Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/52f5ad-850d-4a7e-9946-3b745dd8e21e/1/tAI8jFGPpCn_yiWXe2qPhD-PDEo.mft
File: tAI8jFGPpCn_yiWXe2qPhD-PDEo.mft (raw, json)
Hash identifier: Oxd9nALdultVyDsNLcKVUZ9Y6xZtd3rLgqa67JQ2ZTs=
Subject key identifier: D4:46:57:0B:B0:5F:68:B5:6A:61:32:5C:88:6E:47:D9:D5:48:DA:F2
Authority key identifier: B4:02:3C:8C:51:8F:A4:29:FF:CA:25:97:7B:6A:8F:84:3F:8F:0C:4A
Certificate issuer: /CN=b4023c8c518fa429ffca25977b6a8f843f8f0c4a
Certificate serial: 019A4C61965207213E787C3F1C94705A39BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tAI8jFGPpCn_yiWXe2qPhD-PDEo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/52f5ad-850d-4a7e-9946-3b745dd8e21e/1/tAI8jFGPpCn_yiWXe2qPhD-PDEo.mft
Manifest number: 1709
Signing time: Tue 04 Nov 2025 01:00:55 +0000
Manifest this update: Tue 04 Nov 2025 01:00:55 +0000
Manifest next update: Wed 05 Nov 2025 01:00:55 +0000
Files and hashes: 1: R61HPMD68kIaSjuhapTR2hk_o_k.roa (hash: eWM7uVRHKJ0h/TzbbEISOsoLOvqx2gFtMEnPl7A/Y18=)
2: tAI8jFGPpCn_yiWXe2qPhD-PDEo.crl (hash: 7B489X/TsZDZTJTteA9XRKd63pFv65IgTLgD7irOVuw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/52f5ad-850d-4a7e-9946-3b745dd8e21e/1/tAI8jFGPpCn_yiWXe2qPhD-PDEo.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/52f5ad-850d-4a7e-9946-3b745dd8e21e/1/tAI8jFGPpCn_yiWXe2qPhD-PDEo.mft
rsync://rpki.ripe.net/repository/DEFAULT/tAI8jFGPpCn_yiWXe2qPhD-PDEo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 04 Nov 2025 20:30:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4c:61:96:52:07:21:3e:78:7c:3f:1c:94:70:5a:39:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4023c8c518fa429ffca25977b6a8f843f8f0c4a
Validity
Not Before: Nov 4 01:00:55 2025 GMT
Not After : Nov 5 01:00:55 2025 GMT
Subject: CN=d446570bb05f68b56a61325c886e47d9d548daf2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:4d:76:8d:ec:07:8a:c5:24:6a:c2:5a:ac:ca:
95:7d:64:a7:7f:d8:6b:d5:87:67:0b:af:2a:2f:b8:
b8:2e:0e:54:ef:6c:a9:0d:6d:06:e9:7e:78:3d:c5:
6e:7c:4a:07:dc:01:f0:8e:4e:dd:c8:4c:64:9a:9a:
0e:c8:76:dc:15:aa:63:c0:c3:e7:1e:be:a8:9d:0d:
cb:46:5b:3a:3a:bd:5c:70:a7:bc:58:26:71:67:07:
3e:fa:ec:74:a6:53:78:99:f6:bc:72:e4:3c:2e:2c:
d0:d8:d2:35:1a:31:15:58:c6:12:da:a3:89:a5:f4:
9a:74:01:61:6b:ea:b3:1e:3f:bb:9e:bc:de:08:e0:
2f:7d:3f:d7:6a:19:22:e4:73:cf:b9:a0:19:9e:b2:
85:9a:0f:c0:da:6b:eb:2d:26:94:a9:36:5c:d5:3e:
a1:95:ce:d8:15:d8:b2:e9:6f:ca:12:95:12:8d:cf:
34:bf:3e:76:fa:7b:bc:c0:78:4f:23:29:3d:01:62:
f7:46:87:a3:13:65:bf:9c:a6:0e:c0:18:b6:05:76:
be:99:88:fd:3a:08:12:73:ea:2d:28:cc:f9:e8:de:
e8:c3:5d:e8:ca:90:2f:44:19:cb:b1:8e:da:c1:07:
f5:ad:26:11:58:2c:8c:bd:ef:33:19:3d:c5:78:d5:
82:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:46:57:0B:B0:5F:68:B5:6A:61:32:5C:88:6E:47:D9:D5:48:DA:F2
X509v3 Authority Key Identifier:
keyid:B4:02:3C:8C:51:8F:A4:29:FF:CA:25:97:7B:6A:8F:84:3F:8F:0C:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tAI8jFGPpCn_yiWXe2qPhD-PDEo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/52f5ad-850d-4a7e-9946-3b745dd8e21e/1/tAI8jFGPpCn_yiWXe2qPhD-PDEo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/52f5ad-850d-4a7e-9946-3b745dd8e21e/1/tAI8jFGPpCn_yiWXe2qPhD-PDEo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:5e:93:c8:81:1d:f7:08:a2:43:ba:03:1e:f5:15:ec:68:8e:
62:3a:22:cb:72:ca:47:5f:4e:31:24:c9:95:1d:8b:ef:1d:74:
c1:4d:c2:25:44:6d:a6:37:ff:09:3d:c6:7f:18:0c:a0:d3:a9:
98:8a:7f:f1:d7:24:51:40:cf:c1:29:f4:df:df:12:8c:31:4d:
af:72:5e:4e:5c:8f:d1:68:65:a7:e6:24:65:d5:40:02:8c:83:
9f:0c:e8:11:9a:bf:86:80:06:a5:c3:6e:b4:d5:6c:80:df:35:
71:2c:cf:b6:e6:11:b5:d3:3e:88:cb:00:a3:72:19:ff:00:8c:
ad:34:6a:0b:08:72:9d:86:45:e3:37:f2:ae:e2:bc:52:99:e1:
f4:44:04:e4:ab:1a:f6:6a:b8:d8:9d:e2:4d:31:43:dc:e5:8f:
33:43:21:7d:32:c5:4b:03:7e:9b:13:c6:2e:28:eb:38:81:23:
56:53:07:f1:53:00:71:d3:33:9c:a5:cd:3d:3a:59:d9:e9:13:
3d:3d:69:77:4a:0d:82:25:c2:0b:a7:9f:3d:b6:01:65:0a:35:
b7:4b:64:ef:81:d9:1b:73:bf:65:08:7c:fe:f5:25:68:c3:82:
bc:03:b3:5f:15:b0:17:48:47:e6:fe:6f:47:65:fa:ec:a6:6e:
5d:96:38:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 04:00:46 2025 by rpki-client