Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/134ccb-b0ab-446b-8172-62e27cd1e975/1/tA2EnMQ7cy2rZkH8b9Wk2zotuUc.mft
File: tA2EnMQ7cy2rZkH8b9Wk2zotuUc.mft (raw, json)
Hash identifier: 6AUpR5Fm2ZfNFi2SFtsWSEjIKZA5oVYW0OMwgA+mPBg=
Subject key identifier: 39:32:72:80:A9:2E:F8:EF:63:F7:D8:24:C6:9E:08:71:DF:74:11:7E
Authority key identifier: B4:0D:84:9C:C4:3B:73:2D:AB:66:41:FC:6F:D5:A4:DB:3A:2D:B9:47
Certificate issuer: /CN=b40d849cc43b732dab6641fc6fd5a4db3a2db947
Certificate serial: 019A71B944378168436B7C8F6BCAD37B8AC5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tA2EnMQ7cy2rZkH8b9Wk2zotuUc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/134ccb-b0ab-446b-8172-62e27cd1e975/1/tA2EnMQ7cy2rZkH8b9Wk2zotuUc.mft
Manifest number: 0AB7
Signing time: Tue 11 Nov 2025 07:02:38 +0000
Manifest this update: Tue 11 Nov 2025 07:02:38 +0000
Manifest next update: Wed 12 Nov 2025 07:02:38 +0000
Files and hashes: 1: tA2EnMQ7cy2rZkH8b9Wk2zotuUc.crl (hash: A9Idp2qewU0k6Bcr3YOrdzXknHw+MUZwi0U8qAaPNfQ=)
2: x7aEXzfMRzlzp6VorB64R028Jvk.roa (hash: 3aOt7CTs1p/zJJSbWQR2//U36Y0+Zh2Kxl00BzPCEXA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/134ccb-b0ab-446b-8172-62e27cd1e975/1/tA2EnMQ7cy2rZkH8b9Wk2zotuUc.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/134ccb-b0ab-446b-8172-62e27cd1e975/1/tA2EnMQ7cy2rZkH8b9Wk2zotuUc.mft
rsync://rpki.ripe.net/repository/DEFAULT/tA2EnMQ7cy2rZkH8b9Wk2zotuUc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b9:44:37:81:68:43:6b:7c:8f:6b:ca:d3:7b:8a:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b40d849cc43b732dab6641fc6fd5a4db3a2db947
Validity
Not Before: Nov 11 07:02:38 2025 GMT
Not After : Nov 12 07:02:38 2025 GMT
Subject: CN=39327280a92ef8ef63f7d824c69e0871df74117e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:d2:b1:f9:76:37:c0:cc:ea:ac:f7:c1:2c:01:
b2:b2:58:40:21:11:d2:73:5d:3a:75:3d:a1:ad:3c:
06:94:ca:8b:da:ab:fc:5b:2d:b0:c7:dd:fc:c2:18:
9f:e2:a8:5b:80:f9:28:78:f0:59:25:72:15:66:49:
ea:1b:bc:dd:92:43:46:a9:4e:69:b5:0d:0f:2a:f6:
0a:01:81:04:6b:c6:79:a3:5b:c3:a3:d5:68:f7:50:
4c:21:b6:77:0f:55:10:6f:78:e0:14:d5:71:fe:50:
27:1a:40:af:ef:91:8e:3f:50:2c:cd:88:6d:f6:d7:
e6:10:ac:fc:49:39:d4:9f:04:b2:51:11:0a:4b:f7:
82:44:1d:87:5a:ac:50:78:74:c7:27:93:21:e5:98:
2f:cb:62:23:9d:48:06:10:c0:a9:48:16:fd:34:eb:
11:57:9a:de:99:3c:61:85:a6:03:c3:2e:71:ce:a0:
99:d8:fd:3f:44:74:13:5f:eb:03:db:85:ce:fe:c5:
cb:5f:45:64:d0:be:ce:7b:45:4d:51:22:52:90:f7:
37:aa:7f:09:f3:d6:8a:1e:f7:7b:39:75:87:79:5d:
7b:5e:e7:df:7f:49:fd:3e:b6:02:14:c9:31:36:22:
6d:b3:a0:fa:21:67:c0:06:61:8b:9d:c6:3e:d4:03:
f0:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:32:72:80:A9:2E:F8:EF:63:F7:D8:24:C6:9E:08:71:DF:74:11:7E
X509v3 Authority Key Identifier:
keyid:B4:0D:84:9C:C4:3B:73:2D:AB:66:41:FC:6F:D5:A4:DB:3A:2D:B9:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tA2EnMQ7cy2rZkH8b9Wk2zotuUc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/134ccb-b0ab-446b-8172-62e27cd1e975/1/tA2EnMQ7cy2rZkH8b9Wk2zotuUc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/134ccb-b0ab-446b-8172-62e27cd1e975/1/tA2EnMQ7cy2rZkH8b9Wk2zotuUc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:67:c1:9b:d5:ed:9d:0a:29:fc:af:10:29:e0:27:76:96:6f:
93:58:42:aa:76:7a:13:71:8c:24:da:6c:b4:97:5f:33:3b:2b:
57:a2:45:ed:6f:5f:a8:0e:cd:8c:84:34:5f:a8:fa:40:f2:95:
d6:40:66:66:53:5e:c1:ed:fb:a4:8c:d5:c7:43:1a:00:b2:0f:
09:56:2f:40:6a:14:9f:78:70:92:5b:e3:ed:9c:02:dd:87:f7:
a3:09:6c:14:91:ae:11:23:4c:f9:e4:81:57:59:8d:80:fb:20:
7e:c9:7d:76:8d:59:77:d6:af:09:71:18:a1:3b:e6:4a:97:80:
fe:c6:15:4c:0d:66:e9:d0:17:bf:0c:ca:da:fc:96:65:49:67:
95:a2:fe:28:cc:8d:61:d8:55:09:66:30:a6:46:e4:c7:0b:0d:
c9:84:be:c7:00:e3:fa:3c:b1:30:17:3d:b9:67:9c:84:77:52:
98:09:f1:d8:40:5f:b2:8d:dc:64:3b:2c:97:26:e4:b1:51:d8:
f4:af:d8:d2:92:96:37:44:c9:1d:6d:b6:3f:c9:e7:65:a5:f6:
e3:69:46:fa:b4:5c:3e:79:31:28:6b:f6:af:bb:3a:bf:4c:73:
f4:a8:2f:ca:76:94:31:fa:f4:cc:13:30:46:0a:d4:a0:ec:a1:
e9:6d:e1:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:51:00 2025 by rpki-client