Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/14f429-03b4-4423-bb4c-f0c33256fb22/1/t5OlR78L4t7tfIT-kC4zZld6IxQ.mft
File: t5OlR78L4t7tfIT-kC4zZld6IxQ.mft (raw, json)
Hash identifier: afkZEO/ZC39DwT5d2y2QG84Y91ZEi+cNPOjvwWokpQ0=
Subject key identifier: 1B:A1:27:97:98:2B:63:68:A9:D9:D7:84:4A:2D:03:D3:7F:2B:7F:87
Authority key identifier: B7:93:A5:47:BF:0B:E2:DE:ED:7C:84:FE:90:2E:33:66:57:7A:23:14
Certificate issuer: /CN=b793a547bf0be2deed7c84fe902e3366577a2314
Certificate serial: 019A4F99922ACDA9A01C7DB0514FCC20DC18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t5OlR78L4t7tfIT-kC4zZld6IxQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/14f429-03b4-4423-bb4c-f0c33256fb22/1/t5OlR78L4t7tfIT-kC4zZld6IxQ.mft
Manifest number: 0F91
Signing time: Tue 04 Nov 2025 16:00:55 +0000
Manifest this update: Tue 04 Nov 2025 16:00:55 +0000
Manifest next update: Wed 05 Nov 2025 16:00:55 +0000
Files and hashes: 1: Fu8V7L-KmE4RQ0KgwQ-l9VyTFvE.roa (hash: G5JYSxAwHyem4a69edN/KGJ90OxsVksEMhgNs6pZaOw=)
2: fuJdLqdlLbSFzR5wICuESp5-Mhc.roa (hash: cagQfCDycKKd/UTpNij0HKDwbg7i0kvIBBf3pZu1p7Q=)
3: t5OlR78L4t7tfIT-kC4zZld6IxQ.crl (hash: ENDG57/793OpBAsOhJkZo7sFxeW86bS8ExV2bTClEck=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/14f429-03b4-4423-bb4c-f0c33256fb22/1/t5OlR78L4t7tfIT-kC4zZld6IxQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/14f429-03b4-4423-bb4c-f0c33256fb22/1/t5OlR78L4t7tfIT-kC4zZld6IxQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/t5OlR78L4t7tfIT-kC4zZld6IxQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 16:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:99:92:2a:cd:a9:a0:1c:7d:b0:51:4f:cc:20:dc:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b793a547bf0be2deed7c84fe902e3366577a2314
Validity
Not Before: Nov 4 16:00:55 2025 GMT
Not After : Nov 5 16:00:55 2025 GMT
Subject: CN=1ba12797982b6368a9d9d7844a2d03d37f2b7f87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:0f:4f:1e:1f:08:51:85:9e:b1:32:f3:17:05:
b5:c4:46:a1:22:26:fc:b2:21:c5:81:f0:25:db:1a:
8f:29:34:e6:55:dc:ae:cd:be:06:ea:54:9a:4c:ff:
4d:bf:15:9b:3b:01:cb:93:fb:45:0e:23:8f:b3:80:
72:64:0d:b1:a5:38:69:03:66:9b:d5:3c:3e:e5:ff:
ce:92:02:35:a2:93:76:75:93:94:6b:a4:b3:d1:c4:
51:d8:05:70:6a:cc:46:a4:3e:d8:cc:82:1d:45:71:
e7:9a:8a:73:45:48:a4:35:4a:bd:30:58:33:0b:b6:
57:86:90:b7:58:a6:6d:e1:03:09:35:d9:3f:6e:ff:
a4:ed:bd:68:4d:5a:02:a7:24:64:21:e2:73:0f:df:
d3:a5:91:dd:bb:f0:fc:3b:cc:74:18:c8:cd:f9:e1:
d0:b9:82:f8:5b:80:35:c6:83:73:93:2a:ac:b3:d9:
ee:bb:f3:ed:be:3a:b3:66:ee:d6:e6:d7:b0:2b:3f:
15:d9:a6:a8:1a:5f:a2:bd:9e:33:48:cb:cc:a2:63:
38:03:0a:18:33:14:01:28:3b:93:9c:57:b9:d4:59:
ee:84:d8:42:5a:2c:b7:7a:78:97:7a:f5:04:d8:65:
8e:08:ad:cd:80:38:6d:18:4d:e2:6e:4b:22:a9:66:
6c:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:A1:27:97:98:2B:63:68:A9:D9:D7:84:4A:2D:03:D3:7F:2B:7F:87
X509v3 Authority Key Identifier:
keyid:B7:93:A5:47:BF:0B:E2:DE:ED:7C:84:FE:90:2E:33:66:57:7A:23:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t5OlR78L4t7tfIT-kC4zZld6IxQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/14f429-03b4-4423-bb4c-f0c33256fb22/1/t5OlR78L4t7tfIT-kC4zZld6IxQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/14f429-03b4-4423-bb4c-f0c33256fb22/1/t5OlR78L4t7tfIT-kC4zZld6IxQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:05:b3:2d:8b:65:99:48:98:98:cb:36:70:9d:8c:18:6f:e4:
50:8c:7e:3a:37:16:51:31:7e:d5:77:7e:27:f7:b4:cd:d0:d2:
ef:7b:29:51:07:f1:e0:89:dc:a6:ca:03:1b:18:a1:1f:75:1f:
98:45:75:e0:35:28:df:47:60:8b:c0:45:24:39:b1:e9:eb:cb:
ad:4a:73:87:4d:00:4f:70:fd:14:5f:60:af:da:73:4e:ae:06:
a3:b3:93:c3:a5:80:4f:22:2c:95:88:3f:f0:42:4c:39:a9:d4:
b9:e5:79:07:c8:92:10:3f:2e:3e:4f:25:a7:c4:b7:49:e6:5c:
2b:42:36:80:08:30:1e:72:3a:a2:b0:9a:8d:99:17:fd:d3:25:
1b:6c:9d:94:db:18:42:69:20:1c:17:07:be:2c:68:24:03:28:
0d:88:bf:e5:e7:65:4e:63:95:eb:41:d2:71:84:cc:ed:6e:da:
13:48:37:ed:02:36:35:5d:86:44:84:39:c3:c6:93:16:02:ba:
39:f2:3d:ef:20:c8:f9:f5:63:9b:ec:4b:4e:6c:33:eb:d3:87:
59:b3:66:ea:b0:16:30:eb:f3:45:f1:8d:d4:13:eb:b1:99:b9:
a3:ec:d2:50:21:73:04:2b:0b:3d:d4:be:ff:ab:5c:9e:e5:6d:
b2:47:af:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:30:53 2025 by rpki-client