Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/41e287-50b4-46ef-82cc-ca3b7278dde2/1/tpy3CZNLmfaJ3R6Z1ywbAA_YcsU.mft
File: tpy3CZNLmfaJ3R6Z1ywbAA_YcsU.mft (raw, json)
Hash identifier: gQYOFKt9mi/bjBfe4RnZpGNtpfTbxuV64HDVvpTSiO8=
Subject key identifier: A0:C1:B7:C8:A4:86:D1:73:D9:E6:E1:B1:40:3E:7A:87:C4:B6:94:18
Authority key identifier: B6:9C:B7:09:93:4B:99:F6:89:DD:1E:99:D7:2C:1B:00:0F:D8:72:C5
Certificate issuer: /CN=b69cb709934b99f689dd1e99d72c1b000fd872c5
Certificate serial: 019A70DC75A1233398CE1B563E35E7C7AD33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tpy3CZNLmfaJ3R6Z1ywbAA_YcsU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/41e287-50b4-46ef-82cc-ca3b7278dde2/1/tpy3CZNLmfaJ3R6Z1ywbAA_YcsU.mft
Manifest number: 1721
Signing time: Tue 11 Nov 2025 03:01:27 +0000
Manifest this update: Tue 11 Nov 2025 03:01:27 +0000
Manifest next update: Wed 12 Nov 2025 03:01:27 +0000
Files and hashes: 1: iRWK7zhmEqe5kSfNzw4pTeBGjvE.roa (hash: x9g5RUDfgJ6Mixu1OZfai6p4BgXIl99taX8ijSdqumo=)
2: tpy3CZNLmfaJ3R6Z1ywbAA_YcsU.crl (hash: eshq6Wp3gWnIgTyszSh6+oLr8MvfFEuPN/kQ1vCXRsw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/41e287-50b4-46ef-82cc-ca3b7278dde2/1/tpy3CZNLmfaJ3R6Z1ywbAA_YcsU.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/41e287-50b4-46ef-82cc-ca3b7278dde2/1/tpy3CZNLmfaJ3R6Z1ywbAA_YcsU.mft
rsync://rpki.ripe.net/repository/DEFAULT/tpy3CZNLmfaJ3R6Z1ywbAA_YcsU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 03:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:dc:75:a1:23:33:98:ce:1b:56:3e:35:e7:c7:ad:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b69cb709934b99f689dd1e99d72c1b000fd872c5
Validity
Not Before: Nov 11 03:01:27 2025 GMT
Not After : Nov 12 03:01:27 2025 GMT
Subject: CN=a0c1b7c8a486d173d9e6e1b1403e7a87c4b69418
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:cb:01:f4:5e:77:af:85:0f:8e:43:f7:e4:97:
ee:65:01:bb:ff:ca:0c:b1:fd:ff:3d:80:a1:23:d1:
71:af:cd:2d:0d:14:04:f5:56:a3:01:d5:22:e6:95:
34:b2:bc:3a:74:c3:d5:7d:d5:4d:c3:1a:09:91:bd:
4c:35:52:d7:90:30:d5:18:5f:67:cc:49:f1:15:3e:
00:d6:94:f0:21:5e:3f:06:4a:a0:e9:00:86:0d:4a:
a3:6e:cf:16:c9:cc:23:31:01:0d:a8:43:ce:82:33:
b7:5a:fe:cc:b8:0c:3d:1b:86:f2:fd:29:ca:a0:7d:
23:da:2c:1e:89:a3:78:44:a7:e5:37:b2:e3:44:5d:
98:6a:c9:dc:dd:b2:85:70:08:67:9f:f7:0a:a0:1f:
f2:09:74:c8:05:7c:5f:8e:f8:b6:fb:54:ad:91:36:
99:67:db:aa:37:ae:7b:6d:6f:d5:4f:81:08:a5:62:
56:68:c5:00:7d:00:6e:e4:ee:0c:31:dc:8a:e9:a4:
40:5e:f9:66:64:ec:fd:58:60:3c:68:8a:71:dd:0b:
71:6a:8a:37:8a:88:28:d4:bd:4b:b1:78:d9:51:e6:
8f:01:e9:fd:fe:fd:39:81:57:b4:b6:4f:65:41:ab:
af:c1:c1:51:1d:a6:74:b9:6f:47:79:1e:f5:48:4e:
04:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:C1:B7:C8:A4:86:D1:73:D9:E6:E1:B1:40:3E:7A:87:C4:B6:94:18
X509v3 Authority Key Identifier:
keyid:B6:9C:B7:09:93:4B:99:F6:89:DD:1E:99:D7:2C:1B:00:0F:D8:72:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tpy3CZNLmfaJ3R6Z1ywbAA_YcsU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/41e287-50b4-46ef-82cc-ca3b7278dde2/1/tpy3CZNLmfaJ3R6Z1ywbAA_YcsU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/41e287-50b4-46ef-82cc-ca3b7278dde2/1/tpy3CZNLmfaJ3R6Z1ywbAA_YcsU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:c6:7b:cd:44:01:12:7d:d9:93:e6:87:15:22:df:8f:a1:24:
31:c5:d6:70:5c:34:ec:1c:51:b4:24:9c:dd:5d:46:ce:cc:10:
67:1f:9c:61:39:96:e1:2d:cd:98:34:15:c1:c5:92:ac:e2:de:
ce:9b:c7:af:4d:86:ca:fe:53:7c:91:6e:3a:59:30:b4:df:82:
64:6f:87:0e:d8:0c:b4:81:80:b1:0e:66:ae:55:ef:4b:f3:3a:
4a:bf:83:4a:cf:4a:4f:b5:aa:0a:1f:f0:0b:af:7a:41:f4:2d:
7c:36:4b:a3:60:0b:50:06:b2:05:af:4c:58:1c:38:90:28:1c:
dc:62:63:7e:ee:fb:87:07:4d:a2:b1:c2:e6:d7:89:d0:d3:8b:
73:8a:95:41:5d:63:36:16:24:18:84:06:e3:0b:ad:e0:44:02:
1d:26:4a:e9:a2:5e:65:4e:57:e4:c7:44:d2:e0:c2:eb:9f:8f:
8b:39:1c:57:da:b2:36:36:b1:6c:dc:84:c6:ad:9d:67:d4:e4:
49:b3:92:78:43:2b:09:20:01:d4:b8:e1:37:d7:02:42:68:f1:
32:03:d1:bd:69:ec:46:f0:ea:61:cc:23:ce:69:6e:db:e3:35:
e9:d0:16:25:40:03:c1:91:75:9f:3e:1b:98:d9:39:ba:96:ed:
da:bf:dc:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:42:50 2025 by rpki-client