Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/800eb6-868b-4a30-b402-4bce424723d9/1/tBSwm-6rkF_0HmgTJWBUsYIpQpc.mft
File: tBSwm-6rkF_0HmgTJWBUsYIpQpc.mft (raw, json)
Hash identifier: yuF8WDnP8SsY53qJfVGCs4cfnQPHS8JExr2wSHJ0yJ0=
Subject key identifier: F7:CE:83:7B:7C:77:32:0C:F6:EF:87:73:C0:22:E9:7A:F9:8C:84:BA
Authority key identifier: B4:14:B0:9B:EE:AB:90:5F:F4:1E:68:13:25:60:54:B1:82:29:42:97
Certificate issuer: /CN=b414b09beeab905ff41e6813256054b182294297
Certificate serial: 019A2478A80B395DEFEF10E116DC5F985EF5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tBSwm-6rkF_0HmgTJWBUsYIpQpc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/800eb6-868b-4a30-b402-4bce424723d9/1/tBSwm-6rkF_0HmgTJWBUsYIpQpc.mft
Manifest number: 0C58
Signing time: Mon 27 Oct 2025 07:01:18 +0000
Manifest this update: Mon 27 Oct 2025 07:01:18 +0000
Manifest next update: Tue 28 Oct 2025 07:01:18 +0000
Files and hashes: 1: 9ie56jozGctsQMPeP2PnRQlQSUc.roa (hash: 5kDUdIA6jw7l4e4ssTIC7py/rMtiw/D++uBoc2CI0Qo=)
2: mT-8_dVnmXbsJKgoN35LXNaAywM.roa (hash: o5cN5KMUIwn/VQVHMV9OAvcCU4Z7KPV9dR9Yvh1kUlg=)
3: tBSwm-6rkF_0HmgTJWBUsYIpQpc.crl (hash: JeJx5oQTn33blWYnafdWkZQ9XK7E5gHb/WW8XmFy57g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/800eb6-868b-4a30-b402-4bce424723d9/1/tBSwm-6rkF_0HmgTJWBUsYIpQpc.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/800eb6-868b-4a30-b402-4bce424723d9/1/tBSwm-6rkF_0HmgTJWBUsYIpQpc.mft
rsync://rpki.ripe.net/repository/DEFAULT/tBSwm-6rkF_0HmgTJWBUsYIpQpc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 07:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:24:78:a8:0b:39:5d:ef:ef:10:e1:16:dc:5f:98:5e:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b414b09beeab905ff41e6813256054b182294297
Validity
Not Before: Oct 27 07:01:18 2025 GMT
Not After : Oct 28 07:01:18 2025 GMT
Subject: CN=f7ce837b7c77320cf6ef8773c022e97af98c84ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:da:db:af:f7:58:18:a7:a1:6c:c7:69:5d:ff:
10:03:2d:fd:c5:34:00:d7:a6:03:f9:76:0c:9d:c9:
f9:a0:ad:99:8b:5d:fc:91:61:66:d7:c2:9e:ce:84:
61:4a:c3:f0:d8:89:42:68:22:d3:6e:ff:f8:39:f1:
2c:9f:53:a9:6e:84:d1:d5:41:3c:75:36:b1:9b:c1:
f8:69:e7:db:e1:8e:f6:59:49:9a:cd:06:51:6b:8f:
fa:d0:b4:fd:80:4b:de:0a:c8:87:8d:a6:2f:7c:2b:
e5:99:48:99:6b:d8:f7:c9:49:bd:04:a5:03:12:94:
55:00:47:d4:2a:3d:13:0e:55:af:42:b2:5a:57:47:
1d:57:fa:f8:d4:ed:25:8c:3e:9d:ea:71:2c:18:5f:
f2:1c:3c:94:9f:56:11:08:f9:fa:45:9f:8b:fb:18:
19:f4:d2:4e:bd:a3:e7:46:a7:be:d1:b8:1c:c8:27:
e8:6a:e2:91:47:99:3b:8c:b4:c1:7d:25:48:2d:3d:
1c:21:8d:76:93:82:f5:2d:95:6e:68:8c:60:07:0d:
7f:e0:3b:79:a8:0b:19:64:5d:93:ea:c6:84:65:2d:
07:6a:ba:ae:68:c2:95:f1:17:d3:2c:fe:66:be:b7:
3a:c3:55:22:c9:e6:9b:7b:ba:3c:38:ef:ac:d1:d9:
42:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:CE:83:7B:7C:77:32:0C:F6:EF:87:73:C0:22:E9:7A:F9:8C:84:BA
X509v3 Authority Key Identifier:
keyid:B4:14:B0:9B:EE:AB:90:5F:F4:1E:68:13:25:60:54:B1:82:29:42:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tBSwm-6rkF_0HmgTJWBUsYIpQpc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/800eb6-868b-4a30-b402-4bce424723d9/1/tBSwm-6rkF_0HmgTJWBUsYIpQpc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/800eb6-868b-4a30-b402-4bce424723d9/1/tBSwm-6rkF_0HmgTJWBUsYIpQpc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:c4:af:97:e3:a5:9f:59:17:e1:ed:84:36:68:fc:bc:2f:14:
12:ed:95:af:2a:a0:b9:1d:8e:7e:61:e2:f5:a3:e9:7f:40:ef:
06:49:dd:40:cf:dc:26:ca:d7:19:7b:c2:37:5f:7b:44:bb:73:
a6:1d:57:4f:de:bb:84:3f:2a:67:da:77:77:07:6e:3a:19:bd:
72:4d:6e:06:b5:16:2d:34:36:94:0b:6a:65:77:21:07:3e:3d:
52:bc:7b:69:84:85:63:a3:26:97:8b:51:95:8a:73:38:5b:b9:
69:bc:b0:f6:e7:e5:4a:81:85:ba:bf:78:a2:59:d6:41:19:6b:
76:d2:08:2b:cc:4b:93:13:ad:b2:10:c5:e3:5a:9e:f7:1d:4c:
73:5a:e0:3c:7d:87:15:ee:0a:c0:ac:aa:d4:30:26:22:57:fb:
3c:b8:2d:cd:5a:2d:98:bd:17:a0:99:af:0e:89:3a:73:4e:c4:
89:69:c5:de:f4:d4:66:57:67:6f:90:f1:d8:d1:8d:73:af:91:
d9:34:ba:04:57:15:b0:a2:82:87:50:b4:0b:6e:c2:dc:e2:82:
dc:ed:b1:47:da:a5:ab:3b:c8:85:b6:46:2b:ff:d4:53:fc:21:
ed:5c:c6:29:d3:b7:8f:75:53:93:ab:45:9e:15:e3:ad:d4:f3:
ce:c6:19:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 17:28:09 2025 by rpki-client