Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/d7fb6d-ebbe-43a2-b119-393c45742259/1/tyDzzrDmtZejgUXFp0M2nH9JZuA.mft
File: tyDzzrDmtZejgUXFp0M2nH9JZuA.mft (raw, json)
Hash identifier: mEUYSofh6+0q2EvwDJd0eo0DWlPZR0tNt6ZU8+Q8peQ=
Subject key identifier: 49:3F:7D:02:D6:B1:F3:D6:D7:E6:BE:EC:DE:7B:7F:83:3C:91:87:E3
Authority key identifier: B7:20:F3:CE:B0:E6:B5:97:A3:81:45:C5:A7:43:36:9C:7F:49:66:E0
Certificate issuer: /CN=b720f3ceb0e6b597a38145c5a743369c7f4966e0
Certificate serial: 019A55D2436B2ABFE8AFD4A08243D628A0A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tyDzzrDmtZejgUXFp0M2nH9JZuA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/d7fb6d-ebbe-43a2-b119-393c45742259/1/tyDzzrDmtZejgUXFp0M2nH9JZuA.mft
Manifest number: 114C
Signing time: Wed 05 Nov 2025 21:00:34 +0000
Manifest this update: Wed 05 Nov 2025 21:00:34 +0000
Manifest next update: Thu 06 Nov 2025 21:00:34 +0000
Files and hashes: 1: ggC5V29BMdNUn59EruOGoGZJaaQ.roa (hash: ttIpUsiJ4qeM8pCSgboK+Vkbkx0DrAYP7DxfAZL+EN4=)
2: tyDzzrDmtZejgUXFp0M2nH9JZuA.crl (hash: RkxoAbRd9Vmj3WLsyZPwx12aBa1vVIolcJUbe/07FGQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/d7fb6d-ebbe-43a2-b119-393c45742259/1/tyDzzrDmtZejgUXFp0M2nH9JZuA.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/d7fb6d-ebbe-43a2-b119-393c45742259/1/tyDzzrDmtZejgUXFp0M2nH9JZuA.mft
rsync://rpki.ripe.net/repository/DEFAULT/tyDzzrDmtZejgUXFp0M2nH9JZuA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 21:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:55:d2:43:6b:2a:bf:e8:af:d4:a0:82:43:d6:28:a0:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b720f3ceb0e6b597a38145c5a743369c7f4966e0
Validity
Not Before: Nov 5 21:00:34 2025 GMT
Not After : Nov 6 21:00:34 2025 GMT
Subject: CN=493f7d02d6b1f3d6d7e6beecde7b7f833c9187e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:9a:66:58:91:41:4f:d0:bf:fd:31:3a:49:27:
05:ac:7a:bb:3c:73:53:b4:27:08:9f:ea:36:ef:12:
24:6c:a3:3d:f3:82:f9:e5:ea:33:72:9b:8a:d9:ea:
74:f7:8d:26:27:7e:e2:0c:fd:80:5f:81:6b:29:3f:
80:ab:f0:5e:7a:f3:b8:e3:5b:cb:6d:13:f1:41:31:
a6:c3:53:43:92:9d:12:47:08:16:37:0e:c4:67:2d:
ed:95:75:f0:19:68:1c:4b:62:6f:5c:48:5a:c5:59:
af:54:16:a1:48:d6:10:39:a3:3e:58:1c:a4:ce:83:
a3:6d:b8:e9:1d:72:22:bf:a9:85:44:eb:92:31:a6:
08:94:78:7c:e7:c1:fd:bc:b9:75:26:0f:c4:f4:a5:
7d:56:b5:ee:7b:5b:f5:3d:8d:be:45:96:b1:2b:0a:
b2:c0:44:3a:57:2e:12:a2:a5:f8:7c:ae:a2:e4:be:
17:f4:c0:8f:8e:7b:ce:cb:2a:58:78:37:e3:21:c1:
73:bb:b4:bf:6a:d6:35:75:88:e5:3a:01:79:90:46:
aa:4a:a9:3f:06:5c:79:59:30:90:38:1c:9d:df:7e:
32:20:5f:be:b6:78:72:97:66:de:2f:99:e7:1f:03:
ce:bc:a9:bd:c9:49:5e:67:6d:7a:6a:7d:9f:ed:8b:
88:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:3F:7D:02:D6:B1:F3:D6:D7:E6:BE:EC:DE:7B:7F:83:3C:91:87:E3
X509v3 Authority Key Identifier:
keyid:B7:20:F3:CE:B0:E6:B5:97:A3:81:45:C5:A7:43:36:9C:7F:49:66:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tyDzzrDmtZejgUXFp0M2nH9JZuA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/d7fb6d-ebbe-43a2-b119-393c45742259/1/tyDzzrDmtZejgUXFp0M2nH9JZuA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/d7fb6d-ebbe-43a2-b119-393c45742259/1/tyDzzrDmtZejgUXFp0M2nH9JZuA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:84:27:56:7c:65:40:d5:44:a3:29:b3:c6:e4:ec:75:75:56:
0f:62:a8:ee:37:ed:3e:9a:bd:8c:6b:ac:f4:83:1f:f1:eb:64:
c9:81:eb:28:10:48:5f:df:7f:24:51:24:05:4a:75:ae:b5:be:
59:7d:21:e7:2a:06:c7:22:c3:67:df:2c:16:40:12:f2:16:43:
1e:8e:bc:66:b2:2f:48:23:88:41:61:0f:ef:cd:8b:86:59:dc:
02:d3:15:44:3d:8e:db:b5:b2:cc:68:28:a4:8b:cf:a0:51:d1:
e1:cb:ae:ad:dc:25:5f:e5:14:31:73:52:ee:f4:2f:87:4d:05:
f6:0b:b4:9e:d3:57:91:c6:1f:77:d6:fa:f8:62:3b:82:d1:d7:
1e:b8:8a:3d:81:1d:e3:85:ed:18:97:e0:89:f4:63:b0:c9:59:
64:16:f6:b9:e1:63:2e:3d:49:36:f1:c4:d1:c5:06:6b:5a:1a:
f3:db:2d:ef:03:00:46:94:65:b4:fb:13:3b:bc:b5:16:cf:be:
ca:4b:91:5b:7b:06:0b:da:fb:29:3f:a2:3f:7c:46:61:ec:bd:
78:55:8e:15:28:29:4d:54:e9:e9:f7:75:dc:ed:70:34:9c:e1:
68:ba:f5:00:b3:d5:4e:91:0b:8d:8d:89:20:fa:b9:02:4c:c5:
62:57:97:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 6 00:08:55 2025 by rpki-client