Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/7434e1-7413-4f6a-a29c-cdc81db77531/1/tIvY7E4wHJ57CkO-8PPd06RTFVo.mft
File: tIvY7E4wHJ57CkO-8PPd06RTFVo.mft (raw, json)
Hash identifier: TtnY4bkd1C3xynjoWgHSmxCSTxGlSBZauknLu71GL4o=
Subject key identifier: 45:24:26:4A:40:55:EF:87:02:03:A7:F8:28:BC:09:2E:EA:AF:5E:59
Authority key identifier: B4:8B:D8:EC:4E:30:1C:9E:7B:0A:43:BE:F0:F3:DD:D3:A4:53:15:5A
Certificate issuer: /CN=b48bd8ec4e301c9e7b0a43bef0f3ddd3a453155a
Certificate serial: 019A7293FFBA1D96385C59196F89C217F971
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tIvY7E4wHJ57CkO-8PPd06RTFVo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/7434e1-7413-4f6a-a29c-cdc81db77531/1/tIvY7E4wHJ57CkO-8PPd06RTFVo.mft
Manifest number: 03E0
Signing time: Tue 11 Nov 2025 11:01:33 +0000
Manifest this update: Tue 11 Nov 2025 11:01:33 +0000
Manifest next update: Wed 12 Nov 2025 11:01:33 +0000
Files and hashes: 1: RB7HUixrp2_fRnv8EOUDAJuY_s8.roa (hash: 8tnZtAu3C6mP5DEQfehN4BPaOTowIhr+JO1L2V82k9E=)
2: tIvY7E4wHJ57CkO-8PPd06RTFVo.crl (hash: d5m1rBxygvPgUGexTuRQ/f9tiJ5EarCSAHM/WZeXKns=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/7434e1-7413-4f6a-a29c-cdc81db77531/1/tIvY7E4wHJ57CkO-8PPd06RTFVo.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/7434e1-7413-4f6a-a29c-cdc81db77531/1/tIvY7E4wHJ57CkO-8PPd06RTFVo.mft
rsync://rpki.ripe.net/repository/DEFAULT/tIvY7E4wHJ57CkO-8PPd06RTFVo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:93:ff:ba:1d:96:38:5c:59:19:6f:89:c2:17:f9:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b48bd8ec4e301c9e7b0a43bef0f3ddd3a453155a
Validity
Not Before: Nov 11 11:01:33 2025 GMT
Not After : Nov 12 11:01:33 2025 GMT
Subject: CN=4524264a4055ef870203a7f828bc092eeaaf5e59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:2c:a0:99:9f:40:b9:ea:49:b9:42:e3:83:07:
19:fc:d6:33:02:0d:af:d9:24:89:4d:a0:ad:94:20:
01:e4:95:06:38:c4:e6:8f:4e:95:25:b0:66:65:50:
a6:35:e1:32:80:5e:09:e6:4e:e7:71:1a:a3:22:ba:
c1:97:48:33:dc:df:60:86:25:c0:e1:28:43:0c:32:
c6:a3:6e:17:66:ed:12:22:4a:b5:d1:94:a5:14:45:
31:3b:84:ad:ca:92:26:30:71:7b:9b:73:09:45:ab:
3d:be:cc:59:64:eb:c6:1e:a1:42:57:e1:26:e7:92:
14:d5:16:d7:8b:f7:94:d5:de:e6:24:85:8b:df:1b:
68:1f:01:41:31:04:86:ff:4c:ab:6a:e0:e7:17:2b:
2c:ad:e9:48:6e:ab:57:1a:c3:e8:b5:f9:44:67:2d:
f6:af:99:90:ba:02:00:d4:b7:0c:2a:8d:1b:0f:24:
28:0c:ea:63:4a:69:4c:c3:76:20:92:9c:df:1e:8e:
14:47:cb:2b:c4:2e:f9:23:2b:a3:20:c3:4d:ef:4a:
20:83:fa:aa:64:79:09:58:75:8f:70:15:24:19:14:
4e:2a:75:7a:c4:84:fc:54:67:e0:f9:fb:21:f4:e0:
52:b6:88:8a:c0:bd:12:7f:d9:6a:b0:50:d1:58:b3:
d8:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:24:26:4A:40:55:EF:87:02:03:A7:F8:28:BC:09:2E:EA:AF:5E:59
X509v3 Authority Key Identifier:
keyid:B4:8B:D8:EC:4E:30:1C:9E:7B:0A:43:BE:F0:F3:DD:D3:A4:53:15:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tIvY7E4wHJ57CkO-8PPd06RTFVo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/7434e1-7413-4f6a-a29c-cdc81db77531/1/tIvY7E4wHJ57CkO-8PPd06RTFVo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/7434e1-7413-4f6a-a29c-cdc81db77531/1/tIvY7E4wHJ57CkO-8PPd06RTFVo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:6d:b9:3e:e3:2f:de:71:6d:15:d7:7a:2a:e9:68:67:25:e1:
9c:bc:a9:ea:3c:16:0b:4c:ed:83:b9:a5:4a:7e:c8:ed:08:bc:
9d:c0:11:6c:f5:d3:12:d9:cb:90:ea:70:5b:1a:13:38:20:46:
d0:b0:95:7d:1c:ca:71:e6:55:56:8b:54:7d:8b:f0:64:6f:68:
14:fc:27:1a:a9:47:7d:82:af:0a:30:02:2a:99:c9:c0:dc:7d:
80:f6:62:4f:b5:bb:61:08:52:6b:5b:00:39:c8:44:ec:c3:76:
ac:81:9f:53:f0:73:bb:88:a5:95:7e:7b:09:3f:a4:11:bd:50:
c8:04:33:d9:84:ef:bf:fc:75:c3:69:7d:05:a2:e9:91:8a:de:
80:bb:bf:92:4f:e1:b3:97:2b:3e:4b:9e:40:4f:5f:9e:df:03:
ff:8f:59:df:09:1a:9c:a4:56:b4:d2:58:bc:c2:58:f9:c8:8e:
71:9a:f7:ba:da:c5:7d:35:b6:62:07:a5:b3:f1:74:7b:fa:c4:
6c:df:ae:75:d0:3f:53:59:e6:fc:af:6d:05:f8:d9:b4:3d:8e:
f4:07:0c:36:74:e4:83:b1:1f:61:9e:42:59:34:0f:cf:ab:c6:
a4:65:3d:20:57:d2:b0:ea:10:09:77:77:56:99:85:3b:a0:7b:
86:9e:de:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 16:45:15 2025 by rpki-client