Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/497dd7-7f7c-494d-b886-52f850ca55c6/1/tqiXx5jwGbJHexqc47I7tddhZsM.mft
File: tqiXx5jwGbJHexqc47I7tddhZsM.mft (raw, json)
Hash identifier: LHKxVsK8MWmmYBfXEsz+B5+E992bmygyNH/+lp51uGI=
Subject key identifier: 4C:4C:46:12:94:34:8B:A7:86:B6:E6:C8:D2:6F:2F:8B:19:A0:EB:C2
Authority key identifier: B6:A8:97:C7:98:F0:19:B2:47:7B:1A:9C:E3:B2:3B:B5:D7:61:66:C3
Certificate issuer: /CN=b6a897c798f019b2477b1a9ce3b23bb5d76166c3
Certificate serial: 019A4DE15C1951B2BFA50279049EFFE8340C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tqiXx5jwGbJHexqc47I7tddhZsM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/497dd7-7f7c-494d-b886-52f850ca55c6/1/tqiXx5jwGbJHexqc47I7tddhZsM.mft
Manifest number: 14AD
Signing time: Tue 04 Nov 2025 08:00:05 +0000
Manifest this update: Tue 04 Nov 2025 08:00:05 +0000
Manifest next update: Wed 05 Nov 2025 08:00:05 +0000
Files and hashes: 1: f9JCdqsJLWfadd987fFlDNk7mdM.roa (hash: 5CurkeU+eAkjrTT560cBjUlbg7hvGNi0G0d/Uo5/6r0=)
2: tqiXx5jwGbJHexqc47I7tddhZsM.crl (hash: xNoEKqfZx5x4aa8d2bhCJL2Ur6WDzbiy8syoD5JYwp4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/497dd7-7f7c-494d-b886-52f850ca55c6/1/tqiXx5jwGbJHexqc47I7tddhZsM.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/497dd7-7f7c-494d-b886-52f850ca55c6/1/tqiXx5jwGbJHexqc47I7tddhZsM.mft
rsync://rpki.ripe.net/repository/DEFAULT/tqiXx5jwGbJHexqc47I7tddhZsM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e1:5c:19:51:b2:bf:a5:02:79:04:9e:ff:e8:34:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b6a897c798f019b2477b1a9ce3b23bb5d76166c3
Validity
Not Before: Nov 4 08:00:05 2025 GMT
Not After : Nov 5 08:00:05 2025 GMT
Subject: CN=4c4c461294348ba786b6e6c8d26f2f8b19a0ebc2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:65:20:98:fb:77:55:0b:c5:3c:42:27:3b:6e:
ad:a7:2b:82:ee:d9:1f:d2:db:9a:86:66:59:5f:f3:
1e:c0:0e:90:29:fd:0b:4c:84:17:b9:09:3e:32:de:
1f:2e:41:a9:b2:30:d7:8c:96:1b:e0:b1:22:9d:ee:
39:45:c4:ee:7f:0c:a9:e6:27:84:74:e2:e1:d6:b4:
19:85:81:c3:bd:23:0e:3a:a2:bd:d6:fc:82:30:c2:
5d:1c:1f:12:d4:dd:19:bb:7b:2b:bd:22:fa:94:ec:
2d:82:31:8f:8f:aa:de:5f:e0:f2:aa:62:93:e9:78:
dc:58:94:c4:fd:c3:c5:16:bd:ca:b9:34:be:ef:77:
f1:55:62:8a:d7:b3:c4:12:f1:f4:a2:04:7c:7f:49:
c7:c4:e0:a2:81:c5:ba:d0:e6:23:47:36:33:c9:38:
8b:9c:99:49:39:75:6f:b8:48:1e:d2:ed:56:74:93:
b5:e9:3b:51:4e:24:ea:2b:9c:6f:4c:20:ac:73:13:
e5:1b:d6:83:ad:c6:fe:ec:39:dd:bf:22:81:04:53:
5d:0a:6e:61:45:5d:a3:f1:3a:59:88:16:a6:ce:d6:
26:60:27:e7:1f:b8:67:21:fc:d6:df:de:96:5d:cb:
82:df:e5:ad:f6:b5:38:3d:d5:c9:98:99:28:02:94:
b8:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:4C:46:12:94:34:8B:A7:86:B6:E6:C8:D2:6F:2F:8B:19:A0:EB:C2
X509v3 Authority Key Identifier:
keyid:B6:A8:97:C7:98:F0:19:B2:47:7B:1A:9C:E3:B2:3B:B5:D7:61:66:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tqiXx5jwGbJHexqc47I7tddhZsM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/497dd7-7f7c-494d-b886-52f850ca55c6/1/tqiXx5jwGbJHexqc47I7tddhZsM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/497dd7-7f7c-494d-b886-52f850ca55c6/1/tqiXx5jwGbJHexqc47I7tddhZsM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d7:0b:12:ff:db:37:05:b1:49:b6:24:e9:c7:8b:4b:43:c5:8a:
45:81:d9:f3:de:39:71:a6:6d:ae:98:75:db:83:89:f4:af:c0:
e1:4e:d2:89:70:08:15:35:a1:dc:34:a9:20:14:79:22:e6:ab:
78:db:c2:d2:2b:0e:96:6f:6f:06:7c:fd:f4:90:e8:6f:b7:2e:
2a:08:a2:92:67:42:c5:a9:d7:b0:3d:e4:6b:f5:c8:db:2e:ec:
5f:75:66:b8:1e:b8:f1:ce:cd:06:74:4d:b7:ac:d9:65:06:8b:
0e:a1:bb:06:2b:e5:37:c0:65:df:1f:7e:bf:49:b8:43:9c:2a:
05:7a:38:38:62:97:78:36:b5:f1:65:c2:86:a6:7b:8b:cc:e0:
ab:f0:0b:51:ac:73:89:61:7a:34:e0:3a:86:8d:ee:82:c5:e7:
4e:c9:ab:2e:74:f4:a1:cb:2d:1c:94:e3:ea:ab:ca:1e:70:be:
8e:73:13:ac:4d:20:0a:28:de:83:6f:ac:61:7f:9a:5e:94:7c:
93:62:54:f8:b3:d9:04:91:a9:4b:fc:64:39:5b:68:80:72:e8:
81:2a:2b:be:e0:e1:03:34:7b:de:89:e9:17:b8:2c:9d:ab:19:
3b:89:92:7c:cb:6d:56:73:2a:eb:5a:36:1a:c0:a5:0c:ad:07:
95:de:1f:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:54:35 2025 by rpki-client