Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/fc7c82-3159-4d54-a0a1-35171aedd313/1/tkB0qoRJgw2psgs6-waC08Ay-f4.mft
File: tkB0qoRJgw2psgs6-waC08Ay-f4.mft (raw, json)
Hash identifier: AirI7BlI0A2J75jsulIGdfAmoziGQ2KwLfITx1RklZg=
Subject key identifier: 2C:2E:DB:53:8C:6F:11:1A:7F:3F:2E:26:D1:E3:00:27:DB:5E:14:00
Authority key identifier: B6:40:74:AA:84:49:83:0D:A9:B2:0B:3A:FB:06:82:D3:C0:32:F9:FE
Certificate issuer: /CN=b64074aa8449830da9b20b3afb0682d3c032f9fe
Certificate serial: 019A28F972A77DD066976E657BF77630B6F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tkB0qoRJgw2psgs6-waC08Ay-f4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/fc7c82-3159-4d54-a0a1-35171aedd313/1/tkB0qoRJgw2psgs6-waC08Ay-f4.mft
Manifest number: 1701
Signing time: Tue 28 Oct 2025 04:00:27 +0000
Manifest this update: Tue 28 Oct 2025 04:00:27 +0000
Manifest next update: Wed 29 Oct 2025 04:00:27 +0000
Files and hashes: 1: BdOIN-x7p5NQNZFat3HBRk8aNP8.roa (hash: E6O+SQKCroETYNOj7yjRqDXwGgY2i2+LPEeaEfVM6HA=)
2: SvbWjBtA5USrFJEFyfsvP-SCofs.roa (hash: La++FukCI88aoCCAWTG9ojz1zryPe+WC1BNRSElIvDw=)
3: ZqMh09XL_OuL0ICq-TfvGdj4pmM.roa (hash: l5g5wXS3ZWKojPoOXqpehHnI+SHAfeYcurBv6Xo/WU8=)
4: tkB0qoRJgw2psgs6-waC08Ay-f4.crl (hash: Xq3iTIwU3EJ25asNbNb0LNtmc+xciIpuap9kN2KzB8Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/fc7c82-3159-4d54-a0a1-35171aedd313/1/tkB0qoRJgw2psgs6-waC08Ay-f4.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/fc7c82-3159-4d54-a0a1-35171aedd313/1/tkB0qoRJgw2psgs6-waC08Ay-f4.mft
rsync://rpki.ripe.net/repository/DEFAULT/tkB0qoRJgw2psgs6-waC08Ay-f4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 04:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:28:f9:72:a7:7d:d0:66:97:6e:65:7b:f7:76:30:b6:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b64074aa8449830da9b20b3afb0682d3c032f9fe
Validity
Not Before: Oct 28 04:00:27 2025 GMT
Not After : Oct 29 04:00:27 2025 GMT
Subject: CN=2c2edb538c6f111a7f3f2e26d1e30027db5e1400
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:74:df:bb:f6:eb:07:f4:af:90:c1:bc:a5:e9:
f2:b8:da:de:99:c2:16:b6:4d:c8:93:6a:fe:6d:93:
ac:7d:c6:d0:8b:00:b5:f4:e8:5f:78:e6:4e:db:72:
a4:0f:4c:99:ac:25:b7:f1:7f:97:52:ba:52:5f:c1:
61:16:55:d6:8d:1b:8d:00:74:e7:0e:5b:97:50:f5:
3e:72:b2:82:c3:ff:e5:94:80:f6:20:d4:14:4f:a7:
8b:6e:11:24:45:49:99:32:8e:5a:08:cf:86:f0:2f:
75:15:68:b1:2c:ae:e5:75:b5:21:e9:39:7c:01:72:
b6:6d:72:9d:a7:cc:ed:9d:9a:45:97:ae:79:b2:d6:
fb:f3:1c:76:00:cf:88:c5:fd:0b:95:90:d1:74:b5:
ef:23:23:77:39:51:cb:7a:38:f0:f5:7d:be:84:2a:
4a:ab:10:ba:69:0c:80:4d:52:91:cf:4c:fd:c9:2d:
18:f0:40:41:20:b7:1e:4f:8d:e1:bd:c6:30:c7:32:
04:d5:1e:e1:35:a6:52:22:83:d4:9e:0d:45:f8:0b:
50:d8:b6:4b:0b:59:db:8a:56:7a:e1:08:4d:73:19:
ab:18:79:13:8a:5f:de:dc:01:45:3c:32:08:61:f0:
7b:3d:91:9c:b4:39:35:4b:bb:23:27:41:a4:0b:29:
09:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:2E:DB:53:8C:6F:11:1A:7F:3F:2E:26:D1:E3:00:27:DB:5E:14:00
X509v3 Authority Key Identifier:
keyid:B6:40:74:AA:84:49:83:0D:A9:B2:0B:3A:FB:06:82:D3:C0:32:F9:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tkB0qoRJgw2psgs6-waC08Ay-f4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/fc7c82-3159-4d54-a0a1-35171aedd313/1/tkB0qoRJgw2psgs6-waC08Ay-f4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/fc7c82-3159-4d54-a0a1-35171aedd313/1/tkB0qoRJgw2psgs6-waC08Ay-f4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:a3:bd:a0:14:38:bd:1e:05:b8:18:ff:8c:41:1d:26:fc:36:
a7:44:ed:d8:70:ff:46:fa:39:ec:52:8d:32:7d:8f:9c:e1:0d:
e4:4f:1b:22:f9:c3:83:4f:4d:8d:2a:78:d1:4c:b4:fd:d6:fc:
05:60:1b:cf:33:29:14:94:aa:02:ef:ed:24:c6:9d:e8:13:e7:
b8:12:29:ec:f4:15:3e:ce:cf:ea:74:05:8f:f7:1f:25:76:09:
91:46:d6:ff:db:5f:88:b2:09:75:2c:42:43:66:ef:93:c0:57:
e2:1a:6b:8b:c3:2b:97:d6:ca:f6:78:ae:fa:37:5a:0e:99:c3:
d7:3f:0c:bb:40:e4:ad:15:c1:b7:b1:dd:64:3e:0d:b4:94:20:
1d:30:7c:c1:5e:a9:ce:1c:f9:ef:45:9e:a9:a7:10:cc:48:49:
19:a3:fd:ad:52:0a:ea:fa:aa:5a:cb:95:d7:98:77:d3:1e:db:
66:c2:0c:d3:c2:b3:4c:95:e9:37:be:31:c6:f6:7e:45:56:f1:
96:3e:af:55:5f:35:fd:e1:72:d9:64:a5:4a:c2:d5:c1:e6:3a:
e1:31:f8:2c:1b:ff:e5:ee:ff:80:d9:a5:5f:a6:2e:a9:d0:1a:
46:cf:82:17:83:6e:64:70:c7:65:9c:e3:5d:71:8d:fb:31:e0:
bc:92:77:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 13:11:27 2025 by rpki-client