Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/daf212-f009-4bd4-874d-624c3e788cdf/1/tmDXgyCGDV7-cp4gi160sqvr4Hg.mft
File: tmDXgyCGDV7-cp4gi160sqvr4Hg.mft (raw, json)
Hash identifier: 3zXgbzmh99vyCSsZuDkWY49yvKytxthSMjIDxIf0aWo=
Subject key identifier: CF:0E:24:E7:16:25:26:C4:7C:81:A0:66:7A:7B:F9:1D:56:8A:48:F9
Authority key identifier: B6:60:D7:83:20:86:0D:5E:FE:72:9E:20:8B:5E:B4:B2:AB:EB:E0:78
Certificate issuer: /CN=b660d78320860d5efe729e208b5eb4b2abebe078
Certificate serial: 019A5006F73ED77D56FD3416D69EE6D3D186
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tmDXgyCGDV7-cp4gi160sqvr4Hg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/daf212-f009-4bd4-874d-624c3e788cdf/1/tmDXgyCGDV7-cp4gi160sqvr4Hg.mft
Manifest number: 0CC0
Signing time: Tue 04 Nov 2025 18:00:24 +0000
Manifest this update: Tue 04 Nov 2025 18:00:24 +0000
Manifest next update: Wed 05 Nov 2025 18:00:24 +0000
Files and hashes: 1: H_s46FVu3VtqmBdzQOsgFtOpwm4.roa (hash: xXfRZ05adaRJT3b+JBMiwuYhoS+v9eiqRiPqJaWYY3s=)
2: tmDXgyCGDV7-cp4gi160sqvr4Hg.crl (hash: Fk8kin1Ohj8xWRYNqLy95+aBidBvjON4dZEEAGfpG74=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/daf212-f009-4bd4-874d-624c3e788cdf/1/tmDXgyCGDV7-cp4gi160sqvr4Hg.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/daf212-f009-4bd4-874d-624c3e788cdf/1/tmDXgyCGDV7-cp4gi160sqvr4Hg.mft
rsync://rpki.ripe.net/repository/DEFAULT/tmDXgyCGDV7-cp4gi160sqvr4Hg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 16:49:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:06:f7:3e:d7:7d:56:fd:34:16:d6:9e:e6:d3:d1:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b660d78320860d5efe729e208b5eb4b2abebe078
Validity
Not Before: Nov 4 18:00:24 2025 GMT
Not After : Nov 5 18:00:24 2025 GMT
Subject: CN=cf0e24e7162526c47c81a0667a7bf91d568a48f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:96:e2:47:0b:20:b8:0e:51:ee:5f:b9:8d:32:
f5:03:7d:4c:f5:1d:61:2d:67:92:89:0d:d3:3c:69:
0d:b7:77:9a:68:15:f8:db:a7:82:19:88:8b:08:1a:
1a:87:f0:ca:fb:a1:39:5e:99:2f:60:3c:5b:27:ae:
87:92:38:7e:e8:40:cd:9a:32:12:04:44:f8:ac:e2:
bc:6a:14:24:9e:81:3f:9f:59:9a:71:94:57:e1:85:
a9:5c:93:59:70:31:25:aa:45:38:de:a4:78:8e:5b:
4e:fc:9e:bf:d7:a7:a2:47:b3:0f:64:5a:b2:03:cd:
19:a0:a0:36:a9:b7:bc:37:d1:b5:b6:d3:51:c1:4c:
c7:52:49:06:13:78:4c:73:e3:c7:cd:ec:54:f6:93:
c8:76:92:d1:42:cd:1e:ac:ba:16:07:0b:c2:ac:2d:
3a:0d:f2:28:9f:6e:ec:51:2f:3e:00:fa:ce:99:2a:
b8:f3:cd:33:95:3a:09:76:32:18:d5:fa:41:37:0e:
ab:8b:b8:c4:16:5e:75:ee:51:54:ac:92:65:01:8f:
6b:07:ac:6a:39:5d:5d:d1:ec:27:2e:a2:dc:5e:d0:
78:6f:3b:8f:bc:de:8a:d6:4b:3f:bc:d2:1b:34:fb:
f0:39:91:52:6e:52:25:b4:f9:7a:42:79:1b:e8:5c:
bc:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:0E:24:E7:16:25:26:C4:7C:81:A0:66:7A:7B:F9:1D:56:8A:48:F9
X509v3 Authority Key Identifier:
keyid:B6:60:D7:83:20:86:0D:5E:FE:72:9E:20:8B:5E:B4:B2:AB:EB:E0:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tmDXgyCGDV7-cp4gi160sqvr4Hg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/daf212-f009-4bd4-874d-624c3e788cdf/1/tmDXgyCGDV7-cp4gi160sqvr4Hg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/daf212-f009-4bd4-874d-624c3e788cdf/1/tmDXgyCGDV7-cp4gi160sqvr4Hg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:a9:98:dd:db:fb:fe:1a:97:00:50:b5:33:07:ea:3d:16:a7:
6e:a8:1b:00:cd:00:69:02:29:b1:ad:dc:27:e3:97:e0:48:d1:
71:2e:0e:98:67:ad:8f:fb:f9:51:13:c7:99:0b:97:76:f8:a2:
87:fb:ba:f9:fe:f1:c5:10:14:b4:3d:03:eb:62:0a:ee:3f:f7:
ba:27:69:17:e2:84:49:f9:c2:09:2f:f2:f1:9e:be:25:f0:b6:
be:bb:fc:0c:33:c8:d4:b7:45:81:75:11:cd:87:23:71:9f:a4:
90:ad:e3:cb:dd:51:32:e9:f1:d3:b2:8c:95:79:10:35:7c:c9:
6c:f4:27:7f:9e:fb:9d:59:37:bb:2c:df:00:b2:de:ff:0b:c9:
96:13:c8:30:3d:e4:a0:27:60:49:d6:d0:56:3d:7d:65:2f:24:
f0:64:01:d4:29:02:f7:79:19:0c:0e:8e:d5:75:be:56:3b:d5:
88:9d:e2:7a:2f:6f:41:8e:1b:1f:a5:e0:f4:2c:18:cb:68:ba:
8a:19:c9:c1:55:17:c1:65:91:8d:fa:2c:bd:04:d5:c0:c9:9a:
00:9b:f1:0f:2b:09:34:7d:f1:80:60:6b:3b:60:ea:d2:74:21:
71:01:f0:b2:58:0f:48:23:dc:31:e0:52:29:84:57:25:59:67:
92:8f:b8:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:43:59 2025 by rpki-client