Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/eeb1b2-e3c3-413d-a164-80d4782437ff/1/tvpArb6TaxhPhEWGoPkNEjC2hTc.mft
File: tvpArb6TaxhPhEWGoPkNEjC2hTc.mft (raw, json)
Hash identifier: /oDUuKoQ3x/CUyVbvVsH5eaqDn5OCgENNmAamweOWaY=
Subject key identifier: AA:E5:D0:C5:93:B0:79:70:5E:4C:0B:47:E6:B0:A5:1B:73:21:06:8B
Authority key identifier: B6:FA:40:AD:BE:93:6B:18:4F:84:45:86:A0:F9:0D:12:30:B6:85:37
Certificate issuer: /CN=b6fa40adbe936b184f844586a0f90d1230b68537
Certificate serial: 019A71EEE2CE51B376307C434A0ED6783D86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tvpArb6TaxhPhEWGoPkNEjC2hTc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/eeb1b2-e3c3-413d-a164-80d4782437ff/1/tvpArb6TaxhPhEWGoPkNEjC2hTc.mft
Manifest number: 0F14
Signing time: Tue 11 Nov 2025 08:01:12 +0000
Manifest this update: Tue 11 Nov 2025 08:01:12 +0000
Manifest next update: Wed 12 Nov 2025 08:01:12 +0000
Files and hashes: 1: 7XTv9hOTaLviFUQwCXilEpYpbHU.roa (hash: 4LkrU5FXjLzeM7TTaFB6Rd3GTMio8T94peCl7zXgOHM=)
2: tvpArb6TaxhPhEWGoPkNEjC2hTc.crl (hash: tLgdwquoYEGQcoXXQeuD+697JJpX9v0N5ZLRhxec0wY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/eeb1b2-e3c3-413d-a164-80d4782437ff/1/tvpArb6TaxhPhEWGoPkNEjC2hTc.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/eeb1b2-e3c3-413d-a164-80d4782437ff/1/tvpArb6TaxhPhEWGoPkNEjC2hTc.mft
rsync://rpki.ripe.net/repository/DEFAULT/tvpArb6TaxhPhEWGoPkNEjC2hTc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:e2:ce:51:b3:76:30:7c:43:4a:0e:d6:78:3d:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b6fa40adbe936b184f844586a0f90d1230b68537
Validity
Not Before: Nov 11 08:01:12 2025 GMT
Not After : Nov 12 08:01:12 2025 GMT
Subject: CN=aae5d0c593b079705e4c0b47e6b0a51b7321068b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:4e:c9:15:30:a2:1c:2b:11:9e:b7:d2:fc:a6:
1f:87:ce:fa:25:0a:19:5a:1b:d8:73:cd:0b:0e:d9:
d8:81:da:a7:d3:2f:90:e8:c7:0d:17:bf:3a:f4:af:
24:68:ea:79:10:4f:ef:a8:aa:2e:ae:a6:fa:2d:66:
c4:ed:88:0a:ba:01:98:60:66:92:1f:ce:8c:66:ee:
41:30:b0:62:a3:88:59:65:0a:b9:fa:c6:a9:5f:9b:
40:2e:ec:0b:2d:55:e0:e3:8a:da:89:16:2c:96:86:
81:1c:29:0b:fd:4f:dc:be:90:e7:d2:ab:ae:55:c4:
9e:1b:f7:0a:e8:4f:5f:8d:1c:62:57:55:41:05:bc:
56:75:69:f9:ae:00:2f:e5:51:ee:11:4c:b0:47:0d:
f0:56:19:8c:bf:8e:55:da:8c:b7:74:30:06:6c:f1:
cb:0b:ac:27:0d:f6:93:ea:c7:10:d8:59:d3:47:d9:
1e:af:e6:5f:c9:63:36:44:18:6d:83:26:16:31:93:
9a:53:c0:ce:fb:64:72:f3:2a:34:f8:21:52:01:ca:
44:ce:41:55:11:58:06:5c:80:80:db:f8:8f:85:3b:
29:b3:7b:c3:73:9e:ab:69:bd:ee:38:09:e8:77:68:
02:54:a7:3a:0f:c5:c0:68:07:f4:11:96:68:66:05:
68:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:E5:D0:C5:93:B0:79:70:5E:4C:0B:47:E6:B0:A5:1B:73:21:06:8B
X509v3 Authority Key Identifier:
keyid:B6:FA:40:AD:BE:93:6B:18:4F:84:45:86:A0:F9:0D:12:30:B6:85:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tvpArb6TaxhPhEWGoPkNEjC2hTc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/eeb1b2-e3c3-413d-a164-80d4782437ff/1/tvpArb6TaxhPhEWGoPkNEjC2hTc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/eeb1b2-e3c3-413d-a164-80d4782437ff/1/tvpArb6TaxhPhEWGoPkNEjC2hTc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:a3:f3:df:2a:a8:65:92:8d:21:7b:ab:6b:bb:8c:21:d6:c3:
53:68:a1:99:05:db:ba:49:c4:eb:14:0d:57:fd:65:60:f4:6e:
78:f9:5f:21:fa:7a:32:4d:02:9a:b2:0f:13:40:97:01:e9:af:
5a:39:7c:39:e4:7e:52:19:bc:24:e6:21:6d:f5:f6:a1:5d:e6:
49:5e:8f:66:c8:0f:e9:6f:06:8f:aa:1a:d0:93:72:a0:6b:b9:
eb:0c:6f:02:40:76:33:db:0b:51:52:fc:1b:bd:b1:6a:7a:a0:
24:71:84:c2:85:ef:64:31:12:e8:1d:82:b5:7d:83:6a:4c:e2:
26:cb:27:96:f1:8f:87:71:38:a2:b2:15:ba:0e:ab:9e:b1:56:
d7:b7:da:bd:58:5c:0b:8f:41:d9:9d:0a:76:f0:e5:bc:13:fd:
b2:c0:33:99:27:01:c8:43:83:df:c4:08:31:63:e3:51:5e:8b:
0c:80:c6:a3:21:77:2c:da:93:b9:33:17:e0:c5:e9:28:60:d0:
96:0b:9c:04:ce:ca:ef:23:31:e8:e8:90:53:97:c6:6a:63:4f:
9b:52:d3:f3:11:09:e7:3b:f8:56:0f:df:93:00:15:c5:ad:5d:
ca:19:bf:27:fa:46:8d:4d:f0:41:d3:d3:38:ef:45:7b:60:61:
ad:f7:82:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:53:55 2025 by rpki-client