Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/d95b2c-1e02-4e4e-8438-bbcae0df1f2f/1/tgtXTwPZiBVfRLossHvH37RXzw8.mft
File: tgtXTwPZiBVfRLossHvH37RXzw8.mft (raw, json)
Hash identifier: mk/WcHMieJX91tGaq+/7Cl9qRnkIf8Un5xfmdcdSqcE=
Subject key identifier: 4E:12:A8:41:8E:5F:FC:51:EA:B6:B2:17:BC:36:40:2B:E9:ED:ED:C2
Authority key identifier: B6:0B:57:4F:03:D9:88:15:5F:44:BA:2C:B0:7B:C7:DF:B4:57:CF:0F
Certificate issuer: /CN=b60b574f03d988155f44ba2cb07bc7dfb457cf0f
Certificate serial: 019A71B7DF162B972CE67E5E64BF61564C1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tgtXTwPZiBVfRLossHvH37RXzw8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/d95b2c-1e02-4e4e-8438-bbcae0df1f2f/1/tgtXTwPZiBVfRLossHvH37RXzw8.mft
Manifest number: 16B1
Signing time: Tue 11 Nov 2025 07:01:06 +0000
Manifest this update: Tue 11 Nov 2025 07:01:06 +0000
Manifest next update: Wed 12 Nov 2025 07:01:06 +0000
Files and hashes: 1: BeOIJLd8_MIXUGufXTnw_YPsJgs.roa (hash: UFekJjmZxy4vjH3dPZliRBeAZT4NRRq/0IMLKsXu0f8=)
2: tgtXTwPZiBVfRLossHvH37RXzw8.crl (hash: oMqWHxKoIKAkn+U/J1/iDPRcnfPEQhZj6BF8OyefhOo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/d95b2c-1e02-4e4e-8438-bbcae0df1f2f/1/tgtXTwPZiBVfRLossHvH37RXzw8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/d95b2c-1e02-4e4e-8438-bbcae0df1f2f/1/tgtXTwPZiBVfRLossHvH37RXzw8.mft
rsync://rpki.ripe.net/repository/DEFAULT/tgtXTwPZiBVfRLossHvH37RXzw8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b7:df:16:2b:97:2c:e6:7e:5e:64:bf:61:56:4c:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b60b574f03d988155f44ba2cb07bc7dfb457cf0f
Validity
Not Before: Nov 11 07:01:06 2025 GMT
Not After : Nov 12 07:01:06 2025 GMT
Subject: CN=4e12a8418e5ffc51eab6b217bc36402be9ededc2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:9b:e2:5f:08:62:36:1a:cf:0c:16:a8:e8:d8:
a3:38:30:fe:9c:c5:1a:bc:0b:3e:c1:ad:b0:3d:94:
28:dc:8a:d0:46:91:09:42:39:22:34:e2:89:c8:db:
fb:6c:94:d4:d8:74:2c:8b:49:09:66:9c:5e:d2:5d:
1b:86:41:80:6b:61:cc:1a:77:e4:37:70:18:ac:dd:
17:e5:e5:7a:55:03:be:da:7e:92:63:d9:64:6d:58:
ad:d4:07:13:0c:ba:86:ee:98:65:d8:4e:ee:5c:62:
75:17:0c:e2:a8:51:f1:27:37:ca:7f:9a:82:3f:8b:
0d:c3:c3:14:e7:b5:30:2c:ae:05:30:44:79:f2:56:
3a:8a:78:a0:8d:22:45:5a:f6:af:d6:31:e4:c6:bf:
66:41:c9:de:55:c2:49:cb:6c:61:8f:61:8e:23:52:
15:2e:c2:89:23:ca:e7:28:05:12:8d:28:a1:81:ea:
90:45:0a:cc:5d:cd:e8:0c:5f:0a:92:2b:db:7e:ca:
29:41:6f:f7:67:f3:de:b0:94:42:be:fd:50:0b:63:
c5:15:49:a9:6f:94:9b:8f:10:98:7d:ce:c5:d8:51:
e7:59:3c:69:03:3d:15:54:8c:3f:88:ac:8a:b7:f6:
70:d8:a5:59:cc:08:36:90:d4:b7:67:20:a0:45:1a:
1f:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:12:A8:41:8E:5F:FC:51:EA:B6:B2:17:BC:36:40:2B:E9:ED:ED:C2
X509v3 Authority Key Identifier:
keyid:B6:0B:57:4F:03:D9:88:15:5F:44:BA:2C:B0:7B:C7:DF:B4:57:CF:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tgtXTwPZiBVfRLossHvH37RXzw8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/d95b2c-1e02-4e4e-8438-bbcae0df1f2f/1/tgtXTwPZiBVfRLossHvH37RXzw8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/d95b2c-1e02-4e4e-8438-bbcae0df1f2f/1/tgtXTwPZiBVfRLossHvH37RXzw8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:c2:9d:0e:cb:4a:16:78:d6:27:50:f9:0e:cd:ab:f5:41:b9:
29:dc:bf:46:7a:6a:e1:04:ac:29:3c:9d:18:0a:3e:68:ac:cf:
6e:5c:62:1b:5f:a7:95:b9:14:e2:6e:b3:a3:9a:86:cd:88:7b:
ec:e6:8b:6e:7b:da:26:c8:78:b6:82:b1:08:5a:24:e9:55:74:
58:cc:5a:02:6c:32:1b:1c:3a:1f:1b:1d:46:57:e2:03:98:35:
d8:1f:b7:e7:34:be:36:85:0a:5f:56:ed:28:85:a1:44:e5:34:
da:74:38:e6:20:4a:1c:44:a8:a0:b4:14:38:4f:e1:2b:05:a7:
bd:41:6c:78:25:29:38:aa:d0:c3:90:67:5c:b8:8f:6c:3f:a7:
7b:26:8b:fd:26:0d:a2:f0:92:21:27:21:af:72:08:98:c8:62:
06:86:a5:5b:48:23:5f:c7:15:69:7e:8b:b7:b0:c3:39:6d:b1:
eb:bd:b5:21:58:2d:f4:bb:36:ca:34:ce:d1:90:b2:77:2d:08:
f5:7f:0b:60:14:ca:5c:79:a7:84:ef:c1:fc:78:70:cb:4a:35:
be:79:a1:5e:ee:bc:a5:77:d2:c6:6b:2b:35:b5:2a:5c:90:c2:
41:2a:52:e4:46:e6:de:ca:d5:63:21:9f:1d:63:55:a8:c3:9f:
87:b8:40:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:16:10 2025 by rpki-client