Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/b22c1e-ca4c-481e-91a2-5c93239e5e2e/1/tp0ot9AoyruWhKgOFLqvFcpv0vY.mft
File: tp0ot9AoyruWhKgOFLqvFcpv0vY.mft (raw, json)
Hash identifier: Xjzr3yWNJQVYxbpt7UcrrLjn0gJjc/GDjgKswcQXBj0=
Subject key identifier: AA:D6:94:74:BE:91:B7:69:65:E8:84:F7:57:EC:46:BE:05:E9:F4:BC
Authority key identifier: B6:9D:28:B7:D0:28:CA:BB:96:84:A8:0E:14:BA:AF:15:CA:6F:D2:F6
Certificate issuer: /CN=b69d28b7d028cabb9684a80e14baaf15ca6fd2f6
Certificate serial: 019A503DDC34BAF3D2BD67A0D1BF4E0A10AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tp0ot9AoyruWhKgOFLqvFcpv0vY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/b22c1e-ca4c-481e-91a2-5c93239e5e2e/1/tp0ot9AoyruWhKgOFLqvFcpv0vY.mft
Manifest number: 170E
Signing time: Tue 04 Nov 2025 19:00:22 +0000
Manifest this update: Tue 04 Nov 2025 19:00:22 +0000
Manifest next update: Wed 05 Nov 2025 19:00:22 +0000
Files and hashes: 1: BWKFYtuMXyE_lLT4h0W6XfTBenI.roa (hash: fLpCOLgiuzK6uz2EqJr6SiyMyUYxX5Pc6xAMSALFqDM=)
2: tp0ot9AoyruWhKgOFLqvFcpv0vY.crl (hash: ZUDWUr0fxSJgn2m+VBs5Sr5cxnsLnV2cj7o8qXfuoLQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/b22c1e-ca4c-481e-91a2-5c93239e5e2e/1/tp0ot9AoyruWhKgOFLqvFcpv0vY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/b22c1e-ca4c-481e-91a2-5c93239e5e2e/1/tp0ot9AoyruWhKgOFLqvFcpv0vY.mft
rsync://rpki.ripe.net/repository/DEFAULT/tp0ot9AoyruWhKgOFLqvFcpv0vY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 16:49:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:3d:dc:34:ba:f3:d2:bd:67:a0:d1:bf:4e:0a:10:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b69d28b7d028cabb9684a80e14baaf15ca6fd2f6
Validity
Not Before: Nov 4 19:00:22 2025 GMT
Not After : Nov 5 19:00:22 2025 GMT
Subject: CN=aad69474be91b76965e884f757ec46be05e9f4bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:ba:0b:fa:6e:94:10:a8:6e:b7:2a:6d:5d:d0:
34:83:bf:c2:58:82:53:93:dc:2d:a7:d2:a7:6b:18:
8c:73:be:af:ce:89:e9:29:5a:14:16:bf:fa:1f:b9:
19:aa:ae:2d:8e:37:5b:11:5a:74:aa:da:7a:fe:c0:
6d:3a:6f:e4:7f:78:c6:08:9e:56:db:91:3a:2f:ab:
fc:44:6d:8a:f0:e5:cb:1c:2f:16:f1:60:53:c8:06:
76:41:d4:cd:7b:4c:ad:68:ee:0c:2d:49:24:07:0a:
4c:23:f3:67:f5:cb:02:8e:f2:f7:58:2a:cd:d2:2f:
84:eb:b3:85:91:51:64:aa:8a:95:85:c0:aa:62:b2:
6d:81:4c:9b:a4:29:6f:f6:1f:e3:86:61:cc:75:cb:
1c:49:4d:1e:7a:1c:10:8d:06:a0:8e:a3:44:86:f7:
84:c7:4e:0c:3a:ad:83:14:51:cd:15:b9:9a:c7:96:
d3:b1:ca:34:61:79:22:a8:c4:ee:2c:5f:ff:c0:a4:
ec:8e:a1:a9:79:5a:d9:a5:6e:97:66:3f:ae:47:71:
40:9e:d0:4b:25:48:6b:14:c9:f2:7d:ea:1b:21:cf:
ce:a4:70:29:4e:9b:eb:bd:8e:74:ab:5c:31:15:37:
c2:7d:4c:d6:70:4c:de:93:ca:a2:09:ca:2f:91:3c:
a3:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:D6:94:74:BE:91:B7:69:65:E8:84:F7:57:EC:46:BE:05:E9:F4:BC
X509v3 Authority Key Identifier:
keyid:B6:9D:28:B7:D0:28:CA:BB:96:84:A8:0E:14:BA:AF:15:CA:6F:D2:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tp0ot9AoyruWhKgOFLqvFcpv0vY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/b22c1e-ca4c-481e-91a2-5c93239e5e2e/1/tp0ot9AoyruWhKgOFLqvFcpv0vY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/b22c1e-ca4c-481e-91a2-5c93239e5e2e/1/tp0ot9AoyruWhKgOFLqvFcpv0vY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:09:65:8c:b2:f3:6f:53:b6:b4:3c:bc:43:72:29:f7:61:2b:
71:b5:e2:00:f4:6f:fb:79:5c:59:22:87:21:9f:be:3e:5b:9c:
a9:9a:42:ef:4a:ba:2a:5d:7a:82:cc:ce:c9:d7:9d:fb:96:7b:
07:50:04:6f:ff:ab:11:85:d6:9e:c6:f5:7d:9a:80:3b:89:2b:
ad:e7:5c:03:4f:1b:f8:24:bf:b1:5e:4d:62:4b:bf:40:3f:45:
c8:1d:09:3c:1e:0d:4c:9c:c3:e9:70:70:3b:92:0b:07:2b:a1:
df:0d:a3:70:66:8a:b6:d2:d4:f7:b4:18:c7:4e:c1:b0:83:31:
04:38:d2:d8:ae:7d:d8:59:3e:80:71:4a:e1:3c:20:07:6c:d4:
03:37:0d:a1:52:1c:de:04:25:3a:17:7d:8b:b0:8d:1c:f3:28:
95:fe:73:c5:53:77:13:a7:1d:39:72:a5:8e:fa:28:d7:bc:81:
ed:ff:ea:57:f5:d8:ef:ea:03:00:74:ff:b7:ad:30:22:44:9f:
63:66:4b:c0:5a:aa:de:6c:59:8f:76:02:06:9e:3f:41:dd:fe:
a8:1e:25:1e:71:e0:9a:8c:cf:fa:a4:45:43:8b:1c:33:ae:12:
a7:61:d1:25:61:49:b0:54:47:2e:4a:c5:d8:49:32:19:fc:d1:
7c:8c:c4:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 21:01:43 2025 by rpki-client