Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/7e7ee7-1bd4-4435-871f-6cf8e567ff1c/1/tNc6atd6j4WbQD2yznFegtHPMv4.mft
File: tNc6atd6j4WbQD2yznFegtHPMv4.mft (raw, json)
Hash identifier: MERjmb2IvSAbVrjoGD8h/LG2KuL8uwPGp0jJcQ/Ef5k=
Subject key identifier: 57:61:71:7B:02:0A:25:55:0F:98:D7:E4:A2:EF:C3:DA:D1:98:25:45
Authority key identifier: B4:D7:3A:6A:D7:7A:8F:85:9B:40:3D:B2:CE:71:5E:82:D1:CF:32:FE
Certificate issuer: /CN=b4d73a6ad77a8f859b403db2ce715e82d1cf32fe
Certificate serial: 019A511993D5D694F4646C8FBA6D52D186C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tNc6atd6j4WbQD2yznFegtHPMv4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/7e7ee7-1bd4-4435-871f-6cf8e567ff1c/1/tNc6atd6j4WbQD2yznFegtHPMv4.mft
Manifest number: 170E
Signing time: Tue 04 Nov 2025 23:00:21 +0000
Manifest this update: Tue 04 Nov 2025 23:00:21 +0000
Manifest next update: Wed 05 Nov 2025 23:00:21 +0000
Files and hashes: 1: YO-tGwbdqI4YYY7I1KqnEaElBoQ.roa (hash: XZFdc4B2lVuIwGuWp8Gzl21H5s/bjgOkXy1zS/FUzmY=)
2: r8uOOwHL3Wt4pGrUJebg8yZ8WaY.roa (hash: Eioa5I9ONK/XZQXZG+CzeC8xkMTpLpCoDVH43Ycxzzc=)
3: tNc6atd6j4WbQD2yznFegtHPMv4.crl (hash: mV5KCfkRPd0aqjXBrQwJzFouFH9my7coBSF+KD6bwkk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/7e7ee7-1bd4-4435-871f-6cf8e567ff1c/1/tNc6atd6j4WbQD2yznFegtHPMv4.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/7e7ee7-1bd4-4435-871f-6cf8e567ff1c/1/tNc6atd6j4WbQD2yznFegtHPMv4.mft
rsync://rpki.ripe.net/repository/DEFAULT/tNc6atd6j4WbQD2yznFegtHPMv4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:19:93:d5:d6:94:f4:64:6c:8f:ba:6d:52:d1:86:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4d73a6ad77a8f859b403db2ce715e82d1cf32fe
Validity
Not Before: Nov 4 23:00:21 2025 GMT
Not After : Nov 5 23:00:21 2025 GMT
Subject: CN=5761717b020a25550f98d7e4a2efc3dad1982545
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:d3:d8:02:34:9a:4d:99:2c:50:af:2d:7d:5f:
87:d1:09:67:30:ce:02:c1:d8:f9:55:a7:15:cf:96:
03:01:13:11:ba:b8:c5:d0:94:e6:63:61:aa:12:e0:
45:fe:23:26:5f:81:be:36:9e:77:27:0c:47:9e:38:
39:d1:7b:1b:bb:c8:72:54:be:15:8f:be:32:82:76:
bb:f4:56:2d:fd:c0:21:62:75:98:31:d8:55:11:32:
a6:eb:2e:7e:83:97:d8:5b:29:3e:1e:e9:de:0e:af:
73:bb:97:b0:23:07:b3:2f:a4:8a:95:0d:8a:bc:d4:
4b:f6:8d:b8:78:a2:bf:69:e4:39:18:67:91:f0:77:
90:94:fb:ea:0d:15:92:d5:4b:04:97:37:3d:25:b6:
37:ab:e9:d9:3f:ff:1b:63:5e:24:b9:6f:78:5a:ea:
96:78:e0:f9:b1:9c:29:56:24:5b:29:77:25:81:b3:
f1:05:61:db:13:16:4c:6a:2b:a1:d0:9d:ca:ec:d9:
6f:be:b7:78:ae:da:0d:41:c6:90:8c:b3:11:02:2d:
89:6d:b4:14:69:d4:6f:de:47:eb:03:74:23:57:3b:
90:e3:d4:c7:d7:78:f8:d7:7d:c0:a2:47:c6:2e:85:
da:e5:fe:5e:35:ea:75:a9:49:98:01:3f:fc:2b:f4:
c2:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:61:71:7B:02:0A:25:55:0F:98:D7:E4:A2:EF:C3:DA:D1:98:25:45
X509v3 Authority Key Identifier:
keyid:B4:D7:3A:6A:D7:7A:8F:85:9B:40:3D:B2:CE:71:5E:82:D1:CF:32:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tNc6atd6j4WbQD2yznFegtHPMv4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/7e7ee7-1bd4-4435-871f-6cf8e567ff1c/1/tNc6atd6j4WbQD2yznFegtHPMv4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/7e7ee7-1bd4-4435-871f-6cf8e567ff1c/1/tNc6atd6j4WbQD2yznFegtHPMv4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:9e:c0:74:66:d0:4a:1b:75:57:66:4d:17:bf:41:40:27:1a:
40:b7:61:51:be:37:3a:e7:71:52:b8:de:e7:a3:11:61:52:9f:
f7:24:ae:54:67:ec:ac:c6:9b:14:a5:6b:83:86:2f:a9:08:db:
86:9a:c1:65:98:ad:9a:28:f8:90:e4:0a:4f:a6:eb:6d:dc:96:
4d:2f:84:47:b4:ac:f0:7a:4d:3a:a9:0a:82:2e:36:7e:ce:ec:
38:bc:8b:4b:83:c2:53:4b:0e:8f:80:7e:6d:98:99:eb:13:2a:
95:fe:b6:eb:ca:46:74:db:31:01:c4:e9:15:11:c6:d0:ba:33:
1f:f5:9b:d0:9e:56:53:0a:df:2b:3e:2a:74:42:fa:53:93:b6:
5d:bf:a7:31:a0:3d:48:67:c1:7c:a1:da:48:a3:2a:16:8e:02:
66:b4:f2:01:c8:2b:e5:4e:2d:ff:8b:23:55:27:a4:38:f4:74:
5f:f0:d2:35:69:1e:f4:86:23:53:5d:64:7d:eb:66:d1:0f:06:
5f:15:15:eb:be:05:ba:e4:34:1a:fa:ad:3e:af:77:3a:04:be:
6f:c0:38:97:ae:4b:40:4b:2a:84:b7:18:cc:86:6b:07:58:7e:
41:ba:d7:fa:fc:3a:37:a5:d4:b2:82:41:90:04:2a:fe:62:b2:
47:ec:d3:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 03:32:08 2025 by rpki-client