Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/ba784d-746e-49e7-a408-4abaf53a50af/1/tczdiD9t0RTs9vcnFqhGNPZ6yXc.mft
File: tczdiD9t0RTs9vcnFqhGNPZ6yXc.mft (raw, json)
Hash identifier: rycCe4UX8FMvQyNnYkXbTDv5NMrKYfdopB8TMUUaSSo=
Subject key identifier: 61:38:0D:00:73:C3:94:4B:9C:49:5A:A7:46:66:F3:4C:67:99:43:85
Authority key identifier: B5:CC:DD:88:3F:6D:D1:14:EC:F6:F7:27:16:A8:46:34:F6:7A:C9:77
Certificate issuer: /CN=b5ccdd883f6dd114ecf6f72716a84634f67ac977
Certificate serial: 019A552DC610D83204D7DF70AC779038DB45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tczdiD9t0RTs9vcnFqhGNPZ6yXc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/ba784d-746e-49e7-a408-4abaf53a50af/1/tczdiD9t0RTs9vcnFqhGNPZ6yXc.mft
Manifest number: 0D41
Signing time: Wed 05 Nov 2025 18:00:54 +0000
Manifest this update: Wed 05 Nov 2025 18:00:54 +0000
Manifest next update: Thu 06 Nov 2025 18:00:54 +0000
Files and hashes: 1: 6mSAzptlMtavroiRBEbzErufO08.roa (hash: lJ5Bp/WretmXqwZLM24/DP1Oy5iyysz4o7F+olg5yZQ=)
2: tczdiD9t0RTs9vcnFqhGNPZ6yXc.crl (hash: BE3d6WY+ukyRfpL+8aqub1cELJ3W4yH/julIf3riJJA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/ba784d-746e-49e7-a408-4abaf53a50af/1/tczdiD9t0RTs9vcnFqhGNPZ6yXc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/ba784d-746e-49e7-a408-4abaf53a50af/1/tczdiD9t0RTs9vcnFqhGNPZ6yXc.mft
rsync://rpki.ripe.net/repository/DEFAULT/tczdiD9t0RTs9vcnFqhGNPZ6yXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:55:2d:c6:10:d8:32:04:d7:df:70:ac:77:90:38:db:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5ccdd883f6dd114ecf6f72716a84634f67ac977
Validity
Not Before: Nov 5 18:00:54 2025 GMT
Not After : Nov 6 18:00:54 2025 GMT
Subject: CN=61380d0073c3944b9c495aa74666f34c67994385
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:b5:96:5f:47:8d:1d:14:63:74:a2:52:7f:26:
93:9f:37:1f:aa:81:e5:3f:44:97:8d:7b:bd:20:84:
50:2f:0e:e6:f9:cb:d3:aa:79:4f:f0:0d:e9:b8:e7:
10:6b:26:a6:e8:22:c9:10:ab:47:51:98:ef:e2:ec:
b6:4d:1d:e7:38:10:e7:e2:b7:f1:bc:95:c4:0e:68:
54:16:b3:95:ce:33:76:22:ad:bc:f7:3a:18:75:40:
f2:31:12:86:f2:90:56:0c:8a:c8:73:b8:ae:75:56:
be:83:da:f2:59:a5:f4:5c:70:c0:94:05:2b:b2:d7:
d6:3d:93:79:8c:0b:12:76:21:71:48:86:54:aa:df:
00:de:b6:d2:92:a7:db:a3:cb:a6:ee:d4:29:8c:72:
17:73:5f:b0:be:b2:b6:a1:e5:2a:6f:d0:79:44:eb:
15:2e:d5:f6:e4:7a:0c:b4:50:8c:ed:ff:97:49:33:
08:11:43:33:16:f5:f1:8f:2b:6f:65:74:38:9c:11:
90:c0:53:53:c0:41:12:32:5e:a1:3b:b6:1d:1c:d7:
db:1b:ec:40:00:c6:25:19:79:3f:67:2e:5d:66:cf:
63:ca:ae:41:24:a4:b4:50:da:a4:68:99:04:5e:d0:
cd:fc:18:8a:41:c2:45:48:37:fd:d2:8a:38:44:85:
89:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:38:0D:00:73:C3:94:4B:9C:49:5A:A7:46:66:F3:4C:67:99:43:85
X509v3 Authority Key Identifier:
keyid:B5:CC:DD:88:3F:6D:D1:14:EC:F6:F7:27:16:A8:46:34:F6:7A:C9:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tczdiD9t0RTs9vcnFqhGNPZ6yXc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/ba784d-746e-49e7-a408-4abaf53a50af/1/tczdiD9t0RTs9vcnFqhGNPZ6yXc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/ba784d-746e-49e7-a408-4abaf53a50af/1/tczdiD9t0RTs9vcnFqhGNPZ6yXc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:40:95:f9:1a:35:33:93:73:7f:82:6a:8c:42:72:ee:27:28:
e1:89:dd:cb:2d:7b:c0:a9:e2:ea:64:c6:e9:46:d2:38:c5:b5:
27:3b:3f:58:7c:89:62:f0:74:a4:67:95:c4:06:96:d3:1e:07:
ce:05:05:4c:8c:a6:92:c3:cc:58:8b:09:e1:0b:d2:41:30:26:
d1:ac:b6:50:ff:8e:ba:91:33:83:d2:f4:d1:66:cd:9f:cd:8b:
ee:5a:61:b7:68:f3:b9:35:2a:07:12:f7:1b:9a:66:67:55:34:
b1:5d:d7:8e:92:39:2a:ca:54:69:ba:a4:90:04:46:b2:e9:df:
a3:3b:7a:f8:47:9d:64:6f:34:0a:5e:7b:9e:7e:54:2e:69:a8:
cf:bb:87:3e:9c:15:ad:d8:81:35:06:61:cc:71:b1:df:3a:75:
60:f4:bd:fc:88:11:14:91:f9:4b:c5:11:35:e0:06:dd:22:3d:
06:29:88:5c:f9:81:24:51:d5:7c:61:81:89:15:ce:00:26:64:
4e:86:2e:67:4d:2a:76:57:6b:cb:eb:1d:f6:7f:16:76:66:f7:
8b:4c:30:37:aa:fd:cd:e3:ee:68:46:fa:b4:c4:0e:32:73:d1:
9d:24:b3:e8:8a:ab:b7:cb:17:90:74:5f:ce:d5:6a:50:83:6d:
11:66:2d:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 21:10:47 2025 by rpki-client