Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/b36f31-1ccd-4da3-9cf9-0edbdff9f8f2/1/tuOipJCN2WghyAxk0V0XFBQ6qpQ.mft
File: tuOipJCN2WghyAxk0V0XFBQ6qpQ.mft (raw, json)
Hash identifier: ZCRPdkWTu0PimIPI2ctkhcItFyn6vJu0fXfGpueyE6I=
Subject key identifier: 6D:6F:F5:5B:BD:78:5C:96:15:6F:61:C6:C5:D4:2F:84:36:C4:B7:BD
Authority key identifier: B6:E3:A2:A4:90:8D:D9:68:21:C8:0C:64:D1:5D:17:14:14:3A:AA:94
Certificate issuer: /CN=b6e3a2a4908dd96821c80c64d15d1714143aaa94
Certificate serial: 019A50E38A5A5F895A1256F336EC06A2E20E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tuOipJCN2WghyAxk0V0XFBQ6qpQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/b36f31-1ccd-4da3-9cf9-0edbdff9f8f2/1/tuOipJCN2WghyAxk0V0XFBQ6qpQ.mft
Manifest number: 07E4
Signing time: Tue 04 Nov 2025 22:01:20 +0000
Manifest this update: Tue 04 Nov 2025 22:01:20 +0000
Manifest next update: Wed 05 Nov 2025 22:01:20 +0000
Files and hashes: 1: rgegcxxJ3TsTdq27HR0NAjR9oC8.roa (hash: c0wEsNYvh664VokeqgrZS5bI3twxSLXX7CSRIaVE4Zs=)
2: tuOipJCN2WghyAxk0V0XFBQ6qpQ.crl (hash: hJ9R7KyHU9x7GvCz76R9B9Dd70O0ATYjU90l0+iA+M8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/b36f31-1ccd-4da3-9cf9-0edbdff9f8f2/1/tuOipJCN2WghyAxk0V0XFBQ6qpQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/b36f31-1ccd-4da3-9cf9-0edbdff9f8f2/1/tuOipJCN2WghyAxk0V0XFBQ6qpQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/tuOipJCN2WghyAxk0V0XFBQ6qpQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:e3:8a:5a:5f:89:5a:12:56:f3:36:ec:06:a2:e2:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b6e3a2a4908dd96821c80c64d15d1714143aaa94
Validity
Not Before: Nov 4 22:01:20 2025 GMT
Not After : Nov 5 22:01:20 2025 GMT
Subject: CN=6d6ff55bbd785c96156f61c6c5d42f8436c4b7bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:93:24:05:30:68:f8:06:42:73:3c:8e:2e:83:
b0:05:bc:02:4a:7d:7c:90:c7:4d:c6:7a:03:26:02:
c3:77:50:98:23:f1:8d:57:fd:76:6c:e1:3e:fb:13:
42:ca:33:ec:28:40:c2:77:d0:25:85:1d:c7:da:05:
cd:a8:3a:5c:ce:c5:94:5a:71:8a:31:d0:33:35:63:
12:1d:33:97:f0:15:02:a1:07:c4:74:e2:21:51:ff:
f4:94:79:7e:c0:0e:cf:53:14:a7:17:27:4e:dc:b6:
cb:c8:ff:67:95:fb:62:06:72:ac:f2:db:60:0e:fd:
a0:8a:c9:2e:5b:da:f7:6f:a3:b9:28:cf:17:d8:b3:
47:07:fe:1a:61:d5:c5:12:97:53:c2:46:8e:22:87:
76:b0:21:c2:69:54:0b:62:a4:92:ff:b4:2b:0e:e0:
5e:99:ad:c5:19:4e:28:73:91:cb:e4:5b:b1:ea:78:
9f:2c:fc:88:a3:7f:59:2c:d1:35:05:68:9f:45:f3:
ce:2e:e2:a6:5b:82:0f:b0:d1:7c:3f:7c:03:e1:34:
87:3b:42:1a:06:98:28:50:bf:67:69:8f:20:69:2e:
09:49:08:1a:70:66:cc:92:e7:e4:e2:81:a8:3f:86:
0e:09:19:96:59:5a:65:3e:be:7d:ac:23:45:fc:12:
b5:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:6F:F5:5B:BD:78:5C:96:15:6F:61:C6:C5:D4:2F:84:36:C4:B7:BD
X509v3 Authority Key Identifier:
keyid:B6:E3:A2:A4:90:8D:D9:68:21:C8:0C:64:D1:5D:17:14:14:3A:AA:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tuOipJCN2WghyAxk0V0XFBQ6qpQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/b36f31-1ccd-4da3-9cf9-0edbdff9f8f2/1/tuOipJCN2WghyAxk0V0XFBQ6qpQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/b36f31-1ccd-4da3-9cf9-0edbdff9f8f2/1/tuOipJCN2WghyAxk0V0XFBQ6qpQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:60:70:70:cb:76:cc:47:c3:24:a5:46:5d:c0:20:21:ad:a9:
e7:5d:56:25:b2:8d:8e:db:4d:50:ff:2e:b2:78:a4:ae:27:0c:
e8:27:8e:66:dc:09:35:80:ab:99:b6:33:b9:73:df:a8:5d:0f:
b4:8b:03:13:15:7c:90:dc:a8:6e:c7:60:15:ab:a6:21:50:68:
a0:d8:fe:42:42:15:7f:bd:2c:ec:d4:6d:ed:23:1d:39:7b:02:
52:de:a3:3f:62:eb:9d:62:34:6a:b1:2b:43:ef:82:3b:bb:2f:
f0:78:81:51:64:c2:3e:7f:ab:ce:b8:af:2f:30:81:af:30:19:
05:35:3b:9a:02:44:c1:db:97:6e:53:a9:8d:ad:d5:1d:fb:62:
d2:c8:d2:65:38:97:cb:61:7d:03:f4:34:0e:8a:1a:b6:93:05:
01:dd:e1:2a:17:40:b0:cf:56:b5:9f:8f:19:ba:72:a8:33:84:
3a:58:92:22:6a:cf:eb:63:9c:36:45:ba:f4:5d:0c:bb:bc:7e:
ce:af:a2:81:22:26:1b:20:80:54:dd:6a:bf:7e:fb:4a:29:77:
61:f8:60:e5:18:eb:fe:cc:54:85:bb:ab:c6:57:11:22:ed:2a:
a4:ff:ad:e2:65:9d:05:6d:6a:bf:ad:cf:46:b5:cf:a4:ef:dd:
17:f5:ca:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 01:22:48 2025 by rpki-client