Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/9ee980-67a2-4d3c-b6ca-fde073588f0f/1/tZkJ7RcbOMH9xDYiKeeNaYUd4Rw.mft
File: tZkJ7RcbOMH9xDYiKeeNaYUd4Rw.mft (raw, json)
Hash identifier: I/Gnv8TbocOkr59XGlPUtSMK9la4CzOy/CiEADpKwe8=
Subject key identifier: AE:A6:5C:7A:EE:1E:52:E8:A7:6B:8C:84:2C:B8:CB:78:A0:D6:8A:BD
Authority key identifier: B5:99:09:ED:17:1B:38:C1:FD:C4:36:22:29:E7:8D:69:85:1D:E1:1C
Certificate issuer: /CN=b59909ed171b38c1fdc4362229e78d69851de11c
Certificate serial: 019A559B467C91A9294FA5F169219C6F547B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tZkJ7RcbOMH9xDYiKeeNaYUd4Rw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/9ee980-67a2-4d3c-b6ca-fde073588f0f/1/tZkJ7RcbOMH9xDYiKeeNaYUd4Rw.mft
Manifest number: 1712
Signing time: Wed 05 Nov 2025 20:00:30 +0000
Manifest this update: Wed 05 Nov 2025 20:00:30 +0000
Manifest next update: Thu 06 Nov 2025 20:00:30 +0000
Files and hashes: 1: 1lSa1sl-dNBGB6RIspgIufADhjs.roa (hash: ZUkq8NELozqtJDfHgnQK7IOC8L6Hnu5OT9um+2WKleM=)
2: TB1SNMK17klLvRw1OV09EGXDsjg.roa (hash: 3s2Ua7bRSNfwEdFtiO4U1p/wzm3QtvPjfYSSDJ4385k=)
3: tZkJ7RcbOMH9xDYiKeeNaYUd4Rw.crl (hash: v2IxH8me3WnU0jaMDFt/99fA67PC0DxlQFZrjgyRdis=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/9ee980-67a2-4d3c-b6ca-fde073588f0f/1/tZkJ7RcbOMH9xDYiKeeNaYUd4Rw.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/9ee980-67a2-4d3c-b6ca-fde073588f0f/1/tZkJ7RcbOMH9xDYiKeeNaYUd4Rw.mft
rsync://rpki.ripe.net/repository/DEFAULT/tZkJ7RcbOMH9xDYiKeeNaYUd4Rw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 20:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:55:9b:46:7c:91:a9:29:4f:a5:f1:69:21:9c:6f:54:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b59909ed171b38c1fdc4362229e78d69851de11c
Validity
Not Before: Nov 5 20:00:30 2025 GMT
Not After : Nov 6 20:00:30 2025 GMT
Subject: CN=aea65c7aee1e52e8a76b8c842cb8cb78a0d68abd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:c5:b8:3c:57:a3:e5:fb:56:68:30:e1:b4:92:
ec:cb:9e:f4:b7:85:e9:d1:cc:3b:fe:0d:62:d3:95:
5a:31:62:5a:9b:cd:77:c0:4c:05:1d:c3:1d:c8:d1:
21:4c:10:55:9e:99:9a:a4:6f:ec:89:f3:0c:88:5b:
fe:ed:2f:11:1b:3b:e3:08:dd:c1:40:54:be:90:e4:
63:d5:d0:d6:f7:f6:21:e3:95:af:06:63:86:db:f7:
e9:59:e2:6a:14:e7:11:50:c7:59:93:95:63:2c:3a:
09:53:15:a6:6b:74:93:65:5e:ff:1d:9a:9c:94:c8:
1c:e4:0a:18:27:77:22:ef:1a:b6:c8:21:a8:e0:e1:
3a:70:44:d1:e9:45:b1:53:6d:f5:28:5e:ee:51:3f:
b4:da:3a:8c:2d:da:ca:de:52:25:86:5c:57:b0:8d:
7c:a0:b6:45:f1:3a:f7:0e:91:c4:0a:bc:9a:bb:2d:
f5:3b:5a:a2:13:fe:f4:90:b4:c9:e6:dd:66:53:0d:
c8:fe:3e:86:d1:c8:31:0d:0a:f0:99:40:5f:3b:5a:
93:3e:72:ec:da:54:84:5d:c4:3c:37:96:e1:45:b5:
b3:4f:6f:49:cb:81:aa:3f:f0:55:0d:18:86:3f:c9:
7a:ad:0c:de:87:81:5f:db:a4:45:95:e8:40:3f:c3:
b0:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:A6:5C:7A:EE:1E:52:E8:A7:6B:8C:84:2C:B8:CB:78:A0:D6:8A:BD
X509v3 Authority Key Identifier:
keyid:B5:99:09:ED:17:1B:38:C1:FD:C4:36:22:29:E7:8D:69:85:1D:E1:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tZkJ7RcbOMH9xDYiKeeNaYUd4Rw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/9ee980-67a2-4d3c-b6ca-fde073588f0f/1/tZkJ7RcbOMH9xDYiKeeNaYUd4Rw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/9ee980-67a2-4d3c-b6ca-fde073588f0f/1/tZkJ7RcbOMH9xDYiKeeNaYUd4Rw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:48:39:88:da:ec:d3:3e:27:00:87:1b:d6:32:1a:66:36:e6:
b7:4b:96:c0:c1:af:08:d5:16:f3:5a:bb:d5:9b:5a:20:de:2f:
71:1d:24:3e:64:e6:83:79:f3:3b:b0:71:d7:91:7e:dc:fe:7b:
d6:5e:95:a4:14:23:33:3f:1f:54:42:ba:4e:9d:76:1c:78:71:
27:ec:6a:31:11:3b:70:08:dc:22:76:6a:d9:ec:e9:d9:32:e8:
f8:5d:79:28:0f:76:ff:b9:7e:a5:d1:1d:85:18:a6:51:92:26:
e3:82:62:ce:8d:85:bf:1b:41:b5:63:83:9c:4d:4c:81:c0:bb:
16:e8:51:d0:38:69:e1:15:21:fc:d9:e5:45:ec:30:7d:26:38:
d0:97:7f:20:bd:5d:06:6c:a0:e4:25:30:d5:41:92:22:aa:17:
c2:48:37:84:ad:c8:95:57:04:ac:93:28:29:4f:96:9d:96:1d:
aa:e2:51:82:23:7b:a0:59:90:26:1e:fd:82:87:8c:ce:4b:59:
4f:9e:2a:cb:fa:fd:7c:16:94:dc:aa:0a:77:d9:df:bc:12:aa:
8e:86:e0:b4:f3:22:bc:de:b1:04:7f:42:d4:94:d2:c9:59:74:
06:d4:c7:8c:e0:6a:48:12:b3:f4:5e:4e:54:19:8b:8c:bd:25:
5e:98:79:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 6 06:10:59 2025 by rpki-client