Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/9e9122-bbff-48d9-98c6-0a4286f3cfbe/1/tfV-SevwmLxT6Ns4iIHJI2nZv4w.mft
File: tfV-SevwmLxT6Ns4iIHJI2nZv4w.mft (raw, json)
Hash identifier: gmBwzlCsrtrQJH19IEUYXfStsKgKRrvcpKb+SO3jowk=
Subject key identifier: BE:E5:FF:EF:01:3C:ED:3C:42:62:16:B4:8D:3A:98:91:D2:1D:20:BB
Authority key identifier: B5:F5:7E:49:EB:F0:98:BC:53:E8:DB:38:88:81:C9:23:69:D9:BF:8C
Certificate issuer: /CN=b5f57e49ebf098bc53e8db388881c92369d9bf8c
Certificate serial: 019A24E5C272882130AC9110FEAA35590181
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tfV-SevwmLxT6Ns4iIHJI2nZv4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/9e9122-bbff-48d9-98c6-0a4286f3cfbe/1/tfV-SevwmLxT6Ns4iIHJI2nZv4w.mft
Manifest number: 147A
Signing time: Mon 27 Oct 2025 09:00:28 +0000
Manifest this update: Mon 27 Oct 2025 09:00:28 +0000
Manifest next update: Tue 28 Oct 2025 09:00:28 +0000
Files and hashes: 1: HqctvWxlrIEslD4ELNpmV-XhZkU.roa (hash: CGfhQ4fck7gcAxsslFd0Q8T9jYmDIbHyBLNxPR9Qais=)
2: bKSpPE5-kXmlbnT7r_1atj4jQSY.roa (hash: L3QXcpXiam9j36oZrcZebMrghkDu87SD2DJXHj63ivw=)
3: tfV-SevwmLxT6Ns4iIHJI2nZv4w.crl (hash: CzLGoZ5VRLMIGIwie771yl95GRQZ6NTuwApmDkCShWQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/9e9122-bbff-48d9-98c6-0a4286f3cfbe/1/tfV-SevwmLxT6Ns4iIHJI2nZv4w.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/9e9122-bbff-48d9-98c6-0a4286f3cfbe/1/tfV-SevwmLxT6Ns4iIHJI2nZv4w.mft
rsync://rpki.ripe.net/repository/DEFAULT/tfV-SevwmLxT6Ns4iIHJI2nZv4w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 09:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:24:e5:c2:72:88:21:30:ac:91:10:fe:aa:35:59:01:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5f57e49ebf098bc53e8db388881c92369d9bf8c
Validity
Not Before: Oct 27 09:00:28 2025 GMT
Not After : Oct 28 09:00:28 2025 GMT
Subject: CN=bee5ffef013ced3c426216b48d3a9891d21d20bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:89:60:7c:e5:22:57:f0:c8:10:e4:33:d9:21:
da:32:c4:60:4b:dd:e1:71:62:bc:c6:5b:55:e4:55:
49:d1:fa:8c:94:b7:e6:ce:d7:47:bf:6b:cd:72:e3:
c9:15:c3:75:6d:e6:70:07:3c:3a:d6:25:13:2b:dd:
1d:ea:d4:fb:ea:c3:ab:a9:33:82:79:02:e3:2a:42:
45:a5:36:d7:5b:bc:a0:de:19:80:af:6c:12:d6:dd:
95:8d:66:2e:4b:fc:6e:65:02:91:87:6b:ef:31:96:
ab:82:e2:1b:c9:b2:7e:30:cc:bf:8c:fb:82:19:02:
ec:a5:03:3a:fb:9b:3c:91:db:ba:37:fa:56:d9:36:
6b:cf:32:60:cd:6a:a9:d0:a9:31:9a:20:2c:23:de:
d7:0d:ac:03:ab:18:70:c2:ac:e8:f2:3b:9d:23:4c:
88:29:ff:ee:29:9f:51:29:f9:a5:c2:84:29:51:11:
7a:7f:68:fe:89:da:be:6a:95:67:ee:0f:d6:73:35:
c2:a2:b2:80:3e:c1:f0:52:72:ea:7e:14:d3:6c:d5:
19:e3:79:72:0d:5a:ed:12:75:ec:73:72:66:f9:4a:
7d:fa:57:19:df:b5:06:5d:c9:61:e0:ae:06:69:ed:
3a:1b:88:bf:49:92:63:70:e4:bd:2f:ff:5e:88:82:
cc:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:E5:FF:EF:01:3C:ED:3C:42:62:16:B4:8D:3A:98:91:D2:1D:20:BB
X509v3 Authority Key Identifier:
keyid:B5:F5:7E:49:EB:F0:98:BC:53:E8:DB:38:88:81:C9:23:69:D9:BF:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tfV-SevwmLxT6Ns4iIHJI2nZv4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/9e9122-bbff-48d9-98c6-0a4286f3cfbe/1/tfV-SevwmLxT6Ns4iIHJI2nZv4w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/9e9122-bbff-48d9-98c6-0a4286f3cfbe/1/tfV-SevwmLxT6Ns4iIHJI2nZv4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:fa:4d:c0:2b:44:55:38:d3:ee:a1:8a:ce:9f:48:b3:9e:99:
a8:2b:e8:3b:44:38:a8:39:a7:60:cb:5e:98:ec:fb:93:d2:48:
5e:a7:7d:aa:0d:1e:aa:e6:6f:2e:0f:5e:b2:fa:69:5d:70:32:
fb:75:5b:89:3b:03:78:be:8a:3d:a3:af:2c:75:6c:4b:2a:74:
1f:65:93:d1:5d:69:32:e7:15:ac:88:ea:84:8a:cc:ec:1f:df:
bf:0a:85:2f:12:ba:3e:b6:86:04:c8:c9:ee:ac:90:54:1e:e6:
e7:8b:c7:c2:99:28:4f:32:3c:62:19:a3:40:67:c2:b2:9b:5b:
3a:5b:91:8a:b6:2a:bc:db:d1:d3:29:07:ba:1f:f6:c8:9a:cd:
17:23:2b:a6:64:32:37:ca:62:85:57:cb:cf:e3:28:72:5c:a7:
0c:db:45:12:c6:db:8b:ec:6c:14:68:f3:34:c6:89:92:cf:36:
09:fe:b5:92:80:cd:5e:97:24:8f:87:4f:ed:20:7a:6b:e6:5c:
03:66:4a:3a:d0:30:5d:a7:5e:35:2f:62:24:9a:d5:6c:ac:e3:
84:37:b2:78:a8:7c:96:b3:b8:72:ee:a5:69:97:eb:c0:b9:68:
ea:07:46:2f:4e:9b:eb:21:42:9e:16:f7:b8:04:bd:ff:9b:6b:
6f:60:30:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 18:21:28 2025 by rpki-client