Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/f9a891-b818-499a-971c-bc5456962f2d/1/tLuK74sObZxv9jIIB_WpAHWY7rA.mft
File: tLuK74sObZxv9jIIB_WpAHWY7rA.mft (raw, json)
Hash identifier: 03E06+uOMQv979bZ8eNARjJcp3p0iZ/Y9qM4c0GdiZc=
Subject key identifier: D4:A2:75:B0:C6:2B:2C:9B:B6:80:07:5A:76:01:F3:29:4F:72:5D:72
Authority key identifier: B4:BB:8A:EF:8B:0E:6D:9C:6F:F6:32:08:07:F5:A9:00:75:98:EE:B0
Certificate issuer: /CN=b4bb8aef8b0e6d9c6ff6320807f5a9007598eeb0
Certificate serial: 019A50076918D72F7A2DE5BAE9A9C306B06F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tLuK74sObZxv9jIIB_WpAHWY7rA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/f9a891-b818-499a-971c-bc5456962f2d/1/tLuK74sObZxv9jIIB_WpAHWY7rA.mft
Manifest number: 09A0
Signing time: Tue 04 Nov 2025 18:00:54 +0000
Manifest this update: Tue 04 Nov 2025 18:00:54 +0000
Manifest next update: Wed 05 Nov 2025 18:00:54 +0000
Files and hashes: 1: 8ntjSMus2ECR1PU4tfABg9_MTk0.roa (hash: NThyxZZCDawOVk5/yNg7I3X8M08Hqe7vBd2lZGQPe1c=)
2: tLuK74sObZxv9jIIB_WpAHWY7rA.crl (hash: zKZ2DjKABJ4lu7dEAyasnUokU+4fKWUf3GROpYgGCVk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/f9a891-b818-499a-971c-bc5456962f2d/1/tLuK74sObZxv9jIIB_WpAHWY7rA.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/f9a891-b818-499a-971c-bc5456962f2d/1/tLuK74sObZxv9jIIB_WpAHWY7rA.mft
rsync://rpki.ripe.net/repository/DEFAULT/tLuK74sObZxv9jIIB_WpAHWY7rA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:07:69:18:d7:2f:7a:2d:e5:ba:e9:a9:c3:06:b0:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4bb8aef8b0e6d9c6ff6320807f5a9007598eeb0
Validity
Not Before: Nov 4 18:00:54 2025 GMT
Not After : Nov 5 18:00:54 2025 GMT
Subject: CN=d4a275b0c62b2c9bb680075a7601f3294f725d72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:79:17:3e:e5:16:64:1e:dd:f3:21:b9:13:57:
0c:a6:25:00:c0:7e:5c:a5:53:a2:ed:f7:28:85:4b:
e2:4c:6c:11:70:92:4d:5e:db:d8:6c:63:a0:9c:45:
07:6e:10:96:00:88:7d:f3:ea:cd:60:3c:68:dc:c3:
66:4a:1f:7a:5c:7a:5d:d2:9f:07:10:a7:d2:eb:09:
78:8e:d7:3e:7a:a5:64:8b:0d:1c:1e:a5:64:8d:7c:
b6:81:0e:9d:e7:f2:61:ea:f5:eb:7f:55:b9:03:e4:
a1:b7:5c:45:99:62:ec:2a:e9:b1:56:dd:73:27:a8:
a8:5e:d3:59:22:b6:bd:66:3b:4e:42:01:d4:c8:6a:
e9:46:2a:3f:42:f2:de:3a:39:ac:81:0c:f8:fc:4d:
b2:6f:44:94:30:c5:8f:c3:6d:32:10:a4:0f:31:6b:
bb:e6:08:99:15:1c:1c:b8:6d:97:c6:77:77:2e:f6:
b4:ce:96:79:16:4f:e0:37:c3:e8:84:e0:2b:2c:dd:
bb:6c:9c:36:89:f6:93:aa:d8:7a:3e:9f:9a:c7:f7:
b3:fb:32:df:79:51:90:31:57:25:b5:62:bd:02:77:
52:99:5f:db:97:a1:da:19:9f:1d:ac:61:a4:87:7e:
bd:08:4c:68:7d:c8:47:ca:ae:d6:43:7e:90:97:ce:
ea:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:A2:75:B0:C6:2B:2C:9B:B6:80:07:5A:76:01:F3:29:4F:72:5D:72
X509v3 Authority Key Identifier:
keyid:B4:BB:8A:EF:8B:0E:6D:9C:6F:F6:32:08:07:F5:A9:00:75:98:EE:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tLuK74sObZxv9jIIB_WpAHWY7rA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/f9a891-b818-499a-971c-bc5456962f2d/1/tLuK74sObZxv9jIIB_WpAHWY7rA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/f9a891-b818-499a-971c-bc5456962f2d/1/tLuK74sObZxv9jIIB_WpAHWY7rA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:b0:4a:0c:df:e0:1e:c8:10:49:91:09:b8:22:cc:79:55:f8:
91:c9:e5:50:f9:75:2e:29:8d:ab:88:68:85:33:a8:a6:0c:5c:
55:36:61:7b:c6:da:48:83:ea:f1:cb:b0:2b:2c:91:29:2a:c7:
c4:5e:40:08:ea:b5:59:08:33:9a:70:d2:08:dc:3a:36:2a:a7:
3d:53:50:c5:87:5a:aa:c9:6b:42:e5:7b:20:ed:f6:b4:e1:5b:
ee:cf:f8:93:08:12:e6:1f:7d:9d:fe:cc:f7:37:fb:c7:67:89:
6f:d0:22:1c:5f:73:63:f7:24:a7:6c:91:8e:8a:39:f8:c1:bc:
c0:1d:fb:1d:36:0e:66:a9:a8:fd:58:2f:06:6b:6d:65:ba:72:
ad:e6:5d:a7:5d:e8:4d:f6:b3:e7:4f:0a:40:c8:6a:7a:b7:f4:
34:a3:fc:aa:d9:5e:19:5b:38:de:7f:dc:ae:24:4c:1f:21:ed:
57:d6:7b:df:cd:3f:7d:6b:2b:e7:bc:8c:1b:39:a4:2a:c1:61:
ce:aa:28:85:08:82:be:20:87:f4:cf:16:06:09:fc:fc:e5:7a:
3c:fd:a0:45:29:73:bf:46:7f:8f:ad:70:9a:e4:5f:32:d0:18:
63:96:ce:28:50:da:ae:cd:bb:5e:50:7b:5d:db:42:42:d8:75:
a9:4c:df:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 22:48:26 2025 by rpki-client