Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/497dd7-7f7c-494d-b886-52f850ca55c6/1/tqiXx5jwGbJHexqc47I7tddhZsM.mft
File: tqiXx5jwGbJHexqc47I7tddhZsM.mft (raw, json)
Hash identifier: rq8vGfiaLkTSVBKDILqc7r7zadrajxqUYCJClc/78mc=
Subject key identifier: 36:6A:7E:07:98:FB:F9:60:0A:9E:74:58:2C:E3:EE:4E:0A:0B:5C:D9
Authority key identifier: B6:A8:97:C7:98:F0:19:B2:47:7B:1A:9C:E3:B2:3B:B5:D7:61:66:C3
Certificate issuer: /CN=b6a897c798f019b2477b1a9ce3b23bb5d76166c3
Certificate serial: 019A7293678B662BC8854FA826DBDE352A61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tqiXx5jwGbJHexqc47I7tddhZsM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/497dd7-7f7c-494d-b886-52f850ca55c6/1/tqiXx5jwGbJHexqc47I7tddhZsM.mft
Manifest number: 14C0
Signing time: Tue 11 Nov 2025 11:00:53 +0000
Manifest this update: Tue 11 Nov 2025 11:00:53 +0000
Manifest next update: Wed 12 Nov 2025 11:00:53 +0000
Files and hashes: 1: f9JCdqsJLWfadd987fFlDNk7mdM.roa (hash: 5CurkeU+eAkjrTT560cBjUlbg7hvGNi0G0d/Uo5/6r0=)
2: tqiXx5jwGbJHexqc47I7tddhZsM.crl (hash: +C/0NNbRrxNTO+WuYtTds6KQVTa0/IJipJa80kc8Skw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/497dd7-7f7c-494d-b886-52f850ca55c6/1/tqiXx5jwGbJHexqc47I7tddhZsM.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/497dd7-7f7c-494d-b886-52f850ca55c6/1/tqiXx5jwGbJHexqc47I7tddhZsM.mft
rsync://rpki.ripe.net/repository/DEFAULT/tqiXx5jwGbJHexqc47I7tddhZsM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:93:67:8b:66:2b:c8:85:4f:a8:26:db:de:35:2a:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b6a897c798f019b2477b1a9ce3b23bb5d76166c3
Validity
Not Before: Nov 11 11:00:53 2025 GMT
Not After : Nov 12 11:00:53 2025 GMT
Subject: CN=366a7e0798fbf9600a9e74582ce3ee4e0a0b5cd9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:4e:5f:03:4a:8e:69:48:d0:21:cd:2b:0b:9f:
85:ad:c1:a2:6a:66:34:06:6f:98:50:99:27:96:d4:
42:47:ae:73:4d:03:9e:28:19:93:e4:08:64:6c:46:
19:53:40:1f:4c:1b:60:02:0b:f5:40:c1:a6:d2:9a:
4c:61:87:76:4b:4b:ae:10:ab:a3:98:56:eb:34:bd:
29:ee:b3:97:63:3a:4b:f7:89:51:b9:44:c7:98:10:
45:06:56:36:53:ba:ca:e3:31:c0:df:f5:b5:94:7d:
9c:13:bf:32:90:61:58:5c:30:c9:75:e9:0a:ae:37:
7b:40:80:3e:54:a9:e5:67:1a:9e:af:b4:99:65:0d:
c4:b4:f3:de:97:19:f3:fc:58:c1:77:b9:d5:6b:f1:
ac:87:f6:ee:64:52:cc:3f:2f:a1:e0:78:3d:54:1a:
92:7e:c3:9b:f4:3d:f7:63:0c:fb:ec:fe:84:a3:7e:
17:e3:b2:4e:04:69:44:e4:68:74:33:35:eb:ee:65:
4f:1d:e5:51:3d:47:d6:b8:29:82:9d:1a:26:3f:8e:
db:c8:9d:f6:8a:6c:8e:a1:db:5b:db:ab:5c:5a:1f:
5b:7a:df:bc:ae:27:da:b8:69:40:e2:e1:2a:44:f6:
eb:67:aa:f9:b5:b7:ce:f1:e5:b7:8c:b8:d1:ae:5e:
63:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:6A:7E:07:98:FB:F9:60:0A:9E:74:58:2C:E3:EE:4E:0A:0B:5C:D9
X509v3 Authority Key Identifier:
keyid:B6:A8:97:C7:98:F0:19:B2:47:7B:1A:9C:E3:B2:3B:B5:D7:61:66:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tqiXx5jwGbJHexqc47I7tddhZsM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/497dd7-7f7c-494d-b886-52f850ca55c6/1/tqiXx5jwGbJHexqc47I7tddhZsM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/497dd7-7f7c-494d-b886-52f850ca55c6/1/tqiXx5jwGbJHexqc47I7tddhZsM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cf:ab:39:a2:af:bf:19:b1:9a:8a:45:6d:c8:17:cd:57:a1:9e:
3c:a9:aa:6d:be:3d:cc:04:3a:1a:05:bc:69:2b:0e:9a:85:ce:
38:08:39:0d:b4:d2:27:59:e8:87:e9:e6:80:fb:84:1d:a3:71:
da:f0:7d:f4:6d:fd:41:03:a6:c3:50:dc:ca:47:1f:df:98:e2:
3f:80:97:c9:e0:2a:69:ec:99:d1:92:3f:42:f5:7a:1a:58:75:
57:07:70:54:cf:53:94:2d:9e:e7:87:8a:a3:c8:27:6b:0c:e3:
89:04:6e:31:29:53:82:ad:b0:5a:93:2d:6e:15:a7:77:89:eb:
cf:f1:d7:df:04:2b:1c:e2:48:f3:ef:76:cd:31:53:3c:2c:41:
96:38:42:86:93:61:01:23:e5:74:54:a1:c5:5d:e7:39:df:a3:
c2:15:d5:ef:93:93:78:a4:c2:6d:d3:25:83:98:3d:ab:77:0e:
c6:0b:9b:43:13:2d:f2:b5:fb:50:a1:eb:a1:43:ad:00:18:86:
21:fd:96:4b:67:21:64:46:2c:be:32:78:fd:8c:5b:12:50:7d:
fd:d0:f6:0e:40:b6:a3:4f:97:32:f3:5e:d5:80:6a:30:0b:f9:
4a:63:b6:79:e4:9f:50:04:3e:4c:ac:02:2f:fa:9c:ed:90:80:
42:bf:60:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:49:26 2025 by rpki-client