Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/e61614-ebc5-4731-8560-9d1812999a35/1/tKkPaJZnhEKvruG6qqayot7KzTs.mft
File: tKkPaJZnhEKvruG6qqayot7KzTs.mft (raw, json)
Hash identifier: RdVK1u0f8445XKF7vYKL/WOnO4MgKjAty9s1Nt9HwKo=
Subject key identifier: 38:9B:41:DE:4F:1A:A5:D3:86:37:1F:93:99:1D:1A:93:25:4D:38:27
Authority key identifier: B4:A9:0F:68:96:67:84:42:AF:AE:E1:BA:AA:A6:B2:A2:DE:CA:CD:3B
Certificate issuer: /CN=b4a90f6896678442afaee1baaaa6b2a2decacd3b
Certificate serial: 019A4F2B44C81ED1AB947B79346BCF13269D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tKkPaJZnhEKvruG6qqayot7KzTs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/e61614-ebc5-4731-8560-9d1812999a35/1/tKkPaJZnhEKvruG6qqayot7KzTs.mft
Manifest number: 1712
Signing time: Tue 04 Nov 2025 14:00:26 +0000
Manifest this update: Tue 04 Nov 2025 14:00:26 +0000
Manifest next update: Wed 05 Nov 2025 14:00:26 +0000
Files and hashes: 1: 39ZjK9ko_rOoFQIzT57AAjvsCVs.roa (hash: BIzWpSHIVnRCyLi48qy1GipHxFT8YyuZOYnCzfTHwBQ=)
2: OazFtN4IiCarucNk5wRvdseM_QM.roa (hash: EMG8IwLgN/B9dcK6/rw77xxT/QPgwRqBDKE5biLAPVI=)
3: tKkPaJZnhEKvruG6qqayot7KzTs.crl (hash: 8mMj8igKqoLLvfndYxyEkWXjJuPJymOb7lja5D48NMg=)
4: v1Ryzz_N409NzbmRAuen4MQjOWo.roa (hash: nCjeo/lqPblEWttxGqrN/iF+J58uOtYvtP5cDeaC0E8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/e61614-ebc5-4731-8560-9d1812999a35/1/tKkPaJZnhEKvruG6qqayot7KzTs.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/e61614-ebc5-4731-8560-9d1812999a35/1/tKkPaJZnhEKvruG6qqayot7KzTs.mft
rsync://rpki.ripe.net/repository/DEFAULT/tKkPaJZnhEKvruG6qqayot7KzTs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:2b:44:c8:1e:d1:ab:94:7b:79:34:6b:cf:13:26:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4a90f6896678442afaee1baaaa6b2a2decacd3b
Validity
Not Before: Nov 4 14:00:26 2025 GMT
Not After : Nov 5 14:00:26 2025 GMT
Subject: CN=389b41de4f1aa5d386371f93991d1a93254d3827
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:dd:2a:83:a9:aa:44:a8:6f:42:42:0f:61:81:
14:67:7d:17:04:57:0d:3d:60:a5:7c:86:01:5a:af:
ac:81:41:b6:20:ef:ad:44:71:a1:e4:9b:61:4b:c7:
48:10:b8:08:ab:af:e4:b0:64:f7:a6:3a:5a:c4:8f:
82:9d:e7:a4:be:ef:82:df:c2:ab:ba:ca:29:6b:dd:
c2:79:30:db:01:ad:2a:88:c2:c0:52:60:13:dd:27:
32:08:c0:fd:34:4c:77:dc:90:d1:17:d0:87:38:51:
66:8a:ca:a4:67:ba:96:be:c7:d4:64:dd:ce:98:21:
7a:ab:59:6c:10:92:a0:55:d9:d2:b4:b5:b0:ed:d9:
81:97:b9:03:fa:38:2d:76:f5:a0:31:6a:ed:02:8e:
84:92:3e:0c:6d:72:bc:4e:53:b5:b6:37:f5:89:94:
b8:b2:25:88:eb:dd:9d:11:71:d8:2a:2e:f7:f5:74:
c2:25:2e:e5:c8:a4:36:b4:93:14:95:a0:4d:5f:d5:
97:e9:0c:8a:60:c0:9a:6b:ea:6e:6e:dd:e8:cb:5d:
ef:df:cc:1d:dc:d7:42:d3:ad:14:d3:78:9f:89:af:
d9:97:41:95:d4:79:14:d2:71:e3:55:a2:62:6b:7a:
23:d9:4a:66:d0:d7:cb:09:2b:b5:10:45:87:72:bc:
30:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:9B:41:DE:4F:1A:A5:D3:86:37:1F:93:99:1D:1A:93:25:4D:38:27
X509v3 Authority Key Identifier:
keyid:B4:A9:0F:68:96:67:84:42:AF:AE:E1:BA:AA:A6:B2:A2:DE:CA:CD:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tKkPaJZnhEKvruG6qqayot7KzTs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/e61614-ebc5-4731-8560-9d1812999a35/1/tKkPaJZnhEKvruG6qqayot7KzTs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/e61614-ebc5-4731-8560-9d1812999a35/1/tKkPaJZnhEKvruG6qqayot7KzTs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:c0:2c:d4:b2:77:20:eb:de:36:4e:d7:b6:4c:ea:de:9b:ed:
9a:d1:de:df:f4:bf:af:5f:ec:8d:1a:d6:7b:22:28:75:12:1b:
cf:b6:c9:32:d2:02:2d:3d:b7:26:36:57:1f:51:5b:bd:c6:e9:
14:3f:fb:27:c9:6a:c3:8b:94:1e:ec:af:a3:70:cb:4a:fb:5a:
8c:73:1f:b2:00:31:fb:05:2e:c3:93:46:70:11:55:33:f6:96:
bf:ba:12:32:08:46:af:d7:27:82:43:5e:45:6e:c3:3b:ab:ae:
89:40:35:41:64:64:3a:b8:b5:eb:28:2b:3c:2f:7f:5a:c2:19:
eb:aa:52:b7:1b:00:73:ed:bc:c0:ac:38:57:fb:1f:df:a8:4b:
57:a1:d9:71:b2:d5:00:76:42:2c:97:4b:78:d8:cf:43:9b:23:
a1:5b:5f:d7:cf:f0:1d:71:0a:64:d9:79:98:79:d8:1f:74:58:
84:02:77:4e:a5:12:d1:17:9b:42:89:c3:6b:04:ab:eb:c3:b3:
36:0f:68:3c:47:7f:c6:13:4d:62:43:af:41:b2:b5:1a:f2:c3:
a9:2e:37:2b:0c:21:39:b5:a4:a5:3c:38:9e:e2:f6:05:5e:f8:
15:12:1b:e1:31:b7:3f:57:98:09:05:86:ca:ba:12:f2:38:44:
1e:5a:5b:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:06:32 2025 by rpki-client