Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/a3baca-437d-4607-9c1a-557a4c31e02e/1/tMQeWYNNphLYPKJBlPAsptdgJEg.mft
File: tMQeWYNNphLYPKJBlPAsptdgJEg.mft (raw, json)
Hash identifier: 09GjmYTI9NVJFGwZwaWbU6JxhDPSXdtX8zIvS1Mfu1Y=
Subject key identifier: 77:2C:9B:8E:83:AB:A5:12:07:96:9C:97:00:A4:30:5A:66:EB:E0:C5
Authority key identifier: B4:C4:1E:59:83:4D:A6:12:D8:3C:A2:41:94:F0:2C:A6:D7:60:24:48
Certificate issuer: /CN=b4c41e59834da612d83ca24194f02ca6d7602448
Certificate serial: 019A52D0F594ADCB2C8E8CAB2C62C0C4BBE4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tMQeWYNNphLYPKJBlPAsptdgJEg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/a3baca-437d-4607-9c1a-557a4c31e02e/1/tMQeWYNNphLYPKJBlPAsptdgJEg.mft
Manifest number: 0534
Signing time: Wed 05 Nov 2025 07:00:17 +0000
Manifest this update: Wed 05 Nov 2025 07:00:17 +0000
Manifest next update: Thu 06 Nov 2025 07:00:17 +0000
Files and hashes: 1: hrqEKTykKr09BUd_K3mCMU0oC6Q.roa (hash: pufSFJ+QVHIcFkxQwEPRtygVlxFuvFk+kfnkYeAvjWg=)
2: tMQeWYNNphLYPKJBlPAsptdgJEg.crl (hash: tzQWfso81DkCBqGWGOpYN5QstvHKWWYLKlmYSthTZIg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/a3baca-437d-4607-9c1a-557a4c31e02e/1/tMQeWYNNphLYPKJBlPAsptdgJEg.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/a3baca-437d-4607-9c1a-557a4c31e02e/1/tMQeWYNNphLYPKJBlPAsptdgJEg.mft
rsync://rpki.ripe.net/repository/DEFAULT/tMQeWYNNphLYPKJBlPAsptdgJEg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:d0:f5:94:ad:cb:2c:8e:8c:ab:2c:62:c0:c4:bb:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4c41e59834da612d83ca24194f02ca6d7602448
Validity
Not Before: Nov 5 07:00:17 2025 GMT
Not After : Nov 6 07:00:17 2025 GMT
Subject: CN=772c9b8e83aba51207969c9700a4305a66ebe0c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:dc:25:4b:56:d4:5c:bc:49:fb:cd:e0:dd:2f:
f3:19:67:35:d4:02:68:22:99:2d:4f:95:4b:1c:69:
86:ce:29:d7:d1:fc:47:9a:ae:fa:7a:37:2a:7d:4b:
cc:fb:97:33:02:a7:99:08:16:bb:69:f3:65:55:69:
3e:73:21:4c:0a:08:d6:d1:2c:ef:7c:9c:86:2a:a9:
dc:c2:ca:8e:6e:0f:d8:a9:4f:72:95:27:e3:bd:31:
20:48:6f:27:09:6f:87:7a:ee:b6:23:3f:c1:d3:1f:
59:b9:86:c4:ed:c0:a6:99:de:de:65:dc:0f:2d:43:
78:1b:2f:f5:ec:5e:4c:92:98:ee:a7:03:42:bf:e8:
39:7f:9b:32:7d:bf:7c:56:57:a8:2e:cf:05:8d:81:
2e:c0:4f:29:cd:7b:4a:f4:51:ac:c1:98:34:53:8e:
be:6c:1e:37:8b:b4:cf:0b:d0:a6:3f:6e:70:15:91:
69:04:35:a2:21:8b:bf:a4:14:95:0e:87:2f:20:38:
22:c1:9b:03:15:d2:13:66:99:be:83:0f:4a:1a:d8:
8b:d3:d6:5b:30:f3:fe:91:ac:94:e9:6f:80:2a:f2:
41:f9:88:62:db:bf:78:3e:60:68:b7:b7:26:52:ed:
16:a1:34:e6:46:a5:97:5a:69:29:f2:f0:b2:7c:f7:
e0:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:2C:9B:8E:83:AB:A5:12:07:96:9C:97:00:A4:30:5A:66:EB:E0:C5
X509v3 Authority Key Identifier:
keyid:B4:C4:1E:59:83:4D:A6:12:D8:3C:A2:41:94:F0:2C:A6:D7:60:24:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tMQeWYNNphLYPKJBlPAsptdgJEg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/a3baca-437d-4607-9c1a-557a4c31e02e/1/tMQeWYNNphLYPKJBlPAsptdgJEg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/a3baca-437d-4607-9c1a-557a4c31e02e/1/tMQeWYNNphLYPKJBlPAsptdgJEg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:41:99:69:aa:25:2a:99:7a:bd:29:e2:43:4f:14:67:aa:6d:
b1:08:61:91:ea:a5:97:d7:ae:d4:b1:88:fc:ce:fb:c8:66:95:
1e:5d:59:d9:07:72:2d:c7:59:d0:27:4a:b1:1d:c1:2f:d7:e3:
06:23:cf:76:4e:71:a9:3d:fa:f6:d8:bd:dd:0e:f5:7c:ba:64:
21:d9:03:29:86:dd:8c:6b:5b:f1:76:12:fd:92:43:70:4b:40:
9c:54:35:26:e8:a6:0f:8a:e5:60:7a:fe:1b:06:02:fb:93:ac:
95:1a:1a:56:f5:63:d7:04:25:67:2d:95:bf:f3:3e:3f:b9:57:
4e:4b:db:f5:9b:df:e9:04:f8:59:af:6c:2e:17:c4:4c:59:21:
13:85:ee:19:24:e9:7b:7b:a7:9e:4e:86:50:fd:5c:5c:bd:8b:
7e:41:89:2d:16:c4:81:0b:73:0a:3e:fc:5a:40:7b:79:2c:1f:
8f:24:6f:d1:fa:f8:24:8f:5e:4f:b2:ac:a8:73:73:d5:85:04:
a1:33:f6:84:fb:28:cb:2c:8b:59:85:d5:31:86:43:4c:80:a3:
65:09:2e:fd:dd:65:75:64:66:93:c7:29:a0:82:5b:f0:f5:9f:
a5:7d:98:1a:84:ca:0d:23:3a:fd:1f:a6:f3:03:24:67:9b:49:
dc:fa:34:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 10:57:32 2025 by rpki-client