Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/b3010e-5654-4486-993b-d1cd09568e82/1/tSbfp_niiE-yHRBz5IwL1Yhq3uI.mft
File: tSbfp_niiE-yHRBz5IwL1Yhq3uI.mft (raw, json)
Hash identifier: c4+tJ5JjMecNMbD7IdHmZ8NPZOFti5R9r5ACkMN96AI=
Subject key identifier: 21:24:74:03:EF:AB:C9:B9:62:EE:91:23:7F:F4:27:E9:3D:EB:FB:DE
Authority key identifier: B5:26:DF:A7:F9:E2:88:4F:B2:1D:10:73:E4:8C:0B:D5:88:6A:DE:E2
Certificate issuer: /CN=b526dfa7f9e2884fb21d1073e48c0bd5886adee2
Certificate serial: 019A54BF586B3113C8EF84A8939FBFF94C22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tSbfp_niiE-yHRBz5IwL1Yhq3uI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/b3010e-5654-4486-993b-d1cd09568e82/1/tSbfp_niiE-yHRBz5IwL1Yhq3uI.mft
Manifest number: 0248
Signing time: Wed 05 Nov 2025 16:00:17 +0000
Manifest this update: Wed 05 Nov 2025 16:00:17 +0000
Manifest next update: Thu 06 Nov 2025 16:00:17 +0000
Files and hashes: 1: WGUviqGya1U293o1pPaqk6_9nss.roa (hash: UGYTWdobyAgqAcAwAxalKwZisa0V5NIsFjAj8H8KXVc=)
2: tSbfp_niiE-yHRBz5IwL1Yhq3uI.crl (hash: dM87eLEDc74oCyCH+LTaNNOLw9TDRLjiJqivsAiNjz4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/b3010e-5654-4486-993b-d1cd09568e82/1/tSbfp_niiE-yHRBz5IwL1Yhq3uI.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/b3010e-5654-4486-993b-d1cd09568e82/1/tSbfp_niiE-yHRBz5IwL1Yhq3uI.mft
rsync://rpki.ripe.net/repository/DEFAULT/tSbfp_niiE-yHRBz5IwL1Yhq3uI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:54:bf:58:6b:31:13:c8:ef:84:a8:93:9f:bf:f9:4c:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b526dfa7f9e2884fb21d1073e48c0bd5886adee2
Validity
Not Before: Nov 5 16:00:17 2025 GMT
Not After : Nov 6 16:00:17 2025 GMT
Subject: CN=21247403efabc9b962ee91237ff427e93debfbde
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:d0:c9:e6:8c:16:95:87:7b:e4:39:fd:a4:fd:
d3:81:cc:fc:a2:55:fc:30:9c:10:22:b0:13:74:fa:
da:e6:98:d2:e6:fa:50:9f:3c:44:ea:97:fc:65:8f:
4b:b5:99:87:53:64:d5:0e:1c:d6:25:ce:42:b0:89:
e5:32:51:a6:f1:64:73:f0:5c:b8:0d:8d:0d:be:cf:
f0:6f:bd:58:d7:6f:c6:18:dc:54:6c:b5:73:a7:f0:
bc:49:e5:2c:7a:c2:fc:c1:ea:a2:ce:ec:85:51:ca:
d5:e1:35:4c:5a:36:99:6d:45:c8:84:ac:cb:b7:03:
54:c7:b7:cc:12:b8:a5:83:62:dd:d4:d1:fe:c6:95:
bb:14:f6:3b:c1:eb:6f:1a:a4:73:38:7c:b5:fd:10:
f4:18:e1:af:ae:94:b7:b2:7d:07:b7:93:59:8a:1d:
90:72:26:e8:9f:ed:6a:f4:ec:94:70:7b:3e:7d:7f:
2b:c3:91:09:8b:a0:d7:3e:2a:1c:45:0f:a7:6c:d4:
4c:2f:e4:d9:00:49:fb:46:63:c7:a2:98:d5:f1:33:
96:39:5a:31:f0:f2:3c:86:63:e6:83:f0:4b:a9:94:
1d:de:0b:62:c6:a0:71:f0:7b:1c:01:8a:25:52:26:
73:b0:ea:67:52:56:4e:98:79:cc:00:96:45:86:c8:
9d:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:24:74:03:EF:AB:C9:B9:62:EE:91:23:7F:F4:27:E9:3D:EB:FB:DE
X509v3 Authority Key Identifier:
keyid:B5:26:DF:A7:F9:E2:88:4F:B2:1D:10:73:E4:8C:0B:D5:88:6A:DE:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tSbfp_niiE-yHRBz5IwL1Yhq3uI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/b3010e-5654-4486-993b-d1cd09568e82/1/tSbfp_niiE-yHRBz5IwL1Yhq3uI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/b3010e-5654-4486-993b-d1cd09568e82/1/tSbfp_niiE-yHRBz5IwL1Yhq3uI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:06:54:db:96:13:85:8c:f0:6e:03:0e:ec:dc:c5:f4:ec:f6:
5e:36:62:4f:85:c6:a0:1c:81:29:82:01:41:7f:5b:6a:56:ef:
5b:4b:a1:2b:91:07:2c:9f:f7:63:cd:c6:89:45:86:90:32:de:
7d:7d:a7:a3:b8:05:9f:bd:d7:a0:b7:6a:e7:4b:0e:4e:fa:a3:
3c:80:18:c5:09:2f:21:d5:57:ed:c8:e2:08:a4:11:67:b3:25:
e7:86:d7:e7:ea:15:3e:14:c7:38:3f:d9:92:49:b6:0c:9e:26:
3e:8f:ef:cb:98:60:a2:b4:c1:dd:b5:97:23:4a:08:31:79:ec:
8c:d8:ec:d2:3a:dc:5f:77:02:ee:75:9d:59:31:d1:45:0f:4e:
18:f2:a8:90:d4:42:02:53:72:d6:8f:54:f0:19:b9:84:80:8c:
52:28:c8:33:1a:62:2a:88:51:2f:0d:75:a0:89:26:81:7c:a9:
44:3d:1b:88:e6:c7:46:34:36:17:97:eb:e0:be:3f:1f:86:4a:
77:cf:19:a9:27:50:46:4d:31:18:f7:ca:84:53:61:26:0c:c2:
f1:72:ee:5d:7b:09:97:88:9e:8c:18:d0:1f:97:ea:d7:8a:28:
53:86:19:cd:05:bd:ca:91:83:50:01:9b:72:8a:f8:af:e1:5c:
85:ca:66:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 22:14:15 2025 by rpki-client