Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/f4f244-8c0c-4564-9c42-af60fd5f06b1/1/tFrdzVeWSPw_YSTlWEee8LB_AYw.mft
File: tFrdzVeWSPw_YSTlWEee8LB_AYw.mft (raw, json)
Hash identifier: zYkKJE1WnPPOzIlNE6DOGKvjxklQKkspOzBQCYRTpwg=
Subject key identifier: 9C:DB:24:8E:90:44:B0:65:AE:3A:64:B4:D6:F4:54:07:2F:40:84:94
Authority key identifier: B4:5A:DD:CD:57:96:48:FC:3F:61:24:E5:58:47:9E:F0:B0:7F:01:8C
Certificate issuer: /CN=b45addcd579648fc3f6124e558479ef0b07f018c
Certificate serial: 019A4EBD4F77BEC62679A61EEFF338D5CB87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tFrdzVeWSPw_YSTlWEee8LB_AYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/f4f244-8c0c-4564-9c42-af60fd5f06b1/1/tFrdzVeWSPw_YSTlWEee8LB_AYw.mft
Manifest number: 0488
Signing time: Tue 04 Nov 2025 12:00:20 +0000
Manifest this update: Tue 04 Nov 2025 12:00:20 +0000
Manifest next update: Wed 05 Nov 2025 12:00:20 +0000
Files and hashes: 1: e24B7HUjem2EcUgVIiWCP9iwbs8.roa (hash: NqLDz/MGE43z7asDnz2IcWTOaDhJNwXlKh8N6TqUooc=)
2: j4i_lEr0ea0rf8oMcqwCbevGHbI.roa (hash: m0Ro3O0JJKs4a9J3JyICkVruy1q5dBuVu7UD/uXkWv8=)
3: tFrdzVeWSPw_YSTlWEee8LB_AYw.crl (hash: pMDiYlrKAwVsRyizL2d+5dr1Rl5PJ2ZhzvoRbMvyHR8=)
4: xw6VI0SfTqgX1Ykal0pt0rqVfPs.roa (hash: +mo5fxF621tUv4Tlvitq33EyXbo2V/p/J1JdJ2mFmTo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/f4f244-8c0c-4564-9c42-af60fd5f06b1/1/tFrdzVeWSPw_YSTlWEee8LB_AYw.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/f4f244-8c0c-4564-9c42-af60fd5f06b1/1/tFrdzVeWSPw_YSTlWEee8LB_AYw.mft
rsync://rpki.ripe.net/repository/DEFAULT/tFrdzVeWSPw_YSTlWEee8LB_AYw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 12:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:bd:4f:77:be:c6:26:79:a6:1e:ef:f3:38:d5:cb:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b45addcd579648fc3f6124e558479ef0b07f018c
Validity
Not Before: Nov 4 12:00:20 2025 GMT
Not After : Nov 5 12:00:20 2025 GMT
Subject: CN=9cdb248e9044b065ae3a64b4d6f454072f408494
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:75:18:b1:88:b0:85:f2:40:4c:5e:2e:8e:98:
a4:2d:a3:e3:7b:4c:22:0a:c3:c1:06:d6:04:5a:39:
52:bb:f6:03:f9:02:d1:14:40:2a:44:95:46:ad:10:
7a:9f:76:d2:2c:75:8e:1a:53:04:61:bc:92:b1:e0:
ff:4d:09:f7:69:f5:11:a8:52:28:37:14:a0:9a:58:
33:ea:ed:8e:ab:59:80:1b:fd:30:3a:ce:0a:6f:74:
1b:55:85:cc:5f:c3:31:8a:49:3e:e0:8a:49:69:0b:
e4:ed:50:e9:07:ae:95:cf:ed:d2:b1:8c:12:62:84:
8a:db:a1:3e:df:87:0c:a4:01:a7:59:cc:3d:25:8c:
7f:aa:79:cb:de:c2:c7:cc:be:6e:1c:cb:f8:01:97:
73:51:50:58:3b:25:2f:12:ae:30:5b:1b:47:a6:e8:
68:82:52:49:97:01:c1:3a:5f:60:61:1a:1c:b3:b5:
e8:a7:89:9b:66:b6:33:68:37:4a:33:31:b1:9a:c9:
37:22:02:e2:9f:f9:1a:30:84:fa:e9:9f:75:c0:6a:
56:6d:84:b0:1d:db:a4:81:82:d9:fa:ba:a4:eb:4a:
6c:ec:12:01:d2:1e:0a:b2:71:97:6f:84:b0:4d:eb:
39:62:87:8f:34:17:d1:b4:e8:6e:da:b5:ea:59:c7:
cc:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:DB:24:8E:90:44:B0:65:AE:3A:64:B4:D6:F4:54:07:2F:40:84:94
X509v3 Authority Key Identifier:
keyid:B4:5A:DD:CD:57:96:48:FC:3F:61:24:E5:58:47:9E:F0:B0:7F:01:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tFrdzVeWSPw_YSTlWEee8LB_AYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/f4f244-8c0c-4564-9c42-af60fd5f06b1/1/tFrdzVeWSPw_YSTlWEee8LB_AYw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/f4f244-8c0c-4564-9c42-af60fd5f06b1/1/tFrdzVeWSPw_YSTlWEee8LB_AYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:c1:50:07:87:6c:5b:67:99:cd:e1:84:88:31:4f:c5:46:ab:
1d:48:4a:51:95:1b:d7:f5:13:95:62:37:89:a6:9f:d8:a5:53:
cc:ca:a7:1c:57:26:49:63:fc:1c:a0:0c:6c:41:01:3e:fa:22:
82:ed:be:88:50:19:56:24:52:e0:8d:6c:d0:fa:87:df:de:c9:
99:7b:28:a1:d1:9f:55:ce:df:a4:fb:71:8e:27:f3:3b:b8:a1:
cc:fc:ac:5a:ab:1a:66:1c:49:bf:be:5d:90:4d:d2:d3:d2:1f:
0f:be:4b:92:c4:42:f6:1f:cf:ff:52:9d:b7:c1:1f:8a:c2:d8:
8e:9b:7d:ce:3a:b6:1d:5d:79:7c:2d:2f:63:05:2a:fd:73:1c:
2a:d2:06:27:66:47:2c:d1:e2:14:7c:c3:4e:cd:c1:85:eb:bd:
8f:d1:df:4b:4d:37:e5:c4:84:ef:f4:4c:66:d4:e1:cd:9e:6d:
a9:3a:ee:9d:4f:e2:69:de:78:d7:d2:11:e0:4a:1b:64:dc:d0:
f7:df:d5:27:bb:0e:22:23:d8:ed:ed:aa:eb:24:5f:1a:09:cb:
75:46:d4:2d:de:54:93:b7:9a:b0:47:d5:66:4f:1e:a9:0f:3b:
55:74:71:2c:a5:60:9f:35:bf:9d:79:f2:46:3d:ac:7b:40:f0:
99:54:6a:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:45:14 2025 by rpki-client