Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/654f36-ac5a-4292-8140-534d78898d6b/1/tV1OYxfGKhpp2sMfTxQ-O8KAumI.mft
File: tV1OYxfGKhpp2sMfTxQ-O8KAumI.mft (raw, json)
Hash identifier: Epz7lnraAYKdQbGk9VBit2hhbX/Z05JbFOA8AHiq+Ws=
Subject key identifier: A3:D6:21:F0:CC:01:40:1B:FA:14:E5:9F:7D:18:BD:F2:A9:1C:36:3D
Authority key identifier: B5:5D:4E:63:17:C6:2A:1A:69:DA:C3:1F:4F:14:3E:3B:C2:80:BA:62
Certificate issuer: /CN=b55d4e6317c62a1a69dac31f4f143e3bc280ba62
Certificate serial: 019A503E36620BBBAABE6EE4C560A0FDA712
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tV1OYxfGKhpp2sMfTxQ-O8KAumI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/654f36-ac5a-4292-8140-534d78898d6b/1/tV1OYxfGKhpp2sMfTxQ-O8KAumI.mft
Manifest number: 170F
Signing time: Tue 04 Nov 2025 19:00:45 +0000
Manifest this update: Tue 04 Nov 2025 19:00:45 +0000
Manifest next update: Wed 05 Nov 2025 19:00:45 +0000
Files and hashes: 1: 5ZQra7L-IsZsuKLO0lJjxDnzRq4.roa (hash: JgYoL2/LGVSX4nbbkirOpXIvSueW2/0GrLGHhioQgeE=)
2: NNbGYKZN2MczsbLVZDvW2hdl718.roa (hash: 4E2t0fTnEc7nZVPHCni1To4F2fDuKI/+fcnfWn1WYJA=)
3: tV1OYxfGKhpp2sMfTxQ-O8KAumI.crl (hash: 7fJp5pMkS45dGiUK05R0cxXaRFP1dpDJAIL//MeK8L8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/654f36-ac5a-4292-8140-534d78898d6b/1/tV1OYxfGKhpp2sMfTxQ-O8KAumI.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/654f36-ac5a-4292-8140-534d78898d6b/1/tV1OYxfGKhpp2sMfTxQ-O8KAumI.mft
rsync://rpki.ripe.net/repository/DEFAULT/tV1OYxfGKhpp2sMfTxQ-O8KAumI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:3e:36:62:0b:bb:aa:be:6e:e4:c5:60:a0:fd:a7:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b55d4e6317c62a1a69dac31f4f143e3bc280ba62
Validity
Not Before: Nov 4 19:00:45 2025 GMT
Not After : Nov 5 19:00:45 2025 GMT
Subject: CN=a3d621f0cc01401bfa14e59f7d18bdf2a91c363d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:97:b3:91:6c:cb:05:d2:18:67:5f:72:d0:92:
cb:de:c9:47:d1:c1:32:0e:db:cc:30:a5:49:c4:f4:
0b:74:86:28:66:1d:8d:31:be:0a:ee:63:c8:83:4d:
27:c8:8b:22:ae:2a:71:67:3b:5a:9b:1d:c1:2d:ae:
fc:d1:7a:6a:e3:0b:71:2c:87:f9:27:1e:4d:f6:c9:
9d:57:4d:1b:ed:c7:84:89:91:6b:86:61:43:cf:83:
15:6f:bc:93:a4:a1:d0:76:d2:5a:b1:93:9f:67:b9:
58:a8:84:ee:7e:ad:00:d7:a5:c6:34:a0:7f:6c:53:
a1:db:d5:d7:db:33:46:be:36:32:e1:24:34:c4:2f:
1f:8a:95:7f:8c:79:9c:1e:a9:b3:0c:5b:b6:cd:9f:
18:dd:85:ee:27:6d:1f:5b:27:77:d6:fb:08:44:08:
90:bc:2d:e0:4f:22:10:e7:2c:c0:27:2b:91:d7:79:
f4:b2:63:4c:b4:d2:8d:9b:2e:82:16:53:3e:68:0c:
23:1c:96:cb:d2:3d:c7:71:fa:4c:01:8f:ca:7e:9b:
c3:24:7e:e0:26:f7:5e:25:4b:0f:90:8b:59:ba:5b:
16:05:ac:82:76:2b:4a:01:ea:85:54:8f:97:0f:25:
ee:df:7f:88:43:93:13:2a:b9:45:fd:49:01:21:b6:
eb:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:D6:21:F0:CC:01:40:1B:FA:14:E5:9F:7D:18:BD:F2:A9:1C:36:3D
X509v3 Authority Key Identifier:
keyid:B5:5D:4E:63:17:C6:2A:1A:69:DA:C3:1F:4F:14:3E:3B:C2:80:BA:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tV1OYxfGKhpp2sMfTxQ-O8KAumI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/654f36-ac5a-4292-8140-534d78898d6b/1/tV1OYxfGKhpp2sMfTxQ-O8KAumI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/654f36-ac5a-4292-8140-534d78898d6b/1/tV1OYxfGKhpp2sMfTxQ-O8KAumI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:87:86:89:70:ad:f9:de:3e:8a:8f:8b:bc:d4:b2:0d:62:41:
43:95:e7:6f:4b:a0:ce:a9:bb:c5:98:bf:29:06:64:0b:86:be:
a3:aa:c1:8a:34:6a:dc:14:5a:5b:54:e6:10:72:2c:06:20:16:
f5:88:87:74:6e:bd:34:4b:4f:1b:2d:fd:c3:53:0d:12:77:b4:
0a:bd:8e:eb:cf:49:e4:5c:f7:ad:31:d2:38:02:61:9b:60:80:
bb:02:3d:7b:6b:3b:9f:e4:09:bd:98:bd:c4:87:8b:fd:9e:35:
cf:51:f8:2a:b3:aa:9f:32:c7:9e:c7:46:30:1f:72:ce:8e:df:
ff:b5:5c:65:8f:a8:16:82:6c:dc:72:c0:35:34:f6:8a:eb:0b:
68:a8:ef:cf:d0:9b:1f:7c:36:18:2a:92:41:1b:f7:92:08:45:
a8:c7:85:db:f0:50:c5:98:a5:d9:8d:8b:c8:9b:3c:8a:90:1b:
cc:81:d5:ea:db:49:2f:3f:f2:56:b2:f4:be:80:81:a0:5e:95:
e3:78:94:1b:fa:3a:59:6c:5f:15:18:71:e0:61:79:a6:4e:d0:
86:f6:85:cd:52:aa:5c:9b:e2:c5:85:b1:61:80:23:f1:63:2f:
63:29:52:68:0f:bc:94:0a:57:3f:53:46:aa:6e:95:b2:d9:2d:
0a:b9:b3:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 00:15:56 2025 by rpki-client