Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/359179-4ac2-431c-9531-0b7a33dd5b56/1/tFBkwayGkOLHepWaUCVG6YvNNyc.mft
File: tFBkwayGkOLHepWaUCVG6YvNNyc.mft (raw, json)
Hash identifier: 4pbF9Jte8Q/ViNkt0zlnltaNCzfFfs4EqoVkLRCCmIk=
Subject key identifier: 85:E2:4E:0F:0A:5C:3D:50:31:3E:53:6E:F5:41:35:71:99:FE:08:C7
Authority key identifier: B4:50:64:C1:AC:86:90:E2:C7:7A:95:9A:50:25:46:E9:8B:CD:37:27
Certificate issuer: /CN=b45064c1ac8690e2c77a959a502546e98bcd3727
Certificate serial: 019A52D1F9F293F780B404C5E622149AFFD1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tFBkwayGkOLHepWaUCVG6YvNNyc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/359179-4ac2-431c-9531-0b7a33dd5b56/1/tFBkwayGkOLHepWaUCVG6YvNNyc.mft
Manifest number: 0D8F
Signing time: Wed 05 Nov 2025 07:01:23 +0000
Manifest this update: Wed 05 Nov 2025 07:01:23 +0000
Manifest next update: Thu 06 Nov 2025 07:01:23 +0000
Files and hashes: 1: _INaZ6DycFqZuVm42lkSOfz9oRs.roa (hash: N1fFaEC6dFW7nNDOY6nEbXrF6dJ7s2tSPU9xB9zA38k=)
2: tFBkwayGkOLHepWaUCVG6YvNNyc.crl (hash: IsQA8PZTXPKCLL/2kroUr1CHiguyBqzgdKhgidkpGm0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/359179-4ac2-431c-9531-0b7a33dd5b56/1/tFBkwayGkOLHepWaUCVG6YvNNyc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/359179-4ac2-431c-9531-0b7a33dd5b56/1/tFBkwayGkOLHepWaUCVG6YvNNyc.mft
rsync://rpki.ripe.net/repository/DEFAULT/tFBkwayGkOLHepWaUCVG6YvNNyc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:d1:f9:f2:93:f7:80:b4:04:c5:e6:22:14:9a:ff:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b45064c1ac8690e2c77a959a502546e98bcd3727
Validity
Not Before: Nov 5 07:01:23 2025 GMT
Not After : Nov 6 07:01:23 2025 GMT
Subject: CN=85e24e0f0a5c3d50313e536ef541357199fe08c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:d8:38:61:cb:ad:6e:40:93:d2:ea:78:16:e4:
c2:c9:4d:fa:bb:30:52:d2:50:ff:62:b3:11:81:7e:
b2:8f:87:bc:d5:51:c3:ca:9a:dd:c2:43:6d:c6:d5:
69:52:90:98:80:2b:69:00:86:0e:89:cb:8a:66:c5:
41:e7:94:62:39:ae:4b:de:69:60:2f:9b:48:e7:8d:
1a:8f:0e:23:bb:dd:39:5d:a1:44:b3:4c:61:a7:62:
f5:7a:59:3a:58:60:84:02:27:29:b1:ac:ec:d9:0c:
a9:9a:6a:94:cf:06:6b:46:39:2a:c0:ac:ca:c0:20:
4a:4f:53:44:96:39:9d:18:ed:6b:5c:10:56:bb:ed:
78:47:d1:14:55:15:ee:da:eb:16:9d:a4:b1:c0:62:
11:b7:f6:c9:47:a9:99:21:3a:1c:8e:82:74:61:df:
fd:d6:c2:a7:be:df:23:15:fd:35:f1:0a:ad:6d:0d:
76:16:1d:26:ae:35:3e:4e:0c:e6:01:c4:f8:5f:49:
4a:9c:74:0f:70:45:7e:71:8b:7f:1f:05:f2:38:74:
d3:74:b2:04:46:ff:0d:22:03:1a:6d:84:23:b1:e0:
68:33:83:40:53:9a:b8:a2:46:94:36:71:e4:ca:46:
b7:23:ba:1b:91:e9:20:73:06:cf:d2:dd:cc:e4:8b:
0f:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:E2:4E:0F:0A:5C:3D:50:31:3E:53:6E:F5:41:35:71:99:FE:08:C7
X509v3 Authority Key Identifier:
keyid:B4:50:64:C1:AC:86:90:E2:C7:7A:95:9A:50:25:46:E9:8B:CD:37:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tFBkwayGkOLHepWaUCVG6YvNNyc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/359179-4ac2-431c-9531-0b7a33dd5b56/1/tFBkwayGkOLHepWaUCVG6YvNNyc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/359179-4ac2-431c-9531-0b7a33dd5b56/1/tFBkwayGkOLHepWaUCVG6YvNNyc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:bb:d4:c3:6e:be:53:c3:b8:d1:3b:23:7f:8c:50:14:fc:48:
49:ee:d1:a1:b2:b0:dd:16:8b:7e:cb:98:c1:2e:f7:5a:96:2a:
ce:81:00:55:56:9f:f8:e6:7d:ff:09:70:4f:79:df:67:8e:a7:
ae:ce:df:e2:10:3b:9f:6f:2c:7f:48:49:d0:be:2d:5d:16:e6:
31:98:6e:bd:5f:be:da:d1:19:ae:ca:45:33:db:d1:75:c9:3e:
77:d8:6f:b6:7d:f8:4e:a0:20:7e:e9:75:ee:91:ff:9a:40:1d:
5c:a8:f8:0a:3e:9a:2c:cc:a2:55:34:25:bf:66:b7:75:fd:af:
2a:0c:66:b8:24:08:ea:85:59:0d:3b:54:1a:9f:08:e6:1c:ac:
a8:e5:5c:c2:f1:f5:f1:43:52:21:df:59:77:c9:a2:36:3f:5a:
ba:3c:34:30:a5:f7:99:a6:81:1f:0c:a1:8b:c0:08:bf:23:98:
76:26:93:58:77:6c:f8:8e:f2:98:89:8b:59:8a:5d:d0:ec:52:
3b:2a:8b:53:df:80:4c:6b:81:9a:df:d3:8c:fe:23:9b:3a:35:
96:5e:dc:58:66:eb:69:b4:1e:b8:fd:c2:b7:a2:74:86:2b:10:
52:e0:c8:19:74:26:0f:de:ff:4d:18:e5:74:2f:30:74:f9:a9:
45:d3:51:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 11:59:07 2025 by rpki-client