Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/fc7c82-3159-4d54-a0a1-35171aedd313/1/tkB0qoRJgw2psgs6-waC08Ay-f4.mft
File: tkB0qoRJgw2psgs6-waC08Ay-f4.mft (raw, json)
Hash identifier: oV7Neen+7SVL/A3wwHkLJGK5rQTDHjoKsjE7A4rq6CY=
Subject key identifier: 9D:22:22:86:AE:85:60:F1:3E:A7:54:D6:D8:C7:30:E8:B0:8D:11:F5
Authority key identifier: B6:40:74:AA:84:49:83:0D:A9:B2:0B:3A:FB:06:82:D3:C0:32:F9:FE
Certificate issuer: /CN=b64074aa8449830da9b20b3afb0682d3c032f9fe
Certificate serial: 019A4DAA9CB1DC998415904B4960657FC552
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tkB0qoRJgw2psgs6-waC08Ay-f4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/fc7c82-3159-4d54-a0a1-35171aedd313/1/tkB0qoRJgw2psgs6-waC08Ay-f4.mft
Manifest number: 1714
Signing time: Tue 04 Nov 2025 07:00:18 +0000
Manifest this update: Tue 04 Nov 2025 07:00:18 +0000
Manifest next update: Wed 05 Nov 2025 07:00:18 +0000
Files and hashes: 1: BdOIN-x7p5NQNZFat3HBRk8aNP8.roa (hash: E6O+SQKCroETYNOj7yjRqDXwGgY2i2+LPEeaEfVM6HA=)
2: SvbWjBtA5USrFJEFyfsvP-SCofs.roa (hash: La++FukCI88aoCCAWTG9ojz1zryPe+WC1BNRSElIvDw=)
3: ZqMh09XL_OuL0ICq-TfvGdj4pmM.roa (hash: l5g5wXS3ZWKojPoOXqpehHnI+SHAfeYcurBv6Xo/WU8=)
4: tkB0qoRJgw2psgs6-waC08Ay-f4.crl (hash: qLieqP9fsSdhmBgNzdVkPBVUGBmQOTuMiCw8RBV5+1c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/fc7c82-3159-4d54-a0a1-35171aedd313/1/tkB0qoRJgw2psgs6-waC08Ay-f4.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/fc7c82-3159-4d54-a0a1-35171aedd313/1/tkB0qoRJgw2psgs6-waC08Ay-f4.mft
rsync://rpki.ripe.net/repository/DEFAULT/tkB0qoRJgw2psgs6-waC08Ay-f4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 07:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:aa:9c:b1:dc:99:84:15:90:4b:49:60:65:7f:c5:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b64074aa8449830da9b20b3afb0682d3c032f9fe
Validity
Not Before: Nov 4 07:00:18 2025 GMT
Not After : Nov 5 07:00:18 2025 GMT
Subject: CN=9d222286ae8560f13ea754d6d8c730e8b08d11f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:01:a9:93:2e:a6:f8:bc:48:59:64:a7:10:c8:
1c:70:94:be:1d:ae:38:43:5d:dd:c0:d3:3b:1a:fb:
f5:39:31:87:da:cf:ec:58:a8:bc:9d:22:0d:e0:b2:
62:81:99:40:94:92:75:4c:11:31:7c:68:95:c8:bc:
25:6b:cf:68:c8:bb:1b:1f:f4:f6:b1:fd:ac:02:e9:
8c:0d:10:f7:6d:f0:58:06:a5:03:a8:c2:09:1a:3f:
9b:9c:56:6f:1d:e1:02:97:57:87:e9:49:35:b3:b7:
93:c0:e5:6a:4f:b5:8f:03:e7:7e:b0:a9:46:84:8c:
91:16:56:03:6d:ba:83:16:b3:76:c2:ce:a9:ca:bb:
1b:8b:73:36:1f:23:b8:5c:72:20:54:59:8e:ae:da:
ac:55:78:e8:74:37:8f:e2:b0:b6:67:b7:cb:ab:18:
32:f8:fc:c6:1f:95:c6:90:1d:88:12:86:12:33:37:
71:a1:aa:e0:2a:7d:d3:49:7e:22:b8:ed:b8:e7:92:
1c:27:6d:40:f2:51:3a:36:fe:14:8c:4a:f6:ad:ee:
fd:8a:69:b7:00:4a:58:1a:d1:87:ca:e1:4e:41:ea:
5b:71:b2:1f:3b:af:58:49:76:5a:d1:5d:07:09:eb:
56:6e:99:92:ca:52:94:a2:b5:8e:fb:02:9d:aa:28:
bd:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:22:22:86:AE:85:60:F1:3E:A7:54:D6:D8:C7:30:E8:B0:8D:11:F5
X509v3 Authority Key Identifier:
keyid:B6:40:74:AA:84:49:83:0D:A9:B2:0B:3A:FB:06:82:D3:C0:32:F9:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tkB0qoRJgw2psgs6-waC08Ay-f4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/fc7c82-3159-4d54-a0a1-35171aedd313/1/tkB0qoRJgw2psgs6-waC08Ay-f4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/fc7c82-3159-4d54-a0a1-35171aedd313/1/tkB0qoRJgw2psgs6-waC08Ay-f4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:a0:98:20:66:30:f2:a2:94:ea:2a:a3:75:b3:88:78:39:d4:
69:7d:63:98:8a:57:58:e6:39:6c:ac:18:f8:9d:b4:35:b2:1c:
b7:83:d5:f9:d9:95:c1:b8:8f:7e:1b:63:6c:61:03:79:9b:27:
f7:cf:95:da:8b:33:e9:40:17:7a:29:48:55:51:35:48:7f:30:
68:a8:e2:e4:9f:0b:03:b0:dc:3f:96:e5:a0:99:ed:94:e3:1b:
6e:b3:1a:95:b0:cc:95:44:64:a6:4b:9c:ac:c1:ce:77:eb:09:
8e:a7:d9:fe:b4:a4:f5:8f:2d:21:26:f0:23:ca:4a:35:a3:4d:
26:f9:1b:1a:cf:71:67:53:21:d1:55:4e:a1:35:68:4a:c3:5d:
04:0b:20:9b:f6:c5:8d:fd:f7:06:1e:b4:d7:1d:bc:b2:f2:0f:
4f:65:74:e6:43:15:5f:a9:fd:e9:9a:6b:d0:cb:f5:fc:03:89:
74:4b:9f:e3:41:f9:71:9d:1d:8b:e9:6c:e2:de:a0:43:92:10:
80:8d:3d:59:b4:53:b6:d9:92:f5:a8:89:97:44:5d:6a:8b:1e:
8b:26:c4:66:b6:cf:e4:c5:c2:35:96:23:44:f2:b6:16:82:97:
2a:0e:21:fd:7d:af:0a:42:47:ac:df:ba:71:84:6d:f0:71:60:
50:ae:1f:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:49:58 2025 by rpki-client