Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/1f3117-f2a1-4322-b63d-f7edb2688652/1/t4CzueCWIhYp_kfhAqxSLaA5ecQ.mft
File: t4CzueCWIhYp_kfhAqxSLaA5ecQ.mft (raw, json)
Hash identifier: iPRgyNoDwndb4KQo33aqGIDcU8GCuTsV1vAh8iFn/Ng=
Subject key identifier: 2B:BB:56:17:84:97:3E:F4:3F:18:FA:F6:DA:56:57:1F:29:D5:AE:BB
Authority key identifier: B7:80:B3:B9:E0:96:22:16:29:FE:47:E1:02:AC:52:2D:A0:39:79:C4
Certificate issuer: /CN=b780b3b9e096221629fe47e102ac522da03979c4
Certificate serial: 019A52D0F695AB081766FEC0784D692868C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t4CzueCWIhYp_kfhAqxSLaA5ecQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/1f3117-f2a1-4322-b63d-f7edb2688652/1/t4CzueCWIhYp_kfhAqxSLaA5ecQ.mft
Manifest number: 170D
Signing time: Wed 05 Nov 2025 07:00:17 +0000
Manifest this update: Wed 05 Nov 2025 07:00:17 +0000
Manifest next update: Thu 06 Nov 2025 07:00:17 +0000
Files and hashes: 1: BHkKvb2qZLeD_4QIPrmVYJe4E6w.roa (hash: 4HUs5FjtfJoQCq5RfZkLp2netiRG+jQlol4wXGJfij4=)
2: t4CzueCWIhYp_kfhAqxSLaA5ecQ.crl (hash: b+fs4sQ9X0twAwpBIHeIuu7yhmexo5NcIKw+VXPn4gk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/1f3117-f2a1-4322-b63d-f7edb2688652/1/t4CzueCWIhYp_kfhAqxSLaA5ecQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/1f3117-f2a1-4322-b63d-f7edb2688652/1/t4CzueCWIhYp_kfhAqxSLaA5ecQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/t4CzueCWIhYp_kfhAqxSLaA5ecQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:d0:f6:95:ab:08:17:66:fe:c0:78:4d:69:28:68:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b780b3b9e096221629fe47e102ac522da03979c4
Validity
Not Before: Nov 5 07:00:17 2025 GMT
Not After : Nov 6 07:00:17 2025 GMT
Subject: CN=2bbb561784973ef43f18faf6da56571f29d5aebb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:da:4b:e4:7e:e5:94:01:e6:45:09:c0:24:57:
ce:c1:8f:fc:24:8a:f9:02:5e:4f:7b:36:f4:d7:12:
79:16:fb:b0:7b:ea:aa:84:de:c1:1b:1a:64:5b:ee:
59:dc:14:df:92:b4:6e:5b:7f:28:65:0a:b2:ec:c9:
34:fc:11:02:6d:68:a1:16:2b:d6:98:d1:ab:ad:b4:
cc:e1:6a:0c:e9:93:59:0c:ce:08:08:a5:3c:13:13:
72:ef:a0:55:d4:6f:3f:45:db:84:5d:f4:a7:86:9a:
e6:2a:61:8a:a8:53:26:27:89:c2:d7:57:30:0e:99:
93:88:6d:d6:fe:39:02:9d:4d:48:30:28:a4:0f:32:
ef:7e:9c:69:a2:8f:14:0b:d0:79:6a:6b:94:74:c7:
c1:e2:f0:3f:a3:33:f0:11:40:89:3b:88:e8:ce:6f:
01:43:b1:3a:6c:38:ca:0b:78:e5:7a:94:7c:fe:2b:
e3:c1:1a:91:21:67:95:5a:8a:43:5e:19:29:5b:56:
10:61:fa:e2:89:67:6e:d7:a3:79:df:14:35:ee:31:
9d:32:84:0f:fc:46:ba:8a:21:21:da:a2:ec:dd:fb:
6a:6f:c8:b5:9c:2b:1a:c1:d0:a9:5c:63:0a:c5:8c:
8a:bb:a1:12:ce:7b:e2:47:4c:6f:29:8c:9c:d3:32:
4f:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:BB:56:17:84:97:3E:F4:3F:18:FA:F6:DA:56:57:1F:29:D5:AE:BB
X509v3 Authority Key Identifier:
keyid:B7:80:B3:B9:E0:96:22:16:29:FE:47:E1:02:AC:52:2D:A0:39:79:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t4CzueCWIhYp_kfhAqxSLaA5ecQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/1f3117-f2a1-4322-b63d-f7edb2688652/1/t4CzueCWIhYp_kfhAqxSLaA5ecQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/1f3117-f2a1-4322-b63d-f7edb2688652/1/t4CzueCWIhYp_kfhAqxSLaA5ecQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:aa:63:c5:cd:a2:19:f0:3f:40:8a:ce:45:f2:11:fc:4c:ab:
72:f5:62:18:f0:30:18:94:71:d5:52:98:a4:05:5a:ba:0d:fb:
df:b9:56:a9:f4:15:7b:3e:73:4e:59:2c:29:74:2c:91:eb:5d:
b0:c5:30:b6:f5:d5:5d:48:c1:fa:40:e5:c1:13:24:3f:49:a9:
83:c6:18:ff:c7:88:3a:2b:a7:8a:bc:29:c0:ec:b3:81:1f:88:
43:67:25:cf:2d:52:40:b0:9f:75:68:da:5f:de:2d:cf:a9:ac:
0b:78:ed:23:cf:04:60:16:ed:46:a5:6c:68:f9:75:17:db:dc:
fd:8b:ae:57:c2:f2:f3:94:6f:02:b9:c5:c8:05:f2:7b:76:0b:
30:50:72:20:06:de:e9:9d:ea:03:2a:4f:e8:85:f6:29:e9:16:
dc:b7:52:e0:f8:5b:f6:89:3e:50:dd:5d:b1:d8:42:fb:78:32:
ae:fd:74:56:2f:2c:64:f5:ca:00:99:39:f4:09:d7:75:bf:9f:
10:f5:90:72:32:f1:06:2a:e9:c2:ed:c3:c7:39:5d:90:92:c5:
c8:6a:02:a2:4c:a9:fa:c6:d0:12:01:cd:7b:d6:ba:2c:c5:a9:
ae:9c:50:1a:8e:dc:e1:df:80:16:96:78:05:67:79:57:6b:06:
64:61:bf:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 08:41:30 2025 by rpki-client