Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/8c02ff-a9c5-4788-ae8b-18b9a8510539/1/tXwPr6ZQ3ZSjtVgXOfY9iO-kFPM.mft
File: tXwPr6ZQ3ZSjtVgXOfY9iO-kFPM.mft (raw, json)
Hash identifier: 76aiBMmv5plA8XYLVk85kd3SEpE/GfnqaSHkqQ/Oo3E=
Subject key identifier: 98:72:8F:0E:C1:62:51:78:6A:70:CA:ED:57:24:B3:60:13:7C:D8:02
Authority key identifier: B5:7C:0F:AF:A6:50:DD:94:A3:B5:58:17:39:F6:3D:88:EF:A4:14:F3
Certificate issuer: /CN=b57c0fafa650dd94a3b5581739f63d88efa414f3
Certificate serial: 019A537651B2152D381E26675C5FC51D2D79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tXwPr6ZQ3ZSjtVgXOfY9iO-kFPM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/8c02ff-a9c5-4788-ae8b-18b9a8510539/1/tXwPr6ZQ3ZSjtVgXOfY9iO-kFPM.mft
Manifest number: 0E2D
Signing time: Wed 05 Nov 2025 10:00:54 +0000
Manifest this update: Wed 05 Nov 2025 10:00:54 +0000
Manifest next update: Thu 06 Nov 2025 10:00:54 +0000
Files and hashes: 1: WKXMRCbOe7azjRi4M3txfig4AbQ.roa (hash: misoRXqMC74XUm7CVVuJWe90Pkw4I/1hXuzduVdNB/4=)
2: tXwPr6ZQ3ZSjtVgXOfY9iO-kFPM.crl (hash: F0uOJuK6Tcs4gzrZ3aBvJMt4D+FC4TZlgzr4JaUT7So=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/8c02ff-a9c5-4788-ae8b-18b9a8510539/1/tXwPr6ZQ3ZSjtVgXOfY9iO-kFPM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/8c02ff-a9c5-4788-ae8b-18b9a8510539/1/tXwPr6ZQ3ZSjtVgXOfY9iO-kFPM.mft
rsync://rpki.ripe.net/repository/DEFAULT/tXwPr6ZQ3ZSjtVgXOfY9iO-kFPM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:53:76:51:b2:15:2d:38:1e:26:67:5c:5f:c5:1d:2d:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b57c0fafa650dd94a3b5581739f63d88efa414f3
Validity
Not Before: Nov 5 10:00:54 2025 GMT
Not After : Nov 6 10:00:54 2025 GMT
Subject: CN=98728f0ec16251786a70caed5724b360137cd802
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:26:13:9a:fb:2d:d7:39:c5:64:e5:50:27:57:
7b:8b:8e:a6:d8:e9:05:9c:75:3c:ee:7c:4a:d3:6b:
93:66:c8:fa:40:65:53:30:4a:0b:7a:87:ed:2c:1e:
b9:d5:98:40:15:a8:0c:74:3d:d8:45:46:4c:ea:94:
18:03:33:91:f2:67:31:b7:88:13:01:19:65:6c:d3:
af:77:8b:31:26:b9:06:f8:97:23:81:b5:99:85:50:
5a:20:74:22:ea:ce:4e:98:55:71:72:5b:d9:41:e5:
73:36:6a:dc:1a:04:94:ad:56:26:53:56:a7:5b:ac:
ca:d4:f7:d0:a2:af:b7:98:ba:5f:03:7f:54:30:b9:
52:0f:83:2c:c5:54:34:8d:a7:7b:d8:11:1b:40:42:
f4:a8:00:f3:ab:9c:0d:ba:88:42:23:06:61:9c:ed:
e4:1a:cf:85:93:63:d7:27:cc:af:71:23:2a:7f:5a:
06:03:6a:5b:5f:bd:1f:1b:01:f6:bf:27:07:b4:0b:
29:18:3e:ac:4b:4f:5e:70:56:e6:ed:93:9a:e6:ad:
9e:8c:7a:7b:92:7b:2f:30:cc:0b:02:dc:b4:f9:e3:
5a:a6:cb:43:e8:7c:5b:88:62:83:52:64:74:fa:7c:
f2:b6:a2:90:a3:8a:70:81:2b:e1:f5:7d:1d:ce:a2:
d8:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:72:8F:0E:C1:62:51:78:6A:70:CA:ED:57:24:B3:60:13:7C:D8:02
X509v3 Authority Key Identifier:
keyid:B5:7C:0F:AF:A6:50:DD:94:A3:B5:58:17:39:F6:3D:88:EF:A4:14:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tXwPr6ZQ3ZSjtVgXOfY9iO-kFPM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/8c02ff-a9c5-4788-ae8b-18b9a8510539/1/tXwPr6ZQ3ZSjtVgXOfY9iO-kFPM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/8c02ff-a9c5-4788-ae8b-18b9a8510539/1/tXwPr6ZQ3ZSjtVgXOfY9iO-kFPM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:f6:a5:8a:03:b8:04:9c:67:02:bc:bd:f2:38:0e:00:70:86:
21:a0:ad:c1:f6:f3:72:87:1f:bd:ff:6e:be:79:ab:68:b1:91:
d5:f7:4f:d4:c3:e6:17:95:ea:31:39:e8:b3:c7:4d:d2:83:6b:
be:28:d4:a1:50:c1:6d:88:0d:f9:e9:85:90:aa:d3:51:d4:6a:
8a:6e:06:c0:53:92:03:49:96:fe:8c:02:29:a1:5e:2b:0f:07:
12:6c:f0:70:61:7c:7a:a6:f3:00:d4:e9:f9:4d:f5:1c:b5:e3:
43:93:fa:89:25:c5:82:9a:d1:20:ab:d9:54:0d:48:4d:67:bd:
57:82:d7:f2:13:1a:e0:d6:34:b5:b8:0a:52:97:5b:6c:2c:a2:
59:e0:21:b5:ad:20:ba:dc:0b:1e:73:9f:2e:65:29:9b:54:7b:
59:f5:2c:0e:bd:dd:e7:11:c1:30:1b:d1:6d:94:e2:fc:a9:b6:
98:f6:86:2e:53:97:83:88:96:df:38:7b:80:8e:36:db:60:24:
92:4a:e4:b9:2f:97:ed:72:74:c4:cc:55:05:07:fd:e5:f4:90:
51:68:75:6d:ff:eb:48:d3:c8:d0:e5:bf:25:d8:fb:03:6a:cb:
ce:dc:37:0d:e4:b4:e6:25:21:52:bb:3d:42:ec:8d:47:35:64:
e1:24:29:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 11:45:22 2025 by rpki-client