Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/1c068e-889c-42be-bd8b-a6abb1215dec/1/tbYylyVHZz3w91qryDmiQihUoio.mft
File: tbYylyVHZz3w91qryDmiQihUoio.mft (raw, json)
Hash identifier: M8LCggQQd1iMRKEHmYGJkg2jx/ytipatGtw4MWEZDAk=
Subject key identifier: 2F:9B:8C:38:97:AB:C8:4E:8F:F7:34:6B:8D:0F:64:58:6C:7F:22:ED
Authority key identifier: B5:B6:32:97:25:47:67:3D:F0:F7:5A:AB:C8:39:A2:42:28:54:A2:2A
Certificate issuer: /CN=b5b632972547673df0f75aabc839a2422854a22a
Certificate serial: 019A4E86CCA2BDB36105C9AEA8470C0C202D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tbYylyVHZz3w91qryDmiQihUoio.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/1c068e-889c-42be-bd8b-a6abb1215dec/1/tbYylyVHZz3w91qryDmiQihUoio.mft
Manifest number: 170D
Signing time: Tue 04 Nov 2025 11:00:48 +0000
Manifest this update: Tue 04 Nov 2025 11:00:48 +0000
Manifest next update: Wed 05 Nov 2025 11:00:48 +0000
Files and hashes: 1: cUeWbg23uzdb5xSz99WNI9WtnoI.roa (hash: s+577iLuT/1Ct4G1mVjBy6TiewUwm3DkGU10CzpZuFE=)
2: tbYylyVHZz3w91qryDmiQihUoio.crl (hash: TRsowZNBU79jXwF0AMxYHmB2o7Jff+PZrB9xkPz59NA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/1c068e-889c-42be-bd8b-a6abb1215dec/1/tbYylyVHZz3w91qryDmiQihUoio.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/1c068e-889c-42be-bd8b-a6abb1215dec/1/tbYylyVHZz3w91qryDmiQihUoio.mft
rsync://rpki.ripe.net/repository/DEFAULT/tbYylyVHZz3w91qryDmiQihUoio.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:86:cc:a2:bd:b3:61:05:c9:ae:a8:47:0c:0c:20:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5b632972547673df0f75aabc839a2422854a22a
Validity
Not Before: Nov 4 11:00:48 2025 GMT
Not After : Nov 5 11:00:48 2025 GMT
Subject: CN=2f9b8c3897abc84e8ff7346b8d0f64586c7f22ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:9d:08:a3:4d:25:24:f1:a8:14:f1:50:2c:45:
1a:12:a9:e1:e6:42:96:ad:b2:e4:69:66:c9:22:7e:
b2:a1:5b:a2:d2:b8:e4:47:c7:a3:35:aa:16:7d:bb:
e8:36:a2:82:25:71:5f:4e:59:54:3d:a7:12:1f:64:
1b:27:7e:6a:f0:76:7a:85:20:1b:05:92:ed:a3:89:
c4:c0:d2:7a:0e:8f:dd:b5:cc:fe:6b:0f:2d:a8:1b:
9e:db:e4:a5:89:f9:5d:65:9f:7c:4b:a2:6a:58:aa:
fd:72:c9:40:a3:53:f3:c1:82:b7:37:4f:68:c1:1c:
b9:42:eb:83:9a:45:55:97:1b:1a:55:42:68:73:90:
20:43:47:13:f8:41:24:fb:99:11:08:22:e6:db:eb:
d1:64:8e:1e:1f:9e:98:1b:59:7d:29:46:ad:96:cc:
d7:bc:7f:74:f5:41:83:28:53:9e:e1:bd:d1:82:a3:
f7:94:d2:5d:55:b1:71:8f:59:b4:62:17:25:45:fd:
39:b3:b7:b2:fc:37:5a:27:b3:29:47:36:e1:7b:4a:
2d:4d:d4:b9:13:b5:03:6a:66:31:a0:9b:46:79:45:
ed:d3:40:b0:de:7f:90:3f:1d:8e:bb:78:1d:49:9c:
d1:f9:ab:8d:ea:12:2d:e1:90:b5:67:6a:fe:15:e8:
b0:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:9B:8C:38:97:AB:C8:4E:8F:F7:34:6B:8D:0F:64:58:6C:7F:22:ED
X509v3 Authority Key Identifier:
keyid:B5:B6:32:97:25:47:67:3D:F0:F7:5A:AB:C8:39:A2:42:28:54:A2:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tbYylyVHZz3w91qryDmiQihUoio.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/1c068e-889c-42be-bd8b-a6abb1215dec/1/tbYylyVHZz3w91qryDmiQihUoio.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/1c068e-889c-42be-bd8b-a6abb1215dec/1/tbYylyVHZz3w91qryDmiQihUoio.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:31:f9:16:43:60:e7:60:df:0b:90:12:ff:fb:83:1a:e9:21:
d9:78:88:32:40:22:e6:b9:b5:6b:e7:38:b3:42:dd:6e:ff:05:
e5:f5:a4:fc:3c:d6:37:ee:ce:ae:19:01:6f:6c:a7:a8:c2:68:
60:67:e9:77:16:eb:72:a7:10:75:fa:0a:cc:be:2f:25:75:2a:
c0:34:72:b9:0f:03:07:e6:52:7a:70:e1:06:34:00:bf:af:6f:
dd:3d:fc:45:a4:b3:ea:8f:b0:d2:da:15:4f:4a:87:35:66:90:
dc:97:1e:7d:a3:91:23:98:08:3f:73:b4:f3:40:7a:13:bf:a4:
d5:fd:d3:6a:ff:64:79:1e:db:ab:cb:b2:7f:81:82:eb:49:de:
ef:54:9d:8c:a2:91:0d:50:a0:4d:01:3a:5a:89:6b:8b:bc:01:
1f:bb:07:cb:bd:22:5c:2a:f1:5c:05:61:5f:a0:40:aa:17:95:
a7:8e:81:b6:79:06:c8:53:cb:d7:de:c2:4b:b6:f0:b7:b9:b1:
da:b7:c3:90:09:af:25:f0:e8:da:03:b9:62:11:d4:2d:3f:0b:
e8:ef:9f:fb:70:cd:86:f0:85:ef:44:e7:2b:af:20:d4:85:69:
e6:b9:ac:fd:2a:b3:37:dd:3a:28:ce:0b:71:f4:a2:ad:45:82:
2a:98:d9:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:48:23 2025 by rpki-client