Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/66369c-02f9-4947-9cb4-84b725158347/1/tpV8pIOvC2f5c7CFlyzMXF7QP3w.mft
File: tpV8pIOvC2f5c7CFlyzMXF7QP3w.mft (raw, json)
Hash identifier: ONffgalJ+b+BQUaVp3t5OhYmumCH3K6yIRVDtEtb360=
Subject key identifier: FA:EB:70:94:80:F7:90:09:7A:C6:11:8C:A0:2C:50:C9:A7:96:4E:56
Authority key identifier: B6:95:7C:A4:83:AF:0B:67:F9:73:B0:85:97:2C:CC:5C:5E:D0:3F:7C
Certificate issuer: /CN=b6957ca483af0b67f973b085972ccc5c5ed03f7c
Certificate serial: 019A7225932C0F83F1B4B712A062E2DDBB92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tpV8pIOvC2f5c7CFlyzMXF7QP3w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/66369c-02f9-4947-9cb4-84b725158347/1/tpV8pIOvC2f5c7CFlyzMXF7QP3w.mft
Manifest number: 1535
Signing time: Tue 11 Nov 2025 09:00:56 +0000
Manifest this update: Tue 11 Nov 2025 09:00:56 +0000
Manifest next update: Wed 12 Nov 2025 09:00:56 +0000
Files and hashes: 1: VMjps0TDOc6vg4EVncBcfziPs7o.roa (hash: F5yYItxb8pdHFsuwCVpmcCXEuMNoj5mX3+RkzMDL76c=)
2: tpV8pIOvC2f5c7CFlyzMXF7QP3w.crl (hash: t5YpJ3WgPtZFUKw1DWjdBHR+17SH3LtRtPwbUBQzJ4A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/66369c-02f9-4947-9cb4-84b725158347/1/tpV8pIOvC2f5c7CFlyzMXF7QP3w.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/66369c-02f9-4947-9cb4-84b725158347/1/tpV8pIOvC2f5c7CFlyzMXF7QP3w.mft
rsync://rpki.ripe.net/repository/DEFAULT/tpV8pIOvC2f5c7CFlyzMXF7QP3w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:25:93:2c:0f:83:f1:b4:b7:12:a0:62:e2:dd:bb:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b6957ca483af0b67f973b085972ccc5c5ed03f7c
Validity
Not Before: Nov 11 09:00:56 2025 GMT
Not After : Nov 12 09:00:56 2025 GMT
Subject: CN=faeb709480f790097ac6118ca02c50c9a7964e56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:8f:70:4e:b2:67:ed:5b:21:6a:35:1c:a0:4d:
26:dd:f6:2c:9d:a1:a6:7e:57:78:3c:18:d4:2f:3a:
3f:ae:dc:12:87:c8:c4:a6:d8:dd:7c:d3:7a:de:d3:
92:e0:52:cf:63:76:42:cf:6e:cf:ed:0c:75:d9:8b:
15:34:78:70:9b:65:1c:be:e6:9a:bc:8d:12:fc:c2:
10:53:01:cb:d4:15:cd:51:53:0f:07:74:0d:fe:47:
97:28:b9:22:cd:c1:e3:96:da:54:c3:38:8e:aa:bf:
a5:bf:ed:af:1b:76:ce:da:98:5e:ed:87:3a:dc:0e:
c4:91:78:ca:e1:1b:ac:1a:a8:62:12:f0:67:ca:6b:
9d:76:35:d3:c4:92:33:2a:8f:56:5a:be:8c:3e:26:
f3:ac:cf:f8:b2:30:34:15:16:f2:71:a3:c6:41:25:
82:58:37:f4:f8:3d:63:91:d3:06:e9:b9:11:7c:03:
14:a1:48:6c:b8:22:fe:2e:72:d1:75:d4:b3:53:a6:
89:59:33:f1:22:6d:30:28:20:25:10:c7:95:ff:d7:
47:e1:f2:ef:a5:3e:b8:3d:23:3f:87:17:33:e8:b5:
1a:f6:d6:c7:56:03:91:25:a2:fb:14:bf:8a:54:5e:
69:9f:61:c7:8e:4d:7a:ac:4b:41:c0:ee:59:28:79:
ee:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:EB:70:94:80:F7:90:09:7A:C6:11:8C:A0:2C:50:C9:A7:96:4E:56
X509v3 Authority Key Identifier:
keyid:B6:95:7C:A4:83:AF:0B:67:F9:73:B0:85:97:2C:CC:5C:5E:D0:3F:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tpV8pIOvC2f5c7CFlyzMXF7QP3w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/66369c-02f9-4947-9cb4-84b725158347/1/tpV8pIOvC2f5c7CFlyzMXF7QP3w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/66369c-02f9-4947-9cb4-84b725158347/1/tpV8pIOvC2f5c7CFlyzMXF7QP3w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:f7:f3:96:3e:3f:ed:d1:2c:07:8e:2b:b1:33:eb:a4:8c:b8:
6a:23:d8:cc:ad:c0:2c:c3:77:28:17:3d:7d:cd:96:7b:12:ab:
1e:7e:17:3a:d0:fc:d0:65:8d:54:15:82:be:56:33:f5:25:0c:
ef:0e:23:b1:6b:36:d4:7f:bd:11:d9:06:c8:af:16:f1:76:77:
52:a8:b3:b6:e9:a3:8f:22:cd:46:1b:45:1b:e1:80:8e:f8:f4:
70:df:e9:c5:dc:67:4d:eb:de:a9:64:4c:9c:3c:a5:4c:88:f1:
e9:48:1d:2b:a9:a5:ae:50:f9:59:48:40:0a:b4:ed:50:38:70:
d6:3f:30:14:49:3f:a7:a4:4d:7f:55:7a:9f:96:30:39:f2:1b:
34:83:af:bc:38:01:8e:5e:57:bd:6f:d2:5e:49:3e:d5:57:02:
13:e1:3b:5c:d4:94:3a:02:68:7b:51:08:7f:91:cf:64:ae:de:
70:32:26:38:97:85:4b:d7:06:04:5c:0b:c2:93:a8:84:a5:eb:
47:32:ca:c1:b9:17:9b:7a:75:da:d0:b5:5e:46:e9:96:36:4e:
72:3b:38:e1:eb:71:23:87:1a:05:28:69:23:69:45:66:07:e6:
c2:25:ca:7b:84:be:24:93:59:81:10:54:c9:2d:d5:09:7f:db:
95:98:d7:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 13:59:36 2025 by rpki-client