Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/e4d20f-6dc8-497d-a8d6-9dddd6802088/1/tjowlEOcrA9VVwEobNVDc7zmy1A.mft
File: tjowlEOcrA9VVwEobNVDc7zmy1A.mft (raw, json)
Hash identifier: tDY0jsTR0Ete5Ki6LjSrO8lq9L61e6Y7ONqzQrstzJ0=
Subject key identifier: E2:9A:97:3B:4F:00:96:4B:FF:12:A3:0B:63:50:5E:C0:9F:E2:B3:47
Authority key identifier: B6:3A:30:94:43:9C:AC:0F:55:57:01:28:6C:D5:43:73:BC:E6:CB:50
Certificate issuer: /CN=b63a3094439cac0f555701286cd54373bce6cb50
Certificate serial: 019A541AB05E7AECB7830F8FCCFCF03308AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tjowlEOcrA9VVwEobNVDc7zmy1A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/e4d20f-6dc8-497d-a8d6-9dddd6802088/1/tjowlEOcrA9VVwEobNVDc7zmy1A.mft
Manifest number: 04B3
Signing time: Wed 05 Nov 2025 13:00:26 +0000
Manifest this update: Wed 05 Nov 2025 13:00:26 +0000
Manifest next update: Thu 06 Nov 2025 13:00:26 +0000
Files and hashes: 1: 3NvNrWEVmChu4DMSl71yUBOUL1E.roa (hash: GasLqu+d7ICCgXWrZURm0ppqSwFCpgX0/TSR8hCVtjo=)
2: 7PrThjlXTdWomtXWwr_eOJDlAFY.roa (hash: 2SgrElvVXtH7x+BnWs8QSmeq0QSew6wcOvgzJlh8YyA=)
3: tjowlEOcrA9VVwEobNVDc7zmy1A.crl (hash: dFWv/YxMrFo9BC3iNkFE8s52rj6ZhlE6xqoxRPxv8hk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/e4d20f-6dc8-497d-a8d6-9dddd6802088/1/tjowlEOcrA9VVwEobNVDc7zmy1A.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/e4d20f-6dc8-497d-a8d6-9dddd6802088/1/tjowlEOcrA9VVwEobNVDc7zmy1A.mft
rsync://rpki.ripe.net/repository/DEFAULT/tjowlEOcrA9VVwEobNVDc7zmy1A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:54:1a:b0:5e:7a:ec:b7:83:0f:8f:cc:fc:f0:33:08:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b63a3094439cac0f555701286cd54373bce6cb50
Validity
Not Before: Nov 5 13:00:26 2025 GMT
Not After : Nov 6 13:00:26 2025 GMT
Subject: CN=e29a973b4f00964bff12a30b63505ec09fe2b347
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:6c:50:7f:5a:c9:e1:49:69:87:86:7e:93:81:
16:96:0d:a7:f8:f4:69:23:bb:3e:02:f1:5d:2b:5c:
ad:37:83:e0:38:76:f0:0d:2f:e7:2a:ed:ba:49:c5:
4a:5c:d2:01:99:da:02:9d:d6:86:b4:f1:04:3d:08:
58:08:a9:7f:0b:f9:0e:be:6c:cd:50:5d:8b:30:da:
60:ae:70:5f:3a:77:f2:89:54:d9:2d:bf:d6:ef:f7:
b6:af:31:a7:9c:e8:2f:3c:ab:33:ce:18:ce:a2:ff:
2a:77:00:47:f3:43:2a:5d:22:81:86:1f:a9:b8:f9:
c4:c9:4b:fb:5c:ea:80:37:3e:e0:0b:8d:33:d0:79:
af:2a:56:84:ec:9a:a5:35:b6:89:d8:13:25:39:4e:
9e:5e:72:e9:4a:09:09:31:2d:63:e4:6d:78:8b:a9:
05:cd:dd:7e:af:77:e7:d8:29:5f:74:e0:29:5d:40:
03:6e:2d:20:b8:b8:f7:4b:62:1a:54:02:9f:90:09:
ff:b8:cb:fa:37:14:1b:99:b6:a4:9b:43:a1:13:ec:
f9:77:ca:e9:81:88:08:a9:57:3a:53:fc:96:a1:87:
e4:e6:3d:dc:64:cf:20:b5:6b:cf:91:54:cf:a7:60:
2e:2d:3a:61:d2:33:52:03:62:d6:70:9d:da:11:07:
8a:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:9A:97:3B:4F:00:96:4B:FF:12:A3:0B:63:50:5E:C0:9F:E2:B3:47
X509v3 Authority Key Identifier:
keyid:B6:3A:30:94:43:9C:AC:0F:55:57:01:28:6C:D5:43:73:BC:E6:CB:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tjowlEOcrA9VVwEobNVDc7zmy1A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/e4d20f-6dc8-497d-a8d6-9dddd6802088/1/tjowlEOcrA9VVwEobNVDc7zmy1A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/e4d20f-6dc8-497d-a8d6-9dddd6802088/1/tjowlEOcrA9VVwEobNVDc7zmy1A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:1e:e8:6f:d5:c1:9e:03:32:db:0a:df:92:1f:3c:eb:74:ce:
3d:5a:7a:16:f1:57:5a:77:6c:a0:d8:b9:9c:59:0c:85:f9:92:
45:57:1e:be:d4:17:73:e6:a7:da:14:70:d8:a1:cb:f7:ca:0c:
f4:73:71:a3:52:57:ac:f9:88:27:58:8d:52:5f:b0:f2:b4:1c:
4d:7f:50:dc:32:c2:1a:e3:77:ed:51:0d:ad:af:d2:f7:bd:73:
d3:4c:5c:38:6b:d5:af:e2:76:57:0f:c2:9e:37:45:bb:2f:1a:
ae:41:14:ba:9a:8b:b5:2d:7c:b2:3f:c7:64:d2:a1:a0:b9:d8:
f7:52:57:2c:d4:9f:87:e4:0f:d7:cf:0e:8e:c1:e0:45:7b:d7:
d6:2b:22:23:7c:87:67:21:62:8e:8f:4a:54:3b:ac:d9:ef:cc:
6a:fb:23:fe:e7:4d:49:6e:89:60:b4:63:19:6c:87:1b:62:94:
63:fe:fc:de:27:7d:e5:9f:a1:3c:1a:1d:8b:c7:a6:56:f0:3d:
ef:2d:60:a6:0d:08:69:ab:a1:1b:f0:e0:42:88:a2:68:a0:2f:
7e:13:d4:6a:d2:9b:c3:a1:e1:fa:2d:f4:95:e6:e9:72:56:79:
36:08:cd:64:db:2b:28:7d:6c:c9:50:a4:e3:a4:14:ed:4e:24:
f0:f3:b4:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 16:17:17 2025 by rpki-client