Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/dc3491-c699-42b5-90a7-cc7e9ab09fb8/1/tcKI6WPg6fgtHGp_2E7FqjQKuo8.mft
File: tcKI6WPg6fgtHGp_2E7FqjQKuo8.mft (raw, json)
Hash identifier: 0NLioA2C2XgtGQGq7uDaqE2ftgMe/09bN2WHVvK62Jk=
Subject key identifier: 54:77:5B:F7:82:63:61:A2:7E:46:A0:C5:8E:CC:A6:65:1B:6E:1B:A4
Authority key identifier: B5:C2:88:E9:63:E0:E9:F8:2D:1C:6A:7F:D8:4E:C5:AA:34:0A:BA:8F
Certificate issuer: /CN=b5c288e963e0e9f82d1c6a7fd84ec5aa340aba8f
Certificate serial: 019A533F7BAD84645258C5499BA4A7E838AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tcKI6WPg6fgtHGp_2E7FqjQKuo8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/dc3491-c699-42b5-90a7-cc7e9ab09fb8/1/tcKI6WPg6fgtHGp_2E7FqjQKuo8.mft
Manifest number: 03AD
Signing time: Wed 05 Nov 2025 09:01:00 +0000
Manifest this update: Wed 05 Nov 2025 09:01:00 +0000
Manifest next update: Thu 06 Nov 2025 09:01:00 +0000
Files and hashes: 1: ZmF3lPkl3dsARIFpHN7vz5QHbFs.roa (hash: ukfiioKav9S2J4a6qVoPDRL9RQGgYfvHu1FXDGi1Nzg=)
2: tcKI6WPg6fgtHGp_2E7FqjQKuo8.crl (hash: LrRDunbwqqMHWNMl5mKc1qbC82WcLg0hi5Zy7Gv16NQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/dc3491-c699-42b5-90a7-cc7e9ab09fb8/1/tcKI6WPg6fgtHGp_2E7FqjQKuo8.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/dc3491-c699-42b5-90a7-cc7e9ab09fb8/1/tcKI6WPg6fgtHGp_2E7FqjQKuo8.mft
rsync://rpki.ripe.net/repository/DEFAULT/tcKI6WPg6fgtHGp_2E7FqjQKuo8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:53:3f:7b:ad:84:64:52:58:c5:49:9b:a4:a7:e8:38:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5c288e963e0e9f82d1c6a7fd84ec5aa340aba8f
Validity
Not Before: Nov 5 09:01:00 2025 GMT
Not After : Nov 6 09:01:00 2025 GMT
Subject: CN=54775bf7826361a27e46a0c58ecca6651b6e1ba4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:a5:1a:81:9d:51:bf:a9:2c:3b:73:9b:de:3a:
a6:f7:7f:74:0b:ce:bb:59:90:75:68:92:c1:42:c3:
d4:80:c8:e8:68:12:4c:e1:4a:98:45:0b:e6:b1:83:
5e:09:15:3e:28:78:d3:fa:f2:d0:ea:6d:59:bc:a4:
70:b8:f2:a2:62:2b:fd:50:2c:53:c1:b2:cf:2f:ee:
4c:97:b7:ee:7b:ec:02:c4:72:0a:ef:a2:bd:f4:00:
49:2d:7b:6e:f1:02:34:f1:58:ed:47:fa:5e:4e:44:
4c:32:db:5d:6b:e4:79:e7:e1:70:db:97:c9:c2:a6:
b2:20:12:9f:a8:a6:ce:11:01:b9:8f:e4:5e:42:3f:
40:39:84:9d:35:4b:a6:2b:6b:ca:03:60:e7:86:f2:
6d:31:08:aa:f4:47:5e:be:99:a3:49:dd:56:6a:2e:
fb:ec:82:03:61:d7:79:34:8b:df:9d:95:45:a9:51:
b2:71:8a:0e:f2:0c:8c:b6:2d:2a:34:7a:c8:18:29:
a7:a6:ed:e5:57:b3:06:a7:fb:2f:00:b5:a3:79:32:
d7:bc:ac:7d:84:a1:6b:5d:f8:ff:9e:07:7d:0b:b4:
fa:f8:c1:06:a0:4c:86:69:72:1d:e3:53:da:6d:da:
16:cb:5d:35:7d:a7:22:34:dc:a1:14:a7:2a:d1:5c:
af:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:77:5B:F7:82:63:61:A2:7E:46:A0:C5:8E:CC:A6:65:1B:6E:1B:A4
X509v3 Authority Key Identifier:
keyid:B5:C2:88:E9:63:E0:E9:F8:2D:1C:6A:7F:D8:4E:C5:AA:34:0A:BA:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tcKI6WPg6fgtHGp_2E7FqjQKuo8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/dc3491-c699-42b5-90a7-cc7e9ab09fb8/1/tcKI6WPg6fgtHGp_2E7FqjQKuo8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/dc3491-c699-42b5-90a7-cc7e9ab09fb8/1/tcKI6WPg6fgtHGp_2E7FqjQKuo8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:88:74:ed:d2:31:a2:e6:49:26:dd:77:0d:0b:c5:e1:c8:15:
a0:68:ce:fe:d8:5d:e6:8e:a4:f2:69:3b:bb:e1:80:42:59:c2:
d6:ba:4f:e3:04:bc:b1:61:ff:03:f5:0a:3a:7f:fa:8e:85:c2:
63:1d:64:01:b9:23:41:69:4f:b9:a2:d5:ae:9c:ab:27:29:2f:
cc:bf:15:7e:8c:4a:f4:5d:d3:49:78:ad:5b:e7:ca:51:21:85:
48:3c:36:a9:79:17:e1:a4:a4:9d:24:31:56:1f:9a:98:04:c7:
f1:a0:6a:ac:7c:d3:db:1b:bb:8f:bd:59:6f:46:e0:b3:61:64:
26:d4:8b:f5:bd:87:7e:24:bf:2d:ed:f3:3e:79:8f:83:72:bf:
59:9e:9d:5b:c4:a0:df:0a:28:59:26:72:d6:ea:f2:db:7d:d5:
07:e0:19:55:8d:68:6e:35:84:80:da:b4:cd:58:c0:bf:44:f3:
0e:60:d7:a5:42:e2:eb:cf:d1:db:41:8b:f9:a0:c0:48:43:48:
29:9a:23:84:7b:ff:c0:bd:73:5e:5d:99:10:e9:34:78:bd:0f:
36:4e:b3:17:dc:64:a7:ad:b7:8c:81:4f:07:01:6a:4b:f5:80:
4c:13:ff:04:20:96:d7:ca:60:13:87:84:bf:95:bc:1e:30:da:
64:6c:08:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 11:22:14 2025 by rpki-client