Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/c7caf3-eb08-4556-a5b7-fc6e77884054/1/tGS0UjqJcrni9GpPShY06XAnrt8.mft
File: tGS0UjqJcrni9GpPShY06XAnrt8.mft (raw, json)
Hash identifier: uhfswBO+t5/hlItGyYqSBk5n+3qu5NqaacH2/RM3D1Y=
Subject key identifier: 8F:C8:F0:8B:A3:11:86:50:DB:10:93:B6:57:D7:AE:5C:58:98:BF:06
Authority key identifier: B4:64:B4:52:3A:89:72:B9:E2:F4:6A:4F:4A:16:34:E9:70:27:AE:DF
Certificate issuer: /CN=b464b4523a8972b9e2f46a4f4a1634e97027aedf
Certificate serial: 019A5308482012A1EC0A90A901A20284BF23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tGS0UjqJcrni9GpPShY06XAnrt8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/c7caf3-eb08-4556-a5b7-fc6e77884054/1/tGS0UjqJcrni9GpPShY06XAnrt8.mft
Manifest number: 06D9
Signing time: Wed 05 Nov 2025 08:00:42 +0000
Manifest this update: Wed 05 Nov 2025 08:00:42 +0000
Manifest next update: Thu 06 Nov 2025 08:00:42 +0000
Files and hashes: 1: LCm5HjjBIgE4kc53Y1x9V3jEK5E.roa (hash: gidlYB2yA995VC/sjZRH4fK+Z2xDnArATR8jcQsRBeo=)
2: Vo2AEZubMry-8LbxfP3bd7koV9U.roa (hash: Fh0uHUq/PCCkV86hQ4ARdMVMrk3QlRXqnTaAy7kodnk=)
3: g8C52r-HgjcOKaKK01GccaiLGqY.roa (hash: yFMdULn9+zrpJgeM+fVWlj0c0e8CtPQGd00H0hnJUEs=)
4: tGS0UjqJcrni9GpPShY06XAnrt8.crl (hash: 35Z4PpFURZN6iH8iMx8eVrjqvQXDCYumcnJqSUNBMrI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/c7caf3-eb08-4556-a5b7-fc6e77884054/1/tGS0UjqJcrni9GpPShY06XAnrt8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/c7caf3-eb08-4556-a5b7-fc6e77884054/1/tGS0UjqJcrni9GpPShY06XAnrt8.mft
rsync://rpki.ripe.net/repository/DEFAULT/tGS0UjqJcrni9GpPShY06XAnrt8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:53:08:48:20:12:a1:ec:0a:90:a9:01:a2:02:84:bf:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b464b4523a8972b9e2f46a4f4a1634e97027aedf
Validity
Not Before: Nov 5 08:00:42 2025 GMT
Not After : Nov 6 08:00:42 2025 GMT
Subject: CN=8fc8f08ba3118650db1093b657d7ae5c5898bf06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:d1:f6:15:9e:d0:4c:dc:24:2c:00:4b:6b:71:
77:90:ff:9c:04:e3:cf:30:3b:9f:ed:c6:63:93:d4:
0b:fa:b9:b8:0c:78:36:50:7f:17:0d:6a:12:0e:4f:
2f:56:6e:25:44:de:49:4c:51:30:f0:e3:33:ee:81:
41:b4:af:3a:97:0d:34:70:88:d3:7c:10:58:cd:df:
d1:7e:a6:66:d7:e4:c5:1c:c9:8d:48:eb:d7:10:d3:
67:37:15:2c:73:a6:2a:2f:1d:02:b0:84:32:db:ae:
17:b6:bb:c1:72:d3:5d:15:95:f1:dd:42:8c:97:9f:
4f:fd:bb:57:b9:05:56:33:9c:f0:58:ab:44:60:06:
7d:93:36:c7:2f:e8:75:3a:69:33:a0:f3:fd:c9:5a:
69:1c:f9:37:51:c5:54:5b:78:11:7d:c3:12:df:34:
2c:a7:38:0b:a8:b0:c1:6d:c2:6c:30:9a:77:85:f5:
3a:cd:85:92:b3:7d:71:c7:79:b3:ff:5f:59:f9:a6:
60:42:ee:62:8a:55:a8:07:4e:79:9e:4e:09:34:e8:
58:e3:1a:3c:6b:84:01:08:d7:26:a9:bf:c4:a6:92:
74:dc:5d:d6:46:df:3f:e5:28:42:11:b7:31:26:b2:
06:cf:3f:8d:68:03:68:a3:2e:2f:a5:c0:79:c2:34:
fb:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:C8:F0:8B:A3:11:86:50:DB:10:93:B6:57:D7:AE:5C:58:98:BF:06
X509v3 Authority Key Identifier:
keyid:B4:64:B4:52:3A:89:72:B9:E2:F4:6A:4F:4A:16:34:E9:70:27:AE:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tGS0UjqJcrni9GpPShY06XAnrt8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/c7caf3-eb08-4556-a5b7-fc6e77884054/1/tGS0UjqJcrni9GpPShY06XAnrt8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/c7caf3-eb08-4556-a5b7-fc6e77884054/1/tGS0UjqJcrni9GpPShY06XAnrt8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:32:20:b0:fb:6d:f7:75:d1:8c:66:44:c4:35:d2:6d:e2:50:
2c:86:b0:ac:76:8c:10:26:7d:ce:ac:e3:74:40:b9:18:5d:02:
c8:e7:5f:c6:95:82:4b:fc:cf:a5:57:46:9c:0b:7c:1b:d1:70:
51:e3:26:d3:eb:9c:68:5e:0d:61:31:ba:18:c4:aa:91:6d:53:
e6:1d:73:95:76:e7:29:01:21:6b:c0:0c:08:d6:d1:4c:fa:2c:
98:77:9c:f5:80:5d:6f:bf:80:82:90:3c:b4:cf:b0:86:d1:61:
f0:29:f8:f1:e2:db:89:c1:cc:e7:4f:66:80:50:46:22:09:22:
3a:75:a9:8e:11:3f:82:97:c9:fe:17:94:2f:7a:87:32:d7:7d:
9e:9d:5a:4f:28:c9:40:05:8d:23:12:37:dc:b6:f4:8a:b5:23:
15:14:fe:16:4d:0b:b0:65:13:7c:e1:b1:90:e5:58:da:ba:12:
bf:56:ec:2b:c2:09:ca:e4:5d:a7:11:63:8e:28:63:8e:8a:31:
92:75:60:9e:ed:77:42:a9:d8:51:03:0d:3f:98:37:78:0d:08:
18:76:98:e6:87:27:3a:24:9a:1d:a6:6f:ff:af:1f:43:97:5a:
e7:db:8d:af:58:0d:c6:82:8d:7c:a4:24:e9:de:2e:0f:e4:2a:
49:01:4e:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 13:10:57 2025 by rpki-client