Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/5c92d1-41e5-443e-a250-01baf78ec73f/1/tjIe6_T5W-n4Hw8jP4nzYC0vAHQ.mft
File: tjIe6_T5W-n4Hw8jP4nzYC0vAHQ.mft (raw, json)
Hash identifier: N0/jBZZxp5ag8Xfe3pMNKn8pfzKfziaAiuLq3KgLaH0=
Subject key identifier: 8E:96:75:BB:6F:73:68:29:9A:39:9F:99:E2:06:D8:40:51:0F:E3:B8
Authority key identifier: B6:32:1E:EB:F4:F9:5B:E9:F8:1F:0F:23:3F:89:F3:60:2D:2F:00:74
Certificate issuer: /CN=b6321eebf4f95be9f81f0f233f89f3602d2f0074
Certificate serial: 019A7149C7A7A8800793D1DD58EC9A5131C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tjIe6_T5W-n4Hw8jP4nzYC0vAHQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/5c92d1-41e5-443e-a250-01baf78ec73f/1/tjIe6_T5W-n4Hw8jP4nzYC0vAHQ.mft
Manifest number: 140B
Signing time: Tue 11 Nov 2025 05:00:51 +0000
Manifest this update: Tue 11 Nov 2025 05:00:51 +0000
Manifest next update: Wed 12 Nov 2025 05:00:51 +0000
Files and hashes: 1: 9ykTfaxNeEIbk7wOARPuxoyYN9I.roa (hash: t511WQ9hIp1WWZqq1Z1Tp5plKXaqmdK3FlJidSm8B5Q=)
2: TVu5aQ7CXqbPlsSn9wNLY8tYilE.roa (hash: B5zfotvyVUd7f8T5ZgXVly2iMRkx4aTHfTXgfsPh/CI=)
3: tjIe6_T5W-n4Hw8jP4nzYC0vAHQ.crl (hash: fa2rDK8W+e07otaiWJEgpm17E8uCoUtemqRMYbipe00=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/5c92d1-41e5-443e-a250-01baf78ec73f/1/tjIe6_T5W-n4Hw8jP4nzYC0vAHQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/5c92d1-41e5-443e-a250-01baf78ec73f/1/tjIe6_T5W-n4Hw8jP4nzYC0vAHQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/tjIe6_T5W-n4Hw8jP4nzYC0vAHQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 05:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:49:c7:a7:a8:80:07:93:d1:dd:58:ec:9a:51:31:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b6321eebf4f95be9f81f0f233f89f3602d2f0074
Validity
Not Before: Nov 11 05:00:51 2025 GMT
Not After : Nov 12 05:00:51 2025 GMT
Subject: CN=8e9675bb6f7368299a399f99e206d840510fe3b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:b8:0b:9a:8b:f9:81:2f:4f:cb:62:3f:7c:74:
6a:9a:86:44:0d:57:9d:c7:99:aa:c8:78:79:28:45:
a0:f0:3e:20:93:9c:6b:a8:69:8f:ae:a0:27:19:cc:
88:7d:e2:67:f9:b1:fc:30:18:60:37:95:7d:11:4d:
df:25:87:cc:9c:bc:c6:76:09:ad:06:63:62:4c:6e:
7a:8b:7d:c9:e5:e4:73:31:d4:82:99:e0:a4:eb:38:
06:55:80:d9:86:bf:72:8c:42:06:51:ed:e2:5f:33:
a6:61:7d:4d:ad:b4:85:34:d0:5d:46:15:c0:e3:68:
a7:b7:07:36:7e:fb:4e:ec:1a:8e:27:69:68:ec:ab:
53:09:f4:eb:aa:0b:a5:20:4b:a9:88:83:53:5c:96:
69:e0:bd:2c:87:46:c0:83:47:f3:fc:6b:ee:cf:c6:
74:1c:71:27:92:29:61:bf:4d:61:2b:ce:7f:0e:f1:
27:42:17:f0:dd:1a:7c:c3:4c:63:0a:73:ff:fd:9d:
15:c8:2f:da:44:87:14:16:a2:ee:e4:db:bc:00:e6:
b8:21:30:20:2f:97:ea:4f:c7:2a:2e:51:bc:6c:b1:
7c:e1:7c:e0:c2:a2:83:c3:d7:3c:d6:80:04:db:50:
52:b9:ef:1d:71:8a:8b:e4:ff:7d:19:58:9c:f8:3b:
7a:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:96:75:BB:6F:73:68:29:9A:39:9F:99:E2:06:D8:40:51:0F:E3:B8
X509v3 Authority Key Identifier:
keyid:B6:32:1E:EB:F4:F9:5B:E9:F8:1F:0F:23:3F:89:F3:60:2D:2F:00:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tjIe6_T5W-n4Hw8jP4nzYC0vAHQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/5c92d1-41e5-443e-a250-01baf78ec73f/1/tjIe6_T5W-n4Hw8jP4nzYC0vAHQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/5c92d1-41e5-443e-a250-01baf78ec73f/1/tjIe6_T5W-n4Hw8jP4nzYC0vAHQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:a8:64:2d:42:7b:02:b2:9b:35:b2:51:f7:50:57:f0:73:3d:
d5:a9:e8:91:68:09:d5:8d:37:5e:92:1b:7d:4a:ca:7c:4b:dd:
fd:ff:42:65:ec:f1:5a:ee:61:1a:de:16:c8:31:04:09:6b:2d:
b9:36:7d:37:c8:26:d5:8c:ba:dc:f1:b3:5d:59:a0:63:e1:f7:
88:2c:0b:55:07:27:6a:aa:b2:e9:51:36:6a:a0:f1:85:05:d4:
e2:f9:51:02:83:12:98:50:d7:73:03:d4:7e:91:b4:1b:85:0b:
01:c4:63:52:1c:a2:1d:b5:8c:8b:56:2f:e5:dc:d7:b2:43:61:
9f:41:28:90:a6:47:f3:96:4c:c9:50:e9:62:00:a5:19:32:e7:
c7:f9:a3:c8:89:2c:ac:99:0f:fe:20:9d:d1:58:bd:e0:ee:cf:
66:0d:e3:85:33:5c:8a:1b:59:be:1b:f6:58:69:e6:c4:2a:e7:
38:76:b3:94:fb:b8:be:4e:ea:81:e8:9f:31:8d:a9:50:7e:9f:
7e:49:f8:dd:dd:b0:b4:b2:a0:af:eb:f8:d2:0f:48:28:4a:88:
0d:02:59:30:ce:f6:df:5f:9c:a2:59:8b:a2:04:98:cf:e7:69:
5e:78:e6:4b:f7:e4:d4:5f:fa:30:53:51:bc:bc:1b:cb:87:d2:
cc:91:1c:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:28:14 2025 by rpki-client