Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/d95b2c-1e02-4e4e-8438-bbcae0df1f2f/1/tgtXTwPZiBVfRLossHvH37RXzw8.mft
File: tgtXTwPZiBVfRLossHvH37RXzw8.mft (raw, json)
Hash identifier: FYKlWQD2BS2hnPtJlVaYd9lgrnNwSOvsxzU3fugxeEs=
Subject key identifier: B0:56:38:AB:C1:CB:D6:3B:8D:0E:09:5B:52:0E:67:DD:5B:F1:C4:46
Authority key identifier: B6:0B:57:4F:03:D9:88:15:5F:44:BA:2C:B0:7B:C7:DF:B4:57:CF:0F
Certificate issuer: /CN=b60b574f03d988155f44ba2cb07bc7dfb457cf0f
Certificate serial: 019A4EF45FBFBA26F088F7B8ED70F24FAE85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tgtXTwPZiBVfRLossHvH37RXzw8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/d95b2c-1e02-4e4e-8438-bbcae0df1f2f/1/tgtXTwPZiBVfRLossHvH37RXzw8.mft
Manifest number: 169F
Signing time: Tue 04 Nov 2025 13:00:29 +0000
Manifest this update: Tue 04 Nov 2025 13:00:29 +0000
Manifest next update: Wed 05 Nov 2025 13:00:29 +0000
Files and hashes: 1: BeOIJLd8_MIXUGufXTnw_YPsJgs.roa (hash: UFekJjmZxy4vjH3dPZliRBeAZT4NRRq/0IMLKsXu0f8=)
2: tgtXTwPZiBVfRLossHvH37RXzw8.crl (hash: 08QcQXVY7E5WZJommshl8zYSOUoVe6srHdSJbsdu+NM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/d95b2c-1e02-4e4e-8438-bbcae0df1f2f/1/tgtXTwPZiBVfRLossHvH37RXzw8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/d95b2c-1e02-4e4e-8438-bbcae0df1f2f/1/tgtXTwPZiBVfRLossHvH37RXzw8.mft
rsync://rpki.ripe.net/repository/DEFAULT/tgtXTwPZiBVfRLossHvH37RXzw8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:5f:bf:ba:26:f0:88:f7:b8:ed:70:f2:4f:ae:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b60b574f03d988155f44ba2cb07bc7dfb457cf0f
Validity
Not Before: Nov 4 13:00:29 2025 GMT
Not After : Nov 5 13:00:29 2025 GMT
Subject: CN=b05638abc1cbd63b8d0e095b520e67dd5bf1c446
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:9b:9c:93:eb:72:9c:97:dc:3e:54:93:86:a0:
8b:5e:85:72:7e:91:77:0d:71:b7:98:cb:8e:0c:4c:
6b:56:15:b6:d2:71:02:a1:db:54:ae:b5:04:b2:52:
c5:11:b4:e3:0e:70:72:64:28:0a:2f:db:07:67:45:
0d:dd:11:79:88:7f:50:5a:9f:c4:ad:31:94:5d:a6:
10:22:75:23:cc:1d:13:d8:e8:be:5b:a2:87:e3:3a:
63:9f:22:03:95:bf:c0:1b:15:5e:7e:5e:ad:22:62:
49:41:42:d2:af:f4:5b:ff:00:32:2e:8b:20:ef:60:
70:3d:ea:53:93:83:07:d4:e3:62:4d:b6:16:43:76:
06:4e:8a:a2:91:33:d3:b0:f3:d5:20:41:0a:0a:43:
7c:e3:76:da:a6:b0:f0:15:4b:c1:9d:0b:90:66:c6:
ce:0a:25:de:3f:b6:00:fd:3e:f1:7a:35:74:c6:47:
69:02:a0:59:ef:f1:f9:29:58:17:12:5a:0c:db:56:
51:af:08:55:14:31:40:bb:dd:5a:3c:9f:1b:6d:3c:
59:8d:a9:6a:46:c3:8f:2a:c3:42:2a:5f:e9:5a:f3:
98:92:ac:18:fb:56:68:a4:5f:a4:de:9c:28:20:64:
29:be:39:04:45:59:61:a7:93:55:8a:4d:45:6c:21:
83:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:56:38:AB:C1:CB:D6:3B:8D:0E:09:5B:52:0E:67:DD:5B:F1:C4:46
X509v3 Authority Key Identifier:
keyid:B6:0B:57:4F:03:D9:88:15:5F:44:BA:2C:B0:7B:C7:DF:B4:57:CF:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tgtXTwPZiBVfRLossHvH37RXzw8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/d95b2c-1e02-4e4e-8438-bbcae0df1f2f/1/tgtXTwPZiBVfRLossHvH37RXzw8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/d95b2c-1e02-4e4e-8438-bbcae0df1f2f/1/tgtXTwPZiBVfRLossHvH37RXzw8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:ca:f3:f5:60:6d:2a:32:df:46:82:bf:2c:2f:ff:d5:eb:05:
7d:90:b2:1d:1a:7f:79:d7:f0:f0:87:4d:76:47:29:39:7a:35:
7a:83:7c:e6:d5:8c:4e:60:97:22:bc:68:f0:2d:e8:37:d7:a6:
07:91:f3:93:14:21:5a:d8:b5:e7:36:c9:0c:e3:77:92:65:70:
af:f7:b4:5f:4c:bb:67:60:1a:60:02:00:ac:ed:24:7f:0f:0a:
8a:0e:85:60:98:55:d6:99:cb:d0:1b:35:52:8e:72:77:00:15:
72:69:28:18:70:8f:7b:24:8d:7f:0f:21:19:38:ce:16:52:56:
0f:77:53:f8:aa:d9:fe:fe:42:b1:b6:05:50:12:07:bf:4c:28:
a9:00:a8:12:0f:1c:c5:ec:96:d6:03:c7:fe:e8:e1:19:11:b5:
48:95:d9:0c:7c:02:2c:56:ab:bc:e8:78:9d:25:82:5b:cd:f1:
ba:bb:2b:22:90:d2:2d:85:03:40:a1:7e:e5:5b:4b:88:dd:91:
ab:96:78:e4:3d:b9:8d:d6:d2:2d:b1:d9:10:88:74:a5:57:b0:
1e:9b:29:cf:35:5f:30:7b:f8:19:3b:66:16:fb:95:f9:01:e0:
b3:fb:8b:8a:d3:50:6b:37:98:21:dd:a0:85:3e:65:54:e7:59:
84:99:fb:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 15:28:59 2025 by rpki-client