Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/26c7ff-998e-4131-a747-3c43c3d35ef3/1/tI8GPSnpEPAzvstlbouZAfaeyXQ.mft
File: tI8GPSnpEPAzvstlbouZAfaeyXQ.mft (raw, json)
Hash identifier: SCSewhbfPfIjU7V62v6MRWNSrZLvnm/CfJ7wXZFbgU0=
Subject key identifier: A4:FE:5F:12:73:80:50:CF:C2:BB:C2:83:35:01:2D:76:D3:72:A0:D7
Authority key identifier: B4:8F:06:3D:29:E9:10:F0:33:BE:CB:65:6E:8B:99:01:F6:9E:C9:74
Certificate issuer: /CN=b48f063d29e910f033becb656e8b9901f69ec974
Certificate serial: 019A4E869214222CBB1B7CBB8C439363BA4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tI8GPSnpEPAzvstlbouZAfaeyXQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/26c7ff-998e-4131-a747-3c43c3d35ef3/1/tI8GPSnpEPAzvstlbouZAfaeyXQ.mft
Manifest number: 100B
Signing time: Tue 04 Nov 2025 11:00:33 +0000
Manifest this update: Tue 04 Nov 2025 11:00:33 +0000
Manifest next update: Wed 05 Nov 2025 11:00:33 +0000
Files and hashes: 1: 7KQuRRixFRD2InAA41vDA8b46Ss.roa (hash: pqy5x79CuZKPgbD27qu8dFnC6qLbsZEYs512o7B8AtE=)
2: tI8GPSnpEPAzvstlbouZAfaeyXQ.crl (hash: rAzHEy7wM5JsaU/Jybe9NTiBE6HPakIz+1frWEbEH/w=)
3: vM1WQhwz3cRdhRzRWZYRS2EG35U.roa (hash: 6cZcrnHWZ9ymPZFFF87v+vfASbgITAqQf6OR2I+DcbM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/26c7ff-998e-4131-a747-3c43c3d35ef3/1/tI8GPSnpEPAzvstlbouZAfaeyXQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/26c7ff-998e-4131-a747-3c43c3d35ef3/1/tI8GPSnpEPAzvstlbouZAfaeyXQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/tI8GPSnpEPAzvstlbouZAfaeyXQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:86:92:14:22:2c:bb:1b:7c:bb:8c:43:93:63:ba:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b48f063d29e910f033becb656e8b9901f69ec974
Validity
Not Before: Nov 4 11:00:33 2025 GMT
Not After : Nov 5 11:00:33 2025 GMT
Subject: CN=a4fe5f12738050cfc2bbc28335012d76d372a0d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:07:62:94:a9:8a:94:3b:bc:44:87:ef:38:67:
7f:0d:ab:0b:c3:52:d8:51:b7:d1:97:7a:7c:5b:7d:
d4:a5:57:e4:8f:ba:4c:29:28:c3:e7:ff:45:29:cc:
7d:f5:67:30:4d:fa:82:49:8a:40:fe:6f:16:72:0a:
5e:ea:fc:02:d1:7a:93:5a:e6:a1:63:5a:ab:6d:2a:
a5:04:9d:43:1f:2a:6f:5d:cf:d8:34:9c:43:a1:9a:
ad:86:84:44:a9:67:20:71:f3:7a:b8:94:5b:a2:eb:
5c:37:84:01:e7:69:01:64:83:96:53:a3:47:8e:f5:
2e:56:9f:7d:b3:aa:98:c6:6f:37:2c:bd:88:0f:d4:
92:b1:4b:3a:fa:cf:0f:5b:7b:b2:86:c4:5c:7d:e1:
c7:7c:f7:e8:1f:cc:51:e3:c7:7a:3b:d8:5f:9d:4c:
d2:db:de:84:04:bd:73:68:00:6f:89:a6:0c:0f:f1:
f8:47:40:6f:41:1d:53:f0:72:12:d3:1a:e3:27:f8:
de:92:47:ba:fe:db:5f:25:8c:17:ee:c2:86:33:02:
fd:6f:6a:66:3d:8b:af:b2:ec:af:e7:93:41:e3:01:
c2:32:f0:92:98:20:8b:b2:93:97:c5:f0:c3:37:c9:
b7:55:36:c7:5c:c8:14:5f:fc:fc:93:34:39:c6:f7:
29:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:FE:5F:12:73:80:50:CF:C2:BB:C2:83:35:01:2D:76:D3:72:A0:D7
X509v3 Authority Key Identifier:
keyid:B4:8F:06:3D:29:E9:10:F0:33:BE:CB:65:6E:8B:99:01:F6:9E:C9:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tI8GPSnpEPAzvstlbouZAfaeyXQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/26c7ff-998e-4131-a747-3c43c3d35ef3/1/tI8GPSnpEPAzvstlbouZAfaeyXQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/26c7ff-998e-4131-a747-3c43c3d35ef3/1/tI8GPSnpEPAzvstlbouZAfaeyXQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:a6:7d:b9:b7:34:f1:98:43:5b:f6:00:27:54:0e:20:33:42:
91:cc:ca:d4:01:86:6c:3b:bb:5e:31:21:44:1a:d1:2f:f7:5a:
da:c4:55:e0:bd:35:55:26:9f:fa:11:c0:4e:68:68:8e:ec:da:
36:7a:fe:e2:d5:e9:d9:b9:3d:18:53:b8:ff:53:46:6f:d4:a8:
47:bd:8c:4e:e7:9c:26:cf:0e:a0:32:75:13:f8:84:64:1b:ad:
e2:98:b2:31:17:ed:1c:94:03:81:1e:0d:73:d2:cd:65:10:7c:
f4:ef:f1:50:6c:cf:40:04:c6:d0:89:97:f3:1f:da:67:23:f8:
e5:0c:6d:81:61:b8:42:3b:b0:6d:22:08:e0:86:8e:c7:b8:a4:
ad:4c:99:c0:63:c1:81:a9:ec:6f:67:c7:8e:82:6b:29:6e:97:
30:3a:c0:9f:ee:b8:fa:9c:d8:eb:42:9d:4a:7e:9f:0f:25:4f:
fd:8e:5b:05:97:27:66:61:56:44:50:f5:26:9a:e6:c6:c4:aa:
b9:d9:94:49:42:c2:9a:66:07:a5:7d:d7:c4:f9:cd:87:6f:5c:
3c:3e:16:9b:87:de:98:e9:be:bd:9e:84:b9:62:50:06:1f:c7:
22:39:b7:44:db:a8:61:a9:86:96:b8:6b:dd:a0:09:a7:cc:00:
5b:3e:96:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:35:59 2025 by rpki-client