Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/15afe5-42b3-4ce6-9d9d-87c3368cb3fa/1/tXRbuO8AiMtRmkCV1lFxnvUe41Q.mft
File: tXRbuO8AiMtRmkCV1lFxnvUe41Q.mft (raw, json)
Hash identifier: 0QY84AX7lLWfAc+owEB0+qiPfYHKzcg4Rh1850rDH+Q=
Subject key identifier: 7D:9E:C5:D2:60:B5:39:63:32:DF:47:C9:90:DB:09:5C:61:B8:76:52
Authority key identifier: B5:74:5B:B8:EF:00:88:CB:51:9A:40:95:D6:51:71:9E:F5:1E:E3:54
Certificate issuer: /CN=b5745bb8ef0088cb519a4095d651719ef51ee354
Certificate serial: 019A2CD5FB27F398A4A0692C9BF77AD064DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tXRbuO8AiMtRmkCV1lFxnvUe41Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/15afe5-42b3-4ce6-9d9d-87c3368cb3fa/1/tXRbuO8AiMtRmkCV1lFxnvUe41Q.mft
Manifest number: 1010
Signing time: Tue 28 Oct 2025 22:00:12 +0000
Manifest this update: Tue 28 Oct 2025 22:00:12 +0000
Manifest next update: Wed 29 Oct 2025 22:00:12 +0000
Files and hashes: 1: n153dY1GpJ4_UwUqUY3HaTEGP7I.roa (hash: Xk7KXK61rmwLqoIHj+t2jV4riZg2jXu+cWnVquz+ZXA=)
2: tXRbuO8AiMtRmkCV1lFxnvUe41Q.crl (hash: Gbhw+F7//vXwYqVaaiGtMFg6T8ykS+so0KWSRDADRI4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/15afe5-42b3-4ce6-9d9d-87c3368cb3fa/1/tXRbuO8AiMtRmkCV1lFxnvUe41Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/15afe5-42b3-4ce6-9d9d-87c3368cb3fa/1/tXRbuO8AiMtRmkCV1lFxnvUe41Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/tXRbuO8AiMtRmkCV1lFxnvUe41Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 14:12:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:2c:d5:fb:27:f3:98:a4:a0:69:2c:9b:f7:7a:d0:64:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5745bb8ef0088cb519a4095d651719ef51ee354
Validity
Not Before: Oct 28 22:00:12 2025 GMT
Not After : Oct 29 22:00:12 2025 GMT
Subject: CN=7d9ec5d260b5396332df47c990db095c61b87652
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:b5:06:f1:e3:d5:f1:27:72:06:76:1e:ec:1d:
9f:f0:b9:6b:0a:00:82:a5:b6:ff:2f:ac:f2:19:c3:
d4:7e:4f:61:4c:70:9a:ac:70:29:07:f8:be:01:cf:
3a:6c:bc:6c:b9:4d:ec:a7:e9:e6:13:57:e2:15:19:
35:7b:39:1e:4c:67:5b:98:17:d1:71:e0:9c:06:34:
9e:e2:94:ae:ad:10:95:5c:c2:72:b7:e0:f4:eb:7d:
08:af:bd:33:29:b2:f3:74:ca:e2:de:db:ff:dd:30:
d6:d9:6f:c6:33:a4:9b:15:89:22:e2:3f:30:c4:6d:
fd:67:3a:e5:51:7e:ea:22:f2:4d:4f:77:69:47:fc:
c9:d9:68:f6:af:c4:ea:f1:0f:bf:61:f4:17:5e:38:
97:1e:10:9b:48:5a:ea:67:83:1c:57:ed:ba:2c:01:
b7:9a:27:e3:51:3b:f3:fd:af:37:a8:4a:a8:10:78:
42:16:e0:d1:3a:9c:d1:da:ce:94:b5:e0:42:c1:48:
0f:8f:66:62:26:f5:bb:b1:de:5d:80:9a:41:d7:ce:
c9:7f:23:16:c5:82:c2:55:58:d2:95:56:40:73:5f:
5a:fa:53:68:3e:06:6c:15:7d:96:97:46:1c:2e:d2:
c5:8f:d2:8b:85:9d:d7:e4:68:4c:61:ab:e6:ba:03:
93:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:9E:C5:D2:60:B5:39:63:32:DF:47:C9:90:DB:09:5C:61:B8:76:52
X509v3 Authority Key Identifier:
keyid:B5:74:5B:B8:EF:00:88:CB:51:9A:40:95:D6:51:71:9E:F5:1E:E3:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tXRbuO8AiMtRmkCV1lFxnvUe41Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/15afe5-42b3-4ce6-9d9d-87c3368cb3fa/1/tXRbuO8AiMtRmkCV1lFxnvUe41Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/15afe5-42b3-4ce6-9d9d-87c3368cb3fa/1/tXRbuO8AiMtRmkCV1lFxnvUe41Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:7e:ac:48:4f:c4:78:e3:7b:b3:74:16:64:61:bc:2b:f0:13:
d9:6a:f0:8a:14:f1:1b:73:19:ec:8d:39:d2:91:10:89:76:ea:
d3:ae:d9:84:67:53:ca:92:f4:ee:56:14:fe:b8:ba:89:11:5b:
31:29:91:eb:fc:be:bb:a8:33:73:1b:42:f2:a5:fa:9c:ea:35:
6e:d1:10:5c:a4:a6:12:43:08:53:60:b6:73:9b:32:b6:0d:0e:
88:1f:94:c6:cd:49:95:8c:19:6a:4e:3a:5f:3f:94:eb:73:a1:
00:96:86:f0:b6:34:ee:87:77:14:85:ce:c8:04:ce:d4:d9:c6:
3c:8b:c9:62:4c:02:89:cf:a0:0a:f1:87:1c:13:63:30:ed:26:
5a:f5:d4:66:c4:70:cf:4e:1d:b0:ba:7b:22:38:0c:88:48:1c:
d4:fc:9b:6b:41:d9:4b:e1:71:9a:32:6a:90:52:7b:55:db:c2:
7f:01:02:14:44:36:42:8e:3c:4a:41:20:c3:ec:8a:27:6c:63:
84:5c:76:67:bd:1a:93:6f:5a:6a:16:e1:9a:78:70:d4:6b:fa:
ca:35:3c:4c:88:1a:ad:f2:d5:37:3b:52:86:ca:0e:ac:8e:fa:
5b:e5:22:9b:c1:e7:28:91:82:62:3e:ce:5f:71:a3:72:e7:ab:
6f:fb:bf:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 29 00:57:13 2025 by rpki-client