Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/6ac0a2-5c6c-4357-97e4-ceb8ab6d112e/1/tEJc9VATRKxazDB6vQrwE_rGcHM.mft
File: tEJc9VATRKxazDB6vQrwE_rGcHM.mft (raw, json)
Hash identifier: GZtYbSREV88BI8y67N3SvW4fcEZBpikQj18DnLs698w=
Subject key identifier: 5C:A9:32:12:24:F6:A7:6B:BD:29:E2:6D:92:36:BB:1C:3C:57:BC:80
Authority key identifier: B4:42:5C:F5:50:13:44:AC:5A:CC:30:7A:BD:0A:F0:13:FA:C6:70:73
Certificate issuer: /CN=b4425cf5501344ac5acc307abd0af013fac67073
Certificate serial: 019A5074C5B4178467D012BAB9B348BDA086
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tEJc9VATRKxazDB6vQrwE_rGcHM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/6ac0a2-5c6c-4357-97e4-ceb8ab6d112e/1/tEJc9VATRKxazDB6vQrwE_rGcHM.mft
Manifest number: 1319
Signing time: Tue 04 Nov 2025 20:00:21 +0000
Manifest this update: Tue 04 Nov 2025 20:00:21 +0000
Manifest next update: Wed 05 Nov 2025 20:00:21 +0000
Files and hashes: 1: Qy8FTgX-yC1O4CbCQWKLq95mgp4.roa (hash: 8nqh6t/tTyxk7G3+i4dwwKWP/5EMA1y/MU+wzRFmne4=)
2: kj9rgsBpPLepIKPHD5eAEuwwvw0.roa (hash: EHHLSrODdY/NFx0Xqw8ficGV0VFf608vkoi6uBTcBb0=)
3: tEJc9VATRKxazDB6vQrwE_rGcHM.crl (hash: bzoIsAaP5WcdvQGo2JNbSYNexoRwDR7EtsvB8FeRer8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/6ac0a2-5c6c-4357-97e4-ceb8ab6d112e/1/tEJc9VATRKxazDB6vQrwE_rGcHM.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/6ac0a2-5c6c-4357-97e4-ceb8ab6d112e/1/tEJc9VATRKxazDB6vQrwE_rGcHM.mft
rsync://rpki.ripe.net/repository/DEFAULT/tEJc9VATRKxazDB6vQrwE_rGcHM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:74:c5:b4:17:84:67:d0:12:ba:b9:b3:48:bd:a0:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4425cf5501344ac5acc307abd0af013fac67073
Validity
Not Before: Nov 4 20:00:21 2025 GMT
Not After : Nov 5 20:00:21 2025 GMT
Subject: CN=5ca9321224f6a76bbd29e26d9236bb1c3c57bc80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:a7:89:7c:bd:6b:69:c1:64:c5:ce:4b:c0:dd:
3a:8d:6b:a5:f4:4d:58:92:ee:77:d4:11:d2:d6:30:
44:71:70:b3:17:36:85:c2:63:f3:bc:c2:ec:68:52:
bf:4c:6d:9c:af:31:b5:02:be:5c:ba:ce:32:2e:8e:
7d:64:3b:e5:40:b5:3a:be:59:c6:4b:7b:4a:bd:b9:
89:0f:f7:f1:bb:f6:e8:ae:00:eb:74:60:55:1a:d5:
94:43:6b:7b:f2:d5:e9:c5:2c:e6:2f:8f:07:5e:43:
02:c1:2a:3a:a6:e7:20:05:56:2f:e3:0b:92:63:6d:
14:ae:9e:4d:45:b3:f6:ad:fc:b5:25:11:ad:8d:bb:
68:4c:e2:b8:e3:b8:b5:b4:a0:e1:6f:02:15:a6:23:
c2:f3:f8:f2:74:b6:2f:43:9a:7b:64:41:49:1d:ba:
6c:dd:d9:44:2a:0c:06:c4:8a:09:91:78:cf:b8:5e:
76:56:cd:21:64:be:4d:a3:9b:2a:fd:6b:c1:8e:db:
42:8d:9b:fd:cc:db:c8:21:aa:c8:48:8b:82:9c:91:
b8:f5:11:1f:46:e8:aa:9a:95:9e:9f:af:d0:d0:e0:
7c:da:b2:5a:4e:6e:6a:52:26:97:f2:ef:b1:7b:14:
ec:79:6a:fd:02:19:f0:b6:cb:39:93:ea:0c:04:41:
bc:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:A9:32:12:24:F6:A7:6B:BD:29:E2:6D:92:36:BB:1C:3C:57:BC:80
X509v3 Authority Key Identifier:
keyid:B4:42:5C:F5:50:13:44:AC:5A:CC:30:7A:BD:0A:F0:13:FA:C6:70:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tEJc9VATRKxazDB6vQrwE_rGcHM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/6ac0a2-5c6c-4357-97e4-ceb8ab6d112e/1/tEJc9VATRKxazDB6vQrwE_rGcHM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/6ac0a2-5c6c-4357-97e4-ceb8ab6d112e/1/tEJc9VATRKxazDB6vQrwE_rGcHM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:fc:b2:5e:d3:6d:e8:11:25:ae:85:fc:02:3b:58:71:d8:de:
ee:83:71:74:01:cb:ec:f8:d4:cc:62:89:0a:df:6f:18:2e:ca:
50:f7:bd:15:6e:7a:e6:7d:4e:e1:af:a4:27:45:74:93:86:dc:
6c:75:b0:74:0e:8d:8d:0a:fa:e8:65:41:cc:0d:7b:bc:cd:7a:
e1:f1:f2:05:b3:ac:a3:da:b4:1d:9a:89:6e:e0:4f:7b:87:a8:
14:4c:37:b2:b7:0e:e6:b7:b0:ad:97:82:5e:b9:30:1e:b5:06:
87:59:dc:bb:65:02:04:40:33:75:54:49:be:f0:98:4a:2d:3d:
07:c9:20:8b:59:7b:ef:c4:93:6a:54:68:cb:dc:3c:dc:00:be:
2e:dd:40:b8:f0:55:6d:81:fa:23:67:d1:cf:7d:ec:18:e1:9e:
67:cf:f9:68:e1:4c:b9:36:91:a8:17:e5:13:b7:f4:c7:d6:04:
95:2d:6a:b2:49:63:2a:de:88:7d:bf:24:03:b1:35:4e:46:43:
79:b5:36:aa:b0:9d:aa:de:c2:9d:de:99:f8:21:bb:14:1c:c6:
65:13:52:3c:a8:39:c7:e0:6c:08:cb:45:98:dd:d8:2b:84:a9:
bc:b8:cf:62:b3:57:26:64:d7:ed:a6:3a:8e:70:dd:66:97:f6:
a2:4c:6f:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 22:33:24 2025 by rpki-client