Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/35ff32-a687-4f50-969a-98648901688f/1/tWqMka0xdF_3J9oEgu3hsvq0Yuc.mft
File: tWqMka0xdF_3J9oEgu3hsvq0Yuc.mft (raw, json)
Hash identifier: XsGWMtIWcmKXoq7LzELJEbBqdJW/x4ujywjJliQw808=
Subject key identifier: 4C:86:9E:0C:19:68:50:31:AC:9A:3F:C3:DA:E1:E4:C1:31:E3:C3:F1
Authority key identifier: B5:6A:8C:91:AD:31:74:5F:F7:27:DA:04:82:ED:E1:B2:FA:B4:62:E7
Certificate issuer: /CN=b56a8c91ad31745ff727da0482ede1b2fab462e7
Certificate serial: 019A71B8AA1AD79B35786FD5A59062D78DE8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tWqMka0xdF_3J9oEgu3hsvq0Yuc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/35ff32-a687-4f50-969a-98648901688f/1/tWqMka0xdF_3J9oEgu3hsvq0Yuc.mft
Manifest number: 09BD
Signing time: Tue 11 Nov 2025 07:01:58 +0000
Manifest this update: Tue 11 Nov 2025 07:01:58 +0000
Manifest next update: Wed 12 Nov 2025 07:01:58 +0000
Files and hashes: 1: Tj8ieaPk-ZVdznj4QGZQsDa6PTU.roa (hash: rpKu+SpVkA4o9g3c9SIuQedHFHqzu4mcB4TaNuy/SKw=)
2: tWqMka0xdF_3J9oEgu3hsvq0Yuc.crl (hash: R/ORkEZCa7dDrSrKIw9BbPw0hUYp2llRde+vGpf43zw=)
3: uWZIzr5sI_obeqk4P_AP6Hrzzsc.roa (hash: Ao6L2xVS/ORm+dRe6MtZy2PpenoZKqpKXENIdtVG26s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/35ff32-a687-4f50-969a-98648901688f/1/tWqMka0xdF_3J9oEgu3hsvq0Yuc.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/35ff32-a687-4f50-969a-98648901688f/1/tWqMka0xdF_3J9oEgu3hsvq0Yuc.mft
rsync://rpki.ripe.net/repository/DEFAULT/tWqMka0xdF_3J9oEgu3hsvq0Yuc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:aa:1a:d7:9b:35:78:6f:d5:a5:90:62:d7:8d:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b56a8c91ad31745ff727da0482ede1b2fab462e7
Validity
Not Before: Nov 11 07:01:58 2025 GMT
Not After : Nov 12 07:01:58 2025 GMT
Subject: CN=4c869e0c19685031ac9a3fc3dae1e4c131e3c3f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:ec:59:10:64:7d:f8:a5:ab:31:5c:60:91:8e:
96:f6:b0:41:fd:45:08:c3:f4:06:9f:1f:10:c4:ae:
10:78:d0:f9:89:48:50:30:33:32:a1:a4:71:ff:51:
04:c2:99:f7:6c:b9:6c:be:52:ce:a2:ea:fd:07:fb:
06:4a:56:80:66:c7:88:ec:b1:22:f0:eb:b5:6b:c8:
dd:d6:9a:8a:8d:f0:ff:35:d3:b9:9e:f2:a9:63:c6:
e7:13:ae:12:45:ef:7f:1c:0f:f0:d2:3a:de:e1:c5:
bb:ca:d3:7a:e5:23:30:9c:41:89:f7:85:10:fb:82:
ec:2d:0c:07:2c:a8:bd:7d:2e:2a:21:71:ad:3c:47:
3b:aa:a3:d4:38:42:e4:48:d6:75:73:fd:76:19:85:
08:13:58:fa:e5:b5:21:7f:e1:16:bf:ed:9c:cb:9b:
35:c0:30:21:48:86:3a:52:80:96:9b:65:33:d1:e3:
c7:f7:e8:22:40:ac:a9:fc:f9:70:6f:b6:f2:14:2a:
88:ad:1a:60:d8:4f:ac:4e:47:85:0c:17:21:74:02:
61:86:9f:91:c6:8e:e7:9d:33:c7:f5:ef:90:47:6a:
2c:d0:27:39:c4:f7:4a:6f:2b:23:40:e2:a3:91:5e:
77:ea:b1:e9:85:e6:b2:2a:9b:43:b6:23:08:d0:e9:
34:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:86:9E:0C:19:68:50:31:AC:9A:3F:C3:DA:E1:E4:C1:31:E3:C3:F1
X509v3 Authority Key Identifier:
keyid:B5:6A:8C:91:AD:31:74:5F:F7:27:DA:04:82:ED:E1:B2:FA:B4:62:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tWqMka0xdF_3J9oEgu3hsvq0Yuc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/35ff32-a687-4f50-969a-98648901688f/1/tWqMka0xdF_3J9oEgu3hsvq0Yuc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/35ff32-a687-4f50-969a-98648901688f/1/tWqMka0xdF_3J9oEgu3hsvq0Yuc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:0b:2c:82:3d:ba:d8:30:c3:05:4f:ed:9f:63:09:5d:c6:fa:
65:20:d2:f6:fa:92:26:8f:dc:d7:b0:ad:7e:52:d7:b0:dc:01:
b2:e4:c6:3c:07:b8:1d:ee:f8:34:16:4c:5e:a6:5a:f2:3e:c9:
3a:91:41:29:df:e4:80:de:0d:c2:e3:df:de:bb:41:19:6a:ef:
7c:3e:c5:15:24:3b:11:e2:7e:3f:c5:a1:4b:55:a0:69:4a:37:
9f:0f:bc:ed:a7:01:26:47:fe:3c:28:93:9f:84:6c:23:f3:a5:
d1:97:d0:1e:16:43:25:be:83:38:67:3d:4f:ac:a5:bd:a6:81:
bb:9e:0b:74:d6:5c:d9:6b:81:c7:67:de:39:f4:2b:14:a3:fd:
e7:47:7d:28:10:f2:a8:c4:0a:f2:58:27:13:c8:4e:42:8d:97:
74:2b:b5:86:14:06:ec:d2:db:6a:d8:ad:7e:ab:68:9e:60:9d:
7c:25:60:42:a9:68:01:cd:bd:ba:48:f4:43:96:c8:ab:d8:3e:
c9:0c:31:10:29:c5:67:56:e4:a4:37:43:20:87:b0:15:3c:80:
61:08:f0:d2:fa:43:67:26:54:43:19:ae:3b:51:a8:e1:06:28:
c2:fc:53:78:44:e0:bf:b4:04:3b:ab:2f:4b:9b:42:93:02:8d:
3d:ee:5d:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:21:35 2025 by rpki-client