Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/80ee8f-867a-4b25-ae5d-92b9daa00379/1/tWGrEAAXphJTFvzGEzhKr73mAYk.mft
File: tWGrEAAXphJTFvzGEzhKr73mAYk.mft (raw, json)
Hash identifier: q0VMyj0Nk3z/JEi+kh4o9qYFEuJrzFs1510B33gW1sY=
Subject key identifier: 3A:B3:17:02:DB:FD:5F:4A:5E:79:B7:D6:2E:BC:CD:DC:00:B6:36:B7
Authority key identifier: B5:61:AB:10:00:17:A6:12:53:16:FC:C6:13:38:4A:AF:BD:E6:01:89
Certificate issuer: /CN=b561ab100017a6125316fcc613384aafbde60189
Certificate serial: 019A04ED32314DAFC795DBC545591CAF6C9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tWGrEAAXphJTFvzGEzhKr73mAYk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/80ee8f-867a-4b25-ae5d-92b9daa00379/1/tWGrEAAXphJTFvzGEzhKr73mAYk.mft
Manifest number: 0762
Signing time: Tue 21 Oct 2025 04:00:44 +0000
Manifest this update: Tue 21 Oct 2025 04:00:44 +0000
Manifest next update: Wed 22 Oct 2025 04:00:44 +0000
Files and hashes: 1: 54hiEVCu42nmTIhQ3bS5shMqgPg.roa (hash: Rk0IIWWSef2+X2JeCku/njRK3YOnsndfGq7YFCHBZaw=)
2: tWGrEAAXphJTFvzGEzhKr73mAYk.crl (hash: p7kywlLxXIutN2r3DDb1XlAYmhmiHz0vS3bXEp0tmTg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/80ee8f-867a-4b25-ae5d-92b9daa00379/1/tWGrEAAXphJTFvzGEzhKr73mAYk.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/80ee8f-867a-4b25-ae5d-92b9daa00379/1/tWGrEAAXphJTFvzGEzhKr73mAYk.mft
rsync://rpki.ripe.net/repository/DEFAULT/tWGrEAAXphJTFvzGEzhKr73mAYk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Oct 2025 04:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:04:ed:32:31:4d:af:c7:95:db:c5:45:59:1c:af:6c:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b561ab100017a6125316fcc613384aafbde60189
Validity
Not Before: Oct 21 04:00:44 2025 GMT
Not After : Oct 22 04:00:44 2025 GMT
Subject: CN=3ab31702dbfd5f4a5e79b7d62ebccddc00b636b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:51:dc:32:8f:a6:a6:c4:8a:16:39:1a:3b:a1:
39:f6:45:ca:54:74:b0:a9:7b:4f:7d:7a:2f:ba:e4:
b9:55:26:62:7b:57:ab:51:23:7a:6d:ea:bf:51:07:
46:d1:8d:a5:b1:47:3f:45:da:8c:4f:8b:82:33:d3:
d6:53:c4:83:4d:2f:e3:4e:40:43:f9:c7:28:65:da:
e3:a4:8c:72:fd:73:45:4f:eb:79:e8:00:0b:0b:98:
dd:3f:f1:5d:57:12:4e:9b:a4:66:6d:b2:50:a6:7b:
b0:f5:f8:5d:84:58:dc:f5:24:ba:d7:96:a8:b3:4a:
87:9b:57:a7:ec:a7:f0:e8:80:07:ab:c2:bb:f7:ee:
2d:dd:f7:88:b3:4b:7e:69:a7:2d:55:66:3c:59:1d:
8d:e6:94:e4:79:4a:72:49:4b:99:f8:d3:ad:dd:fd:
1f:80:16:80:da:3d:3c:b9:40:5b:2f:95:a1:22:85:
3f:c1:12:b9:3c:24:97:2c:13:5c:55:03:a0:71:29:
65:c5:16:ac:fb:f6:b7:26:d5:b7:f5:d9:67:11:83:
5c:43:3c:df:bd:98:31:f5:08:74:1a:58:ef:cf:52:
03:ad:ef:a5:cc:fc:6c:02:86:5c:6f:ce:6c:07:70:
3e:cf:a9:a6:09:5a:6d:cd:c3:b4:e4:01:ad:a8:a4:
55:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:B3:17:02:DB:FD:5F:4A:5E:79:B7:D6:2E:BC:CD:DC:00:B6:36:B7
X509v3 Authority Key Identifier:
keyid:B5:61:AB:10:00:17:A6:12:53:16:FC:C6:13:38:4A:AF:BD:E6:01:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tWGrEAAXphJTFvzGEzhKr73mAYk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/80ee8f-867a-4b25-ae5d-92b9daa00379/1/tWGrEAAXphJTFvzGEzhKr73mAYk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/80ee8f-867a-4b25-ae5d-92b9daa00379/1/tWGrEAAXphJTFvzGEzhKr73mAYk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:b2:ac:f7:c7:92:33:57:da:06:e3:0c:5e:07:fd:47:29:a7:
95:2d:c1:f0:e9:a4:92:f6:12:46:45:4e:7d:fc:db:c0:0c:18:
15:3b:76:6c:b6:10:d5:9a:aa:c2:a0:02:d7:91:3e:8b:f4:e5:
a8:5f:da:e5:ac:cb:36:f9:55:f3:89:82:72:06:c6:02:b5:90:
7d:11:ce:1c:b4:9a:9f:87:ca:81:4a:fd:e2:13:22:8b:79:11:
50:aa:9d:f5:61:3d:33:54:67:2a:86:50:cc:94:b0:75:eb:d6:
de:ab:0b:33:35:dc:da:a5:41:2f:c4:5b:90:98:4e:f5:2b:3f:
5c:65:0a:c8:eb:b2:18:47:47:5a:4d:1b:24:e2:9f:00:a0:30:
0d:74:4e:a8:85:b7:70:6b:bc:59:8d:76:45:e1:04:dd:57:c0:
72:01:12:37:52:93:ea:22:df:d1:f6:45:1f:8e:92:cb:13:2a:
cc:04:da:3f:e9:07:f7:17:b9:79:73:b1:73:34:63:b5:d5:a1:
52:4c:d7:75:8e:b5:50:e3:8f:10:6e:77:2b:5f:9c:a7:64:df:
71:f0:60:24:61:dc:23:f0:79:76:ba:96:86:a1:ca:6c:f8:45:
e2:3c:30:2b:fa:d4:26:79:5d:af:f8:90:b8:7f:7e:fd:2c:33:
26:39:41:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 10:25:46 2025 by rpki-client