Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/8c02ff-a9c5-4788-ae8b-18b9a8510539/1/tXwPr6ZQ3ZSjtVgXOfY9iO-kFPM.mft
File: tXwPr6ZQ3ZSjtVgXOfY9iO-kFPM.mft (raw, json)
Hash identifier: bL78x2VhvaUPchgOfn6VEJOsHhUsIREHgHJXqZJeBw0=
Subject key identifier: 2A:62:69:F2:9F:CA:DD:48:80:D2:DB:82:ED:3A:66:E3:93:4E:93:3D
Authority key identifier: B5:7C:0F:AF:A6:50:DD:94:A3:B5:58:17:39:F6:3D:88:EF:A4:14:F3
Certificate issuer: /CN=b57c0fafa650dd94a3b5581739f63d88efa414f3
Certificate serial: 019A725CCD5C14B3F311D51E947142BE5745
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tXwPr6ZQ3ZSjtVgXOfY9iO-kFPM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/8c02ff-a9c5-4788-ae8b-18b9a8510539/1/tXwPr6ZQ3ZSjtVgXOfY9iO-kFPM.mft
Manifest number: 0E3D
Signing time: Tue 11 Nov 2025 10:01:15 +0000
Manifest this update: Tue 11 Nov 2025 10:01:15 +0000
Manifest next update: Wed 12 Nov 2025 10:01:15 +0000
Files and hashes: 1: WKXMRCbOe7azjRi4M3txfig4AbQ.roa (hash: misoRXqMC74XUm7CVVuJWe90Pkw4I/1hXuzduVdNB/4=)
2: tXwPr6ZQ3ZSjtVgXOfY9iO-kFPM.crl (hash: DK+cAi4d/CCg5hRv1/KFI63K+KoWzInR3qcVHfLDaMk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/8c02ff-a9c5-4788-ae8b-18b9a8510539/1/tXwPr6ZQ3ZSjtVgXOfY9iO-kFPM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/8c02ff-a9c5-4788-ae8b-18b9a8510539/1/tXwPr6ZQ3ZSjtVgXOfY9iO-kFPM.mft
rsync://rpki.ripe.net/repository/DEFAULT/tXwPr6ZQ3ZSjtVgXOfY9iO-kFPM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:cd:5c:14:b3:f3:11:d5:1e:94:71:42:be:57:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b57c0fafa650dd94a3b5581739f63d88efa414f3
Validity
Not Before: Nov 11 10:01:15 2025 GMT
Not After : Nov 12 10:01:15 2025 GMT
Subject: CN=2a6269f29fcadd4880d2db82ed3a66e3934e933d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:65:7e:0b:8d:3a:52:c6:fd:9d:1e:ad:3e:7f:
4e:8c:c7:46:66:65:9d:43:3f:ad:27:6a:e5:be:ca:
76:47:76:cb:01:f9:2e:d7:47:a1:9f:18:0a:98:a0:
78:6f:2b:51:c0:3c:6d:9d:62:30:8f:74:e6:c3:bd:
08:de:c5:7c:84:5c:ac:54:f5:c0:a0:70:36:a0:b3:
75:dd:f8:87:56:fb:07:d7:ff:08:ee:ae:e4:8b:12:
81:16:9f:45:14:d7:4e:0e:b5:32:c1:8e:8c:33:32:
4f:e8:95:eb:f3:e2:e2:7d:22:da:e3:16:7b:b7:1c:
5b:1c:63:95:d3:51:4a:33:77:36:85:4d:09:79:c1:
3b:c4:5f:fd:80:64:19:34:f5:16:b2:f8:27:6d:cc:
5d:0b:30:2e:80:3b:94:4d:b9:a4:f7:7a:ee:72:68:
21:b4:ed:75:f6:ae:fc:ed:7b:7e:71:a9:74:a2:99:
e4:10:98:3f:e8:ef:bc:30:83:8f:e2:5a:d9:76:89:
50:4b:1e:68:79:9d:7d:6f:11:11:98:17:b9:d6:a3:
76:1b:c4:79:04:49:a4:20:22:76:71:68:f7:e5:e5:
04:3d:25:92:0c:74:e1:73:17:4d:0b:9d:90:c5:91:
93:d8:a5:93:25:77:a4:59:31:fc:55:04:89:8b:45:
2b:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:62:69:F2:9F:CA:DD:48:80:D2:DB:82:ED:3A:66:E3:93:4E:93:3D
X509v3 Authority Key Identifier:
keyid:B5:7C:0F:AF:A6:50:DD:94:A3:B5:58:17:39:F6:3D:88:EF:A4:14:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tXwPr6ZQ3ZSjtVgXOfY9iO-kFPM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/8c02ff-a9c5-4788-ae8b-18b9a8510539/1/tXwPr6ZQ3ZSjtVgXOfY9iO-kFPM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/8c02ff-a9c5-4788-ae8b-18b9a8510539/1/tXwPr6ZQ3ZSjtVgXOfY9iO-kFPM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:4d:3e:f2:91:69:99:a0:7b:8c:a0:40:0a:0e:a0:e7:91:d2:
0b:58:22:49:bf:15:c4:20:62:ae:3d:fd:48:04:44:53:e7:c7:
50:f8:4b:dc:0c:10:5e:95:1d:7d:69:50:61:3f:f9:ec:43:21:
52:17:de:e9:d6:b0:f0:05:98:dd:5c:cb:e9:92:a5:f2:f4:bf:
57:45:57:23:0a:21:a7:10:74:97:8c:50:08:a8:5b:3b:7d:61:
c7:89:10:18:2c:24:6a:60:e3:8a:45:35:4e:8c:7d:e4:9f:0b:
00:04:1d:97:7e:e8:61:56:4f:cd:54:d3:c0:06:d0:c5:63:1c:
d1:20:3c:4c:bb:a8:f0:f9:8e:c0:31:c1:d3:c9:f2:e6:c5:55:
ba:a1:ff:57:5f:a8:19:55:5b:3f:31:fe:cc:39:ed:42:26:d5:
79:e7:a7:f1:ee:fc:08:10:e0:9f:ce:46:de:f3:35:ae:c8:28:
93:d2:9a:74:7a:b6:59:c8:63:28:a8:ab:9b:1d:73:c2:8a:54:
1d:f6:cd:c4:6d:a9:0b:da:86:5f:ec:1d:1e:a3:ee:ed:ae:43:
23:24:2c:48:d7:92:95:58:1a:f2:7d:94:69:7d:1e:b6:b5:d1:
1d:94:27:bb:58:64:2b:ed:e3:0f:3a:6e:1a:b3:b0:94:7b:bc:
6a:9e:a3:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:50:23 2025 by rpki-client