Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/645f6a-2653-4d31-bb4e-1f87976137a0/1/tAifhEgwV6w2RkfIChsjyXa5MBY.mft
File: tAifhEgwV6w2RkfIChsjyXa5MBY.mft (raw, json)
Hash identifier: ZFfsKiP1fvRk3UXpUd6tPjvsvGhrPfQH9SBV8KYy7UM=
Subject key identifier: 5B:8E:4F:3B:1F:3E:96:8F:1D:AA:43:6C:0E:0F:68:E5:79:E3:B8:47
Authority key identifier: B4:08:9F:84:48:30:57:AC:36:46:47:C8:0A:1B:23:C9:76:B9:30:16
Certificate issuer: /CN=b4089f84483057ac364647c80a1b23c976b93016
Certificate serial: 019A50E3DF6D3697C4879749A7AD6D80B191
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tAifhEgwV6w2RkfIChsjyXa5MBY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/645f6a-2653-4d31-bb4e-1f87976137a0/1/tAifhEgwV6w2RkfIChsjyXa5MBY.mft
Manifest number: 170E
Signing time: Tue 04 Nov 2025 22:01:42 +0000
Manifest this update: Tue 04 Nov 2025 22:01:42 +0000
Manifest next update: Wed 05 Nov 2025 22:01:42 +0000
Files and hashes: 1: ZZlyR1qePInNwWMshU_T-zKOIRs.roa (hash: 1/uH+W7Kksp46/1+HMCQDG/zqQ+/+VqifvgRn9tMf2U=)
2: tAifhEgwV6w2RkfIChsjyXa5MBY.crl (hash: U0F1RE274swHRVSrvXiAWNsXyKFu+rIV6XQcgokwrg0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/645f6a-2653-4d31-bb4e-1f87976137a0/1/tAifhEgwV6w2RkfIChsjyXa5MBY.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/645f6a-2653-4d31-bb4e-1f87976137a0/1/tAifhEgwV6w2RkfIChsjyXa5MBY.mft
rsync://rpki.ripe.net/repository/DEFAULT/tAifhEgwV6w2RkfIChsjyXa5MBY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:e3:df:6d:36:97:c4:87:97:49:a7:ad:6d:80:b1:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4089f84483057ac364647c80a1b23c976b93016
Validity
Not Before: Nov 4 22:01:42 2025 GMT
Not After : Nov 5 22:01:42 2025 GMT
Subject: CN=5b8e4f3b1f3e968f1daa436c0e0f68e579e3b847
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:7c:7c:00:81:d8:85:bf:a8:dc:c1:ef:b9:f4:
68:0c:50:f5:b6:a4:38:3b:78:d6:36:bf:0e:82:e5:
7b:99:87:07:e6:48:90:f1:e1:5f:6a:6e:bf:d5:3e:
86:81:11:85:7b:b6:68:8b:f4:8d:e5:23:c5:1c:f2:
1f:44:df:b6:16:fe:cd:43:e3:77:b6:07:2d:12:85:
41:88:33:f4:fe:9a:d5:e6:1b:12:d6:4f:88:34:9f:
b2:b4:98:af:ff:8c:2c:bb:4a:a4:a6:76:b1:3e:70:
0b:f3:4c:f7:fb:f6:0d:0e:5e:7a:a9:27:4b:62:97:
b5:05:3e:df:bf:28:8d:80:b3:b6:45:14:bc:e1:3e:
72:f6:53:0b:68:39:d6:5e:7e:30:f4:bd:0d:a6:dd:
eb:37:41:b6:62:f3:fe:c9:bd:32:5c:80:9a:c9:ca:
9b:90:a9:93:38:d5:17:da:f8:5e:1b:b8:82:dd:92:
63:a7:a5:8e:83:db:83:cc:d6:55:d5:2a:7a:95:af:
c2:c4:0e:03:c2:51:32:c4:ab:23:63:f7:2f:80:1d:
b3:54:bc:10:7f:72:76:61:f5:9e:91:cd:cd:4a:e4:
57:30:e2:aa:e0:2c:23:ad:4c:ce:f9:1b:66:0e:85:
ad:ad:c5:9b:b1:05:93:f3:68:f4:77:a1:ea:61:b9:
16:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:8E:4F:3B:1F:3E:96:8F:1D:AA:43:6C:0E:0F:68:E5:79:E3:B8:47
X509v3 Authority Key Identifier:
keyid:B4:08:9F:84:48:30:57:AC:36:46:47:C8:0A:1B:23:C9:76:B9:30:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tAifhEgwV6w2RkfIChsjyXa5MBY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/645f6a-2653-4d31-bb4e-1f87976137a0/1/tAifhEgwV6w2RkfIChsjyXa5MBY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/645f6a-2653-4d31-bb4e-1f87976137a0/1/tAifhEgwV6w2RkfIChsjyXa5MBY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:70:65:26:06:ae:49:16:dd:32:bc:82:56:41:0c:a4:25:12:
02:ef:62:53:aa:58:2c:40:93:05:71:fb:17:df:46:8e:b3:7a:
a3:88:2a:d9:5d:e1:80:f3:2b:ff:a6:ef:69:8f:c2:2d:38:43:
df:ff:ce:ed:d2:87:06:73:02:b8:07:06:e3:4d:c5:3e:cd:d4:
47:dd:56:bb:13:5d:66:02:61:ab:ec:71:a1:96:f3:aa:5a:eb:
26:2e:13:52:68:e5:b9:a9:18:18:90:1e:d3:7c:f9:5e:12:61:
b3:5f:90:f5:60:5a:60:ea:e8:32:da:6d:d5:f7:6f:70:3a:87:
62:11:88:08:74:a4:9a:c1:79:a1:f6:06:91:5e:a6:05:66:c0:
79:1f:eb:27:7e:f5:2d:19:dd:b3:24:f4:2f:32:4c:5d:21:35:
10:23:1a:cb:7d:12:74:64:ca:14:b8:f9:a2:cb:23:fe:ab:f6:
2d:c6:3a:b8:2d:84:c6:b5:9f:92:e1:78:86:e4:47:c9:a8:6b:
cf:95:e2:82:82:d9:ef:91:00:a4:01:68:c0:60:24:79:dd:ba:
87:48:cf:54:8b:04:e2:a4:f5:33:15:aa:43:4c:9d:ec:ca:ca:
de:36:b6:60:f3:fd:51:0f:83:b6:bb:ec:d8:91:e2:9e:d6:52:
a4:1d:d6:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 00:23:39 2025 by rpki-client