Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/34d470-49f7-4ae0-b61a-0944bed0ed26/1/tL3eeEFbacMSd8Cqx_ymYH1jXYg.mft
File: tL3eeEFbacMSd8Cqx_ymYH1jXYg.mft (raw, json)
Hash identifier: ctJrswkjT4L7sujsGiKzz2kybMSAjKyk4t+cA8sDR8s=
Subject key identifier: F4:D4:EB:EE:5E:92:52:70:01:DA:E5:D2:BF:D7:69:2C:96:AF:1B:89
Authority key identifier: B4:BD:DE:78:41:5B:69:C3:12:77:C0:AA:C7:FC:A6:60:7D:63:5D:88
Certificate issuer: /CN=b4bdde78415b69c31277c0aac7fca6607d635d88
Certificate serial: 019A71B85545D2B1BD3BF17958D770C024FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tL3eeEFbacMSd8Cqx_ymYH1jXYg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/34d470-49f7-4ae0-b61a-0944bed0ed26/1/tL3eeEFbacMSd8Cqx_ymYH1jXYg.mft
Manifest number: 171D
Signing time: Tue 11 Nov 2025 07:01:37 +0000
Manifest this update: Tue 11 Nov 2025 07:01:37 +0000
Manifest next update: Wed 12 Nov 2025 07:01:37 +0000
Files and hashes: 1: ag-uYpovt5JPQ3cFAXtXn4zz86A.roa (hash: 2LKnP2sHY9S5jGwYqiGKID4jG+yM+87plZe5I7Vq4ns=)
2: tL3eeEFbacMSd8Cqx_ymYH1jXYg.crl (hash: 51PebCuYcfEZ/dODIRhgms12gRQ00BFSzVPH3mVtPss=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/34d470-49f7-4ae0-b61a-0944bed0ed26/1/tL3eeEFbacMSd8Cqx_ymYH1jXYg.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/34d470-49f7-4ae0-b61a-0944bed0ed26/1/tL3eeEFbacMSd8Cqx_ymYH1jXYg.mft
rsync://rpki.ripe.net/repository/DEFAULT/tL3eeEFbacMSd8Cqx_ymYH1jXYg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:55:45:d2:b1:bd:3b:f1:79:58:d7:70:c0:24:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4bdde78415b69c31277c0aac7fca6607d635d88
Validity
Not Before: Nov 11 07:01:37 2025 GMT
Not After : Nov 12 07:01:37 2025 GMT
Subject: CN=f4d4ebee5e92527001dae5d2bfd7692c96af1b89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:e0:2e:59:52:40:b8:9b:63:e4:49:75:e9:d4:
a2:b8:00:04:22:10:dc:bc:55:e7:2e:52:7c:6b:4d:
e1:46:f8:92:8e:6a:a8:d2:e0:4a:12:f5:f9:75:8e:
70:ac:08:65:16:0a:57:91:18:ed:8f:8f:ae:ba:a0:
f6:d5:79:ce:1a:fd:23:62:9c:5d:59:4f:f1:33:cb:
f3:10:ab:db:4c:cc:f8:18:0b:cc:84:d6:46:a7:46:
79:60:b3:f1:50:5c:ff:0d:53:98:7b:8a:ea:f2:f8:
6e:e6:0a:02:a8:fd:b9:7f:14:8e:e8:48:6b:a6:cc:
b2:d4:9c:91:86:96:1f:75:67:10:6c:27:84:ee:ea:
a7:e0:2d:f9:7c:49:37:65:1c:a5:06:14:42:7f:56:
b0:b7:62:60:13:46:54:20:f5:4c:f7:bb:00:f1:6b:
28:50:21:06:5f:0b:48:84:ad:33:1f:85:1c:81:26:
32:f2:08:1e:0b:92:71:45:0f:01:ec:87:67:45:8b:
ca:7f:d5:0a:83:ff:8d:45:b7:7f:b2:24:a7:01:72:
fc:49:e6:98:ff:e5:12:89:79:dc:ab:d2:6f:14:0c:
64:13:96:88:36:ce:78:b4:3f:c5:29:40:fb:68:cd:
07:ed:8d:13:4d:b4:84:f2:4e:3a:00:ad:6f:4e:4b:
97:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:D4:EB:EE:5E:92:52:70:01:DA:E5:D2:BF:D7:69:2C:96:AF:1B:89
X509v3 Authority Key Identifier:
keyid:B4:BD:DE:78:41:5B:69:C3:12:77:C0:AA:C7:FC:A6:60:7D:63:5D:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tL3eeEFbacMSd8Cqx_ymYH1jXYg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/34d470-49f7-4ae0-b61a-0944bed0ed26/1/tL3eeEFbacMSd8Cqx_ymYH1jXYg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/34d470-49f7-4ae0-b61a-0944bed0ed26/1/tL3eeEFbacMSd8Cqx_ymYH1jXYg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:c5:9c:6e:6d:15:b8:a6:26:52:ed:79:65:96:7e:b3:9c:6e:
cc:b1:2f:91:d0:fd:51:36:6d:8b:d9:c2:ed:77:44:88:bd:68:
e0:fd:0f:23:67:11:49:20:cb:c8:1a:f2:ae:b7:eb:69:19:ee:
2f:7b:08:2d:5a:19:ef:53:a2:a2:21:0c:16:db:90:e1:49:35:
3f:91:b1:d6:d0:41:71:e8:3a:f8:2e:bd:5e:d5:e0:25:0e:64:
c2:78:cb:57:cf:a3:e2:d3:86:de:93:1a:fe:f2:5f:b4:bd:1c:
db:16:74:53:ac:6c:43:7f:33:47:73:81:a6:d0:d8:9b:6f:88:
15:91:33:c9:a6:c2:c2:05:b7:f5:b8:d0:08:ac:c0:3d:0a:2d:
8b:9e:9a:6b:40:a9:f7:91:05:6b:3b:1e:c6:99:9a:3a:cc:80:
92:56:c2:77:0a:c3:a0:a7:f7:97:b5:b5:99:98:ca:53:ac:25:
8b:f9:76:3f:e1:7f:a4:fe:8a:d2:3e:b8:ba:86:d9:2f:49:cc:
66:63:c9:d8:d6:76:c4:74:9f:02:c0:05:70:2b:8b:c2:10:34:
a1:00:35:e8:9c:40:2b:2d:bd:65:d7:c2:72:ce:4f:ba:db:49:
38:0e:7a:a7:a3:15:bd:75:a2:a5:23:b9:35:0a:7e:da:62:15:
cf:c0:6d:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:19:18 2025 by rpki-client