Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/ac681f-05d2-4045-ae10-5ebdd9e2887c/1/t0zj88XlovnYuKTHeoNh-KIW860.mft
File: t0zj88XlovnYuKTHeoNh-KIW860.mft (raw, json)
Hash identifier: FZIfNWR88RbhdzXtyb3F2bnz4M0Uk3WGMrAYxtaPbrM=
Subject key identifier: 90:69:C8:BF:D0:53:15:59:72:25:8C:40:0B:D9:19:40:AD:26:F3:96
Authority key identifier: B7:4C:E3:F3:C5:E5:A2:F9:D8:B8:A4:C7:7A:83:61:F8:A2:16:F3:AD
Certificate issuer: /CN=b74ce3f3c5e5a2f9d8b8a4c77a8361f8a216f3ad
Certificate serial: 019A4DE1F9AC0657A1D1B2A57A45237724C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t0zj88XlovnYuKTHeoNh-KIW860.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/ac681f-05d2-4045-ae10-5ebdd9e2887c/1/t0zj88XlovnYuKTHeoNh-KIW860.mft
Manifest number: 1228
Signing time: Tue 04 Nov 2025 08:00:46 +0000
Manifest this update: Tue 04 Nov 2025 08:00:46 +0000
Manifest next update: Wed 05 Nov 2025 08:00:46 +0000
Files and hashes: 1: CWinuPyhpx9dz9dUy6hm9U-hSH0.roa (hash: kzRVIrmXy5CpUKL1SvqWwqKDXVmBwcHxugVImN5DgH0=)
2: _YcVUBg4pBpfDLeQd5mPM0GEYXY.roa (hash: TyordHwYJ+m11Vugk833ssnB80M13ALr7nNUHskLV34=)
3: t0zj88XlovnYuKTHeoNh-KIW860.crl (hash: qI9X6twqXZyTRGzXkBTP3tFlBPNZiwfWoWbo92HYmXk=)
4: yXmhizI4Z65kZAreixYHF_jmabo.roa (hash: fvFB8WtSEXeTN1SuEvO/tTJVrm8z5zv+uzQCLKVxzdI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/ac681f-05d2-4045-ae10-5ebdd9e2887c/1/t0zj88XlovnYuKTHeoNh-KIW860.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/ac681f-05d2-4045-ae10-5ebdd9e2887c/1/t0zj88XlovnYuKTHeoNh-KIW860.mft
rsync://rpki.ripe.net/repository/DEFAULT/t0zj88XlovnYuKTHeoNh-KIW860.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e1:f9:ac:06:57:a1:d1:b2:a5:7a:45:23:77:24:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b74ce3f3c5e5a2f9d8b8a4c77a8361f8a216f3ad
Validity
Not Before: Nov 4 08:00:46 2025 GMT
Not After : Nov 5 08:00:46 2025 GMT
Subject: CN=9069c8bfd053155972258c400bd91940ad26f396
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:55:44:7c:a0:35:25:68:b9:26:8e:f0:5a:59:
80:ec:a3:7f:74:55:77:e5:d1:e3:35:34:7c:2a:55:
b6:3e:64:d9:bd:4b:76:74:68:24:95:3e:d8:1d:9e:
f1:90:02:01:fc:13:a0:11:04:c9:5e:ba:d9:1c:84:
8b:63:a7:40:b8:53:10:f1:83:87:30:4f:fc:06:9c:
7e:10:ef:03:33:38:d3:90:a9:05:e7:7b:af:3b:74:
47:b0:28:3c:d2:de:b4:e0:f4:ff:98:d6:81:17:fa:
d2:60:06:7b:0c:53:27:6c:cf:3d:e6:b1:f9:72:d2:
2a:77:67:f6:e0:55:d1:19:aa:83:73:e7:70:33:f1:
a5:f3:88:27:8b:18:d3:7d:cb:04:dc:06:85:68:70:
c0:5f:aa:ec:f8:ad:f8:0d:db:b2:2c:c7:53:a8:11:
a3:62:ec:c4:b0:0d:dd:1b:41:ed:4e:7d:00:42:b3:
62:24:ff:38:39:46:70:6f:3b:cb:99:e4:bb:c3:9c:
17:a3:12:3f:7b:28:c2:0a:b4:9f:95:f3:3b:3d:56:
18:27:dd:00:36:33:36:fd:e7:3e:44:85:c6:62:83:
fb:46:ab:c2:2c:bc:07:c7:91:26:4b:b2:93:f3:06:
24:30:f1:9e:59:4b:4e:8f:87:8c:7b:1b:ac:57:29:
b2:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:69:C8:BF:D0:53:15:59:72:25:8C:40:0B:D9:19:40:AD:26:F3:96
X509v3 Authority Key Identifier:
keyid:B7:4C:E3:F3:C5:E5:A2:F9:D8:B8:A4:C7:7A:83:61:F8:A2:16:F3:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t0zj88XlovnYuKTHeoNh-KIW860.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/ac681f-05d2-4045-ae10-5ebdd9e2887c/1/t0zj88XlovnYuKTHeoNh-KIW860.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/ac681f-05d2-4045-ae10-5ebdd9e2887c/1/t0zj88XlovnYuKTHeoNh-KIW860.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:a8:89:24:c5:86:a6:a0:61:31:51:0b:fe:e5:41:ce:b9:33:
8d:34:4b:3c:84:6d:19:44:ed:78:be:2a:60:fe:a8:fc:f8:41:
0e:1c:51:98:d5:bb:0c:99:c3:07:bb:fa:13:18:3a:b8:fc:e4:
1d:6c:95:5a:14:8f:c2:ff:4c:0c:3d:90:c1:aa:ad:73:6f:71:
1b:d4:66:9d:f7:bd:a7:65:e2:fa:33:ae:6d:5e:d3:b3:62:a5:
91:af:ff:d4:c5:06:49:b7:2c:64:2f:40:56:ab:1c:35:d8:73:
9c:79:3d:8c:9a:56:c7:20:0c:e6:89:4e:5c:6c:fe:3d:89:56:
40:76:c0:65:f6:fb:1a:cf:9d:c1:b8:9e:be:10:86:11:a6:49:
b7:33:a8:09:5a:c2:18:da:a6:4e:3c:78:7f:87:13:2f:db:04:
96:95:06:37:13:df:1c:7b:c7:07:ae:a0:c6:e7:3d:87:a4:ca:
a8:9c:a1:4e:17:ff:db:60:78:58:92:04:13:1f:ea:02:c1:7c:
fa:ba:cd:6c:14:ff:09:83:e3:40:3e:e9:54:83:61:b1:5b:5d:
03:b8:8d:45:1c:bc:5c:6f:58:d7:7e:29:c6:a3:dd:ff:cb:93:
db:2a:c3:8b:d6:5c:a1:25:ad:97:55:88:a6:5b:8e:56:d1:a9:
fc:4a:4c:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:20:13 2025 by rpki-client