Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/90a5cf-e484-4bb2-a285-6a49b5a31294/1/tPM_b9KbrwPMTUha9fa3DaawCZ8.mft
File: tPM_b9KbrwPMTUha9fa3DaawCZ8.mft (raw, json)
Hash identifier: xGoRHxFhS+v0AtplpvKN048qgVpgSWR40hW15yJ/UeY=
Subject key identifier: EA:A4:B6:A9:39:CD:D5:4A:09:91:45:06:CA:06:46:87:6E:41:A4:28
Authority key identifier: B4:F3:3F:6F:D2:9B:AF:03:CC:4D:48:5A:F5:F6:B7:0D:A6:B0:09:9F
Certificate issuer: /CN=b4f33f6fd29baf03cc4d485af5f6b70da6b0099f
Certificate serial: 019A706DFFD251E366062F7B67BE53CCD22E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tPM_b9KbrwPMTUha9fa3DaawCZ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/90a5cf-e484-4bb2-a285-6a49b5a31294/1/tPM_b9KbrwPMTUha9fa3DaawCZ8.mft
Manifest number: 0FF7
Signing time: Tue 11 Nov 2025 01:00:48 +0000
Manifest this update: Tue 11 Nov 2025 01:00:48 +0000
Manifest next update: Wed 12 Nov 2025 01:00:48 +0000
Files and hashes: 1: tPM_b9KbrwPMTUha9fa3DaawCZ8.crl (hash: AxYo9bJb2Fh93XvzubQ/RlIBHchR54qxuqtVlMV6ueg=)
2: tYPVw8LB8i24cvigRIjHBmA1vkA.roa (hash: PLxJfAKIcmuKybJlU2Vop9ZELJyvcamyBgkEBw419jw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/90a5cf-e484-4bb2-a285-6a49b5a31294/1/tPM_b9KbrwPMTUha9fa3DaawCZ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/90a5cf-e484-4bb2-a285-6a49b5a31294/1/tPM_b9KbrwPMTUha9fa3DaawCZ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/tPM_b9KbrwPMTUha9fa3DaawCZ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 01:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:6d:ff:d2:51:e3:66:06:2f:7b:67:be:53:cc:d2:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4f33f6fd29baf03cc4d485af5f6b70da6b0099f
Validity
Not Before: Nov 11 01:00:48 2025 GMT
Not After : Nov 12 01:00:48 2025 GMT
Subject: CN=eaa4b6a939cdd54a09914506ca0646876e41a428
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:44:09:57:2d:d9:29:c6:00:d3:f3:59:eb:d5:
7a:8f:ad:99:55:14:43:41:21:9d:78:7a:86:27:cf:
2f:6a:60:70:f4:80:a2:c3:e3:01:56:71:59:72:0c:
cd:ad:f8:4d:76:30:e8:ba:52:84:e3:3b:56:d2:f9:
db:a6:10:1a:5d:32:34:0c:0e:43:6e:8c:85:22:a5:
cc:c9:b8:30:1b:7b:54:a5:fb:c7:24:28:2f:34:18:
04:0a:da:aa:34:53:58:b0:6f:81:38:9f:f7:bf:da:
0e:d9:5c:b9:fd:e0:43:45:5a:88:9f:2b:3f:c8:77:
a5:6d:56:de:63:2b:63:90:a3:b2:e1:72:1f:43:08:
67:5f:17:3a:24:ee:90:be:0f:7f:de:9e:7d:af:3f:
9a:e8:8a:57:6e:e0:8f:75:86:29:bb:60:05:f3:d2:
0a:f5:57:5b:86:16:8c:d5:37:7b:0b:34:0b:2d:de:
da:f4:66:de:29:3d:12:74:22:01:77:85:24:a5:6f:
d7:62:cb:52:3b:7d:8b:b7:a2:66:bf:39:8b:79:2b:
2e:77:23:92:b3:50:82:04:fd:47:bc:d6:25:c6:d2:
34:97:5e:4f:ba:69:28:6b:60:d5:ca:91:00:b9:11:
69:20:c1:a7:da:47:a0:e8:fb:56:23:54:c7:7f:04:
1b:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:A4:B6:A9:39:CD:D5:4A:09:91:45:06:CA:06:46:87:6E:41:A4:28
X509v3 Authority Key Identifier:
keyid:B4:F3:3F:6F:D2:9B:AF:03:CC:4D:48:5A:F5:F6:B7:0D:A6:B0:09:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tPM_b9KbrwPMTUha9fa3DaawCZ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/90a5cf-e484-4bb2-a285-6a49b5a31294/1/tPM_b9KbrwPMTUha9fa3DaawCZ8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/90a5cf-e484-4bb2-a285-6a49b5a31294/1/tPM_b9KbrwPMTUha9fa3DaawCZ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:b4:ab:b0:08:43:b6:d2:8b:c4:c7:63:5a:e3:e0:58:02:9f:
e0:45:0e:99:47:fa:01:35:80:60:96:e4:e1:e9:4c:91:0a:e5:
fd:0b:35:4e:cd:f6:10:c2:df:d7:2b:3d:c5:e6:25:54:6e:c0:
28:8f:48:85:55:c1:4f:08:f1:87:de:8a:8f:bc:9a:11:ae:f1:
fb:bd:48:15:1f:a0:f8:bc:63:0e:10:72:8c:b6:9e:ec:e5:22:
57:bd:25:88:26:a7:ab:da:6c:24:a9:fb:95:27:f7:89:2f:ec:
1b:47:f0:d1:bf:8a:87:a3:20:3f:5d:fe:21:c8:98:4a:af:de:
b7:8d:8f:1f:53:d8:1c:bb:a9:9e:8d:ec:b7:f5:60:8d:cf:76:
fc:8b:53:4d:49:d9:ad:0c:97:2f:d6:65:78:e1:aa:15:f0:59:
39:32:73:c7:04:98:3a:bd:43:38:ca:a1:6a:17:aa:89:b6:e9:
36:28:ae:4e:d2:4f:00:46:8c:25:4e:b1:41:74:cc:57:f4:dd:
80:dd:bc:e9:fe:ab:b4:2e:61:e1:ce:7d:24:09:98:ad:a8:6b:
bd:eb:6c:80:24:44:d0:6f:4f:bd:02:f6:22:2f:6d:75:02:ec:
ef:dd:34:88:4e:85:b0:3e:27:01:5e:41:bb:56:cd:f7:2b:b7:
61:69:34:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:33:52 2025 by rpki-client