Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/457f2d-0137-4d61-8500-300426ce32e2/1/tK4oip3bDvUKKUs8rpY-FHycfck.mft
File: tK4oip3bDvUKKUs8rpY-FHycfck.mft (raw, json)
Hash identifier: fB4r179zGY+U1TEIUocmU0JCIWrgCeM2dOqNKO5IMt0=
Subject key identifier: BF:2F:0E:F3:EB:A7:7B:37:4D:C2:9E:43:B8:89:22:73:9D:8E:2A:98
Authority key identifier: B4:AE:28:8A:9D:DB:0E:F5:0A:29:4B:3C:AE:96:3E:14:7C:9C:7D:C9
Certificate issuer: /CN=b4ae288a9ddb0ef50a294b3cae963e147c9c7dc9
Certificate serial: 019A4E187E2E1F30BA74C498F9BF4FBE06F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tK4oip3bDvUKKUs8rpY-FHycfck.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/457f2d-0137-4d61-8500-300426ce32e2/1/tK4oip3bDvUKKUs8rpY-FHycfck.mft
Manifest number: 170B
Signing time: Tue 04 Nov 2025 09:00:19 +0000
Manifest this update: Tue 04 Nov 2025 09:00:19 +0000
Manifest next update: Wed 05 Nov 2025 09:00:19 +0000
Files and hashes: 1: tK4oip3bDvUKKUs8rpY-FHycfck.crl (hash: fK3vsXWNt2iZ5DxRIyqu3rPvtOsdnkAodiiNyHXe1M8=)
2: u16TB_X_VEL7--qGdSVXn8Zs3wY.roa (hash: m8sRTErDjjsLnDtgYn9w7y6plArnvxsTKmxxZwh54Fs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/457f2d-0137-4d61-8500-300426ce32e2/1/tK4oip3bDvUKKUs8rpY-FHycfck.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/457f2d-0137-4d61-8500-300426ce32e2/1/tK4oip3bDvUKKUs8rpY-FHycfck.mft
rsync://rpki.ripe.net/repository/DEFAULT/tK4oip3bDvUKKUs8rpY-FHycfck.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:18:7e:2e:1f:30:ba:74:c4:98:f9:bf:4f:be:06:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4ae288a9ddb0ef50a294b3cae963e147c9c7dc9
Validity
Not Before: Nov 4 09:00:19 2025 GMT
Not After : Nov 5 09:00:19 2025 GMT
Subject: CN=bf2f0ef3eba77b374dc29e43b88922739d8e2a98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:ec:35:b8:3f:3c:ba:1a:1a:da:41:3b:b0:43:
0d:cc:3a:93:02:09:9d:30:ce:c5:0c:dc:c6:47:24:
8c:82:60:ed:11:82:7b:f7:29:58:db:43:45:8c:0d:
30:3d:57:a8:99:36:c5:2f:80:c3:ec:54:85:95:ad:
e3:6a:62:20:37:c9:0b:24:bb:14:53:8c:c7:bd:39:
b2:4c:56:3a:05:f4:6a:2b:ad:fb:9d:c1:a2:fa:25:
fc:e3:18:74:86:3c:85:16:48:1e:3b:48:ae:8c:0e:
1f:75:4b:08:77:a2:0d:01:b5:74:d3:a5:e5:36:0b:
5a:e3:6e:cf:04:88:00:94:2b:7c:09:4e:86:1c:2d:
35:72:5d:a0:70:88:fa:f4:fd:18:c6:f8:37:25:db:
4e:05:2b:0d:60:e4:9d:d5:c6:88:91:46:aa:ee:76:
12:2d:52:34:a6:93:e9:5d:c6:7e:c7:bb:be:2e:de:
38:d3:e2:29:6f:d8:37:c1:1d:eb:1e:3d:90:7c:40:
9d:55:90:c4:18:3b:44:e7:cd:ac:78:90:17:39:ea:
14:50:3c:12:63:29:50:a4:15:63:83:14:1e:27:32:
0d:6c:3b:29:03:3a:a8:71:67:09:ab:be:b7:80:0e:
55:d7:e6:07:7f:1b:5d:08:19:76:ae:3c:e4:70:76:
5e:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:2F:0E:F3:EB:A7:7B:37:4D:C2:9E:43:B8:89:22:73:9D:8E:2A:98
X509v3 Authority Key Identifier:
keyid:B4:AE:28:8A:9D:DB:0E:F5:0A:29:4B:3C:AE:96:3E:14:7C:9C:7D:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tK4oip3bDvUKKUs8rpY-FHycfck.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/457f2d-0137-4d61-8500-300426ce32e2/1/tK4oip3bDvUKKUs8rpY-FHycfck.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/457f2d-0137-4d61-8500-300426ce32e2/1/tK4oip3bDvUKKUs8rpY-FHycfck.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:d8:50:d5:e8:5b:51:5c:0c:5a:cf:04:48:08:9c:67:c9:49:
93:69:bb:0d:c4:b7:32:ae:5b:ca:a6:f8:4f:da:cb:21:00:92:
c6:70:b4:3b:c9:ed:68:85:5b:4f:ed:9d:94:9b:37:22:a5:aa:
e9:d0:9f:cc:c6:e0:ec:f0:9f:1a:88:8f:ff:6f:1d:9a:34:6a:
a5:bf:0b:5f:9f:aa:d8:14:3f:88:17:22:5e:a2:6a:23:1d:fd:
ad:0e:85:02:4d:60:35:e5:bb:1a:93:0a:64:13:96:5d:23:44:
47:39:66:4e:35:23:4f:46:81:0f:f2:6b:47:ff:5f:3f:7d:ce:
b0:ee:bc:47:af:d5:a5:c0:97:27:50:66:17:04:ca:77:ac:ab:
63:bd:b5:47:c6:ea:60:05:88:0c:45:da:d6:bd:02:f5:13:45:
e8:8d:10:24:e4:22:95:83:80:b0:69:ea:89:9e:03:30:39:1b:
f3:dd:f2:28:bf:e3:fa:1b:85:2f:80:64:d7:cf:05:95:ef:2a:
2f:b4:44:76:d8:c0:fe:fe:6c:a0:d9:60:ea:1a:3d:48:af:24:
df:9a:37:2f:eb:63:67:e9:21:87:e4:d9:21:eb:92:cb:6d:bb:
fa:52:26:8a:c7:8c:0e:c1:d2:07:d9:0b:ba:c2:3d:66:d5:8b:
5b:a1:8a:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:55:19 2025 by rpki-client