Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/d9d3c9-f194-4b26-8f10-ff6a9cde6335/1/tcR4e4CrSAGrYrG9v7KOBtMM32o.mft
File: tcR4e4CrSAGrYrG9v7KOBtMM32o.mft (raw, json)
Hash identifier: F7x5/sTnBalOKZ+rOoAsALiaSvyOECMMDktqn1CfqqA=
Subject key identifier: 0A:86:1D:49:E5:FE:A9:B2:71:8C:43:9F:49:E7:FC:F9:E8:1D:8E:07
Authority key identifier: B5:C4:78:7B:80:AB:48:01:AB:62:B1:BD:BF:B2:8E:06:D3:0C:DF:6A
Certificate issuer: /CN=b5c4787b80ab4801ab62b1bdbfb28e06d30cdf6a
Certificate serial: 019A4DAB1A161C6853DA615E48384DD05C6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tcR4e4CrSAGrYrG9v7KOBtMM32o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/d9d3c9-f194-4b26-8f10-ff6a9cde6335/1/tcR4e4CrSAGrYrG9v7KOBtMM32o.mft
Manifest number: 0568
Signing time: Tue 04 Nov 2025 07:00:50 +0000
Manifest this update: Tue 04 Nov 2025 07:00:50 +0000
Manifest next update: Wed 05 Nov 2025 07:00:50 +0000
Files and hashes: 1: ktAbm-eMqyUysDj5Rz0ozhsQgoU.roa (hash: sOoFB/V0u6n0JOO4WrnOrE08EvrJyrBKeqUzyGdoIfI=)
2: tcR4e4CrSAGrYrG9v7KOBtMM32o.crl (hash: xkB52bu6cIbqPKtBUgOpfy2eUFvA1loQB2z+F31Pbd8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/d9d3c9-f194-4b26-8f10-ff6a9cde6335/1/tcR4e4CrSAGrYrG9v7KOBtMM32o.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/d9d3c9-f194-4b26-8f10-ff6a9cde6335/1/tcR4e4CrSAGrYrG9v7KOBtMM32o.mft
rsync://rpki.ripe.net/repository/DEFAULT/tcR4e4CrSAGrYrG9v7KOBtMM32o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 07:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:ab:1a:16:1c:68:53:da:61:5e:48:38:4d:d0:5c:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5c4787b80ab4801ab62b1bdbfb28e06d30cdf6a
Validity
Not Before: Nov 4 07:00:50 2025 GMT
Not After : Nov 5 07:00:50 2025 GMT
Subject: CN=0a861d49e5fea9b2718c439f49e7fcf9e81d8e07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:86:cb:b1:f3:57:d6:45:23:82:63:cc:94:5a:
8f:0b:c0:ac:a5:6e:7a:ca:24:1b:65:08:dd:b7:89:
c6:05:ee:ac:e8:09:c9:af:c2:7b:db:82:6f:3e:2e:
01:9f:e9:e1:fd:c1:5d:cc:b8:5b:c7:3e:be:5b:ea:
f5:72:da:cb:9d:41:5c:03:ab:cf:4a:83:90:cd:bb:
37:bf:bd:ee:db:09:56:26:92:71:ae:a5:ba:2e:f0:
61:7d:c1:71:1e:3a:07:c1:98:9b:a9:4c:a2:b7:b6:
f5:2d:94:85:6f:29:d1:78:52:ae:79:cd:f9:16:f0:
4b:6e:8f:ec:27:31:3d:68:11:21:ca:42:9c:04:94:
1d:0b:a2:7f:37:23:87:f7:0c:f6:30:8f:31:99:fe:
12:7b:16:95:f3:b9:ab:db:9a:2a:ef:70:e2:49:da:
e4:fc:12:57:3a:57:74:6c:a2:1a:b4:5b:25:96:c4:
73:77:0c:6f:42:11:da:2c:ee:db:f5:74:ee:94:3e:
dc:b4:c8:e5:63:fc:45:5c:04:4b:2e:56:81:b9:40:
ca:9b:66:07:ee:c9:60:8d:3e:7a:07:85:fa:eb:8f:
be:69:5f:50:e7:da:83:1f:ef:dd:3c:16:91:7c:13:
e3:61:72:be:8c:31:64:b2:04:bb:42:cc:b5:05:b3:
60:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:86:1D:49:E5:FE:A9:B2:71:8C:43:9F:49:E7:FC:F9:E8:1D:8E:07
X509v3 Authority Key Identifier:
keyid:B5:C4:78:7B:80:AB:48:01:AB:62:B1:BD:BF:B2:8E:06:D3:0C:DF:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tcR4e4CrSAGrYrG9v7KOBtMM32o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/d9d3c9-f194-4b26-8f10-ff6a9cde6335/1/tcR4e4CrSAGrYrG9v7KOBtMM32o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/d9d3c9-f194-4b26-8f10-ff6a9cde6335/1/tcR4e4CrSAGrYrG9v7KOBtMM32o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:cd:89:53:5c:70:0e:06:51:9a:de:fb:c4:4f:23:44:44:e7:
a5:f5:b2:aa:6a:a2:2a:f5:f7:64:c9:cf:6b:3b:3e:89:24:d8:
ae:e9:5e:24:cd:c4:09:7b:b8:78:73:47:19:3e:31:84:fd:9c:
63:0e:62:35:27:95:4e:1c:e8:01:b0:5d:50:65:c5:2a:81:3a:
e8:c6:b7:28:1b:b6:44:14:17:f5:fc:63:2e:d8:0c:c0:83:bf:
9d:11:e3:ca:dc:13:8f:67:0b:21:f0:5d:92:4b:d9:28:f1:72:
ab:39:c2:d5:c5:26:3c:c7:11:31:83:2f:07:bd:88:68:3a:b7:
f9:be:2f:31:41:c4:96:f0:27:10:be:9e:ce:18:1a:4f:14:be:
1f:5c:4b:56:e7:4e:d7:92:ed:d1:f3:6a:75:6a:96:17:50:53:
62:4b:ea:99:16:66:51:d5:77:33:39:0f:d0:9d:69:35:a3:ba:
b7:5d:0f:5d:8f:9a:90:05:ab:d8:7a:27:8b:f0:4b:2e:be:78:
b9:3e:4b:e1:bd:e5:77:bc:e3:aa:97:f8:3d:f7:f8:ed:3b:92:
9e:52:dd:10:59:a4:d4:93:52:f9:07:3d:92:f9:ab:90:5a:15:
e3:02:d2:53:16:a1:aa:5e:6c:1b:78:a6:25:f2:04:4c:49:d0:
38:de:25:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:51:12 2025 by rpki-client