Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/ad9e9c-aca2-480c-82e8-06faf1496693/1/_Tq5WEdps0xpXg7zvkAN5chwX1g.mft
File: _Tq5WEdps0xpXg7zvkAN5chwX1g.mft (raw, json)
Hash identifier: sdCtpvI2c15FyAOm4Upk0TRiTmWiOFEkEIqLZYL54ws=
Subject key identifier: 42:BA:80:F4:5F:74:6F:14:A8:A0:B2:4C:BE:90:C6:4C:52:5D:F5:C2
Authority key identifier: FD:3A:B9:58:47:69:B3:4C:69:5E:0E:F3:BE:40:0D:E5:C8:70:5F:58
Certificate issuer: /CN=fd3ab9584769b34c695e0ef3be400de5c8705f58
Certificate serial: 019A725CAC6AC23B5ACEE11F1DA30FAC5616
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_Tq5WEdps0xpXg7zvkAN5chwX1g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/ad9e9c-aca2-480c-82e8-06faf1496693/1/_Tq5WEdps0xpXg7zvkAN5chwX1g.mft
Manifest number: 0327
Signing time: Tue 11 Nov 2025 10:01:07 +0000
Manifest this update: Tue 11 Nov 2025 10:01:07 +0000
Manifest next update: Wed 12 Nov 2025 10:01:07 +0000
Files and hashes: 1: _Tq5WEdps0xpXg7zvkAN5chwX1g.crl (hash: GM0sRIydoBROdl4AXZHiNqXVAm4mm9CTHLcnEBqri+8=)
2: mm8C4Ou63If70LPWFRCmCNEI28c.roa (hash: g2mAP9bfs0Z2vFldLFVJmnHsqx5+Iksx21QgfS4cMys=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/ad9e9c-aca2-480c-82e8-06faf1496693/1/_Tq5WEdps0xpXg7zvkAN5chwX1g.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/ad9e9c-aca2-480c-82e8-06faf1496693/1/_Tq5WEdps0xpXg7zvkAN5chwX1g.mft
rsync://rpki.ripe.net/repository/DEFAULT/_Tq5WEdps0xpXg7zvkAN5chwX1g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:ac:6a:c2:3b:5a:ce:e1:1f:1d:a3:0f:ac:56:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd3ab9584769b34c695e0ef3be400de5c8705f58
Validity
Not Before: Nov 11 10:01:07 2025 GMT
Not After : Nov 12 10:01:07 2025 GMT
Subject: CN=42ba80f45f746f14a8a0b24cbe90c64c525df5c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:7f:65:26:e7:59:8a:9c:90:7f:55:82:bf:c2:
fb:51:c3:00:38:73:5c:67:41:a6:5e:7a:d1:72:31:
c5:4c:32:7d:1d:09:f2:25:09:e2:01:e3:c3:9a:2f:
3b:23:52:79:8c:6b:f0:c8:84:5d:b9:f8:63:40:3a:
ff:20:c4:62:62:5d:5f:70:ac:0b:67:80:e2:08:41:
ec:d3:c6:c2:91:c2:db:89:25:1a:c4:d6:47:60:8b:
84:2e:58:c0:04:9f:f4:c4:23:57:24:8d:48:0e:6a:
25:e9:89:27:fa:50:fa:1a:85:d8:a5:62:6a:42:e5:
03:c7:19:dc:d4:d6:8f:58:63:dd:e9:6d:eb:a6:5b:
b8:fc:8f:ab:d6:d9:89:03:c6:cf:72:eb:39:0c:92:
87:12:00:a9:fe:e4:ca:8b:9d:38:c2:c7:05:6d:32:
2c:98:51:8e:74:38:4b:2f:5f:1e:00:b6:9a:d9:91:
fd:82:2e:af:5c:a0:76:87:b3:a9:89:35:a6:f8:4b:
cd:17:b5:b9:e5:9c:7f:0f:81:c5:e6:13:00:68:bd:
43:7c:bb:59:75:4f:c0:da:8a:e6:34:6f:a9:04:08:
c3:48:b1:bd:4e:b8:1d:94:94:3b:c7:ac:a6:6d:56:
92:62:9e:e6:ad:80:df:4d:21:07:33:7e:04:2a:14:
32:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:BA:80:F4:5F:74:6F:14:A8:A0:B2:4C:BE:90:C6:4C:52:5D:F5:C2
X509v3 Authority Key Identifier:
keyid:FD:3A:B9:58:47:69:B3:4C:69:5E:0E:F3:BE:40:0D:E5:C8:70:5F:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_Tq5WEdps0xpXg7zvkAN5chwX1g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/ad9e9c-aca2-480c-82e8-06faf1496693/1/_Tq5WEdps0xpXg7zvkAN5chwX1g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/ad9e9c-aca2-480c-82e8-06faf1496693/1/_Tq5WEdps0xpXg7zvkAN5chwX1g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:15:df:a6:32:e2:7f:0c:23:2b:02:33:89:68:92:ad:c0:33:
06:d8:07:5a:7d:a5:bc:bb:75:8b:dd:69:14:6a:26:4b:1b:6d:
3c:bf:b7:9a:ad:05:42:e4:97:92:58:7a:6c:fd:9f:2a:81:89:
37:3d:e2:6a:8c:96:04:09:39:70:2c:b1:a1:0d:da:57:44:10:
a6:99:92:79:54:23:5e:a0:a1:8f:bf:d6:94:6d:1f:5e:2b:78:
f1:46:18:f1:bb:4c:24:0b:88:e3:57:99:c5:d6:6a:a2:b4:95:
df:b7:e6:6c:cd:b7:68:24:46:d0:59:74:7f:60:4a:ea:08:b5:
31:35:8d:fc:d6:1e:0e:8a:fe:03:87:21:0a:d3:43:56:d7:28:
4e:e0:0e:28:d6:ac:db:b0:30:c9:7b:9b:b2:8c:bc:a5:27:b7:
f9:d3:8f:c5:52:12:be:af:84:99:0c:70:72:95:56:eb:84:47:
d6:3a:49:49:c4:97:1b:19:04:7e:ff:c1:4b:c0:17:a8:bb:2a:
1e:39:82:1f:56:23:c0:05:52:40:db:65:a9:b0:9d:50:9e:7e:
62:fd:aa:bb:dc:cf:9f:38:80:7d:25:02:16:6d:81:cc:ac:f0:
d4:bb:34:c1:d4:8a:81:25:d0:86:dd:7b:b8:5e:bf:57:2d:a8:
71:59:bc:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:47:51 2025 by rpki-client