Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/e8f95d-ad38-4b5c-b090-8a8564ba3c8c/1/tCV3H5kv1037Bzbmla61nGr2fpM.mft
File: tCV3H5kv1037Bzbmla61nGr2fpM.mft (raw, json)
Hash identifier: M6XnS659ZUIKKbjbhTF/iMrLPHnAmsz3BwKaWVeCyLc=
Subject key identifier: 71:FF:7F:B2:87:73:4B:3D:2F:DA:CD:3A:4C:5E:D7:3D:F3:AD:7C:06
Authority key identifier: B4:25:77:1F:99:2F:D7:4D:FB:07:36:E6:95:AE:B5:9C:6A:F6:7E:93
Certificate issuer: /CN=b425771f992fd74dfb0736e695aeb59c6af67e93
Certificate serial: 019A4EF45BEB57E20CA614445F18F4570FA4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tCV3H5kv1037Bzbmla61nGr2fpM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/e8f95d-ad38-4b5c-b090-8a8564ba3c8c/1/tCV3H5kv1037Bzbmla61nGr2fpM.mft
Manifest number: 07DD
Signing time: Tue 04 Nov 2025 13:00:28 +0000
Manifest this update: Tue 04 Nov 2025 13:00:28 +0000
Manifest next update: Wed 05 Nov 2025 13:00:28 +0000
Files and hashes: 1: Vw2yLSQ3LTxqIY-0jpawdHHYRZc.roa (hash: iTSHI+c9vyvdBq9ojdYKL9zsD6xY6XyH0HTCqL60iXA=)
2: tCV3H5kv1037Bzbmla61nGr2fpM.crl (hash: yC8/ccpF9fh1WwaPOWRligX1uU1IbggMCeji0Ix57Vk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/e8f95d-ad38-4b5c-b090-8a8564ba3c8c/1/tCV3H5kv1037Bzbmla61nGr2fpM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/e8f95d-ad38-4b5c-b090-8a8564ba3c8c/1/tCV3H5kv1037Bzbmla61nGr2fpM.mft
rsync://rpki.ripe.net/repository/DEFAULT/tCV3H5kv1037Bzbmla61nGr2fpM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:5b:eb:57:e2:0c:a6:14:44:5f:18:f4:57:0f:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b425771f992fd74dfb0736e695aeb59c6af67e93
Validity
Not Before: Nov 4 13:00:28 2025 GMT
Not After : Nov 5 13:00:28 2025 GMT
Subject: CN=71ff7fb287734b3d2fdacd3a4c5ed73df3ad7c06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:72:9c:25:3b:f0:d5:c0:a6:34:c4:fb:06:e0:
38:92:ce:04:46:e9:0d:b3:d0:e5:b3:70:40:2e:38:
da:6c:81:fc:92:5e:b4:bd:46:2b:ff:4e:7d:9a:7a:
1c:1a:8b:68:86:44:13:08:d3:9e:e6:a7:00:99:57:
45:f5:bf:02:8e:8c:e3:f7:2d:fb:d6:cd:4e:1d:9f:
f5:84:fc:ca:f1:d5:a2:e5:a1:25:32:49:8c:6f:9d:
c6:3c:f9:47:58:a4:f9:c6:cd:9f:da:64:b3:d9:53:
13:95:8b:91:a3:0e:ab:2b:cb:d8:90:29:a0:a6:2f:
28:3b:87:37:d1:c8:aa:a1:2a:4f:44:85:8b:e3:25:
a8:25:d4:93:d9:c9:e2:51:0b:29:a9:c3:6b:ac:66:
21:c3:da:cd:07:7f:4c:5d:33:17:02:b8:15:6a:1a:
92:9b:76:e7:e5:7c:b6:24:be:5c:65:04:97:b7:a6:
e3:31:37:1e:d6:65:89:98:3e:bc:f0:00:ee:5f:9d:
79:65:da:0d:51:bb:a3:51:07:3d:d7:d8:46:1a:b0:
a9:d6:74:0d:f5:83:23:5d:63:6e:b9:1c:22:ed:2d:
de:7a:f1:78:9c:5e:86:3f:67:13:f5:c0:9e:3d:2c:
f6:d1:7c:d4:db:8a:11:01:81:9c:da:9f:44:14:da:
71:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:FF:7F:B2:87:73:4B:3D:2F:DA:CD:3A:4C:5E:D7:3D:F3:AD:7C:06
X509v3 Authority Key Identifier:
keyid:B4:25:77:1F:99:2F:D7:4D:FB:07:36:E6:95:AE:B5:9C:6A:F6:7E:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tCV3H5kv1037Bzbmla61nGr2fpM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/e8f95d-ad38-4b5c-b090-8a8564ba3c8c/1/tCV3H5kv1037Bzbmla61nGr2fpM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/e8f95d-ad38-4b5c-b090-8a8564ba3c8c/1/tCV3H5kv1037Bzbmla61nGr2fpM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:88:7e:9a:db:0f:28:79:6c:e8:4b:b8:e7:7e:f3:2c:ea:2d:
0f:14:e7:8b:7b:96:3f:1a:28:1e:8d:4a:9e:5e:54:f4:ee:be:
a8:8a:03:56:01:a2:37:57:cc:15:65:63:7b:7c:32:fa:c4:e1:
50:05:56:56:ce:ef:69:60:ed:fa:78:0e:ac:8f:f3:b2:31:73:
5c:b1:a6:fd:d7:ec:d6:32:3b:d3:53:26:4d:7a:eb:ea:9c:7e:
44:b9:a9:84:58:ac:c3:59:64:6a:1f:95:0d:d7:26:59:52:72:
32:c2:6b:df:f2:f5:3f:ab:c8:a5:fc:b2:71:19:51:a6:12:87:
04:a8:69:ab:76:6d:fd:d4:c1:ba:5b:66:a8:6e:ed:7a:d3:ef:
69:5b:16:60:7f:c2:76:dd:b0:09:ed:e6:5a:11:3a:b6:d2:96:
47:cf:6d:46:62:03:a4:2f:b5:98:38:c3:08:90:b0:bd:2e:68:
03:63:99:54:23:6e:77:b5:d7:f0:ac:03:18:eb:96:2d:5c:3f:
96:c1:ce:48:10:9e:65:c4:dc:c9:94:7c:da:5d:0e:81:ec:d1:
37:aa:fa:58:78:52:92:b9:04:35:1f:94:48:a5:c9:44:09:11:
ff:70:e4:fb:62:c7:4e:b6:97:ab:94:b9:cd:a5:2a:6d:21:b3:
0b:57:de:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:05:16 2025 by rpki-client