Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/1d3cdc-d04b-4adb-b069-2a351ab3b8f6/1/tQS8zrnDY_E-OtqkwPpSeA8GRoQ.mft
File: tQS8zrnDY_E-OtqkwPpSeA8GRoQ.mft (raw, json)
Hash identifier: AMfa0tK4DcGJyz/SLHfWE5GRRVtFhmVKl0aH3fvuOUk=
Subject key identifier: D8:AE:6E:47:6B:61:2B:E7:FA:43:5B:5B:C5:3F:DF:C6:0F:C2:8C:70
Authority key identifier: B5:04:BC:CE:B9:C3:63:F1:3E:3A:DA:A4:C0:FA:52:78:0F:06:46:84
Certificate issuer: /CN=b504bcceb9c363f13e3adaa4c0fa52780f064684
Certificate serial: 019A71EEE80F829E2BEA833685436747EFFC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tQS8zrnDY_E-OtqkwPpSeA8GRoQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/1d3cdc-d04b-4adb-b069-2a351ab3b8f6/1/tQS8zrnDY_E-OtqkwPpSeA8GRoQ.mft
Manifest number: 094E
Signing time: Tue 11 Nov 2025 08:01:13 +0000
Manifest this update: Tue 11 Nov 2025 08:01:13 +0000
Manifest next update: Wed 12 Nov 2025 08:01:13 +0000
Files and hashes: 1: XkoFzkhGOVU5LUerqTHh__leFZg.roa (hash: z0PB3OIVOF5qm40evjJvgBDDcdbv5T70mZxHdxYv7d4=)
2: lE8Zy8N-xpY9U-oK5WN375n1Ofw.roa (hash: eG5bABtFszI7d/P1aStzKC6pmrIphfH8b15K2w83lWk=)
3: tQS8zrnDY_E-OtqkwPpSeA8GRoQ.crl (hash: UE6RYJHkleH5Yg1UfMr/JEAwbFX4Y0PTcpBuRe9HSbw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/1d3cdc-d04b-4adb-b069-2a351ab3b8f6/1/tQS8zrnDY_E-OtqkwPpSeA8GRoQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/1d3cdc-d04b-4adb-b069-2a351ab3b8f6/1/tQS8zrnDY_E-OtqkwPpSeA8GRoQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/tQS8zrnDY_E-OtqkwPpSeA8GRoQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:e8:0f:82:9e:2b:ea:83:36:85:43:67:47:ef:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b504bcceb9c363f13e3adaa4c0fa52780f064684
Validity
Not Before: Nov 11 08:01:13 2025 GMT
Not After : Nov 12 08:01:13 2025 GMT
Subject: CN=d8ae6e476b612be7fa435b5bc53fdfc60fc28c70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:f3:46:79:c6:e2:18:07:ea:89:db:3e:b1:fa:
17:59:d3:c7:53:7a:2c:21:1d:53:53:7a:c0:59:aa:
04:fc:a4:a4:ee:06:01:8f:09:1e:a7:c0:b6:3d:c1:
55:27:be:7b:8b:00:32:d0:60:97:81:1a:5c:cb:52:
09:9d:d7:6b:d9:3e:2c:d3:b8:2a:f5:06:e0:ca:e8:
59:6b:cf:21:72:6d:c0:b8:74:3f:64:5b:7c:90:65:
d9:87:eb:45:b4:4a:a4:36:3c:04:a1:3f:31:64:0f:
fa:9c:33:af:33:01:fc:a6:6b:94:fb:8d:3f:b1:ed:
fd:74:96:c3:a8:3b:e3:f2:27:40:15:36:9a:55:f3:
92:2f:f9:7d:db:db:aa:db:c1:99:5f:5e:b8:13:1a:
a3:06:fd:eb:50:b8:17:fb:f5:9d:bf:7c:82:db:5a:
fe:86:8d:65:09:a4:78:74:41:a2:1d:76:6b:51:c3:
0d:1c:22:43:39:e7:50:d7:96:cf:26:45:3a:ea:28:
17:1d:6e:38:27:06:01:5c:81:c6:e1:76:70:7d:fa:
2b:d4:46:8f:28:c3:a2:e0:8a:71:13:aa:37:5f:91:
cd:30:c1:bc:95:d2:a5:d3:38:7a:b7:23:ff:6f:07:
de:1b:44:45:d6:9a:9f:3b:e3:df:d3:b4:ab:6d:73:
06:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:AE:6E:47:6B:61:2B:E7:FA:43:5B:5B:C5:3F:DF:C6:0F:C2:8C:70
X509v3 Authority Key Identifier:
keyid:B5:04:BC:CE:B9:C3:63:F1:3E:3A:DA:A4:C0:FA:52:78:0F:06:46:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tQS8zrnDY_E-OtqkwPpSeA8GRoQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/1d3cdc-d04b-4adb-b069-2a351ab3b8f6/1/tQS8zrnDY_E-OtqkwPpSeA8GRoQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/1d3cdc-d04b-4adb-b069-2a351ab3b8f6/1/tQS8zrnDY_E-OtqkwPpSeA8GRoQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:6e:3f:f4:06:5a:ed:da:32:98:08:51:a3:15:18:bb:7e:9a:
a2:43:e0:8a:3d:a9:b4:5d:02:f1:91:fe:5b:08:1d:9d:75:f1:
40:7b:72:b8:94:fe:81:48:8a:1e:fb:07:0d:fc:c7:92:81:68:
52:88:bf:1c:82:b5:1d:e3:ec:97:1c:8a:18:35:5d:14:f7:1d:
35:62:d0:df:9c:8e:da:06:37:5f:4e:d1:f1:5f:af:c8:60:51:
a7:3b:7a:12:b1:70:04:eb:cb:3f:0b:48:1a:9b:b6:c0:2d:87:
fa:e3:bf:b2:aa:03:58:ee:49:f3:34:8d:81:e5:90:ed:0e:28:
48:82:24:69:07:d6:0a:d6:8a:8b:88:9a:fe:f6:80:dc:75:50:
c6:76:e7:02:7d:b4:d8:40:67:75:23:b0:ab:20:95:49:d8:8d:
3b:26:7a:6a:48:28:98:89:8e:86:fe:f8:43:b0:89:bf:12:85:
f0:33:c3:dc:c8:79:f4:d7:86:43:5d:ec:60:af:26:4c:79:95:
48:0d:76:4f:03:50:f0:9f:52:41:2f:5e:6b:13:22:51:d7:97:
a0:43:e3:6e:ac:7f:25:7c:e5:73:97:f1:d3:18:f2:eb:af:79:
66:0e:8b:66:20:85:f5:52:44:16:69:38:62:0e:31:7b:a0:8c:
b1:aa:88:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:39:11 2025 by rpki-client