Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/3eaa70-0520-4559-841a-4ca956b08a41/1/tJ61DLi6yS3BduiofPJVUoIhlPo.mft
File: tJ61DLi6yS3BduiofPJVUoIhlPo.mft (raw, json)
Hash identifier: DDZ2n5mfguIOU12f0NMLrfP2HE0B2MPDJGwgGTb+Q+0=
Subject key identifier: AF:58:C7:D3:48:56:A3:68:BF:DB:78:1E:64:03:D8:83:8B:D8:93:69
Authority key identifier: B4:9E:B5:0C:B8:BA:C9:2D:C1:76:E8:A8:7C:F2:55:52:82:21:94:FA
Certificate issuer: /CN=b49eb50cb8bac92dc176e8a87cf25552822194fa
Certificate serial: 019A4EF51A507CF6F949018758AD443D56A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tJ61DLi6yS3BduiofPJVUoIhlPo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/3eaa70-0520-4559-841a-4ca956b08a41/1/tJ61DLi6yS3BduiofPJVUoIhlPo.mft
Manifest number: 170D
Signing time: Tue 04 Nov 2025 13:01:17 +0000
Manifest this update: Tue 04 Nov 2025 13:01:17 +0000
Manifest next update: Wed 05 Nov 2025 13:01:17 +0000
Files and hashes: 1: J7n-Yd5XTH7n67jouruR47yViJQ.roa (hash: uOcoBZNZsx1gjsqlLawiv97uMdypKgT5mBdaC/TonUs=)
2: tJ61DLi6yS3BduiofPJVUoIhlPo.crl (hash: I9QPt/JBcoDAygUQXhIRlqiALADz5FA9cpT1aEqm5Y8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/3eaa70-0520-4559-841a-4ca956b08a41/1/tJ61DLi6yS3BduiofPJVUoIhlPo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/3eaa70-0520-4559-841a-4ca956b08a41/1/tJ61DLi6yS3BduiofPJVUoIhlPo.mft
rsync://rpki.ripe.net/repository/DEFAULT/tJ61DLi6yS3BduiofPJVUoIhlPo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:1a:50:7c:f6:f9:49:01:87:58:ad:44:3d:56:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b49eb50cb8bac92dc176e8a87cf25552822194fa
Validity
Not Before: Nov 4 13:01:17 2025 GMT
Not After : Nov 5 13:01:17 2025 GMT
Subject: CN=af58c7d34856a368bfdb781e6403d8838bd89369
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:82:db:6c:b3:9d:9f:9d:7d:17:40:3d:3f:b1:
8a:fe:90:ae:0e:b9:e4:92:e4:a6:09:88:fb:a0:e2:
ea:b2:fd:4a:fc:ee:58:9a:fd:d2:c1:3c:7a:db:43:
bd:24:c7:50:f4:37:06:3e:7d:fd:24:bc:8a:01:6d:
87:34:7d:77:51:91:8e:44:de:a4:85:ad:fc:ef:fc:
c9:2e:02:13:be:af:e9:e9:34:fb:4f:17:36:04:0d:
db:5e:b1:30:1a:84:a2:0f:ef:5a:0f:88:bc:2f:ab:
1c:37:13:21:57:67:a2:c3:16:d6:73:44:f1:0b:27:
90:84:a9:8a:ff:7a:35:87:e8:0b:d1:67:7f:b3:eb:
3c:a5:4c:8b:67:d8:c0:86:76:9d:06:de:b4:05:f2:
f8:e3:cb:28:49:3d:4d:ed:fb:91:ae:31:48:ef:13:
ab:f2:5e:a7:28:c9:a4:2b:e3:3d:6b:74:e1:d3:96:
de:e1:ee:c1:63:7b:9d:9d:d7:75:98:c8:9a:f6:13:
aa:6c:ae:05:5b:b7:07:21:24:13:8a:f2:8c:08:40:
4a:5b:6d:a2:66:cc:78:3e:1e:6f:80:6d:f9:a1:af:
ac:55:da:87:46:2d:fe:74:7d:14:bc:14:65:bc:39:
aa:64:99:a9:ea:3c:fb:a3:ec:0b:82:be:46:cc:42:
16:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:58:C7:D3:48:56:A3:68:BF:DB:78:1E:64:03:D8:83:8B:D8:93:69
X509v3 Authority Key Identifier:
keyid:B4:9E:B5:0C:B8:BA:C9:2D:C1:76:E8:A8:7C:F2:55:52:82:21:94:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tJ61DLi6yS3BduiofPJVUoIhlPo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/3eaa70-0520-4559-841a-4ca956b08a41/1/tJ61DLi6yS3BduiofPJVUoIhlPo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/3eaa70-0520-4559-841a-4ca956b08a41/1/tJ61DLi6yS3BduiofPJVUoIhlPo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:f0:b0:e9:8c:ba:cf:d3:71:9f:0b:6d:24:77:07:6b:6e:1f:
d8:6b:45:fe:e6:9e:03:b4:c4:5a:ee:61:4c:fe:4e:cf:01:dc:
aa:8a:87:a0:8f:19:3a:e3:7f:36:6e:14:69:6d:96:75:c3:76:
f9:e4:2d:f8:a7:80:c0:5f:8f:a3:d2:91:07:a9:d2:d9:bb:9d:
3f:d7:9f:9b:db:da:78:60:5c:16:43:85:93:90:2a:d6:e8:dc:
c2:49:4d:c5:d5:0e:0b:fa:d7:43:b0:a4:f1:c9:cc:9f:be:12:
19:c5:2d:55:d7:47:92:33:8d:92:9d:4f:17:0d:d7:ba:f2:54:
98:18:e5:79:d3:9f:b4:d1:15:ee:ca:a9:ba:60:e2:82:aa:bd:
e1:19:b7:76:99:79:c7:f0:a3:cd:7e:ea:5d:f3:99:a2:9a:38:
61:86:99:75:f6:97:52:62:3d:65:a4:da:37:96:3a:8a:70:46:
7d:ea:c7:9d:93:ec:2e:c7:ec:7f:51:22:dd:aa:17:43:25:f4:
a8:44:0f:e1:c3:0e:42:96:91:6f:10:05:ca:d8:e6:b5:35:e1:
b0:e3:14:ae:c6:d5:10:c3:6c:f3:03:ba:c1:6b:1e:85:1c:c4:
78:57:2c:da:bd:e7:42:20:0c:e7:5b:66:4c:b1:ae:01:73:13:
94:ba:f5:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:50:48 2025 by rpki-client