Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/8631f5-54a2-486f-b9a5-081a1ae6ebd6/1/tvvGPvVhSn75WhBhiOPXh1XGh7k.mft
File: tvvGPvVhSn75WhBhiOPXh1XGh7k.mft (raw, json)
Hash identifier: JwzdDuGxlOcoNIsrY2w+f8lsWmYcAp96MWcVaDsvAfM=
Subject key identifier: 44:4C:C6:60:C5:23:B9:D0:83:54:E1:C2:AC:21:93:E8:1A:07:73:37
Authority key identifier: B6:FB:C6:3E:F5:61:4A:7E:F9:5A:10:61:88:E3:D7:87:55:C6:87:B9
Certificate issuer: /CN=b6fbc63ef5614a7ef95a106188e3d78755c687b9
Certificate serial: 019A71EEB062867DD2FCE8A5FECFEE303858
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tvvGPvVhSn75WhBhiOPXh1XGh7k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/8631f5-54a2-486f-b9a5-081a1ae6ebd6/1/tvvGPvVhSn75WhBhiOPXh1XGh7k.mft
Manifest number: 1723
Signing time: Tue 11 Nov 2025 08:00:59 +0000
Manifest this update: Tue 11 Nov 2025 08:00:59 +0000
Manifest next update: Wed 12 Nov 2025 08:00:59 +0000
Files and hashes: 1: QdYCM-qh5Yk3hD7JDcUwBV0zQOE.roa (hash: dojllc59NZSm9Mz/NGxjdimG/qqIGOvM1pQ0q5KpNiE=)
2: YUVqQdQIyjArliTwomJUYJEwCGQ.roa (hash: 4idaosIzVzGBgf2LXtYCKacvmrm3Vvf4Nk86J3M+nPs=)
3: tvvGPvVhSn75WhBhiOPXh1XGh7k.crl (hash: j1b4Mh5S/ckUF6kEc8LI5Oayt+EOVWBWihgCJ9LTAbg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/8631f5-54a2-486f-b9a5-081a1ae6ebd6/1/tvvGPvVhSn75WhBhiOPXh1XGh7k.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/8631f5-54a2-486f-b9a5-081a1ae6ebd6/1/tvvGPvVhSn75WhBhiOPXh1XGh7k.mft
rsync://rpki.ripe.net/repository/DEFAULT/tvvGPvVhSn75WhBhiOPXh1XGh7k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:b0:62:86:7d:d2:fc:e8:a5:fe:cf:ee:30:38:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b6fbc63ef5614a7ef95a106188e3d78755c687b9
Validity
Not Before: Nov 11 08:00:59 2025 GMT
Not After : Nov 12 08:00:59 2025 GMT
Subject: CN=444cc660c523b9d08354e1c2ac2193e81a077337
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:42:14:19:ad:66:f8:9b:31:30:42:e7:b8:9d:
8b:14:96:7d:c4:eb:c2:d7:0d:fd:b0:98:47:24:75:
ed:0c:ee:96:dc:f0:51:c1:05:3a:3d:b5:5b:5c:9d:
a0:d6:fa:cd:93:55:28:f2:54:2a:7e:88:58:29:87:
ca:b1:47:5b:93:7f:2e:1c:70:dd:1d:15:06:96:d2:
95:85:79:40:1c:0b:ca:89:95:30:33:0e:27:2d:94:
27:f3:5e:fe:85:ac:4e:8f:b8:d7:a1:7a:49:1f:c1:
44:3d:75:5c:05:e1:cf:65:2b:69:26:05:27:25:20:
94:53:f9:be:90:1d:73:79:2b:ca:6f:3e:73:c2:d5:
47:ce:d5:84:36:86:26:aa:d8:be:f1:21:db:c7:f9:
aa:90:89:9d:21:87:b4:0f:2e:56:fb:f3:f9:fe:51:
b8:b0:34:8e:ff:4a:a2:f2:96:4a:8d:23:3a:e0:37:
70:03:67:c3:0b:9d:ff:a9:df:01:82:c5:6d:f6:d4:
cb:01:e6:62:43:f9:7a:b5:dd:3d:92:e9:e8:b2:00:
a4:84:45:31:28:2a:1a:e3:5c:f7:7e:89:3a:43:d1:
cf:8f:62:a6:93:0b:f0:07:c3:df:8d:7d:03:e7:78:
fd:1d:3a:4b:33:66:26:66:ca:57:c3:c6:19:0e:2a:
4e:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:4C:C6:60:C5:23:B9:D0:83:54:E1:C2:AC:21:93:E8:1A:07:73:37
X509v3 Authority Key Identifier:
keyid:B6:FB:C6:3E:F5:61:4A:7E:F9:5A:10:61:88:E3:D7:87:55:C6:87:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tvvGPvVhSn75WhBhiOPXh1XGh7k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/8631f5-54a2-486f-b9a5-081a1ae6ebd6/1/tvvGPvVhSn75WhBhiOPXh1XGh7k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/8631f5-54a2-486f-b9a5-081a1ae6ebd6/1/tvvGPvVhSn75WhBhiOPXh1XGh7k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:93:02:89:60:ae:01:7b:6e:44:a8:94:09:ed:3e:3d:a1:6b:
34:15:2d:73:34:24:9d:d1:63:a0:49:be:e8:ef:ad:c0:86:78:
70:93:c8:a0:41:fe:d1:53:1b:ae:be:42:c7:e8:da:41:46:0c:
a9:31:e4:f2:d8:8b:8d:4e:2d:8d:14:4b:61:d3:aa:79:d6:3d:
b8:bb:c3:7b:a8:fe:69:ca:ad:9b:b6:09:8e:dd:0d:5e:5f:6a:
2d:f3:45:3e:c8:44:5e:c4:df:cb:db:a5:49:f1:be:48:96:28:
d0:d2:6e:90:96:38:f3:37:89:a5:65:ea:8e:0c:f2:03:f1:d0:
c7:79:f4:dc:5b:60:4e:0b:c6:b7:75:07:98:3c:45:5a:5f:20:
24:8a:21:22:3d:ed:cd:7b:8c:cd:21:32:16:8c:30:2b:ad:f2:
0b:dd:e7:1c:a0:21:84:c3:71:58:47:cb:82:ec:6a:30:dc:19:
5d:6d:27:fe:31:bf:7f:5c:b6:56:5b:43:fd:c1:91:80:fe:fb:
8a:7a:61:e9:5f:57:83:ff:99:b5:7a:9a:ab:d1:55:ed:54:c7:
4f:3a:18:af:8b:1a:5d:e3:ac:28:94:39:1d:36:e8:69:60:50:
0e:06:7d:81:6e:e5:79:58:0f:8b:3f:d1:49:93:d6:79:fb:ed:
93:da:d3:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:48:54 2025 by rpki-client