Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/1e5c88-c3fc-4e76-bc65-391fec267dae/1/tDlfbOqaAYpMyEgY5qo1INMiIYs.mft
File: tDlfbOqaAYpMyEgY5qo1INMiIYs.mft (raw, json)
Hash identifier: mucrEe6zCmF7vOgbOw1io+snQPAMa7pfa6Pcg1ZNK04=
Subject key identifier: 3C:E7:C5:7B:72:36:F8:33:D2:D1:BA:72:26:9C:63:03:E6:70:AE:23
Authority key identifier: B4:39:5F:6C:EA:9A:01:8A:4C:C8:48:18:E6:AA:35:20:D3:22:21:8B
Certificate issuer: /CN=b4395f6cea9a018a4cc84818e6aa3520d322218b
Certificate serial: 019A50E40EC523DA2CD28E71BAFB85F1D429
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDlfbOqaAYpMyEgY5qo1INMiIYs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/1e5c88-c3fc-4e76-bc65-391fec267dae/1/tDlfbOqaAYpMyEgY5qo1INMiIYs.mft
Manifest number: 0D90
Signing time: Tue 04 Nov 2025 22:01:54 +0000
Manifest this update: Tue 04 Nov 2025 22:01:54 +0000
Manifest next update: Wed 05 Nov 2025 22:01:54 +0000
Files and hashes: 1: UoFhfe1D4fv5504pD16hAMtOHqM.roa (hash: f5OjLqYpJfmM6P+Sc+etueFJmxpiBV6zei8gZZWeXpE=)
2: tDlfbOqaAYpMyEgY5qo1INMiIYs.crl (hash: RbN0kc1VGHNSYlkXb3OSQmdY660snMd1Ak8c2Ovkc/I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/1e5c88-c3fc-4e76-bc65-391fec267dae/1/tDlfbOqaAYpMyEgY5qo1INMiIYs.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/1e5c88-c3fc-4e76-bc65-391fec267dae/1/tDlfbOqaAYpMyEgY5qo1INMiIYs.mft
rsync://rpki.ripe.net/repository/DEFAULT/tDlfbOqaAYpMyEgY5qo1INMiIYs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:e4:0e:c5:23:da:2c:d2:8e:71:ba:fb:85:f1:d4:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4395f6cea9a018a4cc84818e6aa3520d322218b
Validity
Not Before: Nov 4 22:01:54 2025 GMT
Not After : Nov 5 22:01:54 2025 GMT
Subject: CN=3ce7c57b7236f833d2d1ba72269c6303e670ae23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:bf:df:d5:7a:53:b9:4f:01:e1:00:c9:3f:54:
55:ee:6f:f9:c5:0e:72:ef:3d:83:9f:f3:ad:8d:89:
58:22:39:b8:e9:89:54:91:bd:c0:de:23:92:84:56:
0b:a4:bc:87:15:18:69:b2:93:c1:44:85:1c:d8:3a:
0e:cf:cc:4d:cb:f6:e9:ee:74:5b:95:41:d5:2a:b1:
8d:05:cf:ff:d7:89:58:58:99:a1:a2:01:80:fa:e8:
7c:41:2b:75:a3:2a:f3:a7:e1:03:66:bf:e8:b4:b2:
5f:7a:7f:88:ca:82:46:a1:4f:d2:f9:4e:e7:c0:7a:
cf:58:76:4f:39:0a:1e:33:6b:c3:f9:58:67:a9:b9:
da:f2:e7:ae:7b:83:b9:13:8a:9a:fc:92:ff:6b:bb:
83:68:c8:83:0e:92:bc:59:e2:31:04:a1:fe:a0:ca:
a1:dd:62:07:56:32:70:17:97:da:20:fe:67:7e:b0:
e4:0a:f8:33:c5:59:23:bb:51:05:4a:20:f7:c7:3d:
c8:cf:eb:1c:6d:bd:8a:42:16:b8:21:ab:90:51:34:
d2:7a:17:8f:2f:b4:9b:f7:12:5d:dd:17:56:d4:92:
be:41:78:15:de:af:3f:d0:cc:22:49:e7:9e:a8:93:
0e:a1:6c:48:3a:c1:c0:b0:85:04:af:60:ee:e6:2e:
bb:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:E7:C5:7B:72:36:F8:33:D2:D1:BA:72:26:9C:63:03:E6:70:AE:23
X509v3 Authority Key Identifier:
keyid:B4:39:5F:6C:EA:9A:01:8A:4C:C8:48:18:E6:AA:35:20:D3:22:21:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDlfbOqaAYpMyEgY5qo1INMiIYs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/1e5c88-c3fc-4e76-bc65-391fec267dae/1/tDlfbOqaAYpMyEgY5qo1INMiIYs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/1e5c88-c3fc-4e76-bc65-391fec267dae/1/tDlfbOqaAYpMyEgY5qo1INMiIYs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:91:5c:34:f2:e2:9c:91:b8:60:b6:25:9a:1e:fa:f2:2a:ed:
a0:2b:cc:c9:44:30:d1:96:46:e9:34:3e:9a:93:24:3e:e9:45:
92:cb:ab:35:89:49:70:c8:51:8b:37:4e:58:82:67:20:4d:37:
af:5f:eb:8d:99:f8:4c:0a:1d:f3:82:68:be:2e:ec:6a:7e:26:
b9:24:dd:8b:2c:b3:99:37:8b:84:1d:24:7d:1d:c5:cd:dc:fa:
9f:2a:2a:18:8d:b1:9c:58:85:dd:8a:c4:84:01:9d:03:28:db:
48:1e:b3:80:ff:08:04:c9:fd:f1:26:ee:26:af:bc:df:4c:b9:
18:4a:cf:33:d3:9e:e9:fa:e8:76:dd:b1:37:47:0f:32:5c:f9:
79:3c:d0:f2:7f:7d:ab:33:5a:7b:31:a0:83:9f:f4:95:ee:7e:
e0:42:90:17:f5:22:e8:d2:70:79:90:d6:3c:e7:de:44:9c:db:
2e:97:4f:c5:e9:20:1d:b0:7d:2d:08:be:6f:37:d6:3f:26:7c:
ef:ab:b8:44:cb:40:fe:02:84:f7:4b:1e:f1:c9:67:33:9d:4d:
ff:17:8b:27:37:31:74:bf:f8:1d:8c:0c:64:85:f1:f9:88:ce:
05:2c:19:1a:7d:f8:e5:8c:03:5e:83:d2:04:d9:b0:4d:ff:37:
c5:5a:95:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 00:11:15 2025 by rpki-client