Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/869214-16d4-45e0-b87e-32e932d6fd0e/1/tPEVQkwYHGeWbMwkZ-3mnQYMz1M.mft
File: tPEVQkwYHGeWbMwkZ-3mnQYMz1M.mft (raw, json)
Hash identifier: v2yH5SqP+fv7I2WcHJIbKuuNtZBpJHl4Q7QI76nLmnQ=
Subject key identifier: 9A:87:E7:B9:5F:B1:05:E6:75:FF:8B:5A:24:FB:BD:9B:7B:31:BC:1A
Authority key identifier: B4:F1:15:42:4C:18:1C:67:96:6C:CC:24:67:ED:E6:9D:06:0C:CF:53
Certificate issuer: /CN=b4f115424c181c67966ccc2467ede69d060ccf53
Certificate serial: 019A503E0BE48DEC3803045BD749BEC86682
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tPEVQkwYHGeWbMwkZ-3mnQYMz1M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/869214-16d4-45e0-b87e-32e932d6fd0e/1/tPEVQkwYHGeWbMwkZ-3mnQYMz1M.mft
Manifest number: 1475
Signing time: Tue 04 Nov 2025 19:00:34 +0000
Manifest this update: Tue 04 Nov 2025 19:00:34 +0000
Manifest next update: Wed 05 Nov 2025 19:00:34 +0000
Files and hashes: 1: bqp6f9GjY5TF5wTxOeK8Ji-YrkE.roa (hash: b7SVmPCcwJQed2khWFQ0sTeZykPXeoqQG4LQy2NRwCA=)
2: tPEVQkwYHGeWbMwkZ-3mnQYMz1M.crl (hash: 43MvM4sCQ1TDvCmHtJdQUqmxzepRykfMU9YMaxBdzUM=)
3: xktUIB6GDLW-h2_LFZTy4dam33Y.roa (hash: BgrfS/HN5mPWhSmcXKgkikTloXU/AxYtLSZ8SaD1EM0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/869214-16d4-45e0-b87e-32e932d6fd0e/1/tPEVQkwYHGeWbMwkZ-3mnQYMz1M.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/869214-16d4-45e0-b87e-32e932d6fd0e/1/tPEVQkwYHGeWbMwkZ-3mnQYMz1M.mft
rsync://rpki.ripe.net/repository/DEFAULT/tPEVQkwYHGeWbMwkZ-3mnQYMz1M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 16:49:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:3e:0b:e4:8d:ec:38:03:04:5b:d7:49:be:c8:66:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4f115424c181c67966ccc2467ede69d060ccf53
Validity
Not Before: Nov 4 19:00:34 2025 GMT
Not After : Nov 5 19:00:34 2025 GMT
Subject: CN=9a87e7b95fb105e675ff8b5a24fbbd9b7b31bc1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:7f:1b:30:d4:c3:9f:76:a5:44:fc:95:1e:31:
16:36:85:f4:19:a1:2a:71:fb:03:38:82:4e:b7:54:
d7:cd:99:5d:21:e6:d1:2a:6d:f4:90:72:ed:c8:87:
6b:32:47:77:8e:fd:67:89:20:e8:dd:1c:8e:06:df:
b3:a7:e8:68:9b:84:39:0b:ee:da:1a:69:ea:bd:e6:
79:77:3c:09:37:ae:17:a4:8d:86:2f:31:07:fc:82:
20:4d:be:53:c9:f4:dd:4f:cc:39:41:a3:8c:3c:34:
ed:58:46:9d:5c:5e:2c:80:a1:a8:23:fc:a8:b1:56:
14:4b:2b:e7:51:f9:98:21:bc:c8:c1:c6:35:29:0c:
5d:6e:65:db:c6:c8:2a:2f:9a:d9:44:d2:a4:66:8b:
2c:87:15:5e:2d:19:d8:3c:ad:01:95:ce:24:0d:ca:
a2:0b:57:11:1c:0c:78:79:eb:73:7e:07:13:84:9f:
d1:41:1e:16:5d:25:0a:b5:c8:ae:c9:86:17:42:db:
52:fd:58:68:29:53:b1:e6:52:76:d5:b2:74:50:1f:
af:38:68:ad:a2:51:21:33:65:90:01:31:30:03:ab:
23:b4:e8:35:52:e0:40:63:da:43:31:c8:01:f6:8a:
7b:ba:db:d3:49:f6:b0:c1:fd:f6:3e:9c:85:1f:6e:
74:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:87:E7:B9:5F:B1:05:E6:75:FF:8B:5A:24:FB:BD:9B:7B:31:BC:1A
X509v3 Authority Key Identifier:
keyid:B4:F1:15:42:4C:18:1C:67:96:6C:CC:24:67:ED:E6:9D:06:0C:CF:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tPEVQkwYHGeWbMwkZ-3mnQYMz1M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/869214-16d4-45e0-b87e-32e932d6fd0e/1/tPEVQkwYHGeWbMwkZ-3mnQYMz1M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/869214-16d4-45e0-b87e-32e932d6fd0e/1/tPEVQkwYHGeWbMwkZ-3mnQYMz1M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:da:20:44:4b:37:85:34:07:a3:fc:ae:04:49:3f:51:ad:d6:
0e:fe:76:31:a4:9c:50:99:ae:21:52:86:78:4e:3c:28:d0:24:
36:40:0d:dd:99:4d:a2:e9:bc:86:a5:6c:11:52:01:7e:a0:90:
f2:9a:56:f2:ae:5a:26:40:6f:1b:44:d4:7d:7c:89:62:b2:87:
59:c7:bd:f9:cf:bb:ee:6c:11:2c:ed:fc:46:d4:69:36:50:d3:
4d:89:a6:c8:89:7d:d4:8f:a7:fa:e1:ff:d8:1a:00:dc:3d:d7:
08:1b:e8:9f:69:88:a6:d0:99:2c:66:4e:9b:71:1f:a1:77:bb:
e6:7a:b8:e9:cd:21:c4:1d:56:d1:7c:07:e6:e2:59:30:6c:c3:
9b:85:94:44:19:87:09:8d:38:2b:9d:b0:3a:fc:ad:e0:97:17:
42:23:88:e5:70:8b:e3:b6:02:02:b0:0e:2e:2c:f2:03:67:ef:
e6:25:99:66:5e:86:6f:20:dd:7f:8d:4e:a7:45:36:ec:b5:32:
ba:bb:24:a9:03:d9:de:04:f3:00:f1:6c:bc:c5:12:c7:93:c8:
86:e1:63:ec:4e:54:d2:9b:91:a1:a1:10:ff:24:65:f0:7e:e0:
76:74:00:6d:95:c7:cf:02:2e:b8:a7:04:f2:d4:26:a7:5b:e5:
2c:bc:08:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 21:08:21 2025 by rpki-client