Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/533416-5192-4944-ab50-813c76ff40b4/1/tUXkNLukc3BtqDNv2gFrsuaLNiM.mft
File: tUXkNLukc3BtqDNv2gFrsuaLNiM.mft (raw, json)
Hash identifier: 7uHfbCIMYV+piCafuQ3dzJaXq1R2MLefWzv5F4dh+b4=
Subject key identifier: 99:65:6C:4B:9E:54:34:05:58:E2:59:C5:38:D4:4B:00:70:9D:0C:29
Authority key identifier: B5:45:E4:34:BB:A4:73:70:6D:A8:33:6F:DA:01:6B:B2:E6:8B:36:23
Certificate issuer: /CN=b545e434bba473706da8336fda016bb2e68b3623
Certificate serial: 019A71B8FF2F524781E92C96F8CA21855C9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tUXkNLukc3BtqDNv2gFrsuaLNiM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/533416-5192-4944-ab50-813c76ff40b4/1/tUXkNLukc3BtqDNv2gFrsuaLNiM.mft
Manifest number: 171F
Signing time: Tue 11 Nov 2025 07:02:20 +0000
Manifest this update: Tue 11 Nov 2025 07:02:20 +0000
Manifest next update: Wed 12 Nov 2025 07:02:20 +0000
Files and hashes: 1: 8c1jWLNSWx4cTuK9ZEnAPJAmwwU.roa (hash: zNldb7jsDCF4ycQz0X2hLLJLeALZnhbBqN35ToOj1oI=)
2: tUXkNLukc3BtqDNv2gFrsuaLNiM.crl (hash: Q3vumD77ErzbzY8KhuKj9kVLBsQQK4LdugSFq/r2YIs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/533416-5192-4944-ab50-813c76ff40b4/1/tUXkNLukc3BtqDNv2gFrsuaLNiM.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/533416-5192-4944-ab50-813c76ff40b4/1/tUXkNLukc3BtqDNv2gFrsuaLNiM.mft
rsync://rpki.ripe.net/repository/DEFAULT/tUXkNLukc3BtqDNv2gFrsuaLNiM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:ff:2f:52:47:81:e9:2c:96:f8:ca:21:85:5c:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b545e434bba473706da8336fda016bb2e68b3623
Validity
Not Before: Nov 11 07:02:20 2025 GMT
Not After : Nov 12 07:02:20 2025 GMT
Subject: CN=99656c4b9e54340558e259c538d44b00709d0c29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:5c:60:84:09:5a:d2:19:2a:3b:69:17:14:c6:
3d:31:22:93:7e:0f:e5:05:e7:eb:51:32:b2:79:46:
2a:30:c4:4d:6c:a4:b2:c5:2f:1a:80:65:1a:27:46:
8d:43:a2:d8:7b:f0:7d:01:be:d8:ce:8a:d0:88:23:
49:01:86:1b:12:b8:2c:0c:eb:f0:7e:d5:53:ba:2f:
9e:4c:33:c5:89:13:e3:24:e7:57:ae:26:70:f5:eb:
a7:27:3b:f8:54:bb:29:57:77:0c:92:e5:72:41:81:
a3:8f:82:ad:2a:db:2f:cb:47:e7:3c:0c:3b:cd:56:
31:08:97:c7:50:fe:c3:85:5a:96:eb:7f:0f:d6:d7:
14:f8:bc:3b:7d:4f:2b:10:04:e3:d7:b9:87:f6:67:
3c:2f:57:7e:30:ce:06:a2:32:cd:a1:41:e6:8e:b9:
7a:07:fa:5a:06:97:96:a0:ab:17:fd:f4:f6:87:08:
94:74:e6:6f:56:d3:4e:76:c6:14:d7:7d:71:1e:58:
23:32:c6:98:4c:b1:8f:53:8a:dd:0a:74:5f:c0:fb:
a2:f9:66:15:bf:e0:ed:f9:c9:f8:79:14:8b:2b:d6:
8f:cd:0a:e1:62:2c:ed:3a:5d:32:a3:15:03:01:79:
47:68:0a:dc:80:1c:6e:15:41:55:42:30:da:e8:33:
f6:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:65:6C:4B:9E:54:34:05:58:E2:59:C5:38:D4:4B:00:70:9D:0C:29
X509v3 Authority Key Identifier:
keyid:B5:45:E4:34:BB:A4:73:70:6D:A8:33:6F:DA:01:6B:B2:E6:8B:36:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tUXkNLukc3BtqDNv2gFrsuaLNiM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/533416-5192-4944-ab50-813c76ff40b4/1/tUXkNLukc3BtqDNv2gFrsuaLNiM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/533416-5192-4944-ab50-813c76ff40b4/1/tUXkNLukc3BtqDNv2gFrsuaLNiM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:45:54:f3:77:18:77:f5:a0:e8:2b:10:89:78:d3:f4:95:4f:
90:32:0f:89:d2:d9:61:f4:84:b4:2c:67:3c:45:62:06:e8:ab:
37:de:3f:ec:29:de:27:9c:69:57:e2:2f:bc:e0:d2:d6:1e:19:
59:37:c1:bc:0c:a3:a1:5a:77:f3:11:7d:1e:3d:f9:c1:2a:86:
96:e9:5e:b9:f1:bd:a8:45:18:9d:45:79:75:f9:d4:98:6f:2b:
e4:cd:50:55:1d:e6:93:45:47:6e:c0:86:72:2a:8e:59:d5:3a:
bd:4a:0d:9c:db:1e:eb:09:9c:4f:e1:f2:a2:27:a9:67:47:43:
30:72:7d:81:5c:9f:2f:67:8d:9e:35:fa:35:c0:d9:20:d6:c5:
46:1f:b7:73:13:04:c0:b5:15:25:d5:d7:0a:97:37:39:78:a8:
44:b9:33:11:cf:80:7b:4f:52:b3:89:3a:e4:94:13:bc:ea:55:
cc:e1:93:59:1e:89:a3:4c:66:f3:c3:74:42:41:e1:22:d4:77:
04:cb:cb:22:13:9c:d9:26:1a:2e:7c:12:57:54:cd:ea:a1:fa:
0b:52:2b:3a:ab:16:87:d1:5f:0d:36:46:4e:56:6a:a5:1d:a0:
44:3f:42:2c:03:3f:a2:9e:de:f4:d4:76:24:05:fe:ed:c3:bf:
88:80:63:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:47:59 2025 by rpki-client