Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/34d470-49f7-4ae0-b61a-0944bed0ed26/1/tL3eeEFbacMSd8Cqx_ymYH1jXYg.mft
File: tL3eeEFbacMSd8Cqx_ymYH1jXYg.mft (raw, json)
Hash identifier: Hgb8LLVIirhhpXhfBZyJefGbHI6Cqk71DLxlzbuaJE4=
Subject key identifier: 25:44:D2:00:F7:20:EC:60:5F:ED:85:2A:8E:CB:A0:0D:45:78:FE:7C
Authority key identifier: B4:BD:DE:78:41:5B:69:C3:12:77:C0:AA:C7:FC:A6:60:7D:63:5D:88
Certificate issuer: /CN=b4bdde78415b69c31277c0aac7fca6607d635d88
Certificate serial: 019A54BF39C1D6FD74FE34EADB14F2B4B29A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tL3eeEFbacMSd8Cqx_ymYH1jXYg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/34d470-49f7-4ae0-b61a-0944bed0ed26/1/tL3eeEFbacMSd8Cqx_ymYH1jXYg.mft
Manifest number: 170E
Signing time: Wed 05 Nov 2025 16:00:09 +0000
Manifest this update: Wed 05 Nov 2025 16:00:09 +0000
Manifest next update: Thu 06 Nov 2025 16:00:09 +0000
Files and hashes: 1: ag-uYpovt5JPQ3cFAXtXn4zz86A.roa (hash: 2LKnP2sHY9S5jGwYqiGKID4jG+yM+87plZe5I7Vq4ns=)
2: tL3eeEFbacMSd8Cqx_ymYH1jXYg.crl (hash: 8qhbqjc3lXayne9nD9fOiA0J/kHCQk3I4RrydtNoDJ4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/34d470-49f7-4ae0-b61a-0944bed0ed26/1/tL3eeEFbacMSd8Cqx_ymYH1jXYg.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/34d470-49f7-4ae0-b61a-0944bed0ed26/1/tL3eeEFbacMSd8Cqx_ymYH1jXYg.mft
rsync://rpki.ripe.net/repository/DEFAULT/tL3eeEFbacMSd8Cqx_ymYH1jXYg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:54:bf:39:c1:d6:fd:74:fe:34:ea:db:14:f2:b4:b2:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4bdde78415b69c31277c0aac7fca6607d635d88
Validity
Not Before: Nov 5 16:00:09 2025 GMT
Not After : Nov 6 16:00:09 2025 GMT
Subject: CN=2544d200f720ec605fed852a8ecba00d4578fe7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:2b:d5:11:4c:5d:f7:fd:a9:3b:04:13:18:cd:
c4:f3:a8:47:ba:5e:eb:35:b0:ff:e9:1d:54:3d:00:
9c:7c:2c:3e:5e:c5:86:8f:05:48:eb:8a:bd:32:91:
ee:d3:c8:fd:18:34:3c:33:d7:75:21:94:94:4d:79:
bc:b5:51:38:8d:21:99:8a:5e:b8:57:8a:87:16:45:
5b:15:96:14:8f:d3:ff:20:bd:00:93:44:38:6f:82:
ca:ea:93:27:1d:0d:ea:f3:97:05:3c:c8:fb:95:94:
a7:81:97:d0:8e:af:a8:d0:9c:90:f3:15:47:d7:7c:
a2:e0:47:5e:f1:9a:aa:22:fb:ac:48:ec:31:d0:1a:
64:b8:49:f5:4e:4e:15:a4:97:34:1b:1d:f1:fb:a5:
e2:6f:ff:71:06:39:c6:24:49:58:f7:66:f1:5d:0e:
68:2d:59:ef:ad:8a:3f:20:73:fa:97:5b:d4:4d:75:
2f:17:69:5c:70:1a:3f:b8:e2:bd:4c:88:2a:73:be:
fe:55:06:ff:47:7f:06:c3:ef:42:16:8c:c1:71:cd:
ca:82:72:33:d5:b9:f4:86:05:66:9d:aa:b1:a4:ef:
3f:ed:81:e7:38:12:7e:73:c6:63:b5:4b:65:bf:db:
7c:da:66:ab:14:49:fe:e1:d7:e1:5b:07:7f:32:d4:
ee:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:44:D2:00:F7:20:EC:60:5F:ED:85:2A:8E:CB:A0:0D:45:78:FE:7C
X509v3 Authority Key Identifier:
keyid:B4:BD:DE:78:41:5B:69:C3:12:77:C0:AA:C7:FC:A6:60:7D:63:5D:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tL3eeEFbacMSd8Cqx_ymYH1jXYg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/34d470-49f7-4ae0-b61a-0944bed0ed26/1/tL3eeEFbacMSd8Cqx_ymYH1jXYg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/34d470-49f7-4ae0-b61a-0944bed0ed26/1/tL3eeEFbacMSd8Cqx_ymYH1jXYg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:d2:b2:59:9e:6d:7a:f8:b9:5d:14:ee:66:13:bd:03:d4:2d:
f7:54:50:07:4e:8c:2e:f5:35:61:db:27:c8:6e:d9:ef:b1:f6:
87:30:24:39:0f:27:65:ac:e3:59:0a:be:33:9a:b2:2e:27:76:
d9:94:d8:fe:71:f8:81:fb:de:ce:f3:eb:f3:81:e4:9c:06:2f:
82:7d:dd:4a:ce:99:7c:dc:56:16:55:77:db:6f:a9:3f:0a:16:
4a:d1:bc:4b:19:33:d0:6c:6e:37:d4:27:48:1b:44:3f:48:54:
a3:ec:3b:e8:f9:06:d5:2c:19:2a:66:6e:51:65:d7:ae:12:f1:
a3:e9:06:ce:61:7a:db:6c:5e:fb:b2:af:5c:49:47:5c:81:f8:
0a:23:7b:a8:dd:05:bd:9e:4d:5d:c2:c9:b6:f1:e4:a8:f1:2b:
f6:24:fe:52:3e:27:83:fd:e9:98:36:8c:31:5f:b9:02:fd:9f:
a3:84:65:67:93:1e:3e:47:fa:0d:97:ec:13:aa:72:76:aa:0c:
63:6d:82:c4:5a:40:2f:dc:a6:15:8f:f9:19:98:3b:aa:55:99:
00:a4:dd:ad:e0:90:3c:b1:c6:4a:73:05:5a:46:3a:21:21:1b:
c7:2a:a6:39:7c:b4:4b:bd:19:9b:d9:8b:c3:80:0b:33:46:12:
dd:d6:7a:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 19:11:26 2025 by rpki-client