Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/ba1be3-796e-45c8-8b76-c700ea03c227/1/tXq3GLSss6Z5xduPzucpTta-K9A.mft
File: tXq3GLSss6Z5xduPzucpTta-K9A.mft (raw, json)
Hash identifier: xtPy2J1Uif3cAcS3LpzHSl6I5Tlbes35OONNKxnL17g=
Subject key identifier: 7A:47:2A:EC:A6:A8:7A:41:E2:AA:C7:95:7B:6F:8F:BF:60:77:6A:78
Authority key identifier: B5:7A:B7:18:B4:AC:B3:A6:79:C5:DB:8F:CE:E7:29:4E:D6:BE:2B:D0
Certificate issuer: /CN=b57ab718b4acb3a679c5db8fcee7294ed6be2bd0
Certificate serial: 019A52632CD1A7F52374D5FD6F93EF5AC022
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tXq3GLSss6Z5xduPzucpTta-K9A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/ba1be3-796e-45c8-8b76-c700ea03c227/1/tXq3GLSss6Z5xduPzucpTta-K9A.mft
Manifest number: 170F
Signing time: Wed 05 Nov 2025 05:00:22 +0000
Manifest this update: Wed 05 Nov 2025 05:00:22 +0000
Manifest next update: Thu 06 Nov 2025 05:00:22 +0000
Files and hashes: 1: 7kCB1J_rNDVtgNFDQBz-ZFXo6aA.roa (hash: j6xn4MHIGZVJXA81hfabdadaay1xFRv4GfnwCa5VtAQ=)
2: tXq3GLSss6Z5xduPzucpTta-K9A.crl (hash: oaCVYzthJsdK3Cszc7/D3WNL81LUIschCKO0xk690tw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/ba1be3-796e-45c8-8b76-c700ea03c227/1/tXq3GLSss6Z5xduPzucpTta-K9A.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/ba1be3-796e-45c8-8b76-c700ea03c227/1/tXq3GLSss6Z5xduPzucpTta-K9A.mft
rsync://rpki.ripe.net/repository/DEFAULT/tXq3GLSss6Z5xduPzucpTta-K9A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:63:2c:d1:a7:f5:23:74:d5:fd:6f:93:ef:5a:c0:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b57ab718b4acb3a679c5db8fcee7294ed6be2bd0
Validity
Not Before: Nov 5 05:00:22 2025 GMT
Not After : Nov 6 05:00:22 2025 GMT
Subject: CN=7a472aeca6a87a41e2aac7957b6f8fbf60776a78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:aa:4a:e7:33:8e:85:62:72:fa:51:45:02:3f:
a0:6c:dc:28:ee:a1:4d:17:c9:f5:88:d6:83:63:d1:
84:83:c2:df:1f:50:d1:ee:0e:04:9e:4a:db:df:47:
8e:59:e6:55:99:8b:11:8b:a3:3e:df:44:bb:62:68:
aa:e8:72:1d:55:26:a5:8f:91:6c:78:29:8f:d7:ff:
c5:d6:1d:94:22:0a:7e:2e:84:5d:39:d6:48:2b:df:
7c:c8:02:92:b5:e2:36:11:4c:7f:ba:04:f3:b1:81:
22:a5:f5:4c:c9:30:34:45:4e:a3:1d:7c:42:ca:ef:
8a:d0:cf:59:c3:f5:23:06:89:d9:21:a0:44:d4:03:
a7:af:1f:fa:7a:03:e8:ae:f3:a1:4c:ef:66:a0:c0:
78:9f:65:94:3f:bc:45:5f:05:35:d8:2b:08:0a:3c:
12:5d:e2:55:2d:4a:93:9c:54:56:28:55:a1:a5:d1:
ca:f1:3d:91:c5:5c:46:b1:58:a7:66:15:d5:41:1f:
b2:6b:f4:a5:6f:f7:a3:26:e2:88:cd:8e:35:95:f4:
a8:49:bd:af:95:b2:6c:17:7d:95:8b:ee:a9:cf:fe:
ac:94:71:8a:3c:77:2d:4f:58:c7:32:f2:c8:3c:d4:
e6:f3:ff:4e:e0:a1:ee:56:b1:27:4f:da:bc:f9:a8:
b1:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:47:2A:EC:A6:A8:7A:41:E2:AA:C7:95:7B:6F:8F:BF:60:77:6A:78
X509v3 Authority Key Identifier:
keyid:B5:7A:B7:18:B4:AC:B3:A6:79:C5:DB:8F:CE:E7:29:4E:D6:BE:2B:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tXq3GLSss6Z5xduPzucpTta-K9A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/ba1be3-796e-45c8-8b76-c700ea03c227/1/tXq3GLSss6Z5xduPzucpTta-K9A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/ba1be3-796e-45c8-8b76-c700ea03c227/1/tXq3GLSss6Z5xduPzucpTta-K9A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:0c:30:55:60:9a:2f:ce:d1:af:98:cb:81:ab:51:25:1b:26:
3c:41:23:48:7d:b3:be:77:66:9c:6a:b3:77:a6:c5:0f:56:68:
91:4b:a9:c1:a6:64:3d:5c:a8:e8:dd:d2:56:c9:0f:4d:d1:65:
22:c1:01:48:6c:2d:bd:e4:0f:1a:c7:71:c7:83:e4:2a:8f:a0:
93:81:1c:11:d6:70:db:fd:28:f1:4c:9c:74:0a:13:51:da:29:
24:18:81:98:ab:ca:1c:30:12:0a:6a:a9:9e:8a:27:5c:cd:e3:
2b:35:a4:ab:89:b5:f8:92:a8:07:f8:fd:27:17:a0:5a:70:fa:
bc:55:49:47:e2:8d:17:38:11:a2:af:aa:25:86:c2:27:87:67:
ec:dc:3d:7c:68:d5:17:64:16:59:9a:09:10:63:f0:69:9f:1a:
36:dc:70:cc:d4:51:e5:90:75:7c:b7:a5:d9:36:2c:cf:5c:ea:
a2:4c:75:c7:28:59:72:ee:70:a7:59:64:19:53:b0:da:12:29:
fd:aa:b4:58:19:cf:50:3c:46:f3:60:d3:94:75:7c:b0:54:ee:
9e:dc:9d:bd:af:e0:85:9e:f1:44:cf:04:d0:00:a4:d0:37:1c:
a0:b1:3e:88:b6:94:12:1a:7a:f1:98:b9:1e:c9:10:dd:15:c0:
5c:64:9a:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 09:03:42 2025 by rpki-client