Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/82098b-0c53-4df2-8a32-fbc1e3f7e92b/1/tSU8JVLUQD9DuDwl52IjjfEtroE.mft
File: tSU8JVLUQD9DuDwl52IjjfEtroE.mft (raw, json)
Hash identifier: MHos24dVQc1rvEq0McUK4xpWIXcwU/3aRHMT1Pexrys=
Subject key identifier: 34:F6:5C:D2:1E:19:E4:AD:E5:25:BE:76:25:C1:47:8C:1A:65:9C:B0
Authority key identifier: B5:25:3C:25:52:D4:40:3F:43:B8:3C:25:E7:62:23:8D:F1:2D:AE:81
Certificate issuer: /CN=b5253c2552d4403f43b83c25e762238df12dae81
Certificate serial: 019A725C89C1745670B2D8E8197A7DCFAEB2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tSU8JVLUQD9DuDwl52IjjfEtroE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/82098b-0c53-4df2-8a32-fbc1e3f7e92b/1/tSU8JVLUQD9DuDwl52IjjfEtroE.mft
Manifest number: 0803
Signing time: Tue 11 Nov 2025 10:00:58 +0000
Manifest this update: Tue 11 Nov 2025 10:00:58 +0000
Manifest next update: Wed 12 Nov 2025 10:00:58 +0000
Files and hashes: 1: 6BgZvuvQdTTnHkpFXfURizE8XGQ.roa (hash: 78Xx7tAnFjhWDtWYiSHC9JJs2O6w1we6/J46orAWVbc=)
2: tSU8JVLUQD9DuDwl52IjjfEtroE.crl (hash: E4Rz86p7eOYanLiTiA0uAVVg8ojThUMOIZftwhPhYX0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/82098b-0c53-4df2-8a32-fbc1e3f7e92b/1/tSU8JVLUQD9DuDwl52IjjfEtroE.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/82098b-0c53-4df2-8a32-fbc1e3f7e92b/1/tSU8JVLUQD9DuDwl52IjjfEtroE.mft
rsync://rpki.ripe.net/repository/DEFAULT/tSU8JVLUQD9DuDwl52IjjfEtroE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:89:c1:74:56:70:b2:d8:e8:19:7a:7d:cf:ae:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5253c2552d4403f43b83c25e762238df12dae81
Validity
Not Before: Nov 11 10:00:58 2025 GMT
Not After : Nov 12 10:00:58 2025 GMT
Subject: CN=34f65cd21e19e4ade525be7625c1478c1a659cb0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:d3:fc:31:da:e5:6b:4c:ed:d3:c7:cb:16:8a:
38:22:99:77:bd:79:10:e8:92:6e:54:7f:6f:28:9a:
bd:d7:9e:88:cc:c8:20:19:a0:95:85:1f:3a:d4:25:
71:70:fa:fe:35:ce:bb:55:6f:3c:8d:39:5c:0d:27:
08:96:d1:d2:5e:ae:ce:13:d2:88:d1:6f:d4:75:f5:
a7:fd:6a:82:c6:9b:ee:a2:d6:b1:74:b1:37:2d:53:
0e:45:f1:ab:dc:5a:68:44:e7:67:7d:63:6d:dc:76:
c7:ee:a3:08:2b:87:10:24:e3:26:a6:a1:59:4c:dd:
75:77:51:f6:46:98:db:ab:37:02:ec:a1:52:7e:18:
98:23:f4:f6:6d:f1:b5:42:43:4b:3f:77:9e:df:2d:
94:8e:bf:ee:06:4b:01:1e:98:aa:8f:3d:3b:8e:6d:
63:c5:2b:62:33:4b:3d:66:11:fe:21:7c:74:1b:50:
be:2e:6b:00:b5:15:f2:a0:2e:4f:f6:2e:96:2d:50:
33:e6:97:7d:da:53:b7:c9:45:da:b7:69:3c:74:9d:
b5:32:21:bd:38:4c:5f:51:fc:0f:1c:ab:31:70:8f:
73:19:84:28:9e:ee:b9:49:f9:f1:3f:10:79:86:bb:
8d:c5:0d:52:11:61:30:66:c7:4f:00:be:72:4e:68:
44:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:F6:5C:D2:1E:19:E4:AD:E5:25:BE:76:25:C1:47:8C:1A:65:9C:B0
X509v3 Authority Key Identifier:
keyid:B5:25:3C:25:52:D4:40:3F:43:B8:3C:25:E7:62:23:8D:F1:2D:AE:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tSU8JVLUQD9DuDwl52IjjfEtroE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/82098b-0c53-4df2-8a32-fbc1e3f7e92b/1/tSU8JVLUQD9DuDwl52IjjfEtroE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/82098b-0c53-4df2-8a32-fbc1e3f7e92b/1/tSU8JVLUQD9DuDwl52IjjfEtroE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:47:85:38:de:77:49:74:16:d3:cd:27:49:ae:31:a3:b8:70:
92:cf:af:f0:92:71:57:60:0e:f6:4c:b6:08:2c:17:bc:a7:91:
9d:51:7e:b0:b4:ff:27:95:4f:ed:d3:00:62:b3:60:12:5e:0e:
20:20:41:d8:09:bb:1b:73:c7:0b:71:aa:ce:eb:4c:47:7f:c3:
4a:37:aa:c7:eb:c2:e2:7d:cf:cc:3c:2d:31:81:05:a3:b2:34:
88:b3:c5:39:ae:44:be:24:b8:47:67:1c:61:81:94:da:81:b3:
a8:6b:32:1b:a7:ab:29:99:16:47:9f:49:d4:16:7a:93:69:ea:
35:4e:a0:52:60:02:99:bc:58:c1:f2:51:82:2e:66:b1:d7:fd:
b3:41:9f:3b:21:46:f7:88:bd:69:4b:92:95:c0:58:ba:6a:8e:
43:a2:54:2e:1e:b9:02:79:8f:68:62:70:9a:c4:39:43:40:57:
83:07:81:75:8d:fd:c3:e7:73:b3:00:bb:c0:73:5b:3e:01:2d:
cc:f9:11:0e:00:51:2c:91:a4:44:9a:e3:75:f8:f0:16:d9:ae:
8f:a1:f0:95:e8:35:ae:6a:13:2f:b4:f2:46:52:c5:07:38:02:
63:29:af:05:b2:53:5d:5e:ee:c7:0b:0e:e5:23:e6:c1:1f:fe:
a8:9b:43:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 16:56:58 2025 by rpki-client