Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/d5e3cc-c1cd-4d68-bec3-1b08f7f5015d/1/Tg854squjizxS8xBsj88huGnIPg.mft
File: Tg854squjizxS8xBsj88huGnIPg.mft (raw, json)
Hash identifier: P7no/WqyP7WuMnqkFU5py0NJCmUhiBQeasRH5/XAxDs=
Subject key identifier: B8:CF:DF:FC:D6:94:2B:70:32:E8:AA:6F:05:E3:CE:B7:D9:C2:9F:6D
Authority key identifier: 4E:0F:39:E2:CA:AE:8E:2C:F1:4B:CC:41:B2:3F:3C:86:E1:A7:20:F8
Certificate issuer: /CN=4e0f39e2caae8e2cf14bcc41b23f3c86e1a720f8
Certificate serial: 019A5CE7E09EA7CDF2432E33089EE137E5E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tg854squjizxS8xBsj88huGnIPg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/d5e3cc-c1cd-4d68-bec3-1b08f7f5015d/1/Tg854squjizxS8xBsj88huGnIPg.mft
Manifest number: 1717
Signing time: Fri 07 Nov 2025 06:01:31 +0000
Manifest this update: Fri 07 Nov 2025 06:01:31 +0000
Manifest next update: Sat 08 Nov 2025 06:01:31 +0000
Files and hashes: 1: 3NL0_43JO4ViZMUt6FOGd4wRJes.roa (hash: iMUE0vTHXLYCmLZqj0qdPBpz5FgK9qmOUf7yFoe48OI=)
2: 4pgipsDtjzVZOnA4qzWqk83-xSA.roa (hash: nd8vlth0pBWJ/Is/avNVqT3xb/Gc3yDSmhppSZMRqxM=)
3: Tg854squjizxS8xBsj88huGnIPg.crl (hash: sEKpz8tSa6ucd2xVAB4VpZmBJw3+kO/1EStoIvZkT/Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/d5e3cc-c1cd-4d68-bec3-1b08f7f5015d/1/Tg854squjizxS8xBsj88huGnIPg.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/d5e3cc-c1cd-4d68-bec3-1b08f7f5015d/1/Tg854squjizxS8xBsj88huGnIPg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Tg854squjizxS8xBsj88huGnIPg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 07 Nov 2025 23:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:5c:e7:e0:9e:a7:cd:f2:43:2e:33:08:9e:e1:37:e5:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e0f39e2caae8e2cf14bcc41b23f3c86e1a720f8
Validity
Not Before: Nov 7 06:01:31 2025 GMT
Not After : Nov 8 06:01:31 2025 GMT
Subject: CN=b8cfdffcd6942b7032e8aa6f05e3ceb7d9c29f6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:d0:7e:13:c0:df:7a:e4:d3:22:5f:26:fb:ed:
10:13:aa:73:04:d0:99:e5:6f:28:4e:13:74:22:b1:
96:48:cf:c1:81:b5:ac:5e:41:72:34:42:a0:ce:34:
93:a1:5a:52:23:17:55:23:41:d4:a8:f6:64:eb:55:
83:b0:8a:2e:b9:83:ea:b3:3c:e0:ad:aa:a2:21:ae:
f7:c9:8c:5c:be:c0:6d:d3:eb:70:f6:27:c9:be:82:
e6:fb:88:35:d8:e8:fe:03:eb:44:cb:45:bb:d5:c0:
15:44:8b:e1:5c:63:7e:2b:34:8c:fe:7b:04:e5:1c:
db:36:1c:c3:d0:31:ab:41:be:16:11:fa:34:fa:27:
9f:b0:82:e2:2b:a6:68:b6:8c:80:a0:d5:e3:12:a2:
00:57:da:f2:86:f5:a6:77:47:ea:25:3c:47:54:aa:
eb:70:50:55:24:07:10:c3:8d:f4:db:19:e2:9f:5c:
53:50:34:89:ee:78:59:89:8a:58:bb:40:ab:84:58:
a8:61:84:a4:c7:21:9c:84:4e:f2:b2:54:6f:00:e5:
57:d1:d6:3a:cc:38:b9:86:5b:a9:a4:79:8a:37:5d:
dc:db:fb:d0:09:eb:08:b9:29:1a:47:47:c2:06:4f:
e3:bd:c9:3d:2c:0b:10:54:86:58:b8:03:73:69:39:
5f:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:CF:DF:FC:D6:94:2B:70:32:E8:AA:6F:05:E3:CE:B7:D9:C2:9F:6D
X509v3 Authority Key Identifier:
keyid:4E:0F:39:E2:CA:AE:8E:2C:F1:4B:CC:41:B2:3F:3C:86:E1:A7:20:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tg854squjizxS8xBsj88huGnIPg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/d5e3cc-c1cd-4d68-bec3-1b08f7f5015d/1/Tg854squjizxS8xBsj88huGnIPg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/d5e3cc-c1cd-4d68-bec3-1b08f7f5015d/1/Tg854squjizxS8xBsj88huGnIPg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:c0:92:04:b6:e3:3e:cb:2b:e1:da:7e:12:e0:79:95:30:84:
d8:3b:85:f2:6f:36:4e:76:67:40:61:b7:f1:26:fe:a0:67:99:
d1:06:db:61:ee:b1:af:f3:10:e9:73:6a:37:bf:94:e8:93:af:
09:07:08:75:2b:74:e0:af:c4:04:2d:b6:a2:48:02:9a:06:1b:
2d:25:32:55:c0:02:83:9c:5c:fd:94:14:0b:e7:0a:db:30:8b:
68:33:27:cc:43:04:13:4f:7d:af:86:4b:e9:a4:b5:81:e3:cc:
67:17:e3:05:84:25:a4:3b:9b:ce:db:86:d7:0f:7f:ac:22:1a:
d7:99:bf:01:68:34:38:8c:cd:4e:a7:75:75:b8:6b:68:2b:35:
ed:e1:38:bb:1a:cb:84:15:d6:e2:a5:e8:b5:f4:d4:ff:b2:fe:
bc:0c:d5:18:cc:2d:1c:b4:f9:17:93:04:12:98:0b:04:64:95:
05:da:71:fd:7f:b8:39:27:29:4c:df:71:dd:a6:2a:36:c8:87:
93:9e:4b:f5:8a:a8:97:9d:07:36:0c:76:3e:ee:67:98:29:91:
0b:f9:72:1f:35:eb:01:66:9e:09:00:f1:e9:dd:8c:56:66:1b:
6f:04:e0:9b:a4:bb:45:f6:ac:92:3c:fc:00:22:b0:b7:e9:58:
85:fe:d7:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 7 08:02:10 2025 by rpki-client