Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/66369c-02f9-4947-9cb4-84b725158347/1/tpV8pIOvC2f5c7CFlyzMXF7QP3w.mft
File: tpV8pIOvC2f5c7CFlyzMXF7QP3w.mft (raw, json)
Hash identifier: Ziwvv9D5LMG7ETBnhKSx295N5DWRKegel2rgWZGxU6M=
Subject key identifier: FF:56:16:06:C8:57:4D:E5:86:C3:0F:6C:84:C3:6E:61:0A:46:9C:92
Authority key identifier: B6:95:7C:A4:83:AF:0B:67:F9:73:B0:85:97:2C:CC:5C:5E:D0:3F:7C
Certificate issuer: /CN=b6957ca483af0b67f973b085972ccc5c5ed03f7c
Certificate serial: 019A533F2C993A4182A65F2C8524D0DB9846
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tpV8pIOvC2f5c7CFlyzMXF7QP3w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/66369c-02f9-4947-9cb4-84b725158347/1/tpV8pIOvC2f5c7CFlyzMXF7QP3w.mft
Manifest number: 1525
Signing time: Wed 05 Nov 2025 09:00:40 +0000
Manifest this update: Wed 05 Nov 2025 09:00:40 +0000
Manifest next update: Thu 06 Nov 2025 09:00:40 +0000
Files and hashes: 1: VMjps0TDOc6vg4EVncBcfziPs7o.roa (hash: F5yYItxb8pdHFsuwCVpmcCXEuMNoj5mX3+RkzMDL76c=)
2: tpV8pIOvC2f5c7CFlyzMXF7QP3w.crl (hash: Yc+EtULGOyhj0SO5U6EzTA7w+dDe5GqU4dXOy9JoBgM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/66369c-02f9-4947-9cb4-84b725158347/1/tpV8pIOvC2f5c7CFlyzMXF7QP3w.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/66369c-02f9-4947-9cb4-84b725158347/1/tpV8pIOvC2f5c7CFlyzMXF7QP3w.mft
rsync://rpki.ripe.net/repository/DEFAULT/tpV8pIOvC2f5c7CFlyzMXF7QP3w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:53:3f:2c:99:3a:41:82:a6:5f:2c:85:24:d0:db:98:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b6957ca483af0b67f973b085972ccc5c5ed03f7c
Validity
Not Before: Nov 5 09:00:40 2025 GMT
Not After : Nov 6 09:00:40 2025 GMT
Subject: CN=ff561606c8574de586c30f6c84c36e610a469c92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:23:81:af:eb:91:85:d7:15:e8:d5:bb:dd:84:
fc:ba:94:1c:ee:24:56:5b:07:88:06:cb:d2:6d:69:
1e:f4:c6:f5:05:36:1f:81:31:cc:68:a2:b8:d1:aa:
de:d7:27:af:f9:ba:d8:35:67:bd:fb:f6:cb:17:d2:
fc:79:f1:08:94:d3:3d:2a:38:f3:2a:22:30:e2:e1:
b2:3a:4f:85:08:23:8d:05:66:e6:04:8f:5e:a6:5a:
5d:f7:f8:22:bd:f3:52:cd:00:db:ab:58:c2:78:50:
aa:88:60:a6:bb:5e:2e:0c:ef:ae:20:55:d6:04:1f:
c4:b6:9f:da:07:38:55:ed:52:30:7f:60:95:85:8f:
32:2d:3d:9b:82:73:fb:bc:ea:41:18:0f:f9:c0:d3:
22:63:5c:24:d6:ba:36:45:48:fa:3c:c3:53:ab:3c:
29:98:45:37:8f:f0:f9:a9:07:d3:71:9c:a8:f5:1c:
b6:5d:c7:f2:89:6c:a1:41:60:79:b7:93:79:7d:ad:
1f:35:0e:83:ef:4c:e5:35:fc:b4:23:4d:3d:b4:a5:
8c:cb:03:1e:4c:41:71:5a:75:83:e4:95:12:9d:6f:
e6:83:e2:81:4c:22:74:ea:6c:d8:80:90:f0:af:a8:
82:c3:40:70:74:fa:38:ff:02:06:18:8d:61:8b:55:
e6:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:56:16:06:C8:57:4D:E5:86:C3:0F:6C:84:C3:6E:61:0A:46:9C:92
X509v3 Authority Key Identifier:
keyid:B6:95:7C:A4:83:AF:0B:67:F9:73:B0:85:97:2C:CC:5C:5E:D0:3F:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tpV8pIOvC2f5c7CFlyzMXF7QP3w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/66369c-02f9-4947-9cb4-84b725158347/1/tpV8pIOvC2f5c7CFlyzMXF7QP3w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/66369c-02f9-4947-9cb4-84b725158347/1/tpV8pIOvC2f5c7CFlyzMXF7QP3w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:65:d1:ee:01:82:c5:60:5d:6b:4e:be:8d:e5:a8:e7:55:6c:
97:52:dc:7f:7b:75:b1:72:60:71:04:76:d5:0e:ed:e2:5d:01:
c6:42:c8:53:5e:65:3b:80:a4:ab:fa:2c:f7:38:a6:e6:64:db:
53:2c:f8:b1:19:d7:30:b1:16:03:cd:a3:26:d8:66:63:f8:97:
9f:09:be:13:1d:fe:20:0d:51:f9:c9:05:5a:72:b5:f9:61:8f:
c3:0e:c6:7b:3a:d7:3f:41:cc:84:a4:52:a3:cd:30:eb:67:b8:
1f:b8:b2:f5:b1:70:de:53:0e:f7:43:a1:dc:03:be:6e:f7:a9:
19:12:4c:90:11:9d:3a:56:d6:3a:f0:63:b3:d4:0a:e8:44:59:
ed:cb:f6:56:71:e1:cc:07:4f:8f:c5:52:71:93:4e:02:64:25:
b7:4b:f7:f2:82:9f:f8:dd:65:0d:61:66:58:dd:d3:1c:b9:60:
e1:0b:1c:15:49:44:b7:d7:71:f6:4f:4e:e6:ff:38:07:c7:a6:
4f:6e:26:f4:c6:c0:bf:12:d1:8a:7d:e3:e9:35:10:4d:03:79:
0a:88:1b:22:b0:97:89:2d:0c:1b:36:fc:ce:54:9b:67:c1:55:
93:b9:0a:dd:75:f9:f9:05:80:81:3d:af:a4:b8:5f:07:b8:d8:
27:f4:f8:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 13:23:28 2025 by rpki-client