Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/9a4cce-fd12-4707-be95-0a246ab05946/1/tSJ4dZnxeY4kX5k_jLgYL5nP0QQ.mft
File: tSJ4dZnxeY4kX5k_jLgYL5nP0QQ.mft (raw, json)
Hash identifier: ZPMY05wwkrp7V6+FjVWvNEi7BvYjxaZnXpEBTTWj7r4=
Subject key identifier: 57:1F:30:2B:4E:2D:30:7C:C6:39:74:A3:39:31:57:B1:2A:00:5F:FE
Authority key identifier: B5:22:78:75:99:F1:79:8E:24:5F:99:3F:8C:B8:18:2F:99:CF:D1:04
Certificate issuer: /CN=b522787599f1798e245f993f8cb8182f99cfd104
Certificate serial: 019A53084E42B127B8680E6CA5444C53F34B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tSJ4dZnxeY4kX5k_jLgYL5nP0QQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/9a4cce-fd12-4707-be95-0a246ab05946/1/tSJ4dZnxeY4kX5k_jLgYL5nP0QQ.mft
Manifest number: 0E8C
Signing time: Wed 05 Nov 2025 08:00:44 +0000
Manifest this update: Wed 05 Nov 2025 08:00:44 +0000
Manifest next update: Thu 06 Nov 2025 08:00:44 +0000
Files and hashes: 1: 2o-thtsUmdvMYHtv9qjNUTl4ar8.roa (hash: lFf88qPAFyfJ0i5OxU8GOvf0pF7V0Wi7poD5MDkBh2U=)
2: tSJ4dZnxeY4kX5k_jLgYL5nP0QQ.crl (hash: drHTK3Zn3WjTm0TDUW14ApzJSXeA0zlFZRvvHtLqRWY=)
3: xzr06xbQWPKGyePi4W8ezv0xyXU.roa (hash: r6Ttugun2Irp6PGhhAikFJmsuU2fRdTtE284A/50Ue4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/9a4cce-fd12-4707-be95-0a246ab05946/1/tSJ4dZnxeY4kX5k_jLgYL5nP0QQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/9a4cce-fd12-4707-be95-0a246ab05946/1/tSJ4dZnxeY4kX5k_jLgYL5nP0QQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/tSJ4dZnxeY4kX5k_jLgYL5nP0QQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 08:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:53:08:4e:42:b1:27:b8:68:0e:6c:a5:44:4c:53:f3:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b522787599f1798e245f993f8cb8182f99cfd104
Validity
Not Before: Nov 5 08:00:44 2025 GMT
Not After : Nov 6 08:00:44 2025 GMT
Subject: CN=571f302b4e2d307cc63974a3393157b12a005ffe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:4c:ef:15:0a:48:74:f9:16:41:d1:d8:b7:e5:
59:cc:c2:65:e4:85:81:f8:81:1c:96:de:b2:0e:7a:
97:ef:95:01:b4:c2:d1:67:c9:5c:eb:31:de:6f:11:
c8:e9:ba:d8:cf:bb:11:49:78:fb:1a:e3:87:4e:23:
14:e4:b4:25:d1:f2:39:8a:a9:93:02:bc:1a:fd:8a:
10:1a:4b:ad:fd:01:56:6b:5e:f9:30:7d:26:5e:fa:
18:97:f9:25:e6:96:c6:e3:56:71:04:5b:62:2c:26:
a3:ce:35:05:99:2f:02:c6:af:5f:cf:a6:53:76:57:
8e:2e:4d:94:b7:1f:e6:b2:e7:68:8b:7f:66:b0:ed:
4b:16:21:04:43:7b:03:ea:38:60:38:df:61:bf:cd:
bc:49:13:ca:ba:f0:ff:cb:67:4c:0b:22:8a:5e:38:
d3:50:01:67:01:06:c5:94:d0:c4:3d:28:aa:12:2b:
6a:67:67:c2:4a:b9:c6:79:56:56:ac:d6:da:5f:de:
f0:a1:9c:d8:21:ae:1d:b7:6e:d0:ea:ea:80:21:ea:
3a:06:fd:bd:74:d7:15:dc:00:da:a6:2e:f5:b5:b1:
01:4f:0b:40:b6:a5:89:a4:74:61:03:40:b7:17:59:
f0:1f:44:56:04:b9:71:21:dd:0a:8e:cd:73:2a:8a:
2d:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:1F:30:2B:4E:2D:30:7C:C6:39:74:A3:39:31:57:B1:2A:00:5F:FE
X509v3 Authority Key Identifier:
keyid:B5:22:78:75:99:F1:79:8E:24:5F:99:3F:8C:B8:18:2F:99:CF:D1:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tSJ4dZnxeY4kX5k_jLgYL5nP0QQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/9a4cce-fd12-4707-be95-0a246ab05946/1/tSJ4dZnxeY4kX5k_jLgYL5nP0QQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/9a4cce-fd12-4707-be95-0a246ab05946/1/tSJ4dZnxeY4kX5k_jLgYL5nP0QQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:e4:a1:99:10:c1:56:6c:5e:f4:00:e5:5a:53:52:c7:d3:d6:
2f:18:d8:5f:6d:6d:0c:e9:5e:0d:dd:0d:55:e1:70:fa:41:4d:
43:58:af:0e:b0:45:d9:e8:11:60:2e:64:ee:d7:43:be:f1:ab:
ae:db:2b:6c:9f:16:de:ee:d6:00:e6:27:97:18:f1:a1:2a:e6:
fd:7c:fd:19:bf:e3:e1:73:71:59:49:6d:0f:d7:63:8c:1a:8d:
a0:e5:b5:ad:12:da:3e:b8:aa:53:2b:84:c7:d7:3e:40:f8:6c:
0b:50:aa:50:45:37:39:6e:0a:33:6d:34:5d:ef:7d:21:af:90:
fe:83:46:a0:fb:b8:ee:0f:54:64:9e:4b:52:74:cf:2c:f1:15:
eb:d5:ea:11:02:92:c3:77:fa:67:35:34:f2:75:82:ec:04:82:
a5:4e:c3:4b:e8:86:c1:ac:fc:e6:6f:6a:16:ae:33:6e:1a:88:
27:5e:ed:df:f2:68:78:99:35:86:da:bc:be:66:08:52:70:4b:
27:ef:bd:d7:97:53:09:2b:71:d5:f5:e8:59:bc:8c:f5:d9:71:
8c:b9:5d:bc:69:d1:e4:f2:7b:b7:54:0c:6f:36:a2:0d:08:c5:
2c:a4:9b:fb:11:2a:ad:4c:73:75:cc:63:cd:f4:81:9a:fd:26:
9c:44:bd:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 15:13:00 2025 by rpki-client