Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/1aae45-f6be-401c-b3d0-f467b2f42af6/1/tMgU_8pTEIYqIiTwr9kMqpasC1Q.mft
File: tMgU_8pTEIYqIiTwr9kMqpasC1Q.mft (raw, json)
Hash identifier: V/x6SzlscqaxXnS3Do/COMifcykvejGKEuPn6XT5eD4=
Subject key identifier: 0C:31:49:6A:14:16:FB:B4:45:C4:F8:2E:8D:9F:B4:4F:E8:08:88:86
Authority key identifier: B4:C8:14:FF:CA:53:10:86:2A:22:24:F0:AF:D9:0C:AA:96:AC:0B:54
Certificate issuer: /CN=b4c814ffca5310862a2224f0afd90caa96ac0b54
Certificate serial: 019A51BE230E0BA1FFE55FE3129C5A951D2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tMgU_8pTEIYqIiTwr9kMqpasC1Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/1aae45-f6be-401c-b3d0-f467b2f42af6/1/tMgU_8pTEIYqIiTwr9kMqpasC1Q.mft
Manifest number: 0658
Signing time: Wed 05 Nov 2025 02:00:06 +0000
Manifest this update: Wed 05 Nov 2025 02:00:06 +0000
Manifest next update: Thu 06 Nov 2025 02:00:06 +0000
Files and hashes: 1: JboF5duYkSjIw0cFCDow2D7hhYA.roa (hash: 5ee85IvEdLLZLBu0IK/0DK9QgLyt71g8oPTMmxnM7ss=)
2: bPHOfPhRt9UxNoPYUZyx6NkEcPE.roa (hash: l5CD77LRDYrviJN2I+kUm6dy7C8YOi2kiqH568j84ZE=)
3: tMgU_8pTEIYqIiTwr9kMqpasC1Q.crl (hash: 66A3ykhzrdXHqUoWxNUs5RCA667yCaAF4dIB51Fgr1Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/1aae45-f6be-401c-b3d0-f467b2f42af6/1/tMgU_8pTEIYqIiTwr9kMqpasC1Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/1aae45-f6be-401c-b3d0-f467b2f42af6/1/tMgU_8pTEIYqIiTwr9kMqpasC1Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/tMgU_8pTEIYqIiTwr9kMqpasC1Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:be:23:0e:0b:a1:ff:e5:5f:e3:12:9c:5a:95:1d:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4c814ffca5310862a2224f0afd90caa96ac0b54
Validity
Not Before: Nov 5 02:00:06 2025 GMT
Not After : Nov 6 02:00:06 2025 GMT
Subject: CN=0c31496a1416fbb445c4f82e8d9fb44fe8088886
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:38:54:85:48:8d:a1:7c:ae:2c:9b:21:d0:de:
71:59:a8:96:c7:f5:7b:6a:83:f7:fa:88:f7:af:6a:
c1:42:a0:d6:0c:71:0f:be:cf:5e:95:fa:aa:c2:c9:
a8:a6:d7:36:e7:d8:e0:d8:9a:27:4b:53:71:5a:4f:
48:e1:81:7d:e0:95:08:4b:68:f3:1b:c0:e7:a8:29:
a3:cc:c0:93:88:b8:46:b4:f1:d3:f0:7e:8c:d2:eb:
27:b1:1d:bd:cc:94:70:9f:36:d6:a7:5d:c8:90:aa:
71:65:64:f3:24:cd:e5:d3:c8:10:80:13:ca:b7:37:
fc:40:46:c2:18:2b:e4:30:7d:5c:52:52:0d:fc:a0:
9d:04:2b:40:ed:81:49:cb:4d:92:7b:f9:ff:8a:d7:
f3:8e:6c:9e:f0:93:43:c7:69:af:83:2f:3d:27:85:
6d:2e:c1:1c:5b:25:31:ac:9c:9b:10:18:4b:29:18:
45:ec:8e:29:4a:de:ce:22:85:c9:e8:a0:7d:90:05:
be:c1:cb:3c:e4:b9:de:ed:b2:ac:92:ba:d9:61:84:
90:a7:eb:d1:22:21:f7:b2:8a:4a:4a:6f:48:06:02:
52:05:c4:2f:6a:19:5c:b2:53:1d:8c:db:df:b1:25:
78:b0:ba:cf:10:77:0b:f3:0c:28:ad:68:9e:43:2a:
c1:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:31:49:6A:14:16:FB:B4:45:C4:F8:2E:8D:9F:B4:4F:E8:08:88:86
X509v3 Authority Key Identifier:
keyid:B4:C8:14:FF:CA:53:10:86:2A:22:24:F0:AF:D9:0C:AA:96:AC:0B:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tMgU_8pTEIYqIiTwr9kMqpasC1Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/1aae45-f6be-401c-b3d0-f467b2f42af6/1/tMgU_8pTEIYqIiTwr9kMqpasC1Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/1aae45-f6be-401c-b3d0-f467b2f42af6/1/tMgU_8pTEIYqIiTwr9kMqpasC1Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:d7:19:0e:a3:ba:aa:8a:4f:3e:5d:6f:bf:37:d5:b2:0f:2d:
bd:ca:ba:e8:c6:05:4b:32:a7:ea:6a:bd:54:1a:5d:82:cc:60:
76:5f:e5:27:fc:1a:df:31:6d:e3:4b:87:4e:25:80:f8:13:a2:
ac:07:36:e7:23:50:c1:2c:18:39:1e:23:15:5c:d0:85:df:4c:
a5:8d:2c:37:f5:80:64:68:bf:69:f5:67:99:ee:27:d7:1f:3f:
79:a9:08:52:bc:bc:d6:74:c6:b6:bd:29:e0:37:40:ad:b2:bb:
46:d9:3a:02:75:f7:d3:ac:ef:4f:bb:74:6d:9f:20:39:69:68:
f7:3e:de:ff:1a:49:e1:e3:f8:9c:8d:ca:34:e6:56:a8:2f:cb:
64:01:7a:ad:29:96:8c:21:a6:56:12:21:0d:ff:9e:91:a3:2b:
71:bc:7b:73:84:73:74:33:a9:e6:07:44:51:d2:73:2e:95:a2:
da:b3:74:09:a3:3c:2d:ad:08:77:e9:39:d4:cf:be:7d:16:50:
fb:62:7e:cd:40:96:7d:4d:70:d0:e8:bc:33:d7:10:ee:90:e8:
2b:53:b4:d8:f8:7b:d6:99:b5:07:7e:d9:e3:e0:d5:c8:48:f8:
4d:72:54:78:7d:af:96:a7:ee:0e:c6:9f:fc:5c:21:a0:5a:f4:
63:5f:cd:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 03:33:46 2025 by rpki-client