Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/532065-6151-4ce0-ac6b-5d34c8575bea/1/Tuxo91FNsiFzZQCIKUsBQ7N3_CM.mft
File: Tuxo91FNsiFzZQCIKUsBQ7N3_CM.mft (raw, json)
Hash identifier: pZ8STfNI/Sf6VyHuIN8rYGcApSYhUmT5I5Ti+6cAdbY=
Subject key identifier: 86:2E:9B:24:06:0D:55:2D:D3:80:19:30:DD:68:D1:71:1C:5A:67:5B
Authority key identifier: 4E:EC:68:F7:51:4D:B2:21:73:65:00:88:29:4B:01:43:B3:77:FC:23
Certificate issuer: /CN=4eec68f7514db22173650088294b0143b377fc23
Certificate serial: 019A4E8634B5D534BCF8144752375234EDFE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tuxo91FNsiFzZQCIKUsBQ7N3_CM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/532065-6151-4ce0-ac6b-5d34c8575bea/1/Tuxo91FNsiFzZQCIKUsBQ7N3_CM.mft
Manifest number: 078F
Signing time: Tue 04 Nov 2025 11:00:09 +0000
Manifest this update: Tue 04 Nov 2025 11:00:09 +0000
Manifest next update: Wed 05 Nov 2025 11:00:09 +0000
Files and hashes: 1: I39FUsGFsmr9SUUDo-UEb6qOXN4.roa (hash: u4zl9OvdC2vc0LELt8+dwM6CALTiKOkmaqaJx/FGR/8=)
2: Tuxo91FNsiFzZQCIKUsBQ7N3_CM.crl (hash: kYwBqVy7ZbZCD4+dYCarMew4npo1ks4Rt3jW090PMIg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/532065-6151-4ce0-ac6b-5d34c8575bea/1/Tuxo91FNsiFzZQCIKUsBQ7N3_CM.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/532065-6151-4ce0-ac6b-5d34c8575bea/1/Tuxo91FNsiFzZQCIKUsBQ7N3_CM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Tuxo91FNsiFzZQCIKUsBQ7N3_CM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:86:34:b5:d5:34:bc:f8:14:47:52:37:52:34:ed:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4eec68f7514db22173650088294b0143b377fc23
Validity
Not Before: Nov 4 11:00:09 2025 GMT
Not After : Nov 5 11:00:09 2025 GMT
Subject: CN=862e9b24060d552dd3801930dd68d1711c5a675b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:40:e2:fe:6c:a8:69:a1:a5:39:f0:03:1f:93:
79:79:01:0c:5d:49:3a:77:e2:44:67:ff:31:88:83:
20:e0:54:41:04:23:33:95:48:d2:95:69:00:19:65:
6e:da:ec:19:0f:84:58:80:72:c4:91:6a:5d:3f:52:
0b:64:b9:6f:d3:9d:ec:26:63:7e:37:2e:7c:4c:d6:
d2:15:de:e3:de:75:35:f2:e5:76:2c:37:11:6e:56:
bf:4c:96:91:a1:b1:cf:50:9c:28:50:11:95:7f:f0:
91:a7:2a:50:21:56:23:d7:85:2f:d3:60:b7:97:6d:
83:6c:be:f8:d0:9d:dd:66:1f:59:81:51:e9:a0:b2:
ff:52:6e:2e:9b:32:60:68:13:ff:76:fc:22:33:b8:
8a:4b:42:f7:b0:a8:0d:c5:e3:d8:2f:54:55:14:be:
ab:62:41:bc:12:d7:d8:3c:ba:1e:ae:01:3f:a4:93:
ae:d0:80:82:2c:d3:84:f1:8e:a9:18:c7:65:0c:ee:
3e:5b:f3:fc:c8:48:7b:88:cc:cc:0f:b3:5f:cf:c0:
e8:b6:d9:1c:9c:85:f6:dd:a8:47:a0:ab:c3:b4:f6:
14:b2:20:0a:be:1b:05:d5:62:72:2d:4f:fa:a1:d7:
c4:31:3e:32:24:af:07:b0:97:b7:da:41:f7:d8:ff:
95:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:2E:9B:24:06:0D:55:2D:D3:80:19:30:DD:68:D1:71:1C:5A:67:5B
X509v3 Authority Key Identifier:
keyid:4E:EC:68:F7:51:4D:B2:21:73:65:00:88:29:4B:01:43:B3:77:FC:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tuxo91FNsiFzZQCIKUsBQ7N3_CM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/532065-6151-4ce0-ac6b-5d34c8575bea/1/Tuxo91FNsiFzZQCIKUsBQ7N3_CM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/532065-6151-4ce0-ac6b-5d34c8575bea/1/Tuxo91FNsiFzZQCIKUsBQ7N3_CM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:40:b6:93:f7:b2:08:ea:66:86:52:be:78:9f:af:45:67:36:
c8:8f:db:7d:ce:6d:82:99:37:d0:45:cd:9c:32:c2:9c:10:6c:
86:61:8c:06:25:e9:43:44:40:ab:f7:6e:bf:2e:59:bd:29:d4:
85:83:22:a7:df:2f:30:06:af:b1:8a:3f:57:04:f3:3d:33:5b:
e8:f3:f6:57:c4:6a:f1:ec:09:b6:af:72:67:d5:ab:23:cd:49:
52:4d:b4:52:a4:f7:ca:64:d9:1b:d1:49:ef:1f:3f:15:2f:41:
40:02:52:a1:62:3e:2d:53:b3:b5:f0:da:cc:d3:2c:49:a7:80:
f8:38:3d:2d:6d:0c:ff:b9:53:dd:ef:9b:c5:fd:e0:9f:e6:5d:
5e:3b:97:f5:6b:62:23:a0:9d:93:4b:2e:aa:64:62:d2:52:61:
a0:99:1b:16:6d:6d:ce:97:4f:a8:4e:27:b2:9e:16:03:e4:19:
d3:a4:8b:f5:4a:c4:90:29:9c:62:4f:ba:b0:82:aa:06:a3:21:
cf:93:5e:df:ed:37:2f:6a:a3:71:d9:ad:a2:49:8b:6c:ab:69:
79:e7:b2:0e:ea:8e:82:76:90:fb:84:f2:a1:3e:f8:c9:6d:aa:
5d:81:92:16:98:66:0d:da:80:20:92:c3:74:92:b3:99:e4:49:
96:9f:cd:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:47:05 2025 by rpki-client