Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/dfc4f2-ed7d-4610-860c-b81373c40dc9/1/tGc2eWfcdjNJ_QtQ4x91uCMChZA.mft
File: tGc2eWfcdjNJ_QtQ4x91uCMChZA.mft (raw, json)
Hash identifier: iTi5RkoBVdC2taL5tHgHyOmCo/gTph9BQjuVvyOXTEY=
Subject key identifier: 69:CB:DE:D9:BA:D4:43:1A:15:CA:29:D9:AF:DF:BA:04:81:55:83:6A
Authority key identifier: B4:67:36:79:67:DC:76:33:49:FD:0B:50:E3:1F:75:B8:23:02:85:90
Certificate issuer: /CN=b467367967dc763349fd0b50e31f75b823028590
Certificate serial: 019A4EF5C76E3C9034AE948FA04F9AC49921
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tGc2eWfcdjNJ_QtQ4x91uCMChZA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/dfc4f2-ed7d-4610-860c-b81373c40dc9/1/tGc2eWfcdjNJ_QtQ4x91uCMChZA.mft
Manifest number: 171E
Signing time: Tue 04 Nov 2025 13:02:01 +0000
Manifest this update: Tue 04 Nov 2025 13:02:01 +0000
Manifest next update: Wed 05 Nov 2025 13:02:01 +0000
Files and hashes: 1: bng6ShOgaVE2_vQYMevfFJYJ8Sk.roa (hash: o+G2M7dgXmN23PorkdRSIqlVi011U/iuS/RS0v10mJg=)
2: fyxM_h2WX6rYIy5hg25YZB5O2CM.roa (hash: 9Ti3G/owzw7kR0D0MPQYXnuvUJArE0MI+SK12KJz4Yg=)
3: tGc2eWfcdjNJ_QtQ4x91uCMChZA.crl (hash: n5Wu7czJByLUYzLCyKU+ABVSE0PfjsHG4jT1hIvFm/s=)
4: zIQrtixaP8FSodiktmvc2r9jLQ0.roa (hash: TQFktjGswL7qarOYLhb3l7yDbaMo37GtBSGaVvZU4Bw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/dfc4f2-ed7d-4610-860c-b81373c40dc9/1/tGc2eWfcdjNJ_QtQ4x91uCMChZA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/dfc4f2-ed7d-4610-860c-b81373c40dc9/1/tGc2eWfcdjNJ_QtQ4x91uCMChZA.mft
rsync://rpki.ripe.net/repository/DEFAULT/tGc2eWfcdjNJ_QtQ4x91uCMChZA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 13:02:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:c7:6e:3c:90:34:ae:94:8f:a0:4f:9a:c4:99:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b467367967dc763349fd0b50e31f75b823028590
Validity
Not Before: Nov 4 13:02:01 2025 GMT
Not After : Nov 5 13:02:01 2025 GMT
Subject: CN=69cbded9bad4431a15ca29d9afdfba048155836a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:90:da:9c:11:fa:5b:53:03:2d:c4:4f:ad:2f:
de:ec:fa:c2:93:c3:84:8b:c4:02:2c:5c:5b:d8:8d:
d4:ca:cb:4d:0d:f2:96:27:81:e9:a3:40:a7:b4:98:
db:9f:1a:f7:9f:94:15:45:ae:49:96:c6:5c:0b:58:
04:92:c8:67:14:38:f0:43:f5:c9:02:59:84:2b:53:
f4:ec:6b:5c:e8:9c:1b:a9:8e:75:b9:5f:56:40:e5:
9f:1a:73:89:62:ed:d4:98:8e:32:55:22:9b:65:69:
94:e8:76:34:1a:4d:c0:df:10:7a:2c:a8:ea:3d:87:
27:2d:7c:53:80:79:5b:9c:a4:ec:23:fd:57:c5:19:
ab:24:66:f4:20:9e:68:12:31:84:46:87:bc:22:b4:
98:4c:7c:51:6b:fa:48:a6:b4:21:0b:79:4a:c2:b6:
60:8f:dd:eb:dc:7e:4a:83:6a:3c:96:94:6a:dc:a6:
82:ad:9b:55:17:07:9c:33:41:2b:4a:99:9b:cc:5d:
66:2a:f5:b6:e3:ba:3c:33:7f:21:e3:04:84:b9:74:
e2:bf:02:12:62:93:3a:62:04:a6:2c:69:a7:0c:25:
f0:b5:95:96:05:d7:71:13:50:f6:85:5c:09:01:ee:
31:33:bf:25:c5:47:62:0a:5c:d5:d9:83:60:7c:da:
db:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:CB:DE:D9:BA:D4:43:1A:15:CA:29:D9:AF:DF:BA:04:81:55:83:6A
X509v3 Authority Key Identifier:
keyid:B4:67:36:79:67:DC:76:33:49:FD:0B:50:E3:1F:75:B8:23:02:85:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tGc2eWfcdjNJ_QtQ4x91uCMChZA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/dfc4f2-ed7d-4610-860c-b81373c40dc9/1/tGc2eWfcdjNJ_QtQ4x91uCMChZA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/dfc4f2-ed7d-4610-860c-b81373c40dc9/1/tGc2eWfcdjNJ_QtQ4x91uCMChZA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:ba:c3:fa:b0:35:0f:3f:d1:29:02:0e:b4:93:5d:e6:85:46:
aa:78:60:5a:52:93:e7:13:d9:69:bc:2d:00:b9:48:19:3e:54:
b0:23:fa:df:4e:00:8d:27:de:60:9b:49:9e:e3:2c:68:98:fb:
a5:b3:0d:28:df:d6:b4:24:e2:58:bc:a1:15:af:d8:5a:e0:bb:
d5:21:bb:a9:d7:72:39:1e:85:3b:32:01:db:c9:4d:f6:0e:b3:
b7:60:04:14:e6:fa:9f:cb:79:56:ed:13:46:cb:fd:f5:df:cc:
41:76:63:9a:ea:64:03:05:b7:c9:52:66:0d:00:07:96:44:cb:
59:5b:a0:d2:ef:de:c9:6d:ab:b2:1b:20:1e:7d:45:67:24:d7:
80:85:28:73:e8:ce:fe:11:4b:d8:5b:54:0f:7e:0a:67:b3:59:
e0:26:09:cc:38:5b:11:f7:af:7c:5f:f2:b4:48:1c:e5:90:38:
fb:f1:34:47:66:fc:3e:90:f3:50:98:15:dc:56:3a:5f:0b:c0:
e6:57:c8:79:43:fb:56:ea:6b:5a:57:04:b5:c8:9e:44:ba:63:
69:2e:0f:1e:ef:e0:4b:e3:c0:72:f4:7b:7a:01:a6:90:90:8a:
02:f6:50:7e:11:4c:8e:6f:ef:3e:9b:df:fc:b7:3e:d2:5a:89:
66:ee:c6:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 22:34:16 2025 by rpki-client