Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/2f672b-236c-40fb-aaf6-08d0f4bd2c28/1/tXPS3ak-QgQJFj2lnnQU7pGi7vI.mft
File: tXPS3ak-QgQJFj2lnnQU7pGi7vI.mft (raw, json)
Hash identifier: /nYwBhME5krFc7gZEKOUpCT2e2PpXTqSEj5b1WFQvsE=
Subject key identifier: 92:89:33:CC:57:47:87:E8:54:D2:7A:23:FF:D5:E8:AB:CA:6A:03:EB
Authority key identifier: B5:73:D2:DD:A9:3E:42:04:09:16:3D:A5:9E:74:14:EE:91:A2:EE:F2
Certificate issuer: /CN=b573d2dda93e420409163da59e7414ee91a2eef2
Certificate serial: 019A503DF88C835FC45273A78F7DBC13E464
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tXPS3ak-QgQJFj2lnnQU7pGi7vI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/2f672b-236c-40fb-aaf6-08d0f4bd2c28/1/tXPS3ak-QgQJFj2lnnQU7pGi7vI.mft
Manifest number: 01AB
Signing time: Tue 04 Nov 2025 19:00:29 +0000
Manifest this update: Tue 04 Nov 2025 19:00:29 +0000
Manifest next update: Wed 05 Nov 2025 19:00:29 +0000
Files and hashes: 1: r2p_nfti9wP7acQGEaKHM_xZ5Y4.roa (hash: 8x452bR9h9FZkxCtz0Hac6JBkLr+TCy/u9myFaRh5zg=)
2: tXPS3ak-QgQJFj2lnnQU7pGi7vI.crl (hash: fcNiXQYkius+dEQ0ynjqnHjO5yMfY9vK9jGmSL84Z+c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/2f672b-236c-40fb-aaf6-08d0f4bd2c28/1/tXPS3ak-QgQJFj2lnnQU7pGi7vI.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/2f672b-236c-40fb-aaf6-08d0f4bd2c28/1/tXPS3ak-QgQJFj2lnnQU7pGi7vI.mft
rsync://rpki.ripe.net/repository/DEFAULT/tXPS3ak-QgQJFj2lnnQU7pGi7vI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:3d:f8:8c:83:5f:c4:52:73:a7:8f:7d:bc:13:e4:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b573d2dda93e420409163da59e7414ee91a2eef2
Validity
Not Before: Nov 4 19:00:29 2025 GMT
Not After : Nov 5 19:00:29 2025 GMT
Subject: CN=928933cc574787e854d27a23ffd5e8abca6a03eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:e4:2a:8c:fc:d1:96:f8:48:26:ba:ef:ea:d3:
42:cc:2a:b9:c2:96:38:40:51:8e:3b:1e:ce:fc:8a:
3f:19:c2:5b:d1:d6:46:32:0c:31:fb:45:41:e8:15:
89:56:36:a9:72:c5:a2:9b:c0:87:48:07:a4:f1:d3:
6c:2c:69:f8:0f:40:e3:57:18:8b:9d:21:e0:e8:de:
15:9d:d1:33:2f:7f:22:81:b0:d7:88:e8:c9:1e:6e:
2c:d1:d9:30:f5:02:a2:f6:45:83:33:46:e6:24:a5:
92:f4:bc:d5:83:52:a1:5a:38:3b:f4:61:30:11:6a:
7e:73:c7:35:c1:82:94:bb:9e:1f:6e:0c:ea:ef:3b:
2a:0f:37:2d:66:a8:2e:26:f7:58:09:62:11:50:75:
a7:07:74:9c:26:43:25:78:1f:99:6d:47:5a:bc:b3:
ac:be:c6:36:64:49:fa:c0:a9:18:f4:85:d7:55:39:
d7:c5:fd:0f:82:9f:a4:05:6e:2f:5d:9d:5f:5b:d4:
d9:79:fd:bc:9b:1f:9a:d8:b1:ac:01:b5:f7:18:fd:
ab:e0:f8:3b:3a:89:dd:c4:7e:1c:14:19:18:19:db:
e3:13:a1:d1:ce:f8:b8:58:d7:d2:7d:35:45:b3:a2:
f9:3c:31:17:62:6e:a1:8d:1f:68:13:e0:6e:7c:59:
42:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:89:33:CC:57:47:87:E8:54:D2:7A:23:FF:D5:E8:AB:CA:6A:03:EB
X509v3 Authority Key Identifier:
keyid:B5:73:D2:DD:A9:3E:42:04:09:16:3D:A5:9E:74:14:EE:91:A2:EE:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tXPS3ak-QgQJFj2lnnQU7pGi7vI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/2f672b-236c-40fb-aaf6-08d0f4bd2c28/1/tXPS3ak-QgQJFj2lnnQU7pGi7vI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/2f672b-236c-40fb-aaf6-08d0f4bd2c28/1/tXPS3ak-QgQJFj2lnnQU7pGi7vI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:74:ae:f6:49:80:d9:04:b8:93:f3:e0:0a:8b:35:be:33:14:
f9:bd:5f:fd:89:12:2a:2d:b5:75:6b:80:cc:b2:ab:23:f4:f5:
f6:08:7a:6a:e8:82:fd:d5:0a:98:3d:71:0f:62:97:0e:4d:9d:
72:0e:bd:b9:bd:ec:f1:e4:da:ac:b9:45:3d:22:99:80:73:98:
82:75:99:05:a3:23:d1:b1:b4:eb:ca:49:a7:4a:5e:a9:cb:72:
7b:d8:46:b3:69:2d:40:75:69:51:81:61:56:6e:4e:c9:cd:e4:
75:70:12:46:3b:dc:70:db:8a:c5:83:9b:fd:52:7b:94:6a:44:
80:77:79:2d:f8:f4:9a:f9:95:eb:ad:6e:b9:2d:3e:50:6f:c0:
7b:ec:47:2b:a1:2b:10:f7:ed:9f:f1:c1:e8:de:0c:5e:f7:e6:
50:4f:36:57:c1:20:0a:a4:ce:74:28:cc:a8:05:3d:a6:34:44:
f8:0a:d1:6e:df:59:e9:59:d7:68:79:21:4d:e9:dd:fe:44:5d:
47:d8:f8:df:de:69:39:41:67:f4:a1:d2:20:76:b4:34:4b:0a:
44:a2:7e:f3:88:43:17:9c:7d:70:fb:41:dd:c0:57:4c:89:c8:
e2:0b:35:83:67:78:c4:30:b8:55:ac:55:ca:c0:6a:c6:46:25:
b1:2f:9e:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 02:30:37 2025 by rpki-client