Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/ac82ec-0e31-461e-a205-1f6010a30ebb/1/tQ32Wi_LmxF6hTprVoVLBxjsM0M.mft
File: tQ32Wi_LmxF6hTprVoVLBxjsM0M.mft (raw, json)
Hash identifier: fJh1/UUDjH7iBlSJhfu+/SC2j+2GI8X+Yyc7BctFg5g=
Subject key identifier: 0B:4D:15:B0:81:4A:C4:F9:60:27:4F:0B:DF:CF:3A:9F:1F:EC:1A:AC
Authority key identifier: B5:0D:F6:5A:2F:CB:9B:11:7A:85:3A:6B:56:85:4B:07:18:EC:33:43
Certificate issuer: /CN=b50df65a2fcb9b117a853a6b56854b0718ec3343
Certificate serial: 019A4EBD42062BC9935E23A0BA5B76DBACAB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tQ32Wi_LmxF6hTprVoVLBxjsM0M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/ac82ec-0e31-461e-a205-1f6010a30ebb/1/tQ32Wi_LmxF6hTprVoVLBxjsM0M.mft
Manifest number: 0A00
Signing time: Tue 04 Nov 2025 12:00:17 +0000
Manifest this update: Tue 04 Nov 2025 12:00:17 +0000
Manifest next update: Wed 05 Nov 2025 12:00:17 +0000
Files and hashes: 1: tQ32Wi_LmxF6hTprVoVLBxjsM0M.crl (hash: i2CLeGan4L9D8wNx1OOsZQQ4hPAvBmbhh7m/CWyIvtE=)
2: zBqyJEl1ZTI7fL6gM2motFXrSRM.roa (hash: OkJW2+OnAMScP2GdhvLfFrfdk7h2e43pg36iU6eHej4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/ac82ec-0e31-461e-a205-1f6010a30ebb/1/tQ32Wi_LmxF6hTprVoVLBxjsM0M.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/ac82ec-0e31-461e-a205-1f6010a30ebb/1/tQ32Wi_LmxF6hTprVoVLBxjsM0M.mft
rsync://rpki.ripe.net/repository/DEFAULT/tQ32Wi_LmxF6hTprVoVLBxjsM0M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:bd:42:06:2b:c9:93:5e:23:a0:ba:5b:76:db:ac:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b50df65a2fcb9b117a853a6b56854b0718ec3343
Validity
Not Before: Nov 4 12:00:17 2025 GMT
Not After : Nov 5 12:00:17 2025 GMT
Subject: CN=0b4d15b0814ac4f960274f0bdfcf3a9f1fec1aac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:10:e3:03:00:40:3c:0a:d0:6c:15:1f:0b:d9:
0c:45:35:88:d0:9e:33:a4:4f:d1:ac:ed:c5:6b:bd:
dc:66:77:53:1f:7b:56:0d:70:15:ab:58:01:9c:49:
27:a4:70:3d:85:68:d1:42:fd:c8:64:83:1f:60:d1:
86:0e:6e:58:81:f6:a0:2e:1f:bd:d7:53:f5:9b:5a:
b9:63:27:19:4d:0e:c1:7b:7b:06:d8:17:c7:38:e1:
e0:2a:5b:67:2a:af:6a:d1:0a:81:f8:ec:1e:9c:94:
2e:1e:5c:8a:39:81:d2:02:b8:41:af:df:6d:b5:0a:
07:90:95:74:88:60:1e:1b:ec:dc:73:24:aa:d8:7a:
d1:07:74:c1:a6:64:66:97:a9:e0:ff:61:e5:b5:3a:
76:3c:21:0c:71:41:f6:78:1b:37:a8:ea:20:fc:2d:
1f:5c:22:0f:7d:99:a5:be:59:b1:0c:d2:8a:1d:09:
ad:01:e0:a5:e3:ec:64:28:78:a8:17:59:8d:f9:51:
52:ff:09:a2:3d:41:d9:71:7f:34:b8:7b:6c:bf:82:
70:db:49:53:ee:61:53:3e:ad:7e:9d:7f:e3:69:d2:
c3:45:b4:35:4f:cb:50:7e:be:2b:bd:32:f8:a6:48:
50:39:17:c8:cb:78:b9:44:bd:c4:d6:51:e9:73:95:
b8:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:4D:15:B0:81:4A:C4:F9:60:27:4F:0B:DF:CF:3A:9F:1F:EC:1A:AC
X509v3 Authority Key Identifier:
keyid:B5:0D:F6:5A:2F:CB:9B:11:7A:85:3A:6B:56:85:4B:07:18:EC:33:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tQ32Wi_LmxF6hTprVoVLBxjsM0M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/ac82ec-0e31-461e-a205-1f6010a30ebb/1/tQ32Wi_LmxF6hTprVoVLBxjsM0M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/ac82ec-0e31-461e-a205-1f6010a30ebb/1/tQ32Wi_LmxF6hTprVoVLBxjsM0M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:96:6c:21:88:bc:d7:9e:56:c9:a5:07:d6:e6:2f:79:87:d5:
c2:f1:f5:b7:2a:41:dc:49:16:ba:08:7c:ea:af:9c:e1:1b:b9:
4e:98:61:62:87:32:c0:e5:10:e4:0c:a0:54:86:94:1b:e2:f6:
7e:da:d0:2c:d9:db:46:e7:3b:7b:aa:1e:36:51:14:06:cb:e2:
42:ca:2e:e1:19:c3:f0:0b:b9:e2:fb:b4:da:1b:a7:d2:dd:6f:
86:e0:2c:51:68:f1:49:b3:94:d3:aa:3f:b8:48:24:d5:98:da:
01:aa:9f:3b:20:25:f5:a6:63:fd:2e:ad:6a:c7:bf:0e:e2:79:
51:3a:9a:12:90:ef:37:d2:c2:38:23:81:2c:92:82:59:9d:df:
58:9c:24:8b:29:18:fd:b6:0d:51:c3:ee:22:bf:9a:d4:b9:b4:
6f:09:51:fb:bf:e1:52:73:f0:73:53:7e:8d:b0:91:6c:a9:84:
88:13:ba:ec:6c:aa:33:7a:bb:27:5d:e7:32:81:9d:c4:07:87:
cc:7e:ca:3e:e5:2d:89:d2:e3:6f:a1:e6:44:af:0e:b9:ed:27:
8b:95:57:6d:49:9c:e7:23:25:c5:14:c0:40:fe:7a:a6:34:83:
79:2c:4f:b6:8d:16:24:48:ac:84:68:e3:f3:b8:01:c3:13:34:
cd:92:c2:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:46:35 2025 by rpki-client