Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/941bd0-c4f3-45ee-8fd1-d5bcf28f748b/1/tucewFWW3EmUEGcP8hk_MJT6pqc.mft
File: tucewFWW3EmUEGcP8hk_MJT6pqc.mft (raw, json)
Hash identifier: tZTFYte80SB/bc8/tQOLkYn4n5WJ2USNTRON/Kn9a2o=
Subject key identifier: 3E:D1:A4:33:AC:8D:A6:2B:BC:D9:40:6D:D1:FB:45:43:A1:02:57:A8
Authority key identifier: B6:E7:1E:C0:55:96:DC:49:94:10:67:0F:F2:19:3F:30:94:FA:A6:A7
Certificate issuer: /CN=b6e71ec05596dc499410670ff2193f3094faa6a7
Certificate serial: 019A262EFB7EC7565DB29F948ABBF7EA3BB9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tucewFWW3EmUEGcP8hk_MJT6pqc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/941bd0-c4f3-45ee-8fd1-d5bcf28f748b/1/tucewFWW3EmUEGcP8hk_MJT6pqc.mft
Manifest number: DD
Signing time: Mon 27 Oct 2025 15:00:04 +0000
Manifest this update: Mon 27 Oct 2025 15:00:04 +0000
Manifest next update: Tue 28 Oct 2025 15:00:04 +0000
Files and hashes: 1: hRPKeHZ6_YWICYTS_JHAiqBF0Sg.roa (hash: NDzOC26DELEHx7JLJ5CgjjPlTl9/8PN/GUB9G8BQkuk=)
2: tucewFWW3EmUEGcP8hk_MJT6pqc.crl (hash: zurAxwqLKaWTIjzpMGD14izKpWrvtB9yKgPJyEzuskk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/941bd0-c4f3-45ee-8fd1-d5bcf28f748b/1/tucewFWW3EmUEGcP8hk_MJT6pqc.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/941bd0-c4f3-45ee-8fd1-d5bcf28f748b/1/tucewFWW3EmUEGcP8hk_MJT6pqc.mft
rsync://rpki.ripe.net/repository/DEFAULT/tucewFWW3EmUEGcP8hk_MJT6pqc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 15:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:26:2e:fb:7e:c7:56:5d:b2:9f:94:8a:bb:f7:ea:3b:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b6e71ec05596dc499410670ff2193f3094faa6a7
Validity
Not Before: Oct 27 15:00:04 2025 GMT
Not After : Oct 28 15:00:04 2025 GMT
Subject: CN=3ed1a433ac8da62bbcd9406dd1fb4543a10257a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:8b:c7:72:3e:a6:8b:b1:18:f2:c7:ff:87:86:
41:5c:44:68:f1:2a:9e:c7:35:03:69:84:db:40:05:
b1:73:57:81:bf:df:98:51:8a:5e:82:59:1d:d0:b5:
64:7f:cd:f7:29:b8:d6:34:ae:43:9d:16:1e:68:b9:
a8:ec:38:d3:85:e7:2c:e0:3d:68:99:19:30:68:38:
98:6f:ab:c9:78:ec:59:d7:27:f7:11:81:47:f5:24:
3b:01:0b:eb:f6:21:4c:d1:a9:05:7e:65:ed:43:53:
4c:1d:65:fd:7f:93:2d:f3:76:06:e9:18:4a:49:b8:
2a:10:ef:ef:37:73:00:a0:ac:3b:09:1b:f2:32:55:
65:1b:c9:32:96:a2:7c:ce:02:cc:76:74:90:64:6c:
ea:34:2e:36:e8:96:c2:12:d1:8e:33:04:64:7d:fa:
69:04:6d:8c:82:2c:bc:ea:07:02:73:41:54:8c:9a:
bb:ff:82:00:ed:6a:a1:71:8c:c6:ae:95:19:46:64:
0f:fc:28:1f:68:67:59:fd:67:ae:8b:c6:69:18:e2:
aa:73:12:a1:1b:8a:25:a7:d9:13:46:69:86:e4:65:
9d:2b:1f:67:27:9c:d6:93:ad:8a:e9:c8:47:44:f5:
29:23:35:1b:33:51:a9:5a:e6:61:a6:08:ca:7d:b1:
5a:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:D1:A4:33:AC:8D:A6:2B:BC:D9:40:6D:D1:FB:45:43:A1:02:57:A8
X509v3 Authority Key Identifier:
keyid:B6:E7:1E:C0:55:96:DC:49:94:10:67:0F:F2:19:3F:30:94:FA:A6:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tucewFWW3EmUEGcP8hk_MJT6pqc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/941bd0-c4f3-45ee-8fd1-d5bcf28f748b/1/tucewFWW3EmUEGcP8hk_MJT6pqc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/941bd0-c4f3-45ee-8fd1-d5bcf28f748b/1/tucewFWW3EmUEGcP8hk_MJT6pqc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:bc:66:b9:32:31:0c:af:19:ef:f0:98:91:cc:1c:28:42:71:
9c:3d:e0:12:10:1a:27:19:67:30:4e:ba:cf:1f:a7:a6:a4:54:
62:2f:8f:31:26:4b:59:29:c4:ee:c4:a0:c4:73:82:f7:74:08:
16:d6:a2:b9:a1:29:28:d3:ae:6e:1a:f5:3f:8e:ee:a2:34:2c:
a4:ef:99:ad:a8:da:27:43:21:ba:55:ba:2f:4c:50:fe:91:fa:
bd:4f:48:1b:e0:71:b4:a3:ec:15:5b:9e:4d:9d:55:b7:c3:aa:
c0:f1:fc:0b:13:52:86:04:78:fe:40:24:a5:6f:26:c0:79:ce:
05:80:f8:38:cb:ed:8b:8b:b4:5d:77:e4:e2:6c:1d:e8:ab:3e:
63:e8:9b:8a:de:6c:14:89:f4:cb:27:89:95:01:74:88:90:55:
19:77:46:78:1d:3c:c4:85:22:0e:d4:81:3d:56:cd:f9:a4:9c:
9e:9f:7d:a3:15:8f:df:24:8e:e9:35:dc:42:f5:b3:19:e6:93:
81:56:dc:a5:db:ac:c7:bf:52:c4:54:43:b1:fc:cb:52:4f:d4:
30:21:7d:e6:c3:64:07:d1:d9:ce:6f:8e:73:48:5f:e8:3b:3c:
5f:47:55:51:42:1a:47:85:84:51:37:9e:af:93:cf:d4:14:fb:
6c:04:f8:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 20:25:27 2025 by rpki-client