Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/d493cc-3254-4d95-bdee-1a23e15f3b84/1/tWRYV2uiOSHdeS3ABS-PgoZ9Yns.mft
File: tWRYV2uiOSHdeS3ABS-PgoZ9Yns.mft (raw, json)
Hash identifier: uMxsEZhk/VA5bc6rVmAGBycYopeT0xGUxmOkQ0E010M=
Subject key identifier: 37:26:7E:4A:36:71:1F:CB:5F:AE:42:0A:A4:88:9A:25:B5:08:CE:88
Authority key identifier: B5:64:58:57:6B:A2:39:21:DD:79:2D:C0:05:2F:8F:82:86:7D:62:7B
Certificate issuer: /CN=b56458576ba23921dd792dc0052f8f82867d627b
Certificate serial: 019A725C5607E631F9F61A2E6128C03F5BA1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tWRYV2uiOSHdeS3ABS-PgoZ9Yns.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/d493cc-3254-4d95-bdee-1a23e15f3b84/1/tWRYV2uiOSHdeS3ABS-PgoZ9Yns.mft
Manifest number: 13F3
Signing time: Tue 11 Nov 2025 10:00:45 +0000
Manifest this update: Tue 11 Nov 2025 10:00:45 +0000
Manifest next update: Wed 12 Nov 2025 10:00:45 +0000
Files and hashes: 1: E7d_b0PflOY76P_uC3WM3xFdSrc.roa (hash: n1OXhuOXloaQfjIyVDut9dhlUxv9V7SaFL6+utmdzjI=)
2: tWRYV2uiOSHdeS3ABS-PgoZ9Yns.crl (hash: eWwKWnJlCMXYEAdNvgT3LRe7hFlBokjliuEnX/TZCiI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/d493cc-3254-4d95-bdee-1a23e15f3b84/1/tWRYV2uiOSHdeS3ABS-PgoZ9Yns.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/d493cc-3254-4d95-bdee-1a23e15f3b84/1/tWRYV2uiOSHdeS3ABS-PgoZ9Yns.mft
rsync://rpki.ripe.net/repository/DEFAULT/tWRYV2uiOSHdeS3ABS-PgoZ9Yns.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:56:07:e6:31:f9:f6:1a:2e:61:28:c0:3f:5b:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b56458576ba23921dd792dc0052f8f82867d627b
Validity
Not Before: Nov 11 10:00:45 2025 GMT
Not After : Nov 12 10:00:45 2025 GMT
Subject: CN=37267e4a36711fcb5fae420aa4889a25b508ce88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:8a:17:e2:f2:d1:a6:df:ab:06:ed:4c:34:00:
3c:b8:7b:e4:76:1c:1c:11:77:d8:2c:32:f6:78:95:
e4:b4:25:bf:eb:d3:1f:a2:72:8d:c3:f4:b4:95:52:
ef:d4:22:bf:dc:6b:f3:fc:d8:56:f8:80:9c:a7:52:
ea:11:c7:e3:c9:00:6e:81:33:84:e7:cd:fa:91:39:
00:b6:df:57:3b:37:fb:d1:db:ba:be:bf:a0:66:aa:
48:b0:50:ce:b1:4d:f6:f3:09:9d:26:50:a1:7a:a6:
66:78:04:12:3c:bd:2e:90:1a:26:13:37:ea:8d:d4:
00:a4:48:78:67:c5:46:b2:24:38:7f:08:3d:3e:ec:
c7:b7:e1:45:0d:68:eb:48:01:36:58:90:41:85:6a:
c3:10:e1:4c:d5:20:cf:57:a2:20:b9:61:a8:d9:e7:
74:a7:20:dc:67:50:6b:f5:62:df:b6:45:8b:fd:3a:
42:3e:bc:eb:89:57:f7:4b:3c:f4:c1:79:0d:ec:5c:
9a:03:bc:1c:44:d2:b3:7a:3d:aa:1d:34:e9:3a:0a:
4e:76:f0:dc:ba:20:6b:cd:a6:13:eb:82:54:40:b6:
a0:05:90:8a:8b:f2:18:03:87:46:8d:bb:13:29:fa:
50:c5:98:b6:c6:87:52:de:ab:c0:4a:e3:29:1e:03:
c5:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:26:7E:4A:36:71:1F:CB:5F:AE:42:0A:A4:88:9A:25:B5:08:CE:88
X509v3 Authority Key Identifier:
keyid:B5:64:58:57:6B:A2:39:21:DD:79:2D:C0:05:2F:8F:82:86:7D:62:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tWRYV2uiOSHdeS3ABS-PgoZ9Yns.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/d493cc-3254-4d95-bdee-1a23e15f3b84/1/tWRYV2uiOSHdeS3ABS-PgoZ9Yns.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/d493cc-3254-4d95-bdee-1a23e15f3b84/1/tWRYV2uiOSHdeS3ABS-PgoZ9Yns.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:6f:48:dd:a3:10:0c:94:93:99:eb:9c:3b:a3:b1:8a:41:90:
3e:a2:b9:7b:63:de:fb:1b:9b:58:7b:6e:46:cb:38:4d:d7:dd:
2b:19:c3:b0:4e:05:43:85:81:53:2e:8f:86:19:62:05:40:8b:
86:16:28:21:a3:ac:80:a4:bf:f5:9a:54:a6:50:8c:e2:14:04:
c3:ae:56:8e:a2:0a:be:51:9f:eb:08:41:c9:3b:35:c6:79:32:
5b:53:98:82:46:47:89:fd:a4:86:6c:6d:a5:d7:b3:11:d8:d0:
3a:24:52:2c:86:61:fd:0b:60:8c:db:e6:f6:3b:79:d1:20:44:
5f:bf:eb:ff:1d:47:25:d6:cf:dd:c0:25:1d:b5:75:97:2c:2b:
2b:9b:85:67:10:2a:03:a1:01:a9:81:65:90:d9:59:30:a9:f5:
e3:88:1d:c3:b1:c3:3f:35:36:a4:77:69:64:3e:11:41:98:61:
d4:c8:96:09:0c:a4:10:4f:72:ba:86:63:c5:2e:46:8a:30:54:
5a:c6:43:6c:83:1c:88:f3:eb:29:1f:bc:5a:0d:6c:7b:0d:9d:
31:c6:65:20:a6:f1:04:4b:72:f0:22:dc:ac:5e:b2:70:af:17:
40:d1:66:b9:76:05:fd:bd:4c:8c:55:30:40:5f:95:17:55:df:
e7:37:41:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:02:42 2025 by rpki-client