Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/55d584-19a1-47c0-95a6-bc8e0b69ac12/1/tEjWJqkg5C2s0OlI6Wal5LzDwRw.mft
File: tEjWJqkg5C2s0OlI6Wal5LzDwRw.mft (raw, json)
Hash identifier: 1FDPaA6bOOMTh+hQavF8wW65pTUzdh9FBP4BUNrMFmU=
Subject key identifier: CA:78:06:8F:27:C7:AD:D5:C5:AA:1D:B2:3D:F1:1A:36:1D:DD:90:58
Authority key identifier: B4:48:D6:26:A9:20:E4:2D:AC:D0:E9:48:E9:66:A5:E4:BC:C3:C1:1C
Certificate issuer: /CN=b448d626a920e42dacd0e948e966a5e4bcc3c11c
Certificate serial: 019A71EEF73B78EA5025060246D83F9CE690
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tEjWJqkg5C2s0OlI6Wal5LzDwRw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/55d584-19a1-47c0-95a6-bc8e0b69ac12/1/tEjWJqkg5C2s0OlI6Wal5LzDwRw.mft
Manifest number: 117E
Signing time: Tue 11 Nov 2025 08:01:17 +0000
Manifest this update: Tue 11 Nov 2025 08:01:17 +0000
Manifest next update: Wed 12 Nov 2025 08:01:17 +0000
Files and hashes: 1: Tm8yT_3vBgLrxw1Lr4A3GN1Cjk4.roa (hash: cpwfuPoZQp9+xwJvstUEZKWWh0LDOj40EbCeSJBVSfw=)
2: tEjWJqkg5C2s0OlI6Wal5LzDwRw.crl (hash: AUylAPskOOjDYtDNMdUOUe73NCleW1u+HnE1gxgcyCg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/55d584-19a1-47c0-95a6-bc8e0b69ac12/1/tEjWJqkg5C2s0OlI6Wal5LzDwRw.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/55d584-19a1-47c0-95a6-bc8e0b69ac12/1/tEjWJqkg5C2s0OlI6Wal5LzDwRw.mft
rsync://rpki.ripe.net/repository/DEFAULT/tEjWJqkg5C2s0OlI6Wal5LzDwRw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:f7:3b:78:ea:50:25:06:02:46:d8:3f:9c:e6:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b448d626a920e42dacd0e948e966a5e4bcc3c11c
Validity
Not Before: Nov 11 08:01:17 2025 GMT
Not After : Nov 12 08:01:17 2025 GMT
Subject: CN=ca78068f27c7add5c5aa1db23df11a361ddd9058
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:a7:c9:bb:31:34:e8:8c:7a:27:c7:37:f1:64:
da:bc:75:c2:1e:d9:31:9a:0a:5a:9a:e3:a1:d9:d6:
bc:78:0c:fb:8d:ad:75:5e:a9:d5:00:45:d1:e4:50:
45:7b:e7:ff:60:49:31:2f:ef:2f:14:61:ff:e8:2c:
55:4b:af:6c:d6:e8:d3:ae:2f:27:ef:b3:7d:f9:1a:
41:79:98:5c:f3:4f:4c:85:40:0a:00:2f:94:16:44:
3a:6c:b6:be:49:3d:05:b3:05:d0:c4:48:b4:47:52:
09:6c:a7:f0:81:f7:4a:30:23:4f:c3:da:b0:8a:4c:
fe:bf:8e:d6:38:3a:90:d8:38:29:fa:94:57:0e:69:
a9:a5:de:f2:20:08:b3:03:78:7e:6b:30:c9:d7:9e:
2e:ac:92:ff:c7:34:c7:41:c3:00:fa:f2:20:81:6a:
e8:f6:76:cc:9e:8d:15:64:f6:2a:ab:f3:67:31:fd:
a6:a9:38:21:fc:23:ae:95:ee:71:18:3c:dd:c6:27:
8f:d0:2a:b9:15:a0:71:b9:fc:ef:93:cd:b0:a2:09:
ac:f1:2d:e4:1d:dd:78:ed:b1:45:42:f3:da:39:a8:
07:c2:14:f0:16:7b:00:05:a1:1d:6a:36:84:a1:d6:
bc:bd:16:74:7a:18:73:7f:ad:26:36:56:54:cf:47:
45:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:78:06:8F:27:C7:AD:D5:C5:AA:1D:B2:3D:F1:1A:36:1D:DD:90:58
X509v3 Authority Key Identifier:
keyid:B4:48:D6:26:A9:20:E4:2D:AC:D0:E9:48:E9:66:A5:E4:BC:C3:C1:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tEjWJqkg5C2s0OlI6Wal5LzDwRw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/55d584-19a1-47c0-95a6-bc8e0b69ac12/1/tEjWJqkg5C2s0OlI6Wal5LzDwRw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/55d584-19a1-47c0-95a6-bc8e0b69ac12/1/tEjWJqkg5C2s0OlI6Wal5LzDwRw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:4c:73:ed:11:f4:28:1a:e9:41:f9:4b:09:49:2e:90:ee:34:
20:8f:6e:0b:16:3e:aa:a8:da:82:c0:5f:cc:1c:57:e4:4b:ca:
15:c8:1a:9b:0d:d5:26:da:1c:fe:c4:ef:f5:52:14:a4:33:af:
6b:a3:6c:86:cc:fd:c2:67:11:46:db:3d:20:25:40:b2:66:82:
4d:63:55:8c:b2:ed:2a:d1:15:45:13:f7:16:f7:cb:e9:95:db:
68:6e:aa:14:d8:2c:8d:cb:26:f1:38:0d:6e:c9:21:d5:4c:8c:
a3:d2:22:db:d3:3b:59:83:b5:1d:46:04:44:f0:cc:e6:58:65:
90:9c:4c:ba:16:46:23:bf:94:f2:dd:b9:a9:f6:a5:11:ae:39:
1b:c0:0b:19:b6:27:75:c9:62:df:20:3d:72:cf:4e:21:b9:6e:
35:ad:f7:af:f4:bf:51:d0:2d:8f:83:06:16:a5:2d:ea:43:fe:
29:16:a4:88:6e:ea:57:e6:43:74:ad:7c:90:06:8b:76:2b:33:
96:f0:ef:bc:d5:b7:a7:4e:91:84:45:17:fc:55:9d:65:82:1a:
5b:c6:8a:eb:d6:35:fc:49:37:af:ce:b0:1b:6e:a6:47:c5:5b:
4f:41:c8:56:09:0d:08:b2:bb:5a:4f:4a:79:c5:57:fc:b5:07:
47:4a:81:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:28:08 2025 by rpki-client