Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/6920d2-a7a6-41a5-96e0-314ef746d8a6/1/tEORSkjl2uWnVrHjuPvkN-4Niww.mft
File: tEORSkjl2uWnVrHjuPvkN-4Niww.mft (raw, json)
Hash identifier: KIQs0dxKfZgj91Kel9DP8wHZ4IqMcEiZ3+8a1Co/6qs=
Subject key identifier: 6C:94:1E:23:8C:4B:E4:D3:3F:3C:8C:8A:BE:60:6A:FA:D8:1E:19:32
Authority key identifier: B4:43:91:4A:48:E5:DA:E5:A7:56:B1:E3:B8:FB:E4:37:EE:0D:8B:0C
Certificate issuer: /CN=b443914a48e5dae5a756b1e3b8fbe437ee0d8b0c
Certificate serial: 019A4D7414668B02B321F7660825A99507EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tEORSkjl2uWnVrHjuPvkN-4Niww.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/6920d2-a7a6-41a5-96e0-314ef746d8a6/1/tEORSkjl2uWnVrHjuPvkN-4Niww.mft
Manifest number: 170C
Signing time: Tue 04 Nov 2025 06:00:44 +0000
Manifest this update: Tue 04 Nov 2025 06:00:44 +0000
Manifest next update: Wed 05 Nov 2025 06:00:44 +0000
Files and hashes: 1: 4lhTaQhjom1qkpeBd0ZsbdWiEJ4.roa (hash: XdHlLCQ2Kh6iuUQP6DmaSkVFP47PPhEh+iIit9uDq/c=)
2: Loamkgq2liGt_WerD0xhgg9VD4c.roa (hash: HJiMbQmWc3n1Lwl3vm8HBtMiaI2Ev5JS4MMKRu/Y4gU=)
3: kTZKdp3t576jj7V1laKryCYz0Og.roa (hash: HbtSMYd2T/15rtkOhZspTZMKwAPA+sik9h0BqyVd10U=)
4: rZB_JVvkOIqma6Wh66SCnHCJS8Q.roa (hash: UNrRcAyslLxjeDmqjrPzHbwMyZ4AtgV3GxOrJgdzxQg=)
5: tEORSkjl2uWnVrHjuPvkN-4Niww.crl (hash: 5o/E7qdP3CJufRjmVV8QksxwTDZrtzJI7Q4hL8g60+Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/6920d2-a7a6-41a5-96e0-314ef746d8a6/1/tEORSkjl2uWnVrHjuPvkN-4Niww.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/6920d2-a7a6-41a5-96e0-314ef746d8a6/1/tEORSkjl2uWnVrHjuPvkN-4Niww.mft
rsync://rpki.ripe.net/repository/DEFAULT/tEORSkjl2uWnVrHjuPvkN-4Niww.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 06:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:74:14:66:8b:02:b3:21:f7:66:08:25:a9:95:07:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b443914a48e5dae5a756b1e3b8fbe437ee0d8b0c
Validity
Not Before: Nov 4 06:00:44 2025 GMT
Not After : Nov 5 06:00:44 2025 GMT
Subject: CN=6c941e238c4be4d33f3c8c8abe606afad81e1932
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:f3:76:63:26:e1:6d:75:19:cd:b6:00:65:14:
40:dc:7b:f3:8b:df:fb:8a:25:e3:25:80:70:55:89:
a2:5a:3d:6a:ff:b5:66:83:45:4d:1c:48:f1:c9:1e:
b7:2f:41:cf:bd:9c:57:aa:89:c2:0a:89:f1:e0:50:
96:5a:9f:88:ec:71:c3:04:00:4f:0f:d1:27:29:2e:
d3:33:a4:58:5b:56:83:a5:b2:e0:3b:a0:74:bf:6f:
c7:81:41:b6:d1:7d:68:71:ff:42:06:db:b9:c0:e9:
c9:fa:1c:d0:11:a0:32:17:99:a7:f6:eb:a6:e3:1a:
ad:4b:7b:5a:d7:1c:8f:df:f0:df:af:a0:81:0f:99:
9b:36:67:ff:51:08:c0:25:32:27:fa:52:e7:dd:2c:
5b:96:2d:ad:6d:55:9e:9e:7e:95:d4:c0:c7:06:60:
1f:f2:45:09:43:db:1a:e9:9a:ca:54:94:a3:25:2e:
f8:3f:38:62:cf:6d:f7:f9:24:0f:3e:d6:32:1f:0f:
cf:72:7d:fe:10:16:29:eb:ed:dc:a2:47:ad:a2:80:
ae:23:8c:8a:b4:52:5b:31:e2:67:31:70:f0:a1:87:
d1:51:49:e6:33:26:a4:92:0d:62:a8:55:3f:1f:e0:
16:b9:6f:a0:a5:77:53:c4:f9:b2:30:60:1e:ea:7e:
eb:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:94:1E:23:8C:4B:E4:D3:3F:3C:8C:8A:BE:60:6A:FA:D8:1E:19:32
X509v3 Authority Key Identifier:
keyid:B4:43:91:4A:48:E5:DA:E5:A7:56:B1:E3:B8:FB:E4:37:EE:0D:8B:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tEORSkjl2uWnVrHjuPvkN-4Niww.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/6920d2-a7a6-41a5-96e0-314ef746d8a6/1/tEORSkjl2uWnVrHjuPvkN-4Niww.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/6920d2-a7a6-41a5-96e0-314ef746d8a6/1/tEORSkjl2uWnVrHjuPvkN-4Niww.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:9d:27:98:00:57:62:5f:23:e3:5d:08:02:da:dc:cf:0e:68:
6c:f9:70:7b:5b:77:88:10:b8:5a:ee:8b:25:3c:a9:f9:a3:6f:
89:5e:fd:6c:05:d9:d1:77:34:b1:5c:cf:45:df:9d:23:e6:5b:
4b:12:ee:ee:86:a4:1e:2f:64:bf:ab:6b:1e:17:72:56:60:73:
3f:f5:72:fc:00:87:3e:bf:72:c3:86:12:b0:c8:71:1d:b3:d8:
2c:b9:c2:99:b2:b1:71:7d:84:4c:a6:d4:d5:4e:10:7f:9d:ec:
e1:b8:3a:db:2d:96:bb:f1:b8:89:8c:3c:bd:f0:fe:8d:4b:a8:
d4:37:c5:72:96:4f:4f:67:3a:b8:fc:2e:a4:9b:1e:3e:e2:28:
da:2e:09:71:28:c0:27:e7:71:2f:34:04:2e:37:4a:46:45:71:
88:67:f2:38:53:f8:95:8c:85:0a:f1:08:42:e0:1f:48:91:56:
1e:99:74:c4:52:4a:6a:be:c4:94:46:9b:2a:ec:42:98:92:b7:
51:ef:7a:f4:a2:14:71:30:aa:69:99:08:04:de:39:08:d6:24:
7d:e2:13:2c:33:c3:d6:d4:a1:e2:03:02:b9:d7:08:aa:65:01:
8e:5c:5c:31:52:e6:89:d2:41:8a:e4:6b:16:17:97:8d:39:a5:
41:58:b1:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 15:15:20 2025 by rpki-client