Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/f87a2e-46b1-4a66-a90c-699835c92bfe/1/tm6nNZIhwbd9bMAG97ZwapqQgpk.mft
File: tm6nNZIhwbd9bMAG97ZwapqQgpk.mft (raw, json)
Hash identifier: fbjcyDBsmFgcVOtC/uVpD29o00C+llceq4Jx32yazfQ=
Subject key identifier: D7:ED:8B:50:EC:56:CF:25:A0:BF:BB:0C:77:2F:54:21:1D:CF:C4:47
Authority key identifier: B6:6E:A7:35:92:21:C1:B7:7D:6C:C0:06:F7:B6:70:6A:9A:90:82:99
Certificate issuer: /CN=b66ea7359221c1b77d6cc006f7b6706a9a908299
Certificate serial: 019A4F62E00D482DDEDCF0CC83F1282C2962
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tm6nNZIhwbd9bMAG97ZwapqQgpk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/f87a2e-46b1-4a66-a90c-699835c92bfe/1/tm6nNZIhwbd9bMAG97ZwapqQgpk.mft
Manifest number: 171C
Signing time: Tue 04 Nov 2025 15:01:11 +0000
Manifest this update: Tue 04 Nov 2025 15:01:11 +0000
Manifest next update: Wed 05 Nov 2025 15:01:11 +0000
Files and hashes: 1: NlYcoSp45z0WrpR3Tl1MptwPpME.roa (hash: sqtBfE3kNCyJie27C2GkG5RDLoXNkpYCfVwwEjHU9tw=)
2: tm6nNZIhwbd9bMAG97ZwapqQgpk.crl (hash: 4ebzJCjz6UHXNN08vPnTpBbm0+WF4qhg4TX+yYBZPmY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/f87a2e-46b1-4a66-a90c-699835c92bfe/1/tm6nNZIhwbd9bMAG97ZwapqQgpk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/f87a2e-46b1-4a66-a90c-699835c92bfe/1/tm6nNZIhwbd9bMAG97ZwapqQgpk.mft
rsync://rpki.ripe.net/repository/DEFAULT/tm6nNZIhwbd9bMAG97ZwapqQgpk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:62:e0:0d:48:2d:de:dc:f0:cc:83:f1:28:2c:29:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b66ea7359221c1b77d6cc006f7b6706a9a908299
Validity
Not Before: Nov 4 15:01:11 2025 GMT
Not After : Nov 5 15:01:11 2025 GMT
Subject: CN=d7ed8b50ec56cf25a0bfbb0c772f54211dcfc447
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:ec:d5:9b:82:cb:ac:21:f7:b2:4e:76:c2:d6:
dd:1b:08:df:ad:f5:ae:5c:1f:36:da:2f:17:3a:64:
e3:3a:56:19:b9:09:76:bc:69:86:a8:9e:b3:24:97:
86:0d:76:1b:ac:8d:cb:9b:9e:64:06:3f:4a:c3:19:
38:03:72:31:fd:45:2c:27:e8:45:34:66:83:55:11:
01:71:da:69:5f:2b:65:51:73:50:7e:79:26:cf:b4:
4d:ac:32:36:3f:17:8c:74:28:cf:59:a0:bd:50:b5:
cb:04:e2:f9:00:b5:fa:dc:01:92:50:bf:b5:fe:55:
98:3b:66:16:17:16:cb:2d:51:34:61:f4:17:15:bc:
ac:62:e6:02:43:c0:0c:a8:a8:43:8a:2d:52:d7:6d:
18:8d:b1:ca:ec:40:19:c8:6c:31:e2:f2:36:7d:29:
57:40:b3:db:1c:b6:39:a2:af:0b:f2:e9:7c:5c:fd:
0a:92:7e:4b:5b:8c:3c:11:06:c8:95:57:9f:7b:1e:
8b:64:4a:89:9e:0e:40:4d:71:c1:74:3c:7e:f1:0b:
ba:05:1d:89:ee:99:0c:06:38:a7:30:2b:dc:ca:f1:
ee:d7:b3:10:91:42:85:9e:02:21:1a:7a:5e:da:d1:
5e:65:4a:ee:df:60:d0:4d:98:01:b2:62:d3:40:bb:
1d:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:ED:8B:50:EC:56:CF:25:A0:BF:BB:0C:77:2F:54:21:1D:CF:C4:47
X509v3 Authority Key Identifier:
keyid:B6:6E:A7:35:92:21:C1:B7:7D:6C:C0:06:F7:B6:70:6A:9A:90:82:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tm6nNZIhwbd9bMAG97ZwapqQgpk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/f87a2e-46b1-4a66-a90c-699835c92bfe/1/tm6nNZIhwbd9bMAG97ZwapqQgpk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/f87a2e-46b1-4a66-a90c-699835c92bfe/1/tm6nNZIhwbd9bMAG97ZwapqQgpk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:40:e3:1b:59:f4:fb:0f:bf:a1:ae:1a:b9:47:76:cc:7b:01:
dc:54:c0:b7:59:fd:0e:e6:5c:13:27:56:97:f2:5a:23:d2:2f:
14:65:48:e3:7b:82:bf:9a:ce:6f:f6:50:96:96:7c:34:8f:fb:
a3:51:a9:e0:9f:a8:56:98:9e:28:29:76:f9:0c:74:ee:72:67:
a6:f8:75:f0:39:49:8e:c2:b5:a7:78:77:73:83:a3:ca:e8:6b:
1a:7f:cd:eb:d6:d7:1f:dd:5b:5d:a3:7f:3b:9b:c2:dc:42:63:
38:fa:12:34:eb:fe:6c:7d:30:b1:af:aa:6c:eb:5c:79:45:de:
4f:51:9a:a7:54:ec:6a:3b:19:31:a9:73:b2:1c:d7:63:42:3c:
f4:f4:7b:1f:8a:44:9c:63:91:f7:94:ea:a3:22:75:83:f2:92:
08:11:70:c6:c1:48:9c:48:a0:9c:f3:ee:e2:d8:c4:df:68:ed:
27:2c:66:f6:1c:66:58:03:ff:a8:27:a0:08:51:c2:f9:c6:06:
07:bb:31:95:75:9b:b6:82:d1:92:9d:a2:0f:14:5a:bd:bb:d3:
5d:21:ea:2c:14:35:e9:dc:cc:07:03:6c:01:e3:78:fe:43:0b:
eb:32:d9:9a:c7:58:d2:32:5a:e4:86:72:68:02:11:ed:63:a3:
f5:a9:92:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:58:18 2025 by rpki-client