Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/608fdb-a406-4b85-b14a-d2441e8f6c7a/1/tPgsjv3jS9meROrwcxtsUltFShk.mft
File: tPgsjv3jS9meROrwcxtsUltFShk.mft (raw, json)
Hash identifier: UZ0OHC+yJLmY1e8E1bmvnd5Kf7yGfhRGNvLIWsGZTpk=
Subject key identifier: 7F:65:D2:48:32:C5:E5:8D:D4:57:94:64:C7:3B:3D:5C:28:93:D1:3B
Authority key identifier: B4:F8:2C:8E:FD:E3:4B:D9:9E:44:EA:F0:73:1B:6C:52:5B:45:4A:19
Certificate issuer: /CN=b4f82c8efde34bd99e44eaf0731b6c525b454a19
Certificate serial: 019A4F62F81F7DE5F92397FC4F19B9C724B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tPgsjv3jS9meROrwcxtsUltFShk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/608fdb-a406-4b85-b14a-d2441e8f6c7a/1/tPgsjv3jS9meROrwcxtsUltFShk.mft
Manifest number: 170C
Signing time: Tue 04 Nov 2025 15:01:17 +0000
Manifest this update: Tue 04 Nov 2025 15:01:17 +0000
Manifest next update: Wed 05 Nov 2025 15:01:17 +0000
Files and hashes: 1: qLkt693aVmyKYJQGNdNxcAXdJ9w.roa (hash: D8tW4gMgnbvNPYFRk3OMpyQUNWmp5AcbpxituaqMb+A=)
2: tPgsjv3jS9meROrwcxtsUltFShk.crl (hash: 1H9w1HJOBL+vkN4TTojBKsz1OT4dODCte4Ec2bKaWN4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/608fdb-a406-4b85-b14a-d2441e8f6c7a/1/tPgsjv3jS9meROrwcxtsUltFShk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/608fdb-a406-4b85-b14a-d2441e8f6c7a/1/tPgsjv3jS9meROrwcxtsUltFShk.mft
rsync://rpki.ripe.net/repository/DEFAULT/tPgsjv3jS9meROrwcxtsUltFShk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:62:f8:1f:7d:e5:f9:23:97:fc:4f:19:b9:c7:24:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4f82c8efde34bd99e44eaf0731b6c525b454a19
Validity
Not Before: Nov 4 15:01:17 2025 GMT
Not After : Nov 5 15:01:17 2025 GMT
Subject: CN=7f65d24832c5e58dd4579464c73b3d5c2893d13b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:b1:71:bf:f3:da:38:54:5f:3d:c7:68:90:20:
b3:c6:18:bf:9b:56:37:ec:8d:5f:9b:a9:fc:44:83:
8b:d0:ae:b2:56:2f:43:0f:80:d8:21:58:58:97:ac:
0d:b3:87:6f:53:f1:a2:3b:50:78:cf:1a:cf:3e:22:
51:9b:e7:6a:cb:f4:52:56:7a:6e:f2:da:c2:b3:f5:
e2:ef:4f:a0:ee:3c:c0:15:66:52:a9:c8:cc:20:83:
2e:26:06:61:84:4b:2c:f7:97:93:84:e3:f9:1e:c9:
ad:f5:88:89:53:a4:0e:5c:54:c1:5c:7f:bc:1c:c5:
17:12:24:28:f3:f9:79:ae:fc:b9:17:88:32:47:e8:
05:39:a4:c1:ca:46:f2:be:51:f7:1c:d7:f9:60:8f:
db:07:80:85:fc:ac:df:ec:65:14:25:50:41:c0:05:
16:86:cf:ae:dc:e8:74:25:01:98:06:b9:77:82:02:
fd:8a:90:c5:6f:b0:fd:0f:e6:ce:3b:18:48:b0:d9:
26:d5:d7:cb:50:6b:ca:bc:9d:c5:2c:17:e6:f4:f7:
80:4a:eb:8c:5a:2f:bc:3f:fc:7b:fe:3f:4d:19:83:
2b:cc:e8:51:1b:bd:55:d5:b8:a0:32:bb:40:6a:0d:
bd:b7:b3:fd:1f:1a:4e:39:a2:39:83:cd:f6:75:e8:
2c:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:65:D2:48:32:C5:E5:8D:D4:57:94:64:C7:3B:3D:5C:28:93:D1:3B
X509v3 Authority Key Identifier:
keyid:B4:F8:2C:8E:FD:E3:4B:D9:9E:44:EA:F0:73:1B:6C:52:5B:45:4A:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tPgsjv3jS9meROrwcxtsUltFShk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/608fdb-a406-4b85-b14a-d2441e8f6c7a/1/tPgsjv3jS9meROrwcxtsUltFShk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/608fdb-a406-4b85-b14a-d2441e8f6c7a/1/tPgsjv3jS9meROrwcxtsUltFShk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:3d:00:27:e2:30:c7:02:fd:a4:db:fb:2e:ea:69:f8:2c:ac:
cd:61:df:2e:b3:cf:b2:85:b0:05:39:ef:78:6e:87:f0:82:9b:
ce:51:08:a1:06:6d:10:de:ec:c0:7f:50:92:e4:b5:fe:27:83:
7b:6d:86:91:eb:6c:9a:f6:83:5f:3a:ab:63:b4:35:7e:9f:cd:
fc:9a:79:47:3f:20:14:ca:c9:93:75:5f:97:8a:05:f3:b4:a3:
a7:71:eb:1f:c1:9b:ff:09:6f:34:26:29:69:96:06:fe:cd:c5:
a9:9d:fd:67:0b:1f:69:a5:ef:31:5c:de:42:61:34:22:2e:fa:
52:ed:77:cc:f7:ba:1e:5f:21:57:d4:ce:8a:d5:18:32:f2:3c:
52:b0:61:59:54:39:6c:db:90:b7:49:24:a5:f6:3a:ef:3e:79:
20:ef:ce:f5:ff:3f:b9:11:0d:8d:be:ff:5e:75:c4:72:4a:65:
ff:ad:56:e1:b8:0d:d8:f3:fc:e7:64:1c:a6:84:5a:41:0a:66:
48:f3:01:be:ea:c4:1b:52:11:79:f1:8d:dd:d4:20:d9:51:a1:
62:90:4e:0d:29:07:db:93:72:40:2d:f1:1d:ed:b7:0a:b6:1a:
6a:cd:db:a8:27:7a:8d:07:e6:8b:10:12:0e:8f:46:ae:9e:07:
b7:3c:ba:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:27:54 2025 by rpki-client