Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/31e0d4-35ce-4d02-9734-d78fb97f9828/1/TuUnUqgb3-CkAfmiYdef7kthcRU.mft
File: TuUnUqgb3-CkAfmiYdef7kthcRU.mft (raw, json)
Hash identifier: QXyOKeWE7SGw+p2ZPjNjRx8jo6JCGCMqD5i6U0buUBQ=
Subject key identifier: E3:A5:81:77:F9:0A:30:7B:FE:07:17:9F:8E:B3:11:5A:A8:02:6D:51
Authority key identifier: 4E:E5:27:52:A8:1B:DF:E0:A4:01:F9:A2:61:D7:9F:EE:4B:61:71:15
Certificate issuer: /CN=4ee52752a81bdfe0a401f9a261d79fee4b617115
Certificate serial: 019A5006DA2B5AD70ABE3F9179CB1F7AC1E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TuUnUqgb3-CkAfmiYdef7kthcRU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/31e0d4-35ce-4d02-9734-d78fb97f9828/1/TuUnUqgb3-CkAfmiYdef7kthcRU.mft
Manifest number: 1099
Signing time: Tue 04 Nov 2025 18:00:17 +0000
Manifest this update: Tue 04 Nov 2025 18:00:17 +0000
Manifest next update: Wed 05 Nov 2025 18:00:17 +0000
Files and hashes: 1: 55sTvowHGJg92qkZxcKwSCfNCK4.roa (hash: b91GQDkCCdywVY2XmrIvPHNucxaPtQ8aCIEGw0MjxvQ=)
2: TuUnUqgb3-CkAfmiYdef7kthcRU.crl (hash: bVoxOkH5q4CHGNZpW9G1JxseqK1uQJyZZ1DmcUIBL1U=)
3: lOXoXnSoYH-Ze2jDn-kLGtNui38.roa (hash: Pz0iJoXh4tIWOR42AxlitpnyK4ra9wQb5adMKDc9S9o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/31e0d4-35ce-4d02-9734-d78fb97f9828/1/TuUnUqgb3-CkAfmiYdef7kthcRU.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/31e0d4-35ce-4d02-9734-d78fb97f9828/1/TuUnUqgb3-CkAfmiYdef7kthcRU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TuUnUqgb3-CkAfmiYdef7kthcRU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:06:da:2b:5a:d7:0a:be:3f:91:79:cb:1f:7a:c1:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ee52752a81bdfe0a401f9a261d79fee4b617115
Validity
Not Before: Nov 4 18:00:17 2025 GMT
Not After : Nov 5 18:00:17 2025 GMT
Subject: CN=e3a58177f90a307bfe07179f8eb3115aa8026d51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:25:eb:91:2a:6b:92:06:1b:ab:1e:f7:08:13:
2f:28:e3:99:e9:84:7d:28:5c:a9:d6:a3:a7:0c:7e:
fa:cd:66:df:71:ac:3e:21:41:db:e7:d6:0f:33:9f:
7b:f2:91:fb:c6:c1:b3:4c:52:86:14:48:52:e9:47:
78:a7:11:86:1f:50:cf:fa:b2:f6:5c:c7:52:ec:f9:
00:fb:d1:be:d8:44:3f:8c:e3:be:68:1f:08:43:9e:
71:56:12:75:e4:28:21:19:50:49:ae:24:df:b9:b2:
70:02:53:e2:a5:95:37:33:a2:d6:8c:34:81:51:d9:
2e:50:7d:b2:9b:79:67:40:ce:5e:b6:ab:51:df:47:
8b:29:1f:79:b8:18:68:f4:f3:ca:97:b4:f2:8b:14:
eb:84:a1:5e:d8:ee:53:73:63:12:53:f0:82:c2:30:
af:86:2d:43:55:c1:82:da:32:75:25:80:c2:ff:31:
0a:b5:56:be:cb:7a:7d:16:6b:f8:cb:4a:19:37:2b:
7f:49:c2:ac:ef:b0:eb:bc:ee:11:7c:60:cf:4c:67:
ef:0b:4b:fe:d6:7b:88:56:17:91:b9:0c:37:24:1e:
50:9a:a4:2a:95:77:61:53:cd:94:a1:86:11:7e:c2:
e9:78:ee:1c:b4:bb:db:9a:91:8a:e7:86:ad:46:d2:
77:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:A5:81:77:F9:0A:30:7B:FE:07:17:9F:8E:B3:11:5A:A8:02:6D:51
X509v3 Authority Key Identifier:
keyid:4E:E5:27:52:A8:1B:DF:E0:A4:01:F9:A2:61:D7:9F:EE:4B:61:71:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TuUnUqgb3-CkAfmiYdef7kthcRU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/31e0d4-35ce-4d02-9734-d78fb97f9828/1/TuUnUqgb3-CkAfmiYdef7kthcRU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/31e0d4-35ce-4d02-9734-d78fb97f9828/1/TuUnUqgb3-CkAfmiYdef7kthcRU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:2b:05:cc:71:07:96:cb:c8:d0:b3:6b:22:39:1b:7e:41:e4:
1d:89:a5:9a:0c:e1:21:05:1e:1e:de:9c:2b:21:45:5b:9b:03:
cb:51:92:87:b9:22:ee:13:e6:f2:2f:ba:72:d5:af:39:fc:fa:
66:e3:81:28:22:d9:d1:5e:e6:f1:13:0d:45:9e:a7:7f:e0:df:
d6:51:fe:f0:da:7b:5e:fa:af:aa:70:0f:2b:bb:92:69:db:50:
31:fb:db:df:74:94:04:d9:e1:36:7c:94:93:1c:60:38:ba:f4:
6c:29:fc:bc:19:2a:d3:46:e1:c3:b4:09:89:67:c3:93:75:55:
e6:a0:50:83:76:11:59:25:8b:e4:af:0c:52:30:56:a4:fc:0e:
ba:6d:50:6b:30:9c:36:7c:de:8a:84:ca:20:4d:dc:9e:d4:9a:
e0:42:fa:4c:58:f6:a2:7b:45:4c:e1:4b:81:43:c5:c7:b2:69:
68:77:0f:9a:39:da:51:86:3c:38:13:8e:8d:03:6e:c7:82:15:
7a:75:10:cd:02:a4:e9:27:c9:ec:99:66:a3:98:2e:b9:a2:24:
46:42:f1:7e:bb:ae:1e:3f:dc:3b:4a:c6:a8:80:b1:f8:72:9c:
b7:3c:e6:cb:76:aa:54:d8:4a:eb:7a:ae:08:ac:34:9b:e0:f1:
28:2e:9f:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 04:04:38 2025 by rpki-client