Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/91b31e-0711-43fa-bc29-932b4ac0aafd/1/tTVrOmd4voxhFK2H2q_NB8pV2AA.mft
File: tTVrOmd4voxhFK2H2q_NB8pV2AA.mft (raw, json)
Hash identifier: 9nSeY+SW6CkaD/tr4jGHAmAh0Fnfstivq3mHAASgYt4=
Subject key identifier: BA:E9:53:0F:B6:EA:2E:F6:E1:43:EC:CA:C7:7C:71:BD:46:87:5B:CB
Authority key identifier: B5:35:6B:3A:67:78:BE:8C:61:14:AD:87:DA:AF:CD:07:CA:55:D8:00
Certificate issuer: /CN=b5356b3a6778be8c6114ad87daafcd07ca55d800
Certificate serial: 019A4E4F603635130B75C4EFF75544C19C68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tTVrOmd4voxhFK2H2q_NB8pV2AA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/91b31e-0711-43fa-bc29-932b4ac0aafd/1/tTVrOmd4voxhFK2H2q_NB8pV2AA.mft
Manifest number: 170D
Signing time: Tue 04 Nov 2025 10:00:15 +0000
Manifest this update: Tue 04 Nov 2025 10:00:15 +0000
Manifest next update: Wed 05 Nov 2025 10:00:15 +0000
Files and hashes: 1: NQNYc6fmHLA_NSQLy1429x1Q7Rs.roa (hash: 9fkXQ4KSWlEupj10JS2rCXdqinSmRcwnxokumXbhroc=)
2: QbjMGccKG5d5ZKbesdYHgP5_B94.roa (hash: 4D93Q+Whu8oYfv+HOP7uP002kldwgOYc75DA0DhrTb4=)
3: tTVrOmd4voxhFK2H2q_NB8pV2AA.crl (hash: EUld1MiibZLPZY30W7fuyF9qRephPoM7OR5yUcYzAwk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/91b31e-0711-43fa-bc29-932b4ac0aafd/1/tTVrOmd4voxhFK2H2q_NB8pV2AA.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/91b31e-0711-43fa-bc29-932b4ac0aafd/1/tTVrOmd4voxhFK2H2q_NB8pV2AA.mft
rsync://rpki.ripe.net/repository/DEFAULT/tTVrOmd4voxhFK2H2q_NB8pV2AA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:4f:60:36:35:13:0b:75:c4:ef:f7:55:44:c1:9c:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5356b3a6778be8c6114ad87daafcd07ca55d800
Validity
Not Before: Nov 4 10:00:15 2025 GMT
Not After : Nov 5 10:00:15 2025 GMT
Subject: CN=bae9530fb6ea2ef6e143eccac77c71bd46875bcb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:c8:54:50:29:31:43:d3:9e:76:8e:6b:71:4b:
d3:69:18:6b:12:9c:95:92:23:67:a6:02:89:d3:7d:
91:8e:15:e6:12:26:37:17:52:83:f0:1f:c5:6a:d3:
3b:01:72:94:13:b9:da:44:90:f7:f3:e5:7c:f6:59:
14:a2:fa:d0:9e:bf:7b:df:db:44:00:e4:7b:ae:34:
8c:ed:b0:a8:fc:b0:26:ba:37:b9:f2:42:fd:b9:89:
6a:b7:99:d8:9a:84:b8:aa:bc:de:84:73:8d:d3:03:
12:af:4e:ba:d6:0a:a6:ea:a6:1d:9e:8e:e4:46:e9:
3e:e4:3e:d8:73:11:3f:97:9a:a4:3c:6f:65:40:20:
ca:fb:0e:a9:b6:75:30:1c:01:8b:d3:4f:c2:b5:ca:
a7:b2:eb:38:7e:0a:a5:10:2e:51:3e:1c:3f:0d:6b:
3f:81:a0:1f:40:84:a9:72:34:ba:6a:4f:82:73:ec:
e1:1e:a1:41:57:6a:e0:81:b4:73:3f:84:a3:fe:3b:
58:cd:bf:c2:b3:aa:64:bd:fe:99:80:62:50:f2:46:
90:99:17:b5:94:bc:af:97:92:22:b2:41:63:53:19:
37:3b:62:d1:18:b7:f7:2b:05:8d:0a:58:83:ee:a5:
e4:4f:42:03:0d:93:5b:3b:77:19:f6:9f:f5:97:85:
59:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:E9:53:0F:B6:EA:2E:F6:E1:43:EC:CA:C7:7C:71:BD:46:87:5B:CB
X509v3 Authority Key Identifier:
keyid:B5:35:6B:3A:67:78:BE:8C:61:14:AD:87:DA:AF:CD:07:CA:55:D8:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tTVrOmd4voxhFK2H2q_NB8pV2AA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/91b31e-0711-43fa-bc29-932b4ac0aafd/1/tTVrOmd4voxhFK2H2q_NB8pV2AA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/91b31e-0711-43fa-bc29-932b4ac0aafd/1/tTVrOmd4voxhFK2H2q_NB8pV2AA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:b3:74:8b:14:7f:a4:44:4c:53:c4:6e:aa:bd:5d:ee:48:3f:
8f:72:1d:9e:3f:ae:2f:30:76:b4:14:a4:fd:8e:e3:8c:12:fe:
0b:3a:88:aa:83:b5:c1:b8:88:46:9c:fd:75:41:82:44:25:aa:
cb:7d:01:98:b1:64:98:4c:ed:49:e4:70:a7:ec:8c:03:1d:5d:
4d:76:fe:85:49:0a:59:f4:d3:74:88:7a:73:07:c8:2f:01:3b:
3b:ac:71:7b:03:6d:a9:1e:ac:d7:6b:de:a7:77:0c:c1:c7:04:
e4:f7:26:cd:cf:11:64:14:0d:ab:8f:4f:75:23:aa:ca:f2:20:
fd:4f:c8:55:09:c5:3e:65:80:fc:a6:52:ff:a8:5e:95:7a:28:
a5:39:1b:f5:5a:3c:66:1d:ab:13:11:1a:09:b2:dd:b9:f3:58:
03:43:25:20:8d:5d:87:a4:44:77:39:12:6f:8d:e8:df:6e:2f:
86:a3:7d:87:2e:09:9b:bd:25:e2:24:77:be:d6:33:4a:26:c1:
81:1a:8a:a8:91:09:a1:b9:cf:2f:90:1d:83:d7:75:02:18:c7:
70:59:32:c9:4c:be:62:49:33:57:7d:8d:9f:32:fb:84:a6:3f:
61:5b:cc:d7:87:f5:4c:3c:cb:4f:69:62:50:ba:f2:e7:a1:3d:
fa:7a:9f:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:21:43 2025 by rpki-client