Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/b011d3-bdba-45cd-a8ac-e0be89c4f169/1/tqFlTa6WxTJXjOHfHruCIdu2gUU.mft
File: tqFlTa6WxTJXjOHfHruCIdu2gUU.mft (raw, json)
Hash identifier: cAgBKWpAQrbfJCUc2n7RrSfGnBiomfLmL6oOuM8ow0o=
Subject key identifier: 9B:C1:3E:B4:6E:B4:3F:79:6D:F5:D6:1F:5E:09:29:6C:81:E6:18:98
Authority key identifier: B6:A1:65:4D:AE:96:C5:32:57:8C:E1:DF:1E:BB:82:21:DB:B6:81:45
Certificate issuer: /CN=b6a1654dae96c532578ce1df1ebb8221dbb68145
Certificate serial: 019A4E4FC8BFC56CB38AE6BCC6C2DFF6AD27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tqFlTa6WxTJXjOHfHruCIdu2gUU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/b011d3-bdba-45cd-a8ac-e0be89c4f169/1/tqFlTa6WxTJXjOHfHruCIdu2gUU.mft
Manifest number: 170D
Signing time: Tue 04 Nov 2025 10:00:42 +0000
Manifest this update: Tue 04 Nov 2025 10:00:42 +0000
Manifest next update: Wed 05 Nov 2025 10:00:42 +0000
Files and hashes: 1: BDcEAKntpIejrVcoW-jQtFYDt4A.roa (hash: 9rJ6V8MVwpwUlBMeKLrrT4d005j4mZf3dlxw+gQ0CuE=)
2: n9wbgcYA2gFozQl-awLgvubO0Jw.roa (hash: I7/eXt/2fdY6ma/4TQO3Dibom5bD15oMz/+pqihDXpI=)
3: tqFlTa6WxTJXjOHfHruCIdu2gUU.crl (hash: MMQZfiAVG4iCW5HfHpOVq6bmu/gjtWSkVcGlJOTAIpE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/b011d3-bdba-45cd-a8ac-e0be89c4f169/1/tqFlTa6WxTJXjOHfHruCIdu2gUU.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/b011d3-bdba-45cd-a8ac-e0be89c4f169/1/tqFlTa6WxTJXjOHfHruCIdu2gUU.mft
rsync://rpki.ripe.net/repository/DEFAULT/tqFlTa6WxTJXjOHfHruCIdu2gUU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:4f:c8:bf:c5:6c:b3:8a:e6:bc:c6:c2:df:f6:ad:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b6a1654dae96c532578ce1df1ebb8221dbb68145
Validity
Not Before: Nov 4 10:00:42 2025 GMT
Not After : Nov 5 10:00:42 2025 GMT
Subject: CN=9bc13eb46eb43f796df5d61f5e09296c81e61898
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:f7:0b:cb:7d:e7:10:87:92:66:e6:dc:50:8e:
53:a3:76:a1:54:20:eb:93:5f:2d:ab:ba:b7:45:02:
05:6a:42:cc:b1:cc:a8:53:1c:1a:8e:0a:14:c1:c7:
35:02:4e:93:eb:b2:54:07:dc:76:db:bc:8e:94:6a:
42:2b:52:89:71:c2:5a:52:c3:cc:76:98:7d:3c:d2:
3a:f5:f8:77:fc:e7:27:ea:33:8b:94:fb:2a:12:ac:
d6:e4:d9:3e:e7:79:9d:77:17:62:8c:2e:d4:eb:6e:
83:b0:6b:c1:b8:bb:30:41:e2:0c:7e:13:60:dd:fd:
77:97:c9:ad:02:6f:db:11:e4:84:67:31:bb:02:29:
8c:68:bc:db:4c:3e:d3:eb:bc:8c:ce:65:18:f0:ae:
06:a7:6a:5b:15:ce:16:7c:9a:69:39:4b:27:7e:b7:
35:c9:13:2a:56:1e:45:9a:24:5e:bf:49:ea:01:8d:
c4:4b:d0:05:c0:41:af:a6:e5:6f:60:97:86:46:e7:
22:94:bd:18:f0:73:76:8b:fd:a1:7b:80:ec:e3:81:
29:11:b3:01:b2:6c:67:24:f5:9d:0a:3b:09:68:46:
21:a2:fc:f6:4c:86:53:13:9e:ea:34:69:0a:b0:31:
06:96:51:9f:9e:7b:70:9e:c1:69:bb:1c:cc:90:1d:
b4:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:C1:3E:B4:6E:B4:3F:79:6D:F5:D6:1F:5E:09:29:6C:81:E6:18:98
X509v3 Authority Key Identifier:
keyid:B6:A1:65:4D:AE:96:C5:32:57:8C:E1:DF:1E:BB:82:21:DB:B6:81:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tqFlTa6WxTJXjOHfHruCIdu2gUU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/b011d3-bdba-45cd-a8ac-e0be89c4f169/1/tqFlTa6WxTJXjOHfHruCIdu2gUU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/b011d3-bdba-45cd-a8ac-e0be89c4f169/1/tqFlTa6WxTJXjOHfHruCIdu2gUU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:49:dd:30:df:de:c9:1a:2a:37:67:37:8c:c9:38:b4:54:71:
46:80:d3:d4:a8:63:cf:9d:d6:24:17:df:a2:6c:e1:f0:74:68:
99:80:63:98:b7:a6:4d:53:15:dc:97:b0:80:7b:9e:b0:8b:fd:
59:55:8e:5d:3e:38:e7:f2:0b:23:e1:50:43:1f:01:f9:8a:48:
44:c3:fe:68:58:d7:04:27:23:57:5e:63:11:56:03:45:44:f7:
d3:b1:d2:9c:6e:44:4f:31:e4:87:c0:1d:c8:3f:c4:1b:8a:f7:
44:66:6c:25:da:ba:20:1b:d1:d0:83:bf:dd:54:de:d3:92:84:
42:aa:0c:63:7a:a8:2e:44:7f:b1:c7:83:7e:87:ea:ed:f8:48:
93:ea:6f:e4:f1:0b:18:e2:3f:d2:74:49:62:2a:75:7f:a9:c0:
b5:a2:a0:68:20:90:7a:80:42:ee:d4:75:16:59:ec:b9:aa:8a:
82:a4:f3:50:45:15:45:5f:76:e9:c4:41:c6:56:c0:07:ab:91:
15:32:72:40:93:d6:57:e8:38:cd:bf:cb:03:81:f5:37:26:1d:
90:46:9d:ff:88:32:1f:9c:93:ee:7e:d2:08:69:2d:19:9f:22:
a9:cd:88:14:10:3f:02:ec:87:d9:8d:54:14:7f:81:8a:21:89:
d9:8d:70:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:46:41 2025 by rpki-client