Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/7edbcf-b90f-4707-b289-a3d377c6feef/1/tv5j7ooj9JFuQFNTHmlQ22wx6AU.mft
File: tv5j7ooj9JFuQFNTHmlQ22wx6AU.mft (raw, json)
Hash identifier: mADj9gwCJsKldgbEBgg8faRgcAf99oERoyHmbkcV06c=
Subject key identifier: 8D:1F:ED:D6:90:42:36:4F:FB:2E:EC:43:B2:E5:77:DE:7B:DE:92:3E
Authority key identifier: B6:FE:63:EE:8A:23:F4:91:6E:40:53:53:1E:69:50:DB:6C:31:E8:05
Certificate issuer: /CN=b6fe63ee8a23f4916e4053531e6950db6c31e805
Certificate serial: 019A7293995A820F84AF260C9BD2A3D0554E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tv5j7ooj9JFuQFNTHmlQ22wx6AU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/7edbcf-b90f-4707-b289-a3d377c6feef/1/tv5j7ooj9JFuQFNTHmlQ22wx6AU.mft
Manifest number: 171E
Signing time: Tue 11 Nov 2025 11:01:06 +0000
Manifest this update: Tue 11 Nov 2025 11:01:06 +0000
Manifest next update: Wed 12 Nov 2025 11:01:06 +0000
Files and hashes: 1: TDDnhsWgxkGdG7BfGlC4CIB8hXc.roa (hash: mAFWPEFNFtu12Nez2hG2dDFI+Ij+KVUdoJCzsE5w8Wg=)
2: tv5j7ooj9JFuQFNTHmlQ22wx6AU.crl (hash: gUTpFP6Zw1hjqsQSr1uCuuw/faIygbAahxoN2ML62go=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/7edbcf-b90f-4707-b289-a3d377c6feef/1/tv5j7ooj9JFuQFNTHmlQ22wx6AU.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/7edbcf-b90f-4707-b289-a3d377c6feef/1/tv5j7ooj9JFuQFNTHmlQ22wx6AU.mft
rsync://rpki.ripe.net/repository/DEFAULT/tv5j7ooj9JFuQFNTHmlQ22wx6AU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:93:99:5a:82:0f:84:af:26:0c:9b:d2:a3:d0:55:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b6fe63ee8a23f4916e4053531e6950db6c31e805
Validity
Not Before: Nov 11 11:01:06 2025 GMT
Not After : Nov 12 11:01:06 2025 GMT
Subject: CN=8d1fedd69042364ffb2eec43b2e577de7bde923e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:0f:2c:9f:4a:c2:a5:50:e8:1e:a9:21:10:98:
73:95:47:e7:d2:65:a5:43:6b:9c:6d:e4:5c:6c:d5:
48:ad:f7:ad:dc:ba:a1:de:86:d5:d4:fa:88:34:d2:
04:f7:0e:49:48:9e:ce:92:93:b9:8f:b6:25:d5:c8:
c5:94:ba:0e:05:e6:a3:94:90:1c:e2:20:83:d6:35:
61:15:1c:b9:88:cd:03:fe:2d:b4:e2:95:3a:20:b3:
53:14:fd:8b:de:94:d4:a1:c4:f2:74:1c:c7:33:f0:
c3:ed:cf:78:fd:e9:56:0a:71:32:8c:84:fc:e6:8f:
6f:24:3a:ce:07:a7:59:f5:4c:ef:a8:72:9d:cf:6b:
d9:f9:8a:c5:b2:01:57:f0:fa:5c:54:c8:e9:3b:26:
06:dd:8a:24:c7:84:ed:50:47:be:01:ee:be:6f:74:
13:34:33:74:51:aa:db:c3:37:cf:90:bd:48:17:5f:
8f:57:d5:83:86:44:93:66:0b:53:82:5e:0d:26:01:
5c:2c:5f:f5:ca:43:40:db:11:87:52:8b:78:f9:f6:
a4:36:52:08:72:dd:db:6d:a1:2c:29:19:27:49:b4:
a3:7d:61:cd:53:aa:fd:ca:ca:d0:98:c2:06:a5:55:
00:da:af:e2:5a:d2:14:3f:1e:5d:55:19:9e:70:5d:
5f:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:1F:ED:D6:90:42:36:4F:FB:2E:EC:43:B2:E5:77:DE:7B:DE:92:3E
X509v3 Authority Key Identifier:
keyid:B6:FE:63:EE:8A:23:F4:91:6E:40:53:53:1E:69:50:DB:6C:31:E8:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tv5j7ooj9JFuQFNTHmlQ22wx6AU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/7edbcf-b90f-4707-b289-a3d377c6feef/1/tv5j7ooj9JFuQFNTHmlQ22wx6AU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/7edbcf-b90f-4707-b289-a3d377c6feef/1/tv5j7ooj9JFuQFNTHmlQ22wx6AU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:1a:1b:ed:28:fa:cb:b0:4d:a0:66:fa:d1:7e:f5:50:7a:c5:
16:8a:d6:51:a5:f2:f0:0d:88:d3:5d:21:ce:4c:79:b8:92:78:
60:47:a6:0b:44:0f:fe:6e:51:c5:77:d7:9d:de:51:51:4d:d5:
4c:cf:64:5d:36:4c:9e:8c:8e:66:5c:1b:21:e6:0c:8d:51:4f:
fb:00:c5:53:90:c4:47:fd:15:b7:5d:3f:64:55:28:15:e4:9a:
b9:5f:b6:7f:2f:7f:a7:a3:f4:ac:b4:fe:f0:32:f0:e9:a6:d9:
ea:7d:ca:be:e2:1f:c7:66:67:9a:60:bb:d8:ef:a5:23:9c:7a:
a2:6c:72:d5:25:f3:51:30:43:da:67:55:d4:35:1c:9c:f5:d7:
e2:64:b2:1d:b9:95:6e:47:98:18:ad:ed:3a:d6:88:99:47:a3:
0d:04:08:be:8e:f1:32:31:15:e0:ea:44:33:c0:6f:20:53:28:
0e:fc:91:ff:2f:ef:c7:96:64:8e:41:7a:77:d3:fb:f2:31:47:
ee:ae:ab:00:c4:2e:72:41:66:c5:f0:87:4c:97:bf:bb:08:1f:
ec:fe:cc:19:cb:f9:e2:78:bf:08:b8:b9:b1:a4:ac:3c:3a:18:
fa:e4:48:a6:f8:ef:89:a4:94:c1:d5:97:02:e7:80:28:82:94:
46:90:d7:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:50:57 2025 by rpki-client