:9a:b5:74:
4f:30:58:40:10:a1:fe:83:11:31:62:73:64:2f:9b:eb:0e:0b:
94:d4:bb:8a:49:f3:b1:82:80:e9:d6:f2:26:5a:81:e2:be:7a:
44:91:14:7d:79:37:fd:04:49:d4:ab:3a:73:f6:b6:8d:78:d4:
f7:6d:ee:18:ab:3b:7a:b0:85:a4:47:d4:65:dc:98:3c:33:b6:
f8:cf:e4:46:8b:f3:0a:e3:99:2f:5c:b6:2b:d8:07:67:d4:3f:
2e:21:f4:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:16:03 2025 by rpki-client