Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/2a7bf4-3454-4d14-9e0c-183f9975fc94/1/tA1JQzPLTZ5f0QyEbEfPVkRcUDo.mft
File: tA1JQzPLTZ5f0QyEbEfPVkRcUDo.mft (raw, json)
Hash identifier: CZjC95dwuavh6Pd+GOqXSJxRd4PQbOwWiXdMuNf9CLk=
Subject key identifier: A3:60:D2:85:90:AB:EC:3D:8B:00:C2:8E:D4:25:A0:C0:65:3A:29:C8
Authority key identifier: B4:0D:49:43:33:CB:4D:9E:5F:D1:0C:84:6C:47:CF:56:44:5C:50:3A
Certificate issuer: /CN=b40d494333cb4d9e5fd10c846c47cf56445c503a
Certificate serial: 019A533F72E499E479A6D1EDA19E0F316EF7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tA1JQzPLTZ5f0QyEbEfPVkRcUDo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/2a7bf4-3454-4d14-9e0c-183f9975fc94/1/tA1JQzPLTZ5f0QyEbEfPVkRcUDo.mft
Manifest number: 1024
Signing time: Wed 05 Nov 2025 09:00:58 +0000
Manifest this update: Wed 05 Nov 2025 09:00:58 +0000
Manifest next update: Thu 06 Nov 2025 09:00:58 +0000
Files and hashes: 1: VYJ9qKilNSj9Z30pGpYaNAGU4Z0.roa (hash: j29BGrdUX9gZWLn/MqLu3C1IYATOJG6BtpBREfenzkc=)
2: dek1yBz9hU9Sw_jKA33of_zM9K4.roa (hash: yub3ufVUEc3WS+XkUJMCp9euptnf3DjONJgSPtRCvNQ=)
3: tA1JQzPLTZ5f0QyEbEfPVkRcUDo.crl (hash: 5co1/E6ivX5zjdbKj0xW08x4slIm8h9bAmaFrpOTJVA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/2a7bf4-3454-4d14-9e0c-183f9975fc94/1/tA1JQzPLTZ5f0QyEbEfPVkRcUDo.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/2a7bf4-3454-4d14-9e0c-183f9975fc94/1/tA1JQzPLTZ5f0QyEbEfPVkRcUDo.mft
rsync://rpki.ripe.net/repository/DEFAULT/tA1JQzPLTZ5f0QyEbEfPVkRcUDo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:53:3f:72:e4:99:e4:79:a6:d1:ed:a1:9e:0f:31:6e:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b40d494333cb4d9e5fd10c846c47cf56445c503a
Validity
Not Before: Nov 5 09:00:58 2025 GMT
Not After : Nov 6 09:00:58 2025 GMT
Subject: CN=a360d28590abec3d8b00c28ed425a0c0653a29c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:39:91:da:c7:3a:6c:73:1b:9d:a6:ff:ed:a9:
ba:b6:0f:7f:7f:2c:5a:53:5c:82:70:13:0e:d5:7f:
9d:6a:85:84:ba:41:97:fe:87:ee:3f:95:1c:0f:4a:
35:cb:a1:41:a4:4d:45:29:e8:6d:9f:fa:5d:9e:b4:
73:fe:15:7e:94:e3:23:7e:49:41:78:34:c1:f6:5f:
1d:d2:09:57:f7:47:cb:7f:c7:64:3b:ea:a1:00:1f:
c0:76:19:bb:2a:d4:78:12:c2:bd:f4:4e:96:ff:e3:
ec:62:54:34:8a:95:e9:5b:23:42:00:5a:c7:2b:58:
77:17:c2:02:a5:9d:c5:df:f9:9f:72:cd:a0:23:71:
99:8e:cf:26:c8:13:b6:a3:e3:89:0c:ef:7a:aa:c8:
b8:73:29:7f:05:02:a2:9c:91:a2:02:ac:49:cf:12:
56:45:32:25:29:b7:20:c2:c2:e1:7c:65:30:61:ff:
7f:e7:40:bf:dd:9a:54:cb:6c:a8:6f:16:a2:f7:06:
11:fa:7a:97:7b:4d:2d:2c:de:b8:c9:5a:dc:ae:96:
35:85:28:09:2f:d0:74:86:ae:ee:ed:23:17:b4:74:
ea:95:3b:4e:3a:d5:07:ce:8e:ea:cb:41:51:9f:74:
aa:36:ac:a3:71:4d:37:b5:af:2f:38:91:f6:4d:52:
10:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:60:D2:85:90:AB:EC:3D:8B:00:C2:8E:D4:25:A0:C0:65:3A:29:C8
X509v3 Authority Key Identifier:
keyid:B4:0D:49:43:33:CB:4D:9E:5F:D1:0C:84:6C:47:CF:56:44:5C:50:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tA1JQzPLTZ5f0QyEbEfPVkRcUDo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/2a7bf4-3454-4d14-9e0c-183f9975fc94/1/tA1JQzPLTZ5f0QyEbEfPVkRcUDo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/2a7bf4-3454-4d14-9e0c-183f9975fc94/1/tA1JQzPLTZ5f0QyEbEfPVkRcUDo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:68:f7:70:c5:43:cb:24:6f:4f:8f:86:22:4b:a0:bf:8a:6c:
0e:97:09:75:9f:08:3f:78:36:5b:42:a7:d7:ff:3f:3b:cc:9b:
9b:e0:6f:0d:d7:f1:f9:76:06:7b:3d:e5:7e:be:84:85:8c:ae:
e0:0a:ff:03:74:d5:1b:7d:77:2e:bf:b7:05:cc:d1:64:48:e3:
93:5a:a6:9b:09:81:aa:6f:fa:d2:d1:af:3b:7c:af:26:e4:88:
36:02:d9:7d:06:8b:dd:05:4d:40:4f:23:00:91:96:4d:17:f4:
6b:01:ec:d7:39:c2:84:e9:4e:4a:c7:b6:eb:3b:3e:27:22:69:
3c:10:51:f8:38:14:cb:33:be:43:81:05:65:5c:13:74:63:ec:
dd:47:5c:ed:91:bd:45:a0:6f:c6:34:56:d7:4a:36:30:c1:16:
4a:90:9d:f3:f6:2c:6e:d8:7f:67:d8:c0:bd:45:e0:9e:e2:2c:
74:bd:51:99:05:6e:5f:2e:f0:63:df:4a:b9:f4:6a:b6:e7:3d:
52:88:ac:e8:d5:55:22:d0:5a:d2:de:04:56:93:69:bd:26:57:
29:ea:24:60:63:a7:7f:4e:09:b2:b7:a2:96:b7:14:2c:b5:a8:
ba:fb:a9:9e:ae:03:d7:e5:a2:40:5d:b5:9d:0f:8a:18:62:b0:
6d:45:a7:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 11:08:58 2025 by rpki-client