Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/20974d-6403-4107-a75b-13fb7a5130ca/1/tOxsCl6-xYF9kbkeeaa8YTLrnSw.mft
File: tOxsCl6-xYF9kbkeeaa8YTLrnSw.mft (raw, json)
Hash identifier: 4DTyrRQtFB4xgD/MVqoGUBQN0rOzZB6TDmVZ2Jzncr4=
Subject key identifier: FD:F8:70:1F:C8:77:D7:3C:81:8A:C3:93:66:F4:FF:A4:B1:21:AF:9B
Authority key identifier: B4:EC:6C:0A:5E:BE:C5:81:7D:91:B9:1E:79:A6:BC:61:32:EB:9D:2C
Certificate issuer: /CN=b4ec6c0a5ebec5817d91b91e79a6bc6132eb9d2c
Certificate serial: 019A4EF4B411584E08B60A2DD9E76FA3D8C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tOxsCl6-xYF9kbkeeaa8YTLrnSw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/20974d-6403-4107-a75b-13fb7a5130ca/1/tOxsCl6-xYF9kbkeeaa8YTLrnSw.mft
Manifest number: 1710
Signing time: Tue 04 Nov 2025 13:00:50 +0000
Manifest this update: Tue 04 Nov 2025 13:00:50 +0000
Manifest next update: Wed 05 Nov 2025 13:00:50 +0000
Files and hashes: 1: 0WgKhjREJrZPp5eivCc5Ledwy08.roa (hash: g1cMz695Vu5b1v4C7JspTc1yMqOrx6XRuND1g3o80ZU=)
2: c4XFDsuP3oiOPuoN5dW6Mp7swps.roa (hash: RShjOJ6yyL7rh4X46zYbqRc79tC1/dWZp0uZXHk88jM=)
3: tOxsCl6-xYF9kbkeeaa8YTLrnSw.crl (hash: AnOsgNoXMo/5ND6wKr6UmdFf8QYe9AAyL/v8TTtBr9w=)
4: x8qy1V86ggKXIYJ47lPp7-bEQ08.roa (hash: Tid2ObTc99hFnnGIy0KhVlQV4ZEsaX9AQcsvz/R/sw4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/20974d-6403-4107-a75b-13fb7a5130ca/1/tOxsCl6-xYF9kbkeeaa8YTLrnSw.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/20974d-6403-4107-a75b-13fb7a5130ca/1/tOxsCl6-xYF9kbkeeaa8YTLrnSw.mft
rsync://rpki.ripe.net/repository/DEFAULT/tOxsCl6-xYF9kbkeeaa8YTLrnSw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:b4:11:58:4e:08:b6:0a:2d:d9:e7:6f:a3:d8:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4ec6c0a5ebec5817d91b91e79a6bc6132eb9d2c
Validity
Not Before: Nov 4 13:00:50 2025 GMT
Not After : Nov 5 13:00:50 2025 GMT
Subject: CN=fdf8701fc877d73c818ac39366f4ffa4b121af9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:3f:35:39:e1:fc:3b:78:86:fa:2f:7d:82:b3:
8d:20:52:5b:cc:1d:64:ea:27:eb:23:84:90:c0:f3:
bb:88:0a:04:91:84:28:04:70:28:7c:1e:a2:1f:e3:
42:c4:e8:c7:9d:00:09:89:79:72:e1:f8:5d:c5:89:
6b:f0:e8:d7:d1:29:f6:b8:8f:9c:6a:7e:ad:9b:06:
ec:fa:ce:2a:1b:94:71:b7:9f:8f:06:24:04:87:4d:
4a:0e:75:ec:47:d1:a0:93:db:e5:d2:f4:61:a4:cb:
23:86:09:84:3a:20:aa:82:64:61:45:3d:27:3a:5d:
60:b3:1b:ef:a3:84:67:f6:ad:dc:c8:6a:34:08:2c:
7e:ba:57:b4:f4:f1:26:32:70:c7:a6:63:7a:44:fd:
87:0a:fa:71:c6:b8:ba:5c:b5:93:d6:99:7c:85:42:
94:6d:0d:0a:99:8d:82:52:68:09:d8:ee:3c:c2:ff:
c5:f1:2e:e6:bd:a3:09:8c:d5:c6:a2:0a:c6:0f:01:
07:aa:8c:90:79:49:55:98:4e:fe:de:24:a0:d9:7c:
d8:46:b8:37:1d:7d:86:1c:cc:07:05:15:35:38:3d:
c3:87:4c:68:a9:0e:fb:7a:5b:5b:72:19:35:49:92:
65:4a:33:cb:71:09:96:69:ff:8b:76:83:33:9a:4b:
d0:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:F8:70:1F:C8:77:D7:3C:81:8A:C3:93:66:F4:FF:A4:B1:21:AF:9B
X509v3 Authority Key Identifier:
keyid:B4:EC:6C:0A:5E:BE:C5:81:7D:91:B9:1E:79:A6:BC:61:32:EB:9D:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tOxsCl6-xYF9kbkeeaa8YTLrnSw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/20974d-6403-4107-a75b-13fb7a5130ca/1/tOxsCl6-xYF9kbkeeaa8YTLrnSw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/20974d-6403-4107-a75b-13fb7a5130ca/1/tOxsCl6-xYF9kbkeeaa8YTLrnSw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:01:ce:f6:95:a3:13:1d:c5:09:ba:de:06:6c:7a:ba:6a:ad:
c8:e7:47:85:5b:c2:e1:4d:9b:cc:e6:90:65:77:70:8c:56:44:
fc:87:e2:e7:bb:4e:df:37:78:19:68:2d:78:98:cb:e3:0b:74:
ef:16:d5:c0:f4:bd:94:b5:09:9d:4d:97:b1:49:5f:9b:ec:16:
51:24:12:0b:45:ab:57:b8:92:0c:52:83:9c:34:52:81:72:6c:
ab:79:1a:03:68:3e:3a:8c:32:4c:47:7a:c5:f5:dc:93:a4:87:
92:81:cc:14:6b:aa:61:0c:58:f4:3d:66:c0:cb:77:89:4d:d6:
ae:9e:ec:ea:0e:1d:8f:84:17:33:b6:88:18:37:f0:d4:f5:a0:
ca:2f:49:03:14:90:fc:8d:24:88:2c:ca:7b:6e:d6:b2:ba:f1:
3f:4b:6f:e8:e6:53:14:2d:07:a2:ea:1e:a7:53:1a:91:c7:a3:
4d:9c:3b:54:9b:5f:21:6e:59:87:86:78:be:7b:54:c0:f7:9f:
62:8c:f5:2f:3e:02:4c:82:1b:2c:90:94:d6:fa:a5:ef:a6:b0:
c1:ec:17:f3:fa:0e:a1:3d:90:3b:88:d7:99:88:28:4b:96:8f:
75:90:cf:22:dc:dc:62:78:a3:51:74:55:9d:cd:11:28:39:0b:
df:57:7a:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:06:39 2025 by rpki-client