Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/d2bb68-9bc7-4791-8528-0c495477ca10/1/tUJ-pJ-XLRnFY5OmiefL65kNXXo.mft
File: tUJ-pJ-XLRnFY5OmiefL65kNXXo.mft (raw, json)
Hash identifier: qMPuqWB4sc5Z3IBpTeDXevviFOoJkkXPHMPJaR1A6kE=
Subject key identifier: 55:81:73:A9:01:3C:6F:1A:F7:B4:0E:A6:5F:AF:78:02:D5:40:E0:2C
Authority key identifier: B5:42:7E:A4:9F:97:2D:19:C5:63:93:A6:89:E7:CB:EB:99:0D:5D:7A
Certificate issuer: /CN=b5427ea49f972d19c56393a689e7cbeb990d5d7a
Certificate serial: 019A4E869ED3074DF94DC6132854FE400EE8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tUJ-pJ-XLRnFY5OmiefL65kNXXo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/d2bb68-9bc7-4791-8528-0c495477ca10/1/tUJ-pJ-XLRnFY5OmiefL65kNXXo.mft
Manifest number: 1711
Signing time: Tue 04 Nov 2025 11:00:36 +0000
Manifest this update: Tue 04 Nov 2025 11:00:36 +0000
Manifest next update: Wed 05 Nov 2025 11:00:36 +0000
Files and hashes: 1: AwMEJfGD-_TNRZ72c5x-9dIRsd4.roa (hash: 6UVDM1JqxHmjbnJ4pDDIOsD2r8EQyy1bF6KNp9ocKGg=)
2: VJtvXDXYtAcS9C4LIbmlaqXh4Co.roa (hash: THcKGdc9aA5a+OjJYNnV65xxowh1d3kb8KQrHqiCPq4=)
3: fUXrv6-AqG-Sdl9xICl4cQAU7yA.roa (hash: jv2v4x0octz1D9witRg3iiWbwIrgi4wxjje3xLewI+U=)
4: tUJ-pJ-XLRnFY5OmiefL65kNXXo.crl (hash: C1xrpgHADCadEUisNazm/9oLaSPA7NU1ARD+OYmdSRM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/d2bb68-9bc7-4791-8528-0c495477ca10/1/tUJ-pJ-XLRnFY5OmiefL65kNXXo.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/d2bb68-9bc7-4791-8528-0c495477ca10/1/tUJ-pJ-XLRnFY5OmiefL65kNXXo.mft
rsync://rpki.ripe.net/repository/DEFAULT/tUJ-pJ-XLRnFY5OmiefL65kNXXo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:86:9e:d3:07:4d:f9:4d:c6:13:28:54:fe:40:0e:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5427ea49f972d19c56393a689e7cbeb990d5d7a
Validity
Not Before: Nov 4 11:00:36 2025 GMT
Not After : Nov 5 11:00:36 2025 GMT
Subject: CN=558173a9013c6f1af7b40ea65faf7802d540e02c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:be:7f:fc:1d:29:8e:22:97:0a:09:4e:46:38:
cc:58:33:e2:d5:88:e4:56:68:34:df:2a:e6:d8:95:
55:e8:ce:1f:59:6a:91:61:b1:d3:5d:bc:3f:61:72:
14:93:0d:17:52:2f:b0:65:93:98:f0:8e:f3:6d:8a:
3e:85:57:16:6a:de:63:4c:12:58:92:98:5a:20:2e:
47:74:e6:8a:d7:1d:28:5e:26:b9:90:47:4a:70:0a:
02:4f:22:9a:ee:a9:4a:19:fc:b5:d3:31:8f:73:ba:
a3:82:31:a0:96:fe:74:6a:3c:7e:76:a0:d4:c0:68:
88:60:90:ba:a6:aa:20:6e:ad:15:73:f4:6f:cf:83:
30:70:b0:97:0e:45:45:6a:f8:c9:17:9f:7d:dd:f9:
ea:18:01:6c:3b:45:cd:c5:43:43:61:2e:e6:aa:d1:
42:ff:77:67:05:b0:f2:fc:06:88:db:e6:f1:80:89:
87:0f:dd:d3:4d:f3:63:d1:97:56:d9:52:50:73:42:
00:ef:47:72:7f:17:8f:17:62:42:3c:3b:19:dd:27:
9f:41:ad:11:4e:58:e7:9e:17:78:87:41:50:e9:22:
8a:79:ab:a1:d9:9d:4f:62:21:f6:38:fa:a4:d5:6e:
b8:6a:71:e6:d0:e7:d9:fc:8d:4b:9c:6e:c2:98:f8:
be:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:81:73:A9:01:3C:6F:1A:F7:B4:0E:A6:5F:AF:78:02:D5:40:E0:2C
X509v3 Authority Key Identifier:
keyid:B5:42:7E:A4:9F:97:2D:19:C5:63:93:A6:89:E7:CB:EB:99:0D:5D:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tUJ-pJ-XLRnFY5OmiefL65kNXXo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/d2bb68-9bc7-4791-8528-0c495477ca10/1/tUJ-pJ-XLRnFY5OmiefL65kNXXo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/d2bb68-9bc7-4791-8528-0c495477ca10/1/tUJ-pJ-XLRnFY5OmiefL65kNXXo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:ff:21:80:31:87:e5:cb:6f:6c:f0:7d:4a:0e:69:7e:69:f6:
5b:fc:1e:e8:eb:12:9c:93:22:bc:5d:31:df:c1:8e:0c:74:5f:
25:54:8b:bf:1a:0e:c0:66:62:80:c5:01:a8:72:cb:61:25:0d:
e4:2a:0a:ff:88:21:90:8b:b0:b3:d9:97:85:7e:4b:44:2e:bf:
ab:69:8c:65:b0:fe:71:70:5c:f6:cc:bc:a8:58:41:e8:bd:c5:
be:d8:93:17:54:9c:a9:de:f7:b5:1d:a7:f9:3f:be:5e:58:de:
2e:e2:a2:8f:1e:fd:12:a2:77:f0:c7:2f:03:2a:56:90:97:c7:
cb:26:44:1f:1a:2d:d7:ec:21:09:98:26:85:9b:00:31:13:33:
89:ce:39:6d:17:84:7b:d6:db:16:f6:86:87:a3:74:ed:16:5c:
96:96:43:76:f7:4a:2f:3c:bf:68:ba:11:3d:6b:2c:99:5f:44:
7c:b7:b7:31:4c:0e:54:71:b4:ce:4b:1d:88:d7:68:18:55:93:
62:5f:34:59:9f:3b:c9:13:12:57:1d:c3:4c:1f:de:41:9e:14:
ac:5e:67:88:3f:c3:8c:be:cc:da:be:f8:34:b5:cd:0b:3b:3e:
27:ce:ec:35:de:a1:ef:e8:2b:ad:ad:5f:80:b7:9b:08:1d:99:
39:07:3b:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:00:28 2025 by rpki-client