Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/5992eb-4b82-4fd3-9121-fee137c890bc/1/tIoonrst1oBtYLjFrQNseY9mugY.mft
File: tIoonrst1oBtYLjFrQNseY9mugY.mft (raw, json)
Hash identifier: Urr88zhvEuX81qENIf36QUVXAJYAA7BTvxE6+TZ/E0I=
Subject key identifier: A9:91:9F:F9:5A:89:82:86:9F:CC:2B:CB:72:04:0A:65:67:36:FE:3A
Authority key identifier: B4:8A:28:9E:BB:2D:D6:80:6D:60:B8:C5:AD:03:6C:79:8F:66:BA:06
Certificate issuer: /CN=b48a289ebb2dd6806d60b8c5ad036c798f66ba06
Certificate serial: 019A72CA5EEF343607FE7057D14E4333D339
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tIoonrst1oBtYLjFrQNseY9mugY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/5992eb-4b82-4fd3-9121-fee137c890bc/1/tIoonrst1oBtYLjFrQNseY9mugY.mft
Manifest number: 05DA
Signing time: Tue 11 Nov 2025 12:00:56 +0000
Manifest this update: Tue 11 Nov 2025 12:00:56 +0000
Manifest next update: Wed 12 Nov 2025 12:00:56 +0000
Files and hashes: 1: nKxswHwUBE_XIOIyQ1Qpw5XOFvo.roa (hash: xZYcCOMTf00TiuBXWvG+qaD8S6ouJ5YlmrR2oW0i9z0=)
2: tIoonrst1oBtYLjFrQNseY9mugY.crl (hash: SFrThM07xi4lX9yNUBKUh6ks3r6UTj075zzM+HK6Uz8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/5992eb-4b82-4fd3-9121-fee137c890bc/1/tIoonrst1oBtYLjFrQNseY9mugY.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/5992eb-4b82-4fd3-9121-fee137c890bc/1/tIoonrst1oBtYLjFrQNseY9mugY.mft
rsync://rpki.ripe.net/repository/DEFAULT/tIoonrst1oBtYLjFrQNseY9mugY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:ca:5e:ef:34:36:07:fe:70:57:d1:4e:43:33:d3:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b48a289ebb2dd6806d60b8c5ad036c798f66ba06
Validity
Not Before: Nov 11 12:00:56 2025 GMT
Not After : Nov 12 12:00:56 2025 GMT
Subject: CN=a9919ff95a8982869fcc2bcb72040a656736fe3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:34:f2:a6:b6:24:83:68:55:27:e7:5c:72:f4:
97:66:8a:c4:5b:c8:7b:d5:fe:ad:d8:ef:ba:44:5b:
6b:1e:8c:66:5d:ad:6a:fa:24:ce:55:2b:38:a6:f7:
a2:c0:81:5b:a7:95:c5:a7:48:4c:62:c2:31:e2:2b:
9c:24:b8:05:a3:d5:15:4b:20:39:f9:16:58:2c:9a:
d7:f8:c5:fe:26:b8:c2:d2:b4:b5:80:52:29:d4:47:
47:6d:f6:33:e7:ef:81:bd:da:b2:17:4e:33:3e:c4:
51:f1:37:30:c2:83:b9:9f:ad:bc:b4:2b:97:d3:82:
28:84:7d:94:c7:86:a4:e4:47:b7:1e:a0:cf:6c:8f:
3f:f5:48:d5:41:cd:20:17:8e:5c:0b:30:d9:e8:76:
2d:54:3f:8b:da:f6:44:28:ab:16:a0:fb:7a:b4:ef:
6f:67:88:f0:5c:86:51:0b:d5:31:12:4d:37:6e:12:
e9:a7:d6:bb:1f:47:93:57:e9:23:fe:aa:b3:81:be:
08:67:3d:c0:21:da:c9:c3:47:f8:5e:d1:45:a2:3e:
c0:bb:9c:6e:20:e2:52:c0:db:c9:c5:45:2e:55:6d:
58:46:cc:d1:0f:4a:15:4e:61:8c:93:97:3e:8a:18:
eb:82:e4:fb:29:a5:b9:a9:4d:e1:89:4b:f5:df:67:
03:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:91:9F:F9:5A:89:82:86:9F:CC:2B:CB:72:04:0A:65:67:36:FE:3A
X509v3 Authority Key Identifier:
keyid:B4:8A:28:9E:BB:2D:D6:80:6D:60:B8:C5:AD:03:6C:79:8F:66:BA:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tIoonrst1oBtYLjFrQNseY9mugY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/5992eb-4b82-4fd3-9121-fee137c890bc/1/tIoonrst1oBtYLjFrQNseY9mugY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/5992eb-4b82-4fd3-9121-fee137c890bc/1/tIoonrst1oBtYLjFrQNseY9mugY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:d6:77:d5:f5:4b:92:07:1a:b6:57:6b:96:ab:0c:6b:dd:e8:
3d:38:d1:5d:34:cb:35:10:1b:27:7d:57:b2:69:46:1a:c9:d6:
c4:77:0c:47:b3:7f:b2:22:d8:fd:74:73:b3:50:41:a7:e9:b1:
49:d2:ce:26:b4:7c:7f:5f:32:20:07:c6:fa:51:77:2a:f2:19:
98:6d:a4:ae:b2:07:69:8b:e6:31:bd:e7:bc:8a:0b:91:36:77:
b2:c7:0f:7e:0b:80:45:09:6f:3b:48:f3:23:71:89:fb:32:6c:
81:65:df:79:16:45:21:0c:2c:48:c2:c6:5d:ab:78:a9:17:5b:
7f:1d:2b:6a:76:ca:46:0c:c5:d9:42:0b:5c:19:0d:33:be:f2:
a7:9c:20:8a:a6:cd:55:01:cb:a8:92:8a:7a:7b:c6:bb:32:9c:
b5:4c:40:67:cc:05:72:91:cf:a4:73:ea:c8:91:72:fe:09:48:
04:ff:1f:a6:8a:d0:b1:57:b2:60:e6:42:3c:66:1b:83:60:82:
53:a6:d7:3d:47:bd:db:a1:d7:28:42:58:79:78:c6:e3:9c:db:
e4:53:24:0d:72:06:fa:09:7f:03:2f:1c:68:cd:55:9c:f2:5b:
3b:94:6f:0c:20:6e:d3:62:00:4c:6e:b6:3d:3f:12:ac:7d:05:
ff:7a:3f:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 18:37:52 2025 by rpki-client