Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/5036be-138b-442e-963f-57cd72957b89/1/t6hswzTG4Oq4PyUr2D7ulWklykA.mft
File: t6hswzTG4Oq4PyUr2D7ulWklykA.mft (raw, json)
Hash identifier: uoeHA4eRVY+MtlUFglqNO84jjn0+lpJWDt9kEYYbUmQ=
Subject key identifier: F4:FA:CF:30:5D:C2:81:DD:94:8C:21:BF:9A:10:97:66:0B:6E:8E:70
Authority key identifier: B7:A8:6C:C3:34:C6:E0:EA:B8:3F:25:2B:D8:3E:EE:95:69:25:CA:40
Certificate issuer: /CN=b7a86cc334c6e0eab83f252bd83eee956925ca40
Certificate serial: 019A4D73C1774ABDF8EA853007EB385B1193
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t6hswzTG4Oq4PyUr2D7ulWklykA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/5036be-138b-442e-963f-57cd72957b89/1/t6hswzTG4Oq4PyUr2D7ulWklykA.mft
Manifest number: 170A
Signing time: Tue 04 Nov 2025 06:00:22 +0000
Manifest this update: Tue 04 Nov 2025 06:00:22 +0000
Manifest next update: Wed 05 Nov 2025 06:00:22 +0000
Files and hashes: 1: YDZQqJLg6f9-JdbHT4bYmgUJjh0.roa (hash: cInsk0zvLYwt9OlQZPLFwtQxycESn1Vx2ttrJFC0hi8=)
2: t6hswzTG4Oq4PyUr2D7ulWklykA.crl (hash: u69STfvNMMq+CTQxbMq/BIiXSbgc+6NoMl2DwLA0ZNM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/5036be-138b-442e-963f-57cd72957b89/1/t6hswzTG4Oq4PyUr2D7ulWklykA.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/5036be-138b-442e-963f-57cd72957b89/1/t6hswzTG4Oq4PyUr2D7ulWklykA.mft
rsync://rpki.ripe.net/repository/DEFAULT/t6hswzTG4Oq4PyUr2D7ulWklykA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 06:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:73:c1:77:4a:bd:f8:ea:85:30:07:eb:38:5b:11:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b7a86cc334c6e0eab83f252bd83eee956925ca40
Validity
Not Before: Nov 4 06:00:22 2025 GMT
Not After : Nov 5 06:00:22 2025 GMT
Subject: CN=f4facf305dc281dd948c21bf9a1097660b6e8e70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:66:de:84:3e:68:48:61:fa:f3:6b:73:22:df:
af:d6:08:af:45:ba:77:a6:34:34:b2:d6:bf:80:63:
5c:fc:b5:9f:f7:db:6a:35:ee:3c:c7:77:bc:4b:76:
f7:22:51:73:f6:f3:41:58:43:e3:b6:53:8e:5c:5b:
00:9e:bd:2b:fe:10:3d:fd:a5:3c:7c:63:05:a4:09:
5c:85:df:06:6e:ca:85:44:69:b6:fc:23:17:7a:40:
92:e3:83:94:08:b6:85:ab:8d:49:6e:ed:24:b4:ea:
10:19:77:15:d4:f4:d2:30:37:5c:ff:73:ff:28:b7:
d0:19:50:e6:d3:af:05:be:e4:86:33:2e:88:5d:fd:
f6:48:3b:19:8a:18:f9:39:71:0b:81:36:1f:b9:6b:
04:1a:0a:f7:d0:b2:26:5a:f5:9f:a6:37:bf:52:14:
07:66:92:4d:fa:d7:fe:f1:7b:96:b5:bb:4b:25:8b:
f5:f2:cf:5b:64:f6:99:a5:a1:09:9f:1c:b4:2e:ba:
16:94:bb:22:49:98:db:47:6b:6b:d7:8a:28:f4:3b:
ed:59:5f:79:3e:b4:fa:4b:30:32:d2:1b:4d:c1:5d:
6c:4a:cc:b6:b6:9c:87:6d:ea:10:3d:b0:c7:d9:0d:
f6:75:19:f0:80:27:3e:56:98:f4:e3:f3:62:fd:20:
30:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:FA:CF:30:5D:C2:81:DD:94:8C:21:BF:9A:10:97:66:0B:6E:8E:70
X509v3 Authority Key Identifier:
keyid:B7:A8:6C:C3:34:C6:E0:EA:B8:3F:25:2B:D8:3E:EE:95:69:25:CA:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t6hswzTG4Oq4PyUr2D7ulWklykA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/5036be-138b-442e-963f-57cd72957b89/1/t6hswzTG4Oq4PyUr2D7ulWklykA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/5036be-138b-442e-963f-57cd72957b89/1/t6hswzTG4Oq4PyUr2D7ulWklykA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:eb:08:21:0f:6c:82:94:a4:de:01:8d:8c:25:03:ec:5f:e5:
90:04:1f:c1:fb:d0:b3:ec:42:2f:99:5b:b6:f4:99:20:13:5a:
c7:7d:ba:d8:10:11:09:00:61:66:fc:35:55:f5:86:67:2f:c7:
63:8d:69:8d:26:b6:a7:03:fe:dd:f3:e5:99:88:75:ed:ba:29:
ee:69:eb:cd:94:f1:7f:21:11:48:f4:77:e0:bf:42:d8:93:53:
71:09:88:fe:f2:0c:9f:3e:36:5c:5c:08:65:d3:0c:fd:d3:d5:
3c:45:2d:3e:8a:99:18:2b:6c:0f:c2:93:8f:1a:ff:7d:38:4b:
68:16:1c:06:9e:21:11:87:c8:23:97:27:a4:fe:d8:00:cc:e9:
fa:72:ff:ce:73:0b:35:65:cc:32:5c:35:9e:d6:02:99:b3:f4:
f5:22:05:0f:10:45:e5:9f:c9:22:09:95:16:a5:59:a5:4f:18:
9d:43:ae:81:46:2d:cb:1e:0f:e4:96:2b:f9:ae:64:27:dd:17:
97:7d:6e:d7:97:3c:55:0e:5c:4a:15:d1:79:1d:66:7f:4f:2a:
b7:62:07:48:6b:de:4a:5e:00:0c:f3:dd:98:3e:98:db:ac:8a:
08:8e:2e:ad:6b:0f:0e:d3:7a:d3:0b:09:6c:f7:3c:37:d8:e5:
68:d6:03:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:52:28 2025 by rpki-client