Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/fb2401-e470-4c05-99b8-f8eecb425087/1/CEl1fj41qqtdV8UYYkOkNxc-TTY.mft
File: CEl1fj41qqtdV8UYYkOkNxc-TTY.mft (raw, json)
Hash identifier: cfVpOwoDXZZG08MS9UOImlonxQFjIaJAXa+q1hnMDq0=
Subject key identifier: 9A:86:79:94:A6:D5:FF:B1:C4:66:D5:9E:2C:78:33:34:2A:FB:F0:91
Authority key identifier: 08:49:75:7E:3E:35:AA:AB:5D:57:C5:18:62:43:A4:37:17:3E:4D:36
Certificate issuer: /CN=0849757e3e35aaab5d57c5186243a437173e4d36
Certificate serial: 019A2A435BCF3BB357EBA20FA10061ECA9DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CEl1fj41qqtdV8UYYkOkNxc-TTY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/fb2401-e470-4c05-99b8-f8eecb425087/1/CEl1fj41qqtdV8UYYkOkNxc-TTY.mft
Manifest number: 1433
Signing time: Tue 28 Oct 2025 10:00:48 +0000
Manifest this update: Tue 28 Oct 2025 10:00:48 +0000
Manifest next update: Wed 29 Oct 2025 10:00:48 +0000
Files and hashes: 1: CEl1fj41qqtdV8UYYkOkNxc-TTY.crl (hash: iyxy7fWOCK8U06Y0Dz9Ak2d1oessa1nzveVKzVOvL4Q=)
2: ughB2qwCJjXq23HnnasoQDdXgE8.roa (hash: LImj3hNpOasXYHWcbm9URdJgBeEySrqqax18nJO4GMo=)
3: v0jeM-EK5U0lFswlXgsyLuIVWWw.roa (hash: M3nsb4FrAgnB7zU3prkNFU+S+Vg3EPSnI0a1Dxv4l5Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/fb2401-e470-4c05-99b8-f8eecb425087/1/CEl1fj41qqtdV8UYYkOkNxc-TTY.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/fb2401-e470-4c05-99b8-f8eecb425087/1/CEl1fj41qqtdV8UYYkOkNxc-TTY.mft
rsync://rpki.ripe.net/repository/DEFAULT/CEl1fj41qqtdV8UYYkOkNxc-TTY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 10:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:2a:43:5b:cf:3b:b3:57:eb:a2:0f:a1:00:61:ec:a9:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0849757e3e35aaab5d57c5186243a437173e4d36
Validity
Not Before: Oct 28 10:00:48 2025 GMT
Not After : Oct 29 10:00:48 2025 GMT
Subject: CN=9a867994a6d5ffb1c466d59e2c7833342afbf091
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:29:26:f2:a6:ae:9a:39:13:da:b8:c6:1e:0f:
58:0a:32:9d:50:26:87:11:23:07:84:44:69:05:94:
bd:22:4b:60:d1:28:a0:d1:0d:bf:db:a7:ae:25:8f:
24:cf:7c:dc:59:0d:be:14:f2:0f:d0:e2:04:2f:98:
68:41:c6:11:6d:2e:44:0a:4d:b1:28:f3:17:d7:02:
70:2b:52:36:bf:b5:8f:ca:41:29:02:b6:fb:dc:6b:
72:07:7e:9c:a1:b0:a3:65:0c:17:e7:77:2d:40:85:
69:a4:9e:a4:12:7c:d8:cc:59:2f:13:57:e5:4c:bb:
91:00:19:8b:2f:42:35:45:8b:39:59:9e:99:19:0d:
92:44:bf:8f:36:e1:2e:48:b2:6c:4d:58:b0:f2:fb:
e8:d7:a5:2c:d1:af:7f:32:38:7e:0c:95:5d:65:bc:
05:24:a0:cf:c2:6b:d0:44:a6:c4:fc:ee:2a:6c:33:
d7:d6:ae:75:ef:25:52:8e:00:b9:dd:91:24:8f:9f:
db:81:b8:ae:ef:5b:f7:43:86:14:43:74:29:52:9e:
5f:a7:8b:b3:b6:75:9b:ce:f3:73:93:21:2d:fd:22:
a4:63:a4:cf:3b:76:8d:05:4b:4a:41:3e:f8:cc:b7:
42:b6:51:0d:a0:17:98:e1:2c:8b:f4:07:59:73:80:
06:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:86:79:94:A6:D5:FF:B1:C4:66:D5:9E:2C:78:33:34:2A:FB:F0:91
X509v3 Authority Key Identifier:
keyid:08:49:75:7E:3E:35:AA:AB:5D:57:C5:18:62:43:A4:37:17:3E:4D:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CEl1fj41qqtdV8UYYkOkNxc-TTY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/fb2401-e470-4c05-99b8-f8eecb425087/1/CEl1fj41qqtdV8UYYkOkNxc-TTY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/fb2401-e470-4c05-99b8-f8eecb425087/1/CEl1fj41qqtdV8UYYkOkNxc-TTY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:38:2d:ec:41:12:16:a0:35:07:45:56:72:07:1b:95:b3:57:
3f:57:aa:4d:5b:3b:66:37:8c:4b:4d:b6:82:45:7e:b2:99:1a:
f4:9f:dd:7e:83:89:7f:e4:ad:22:a2:67:20:db:a5:22:66:d1:
bd:e4:cb:ae:be:10:32:b4:e1:0e:b0:85:97:04:2e:79:45:a1:
b4:ba:23:36:23:e2:64:91:ce:89:62:30:f1:6a:d5:9e:87:b8:
71:67:b9:58:d4:d8:28:19:47:c9:da:2f:ff:62:8d:f3:07:54:
1d:3b:53:39:cd:ac:74:3b:90:7c:cd:55:12:49:7e:99:cb:eb:
3c:e9:6c:ea:d5:30:12:1d:3b:61:21:b8:98:28:50:28:ef:f6:
77:46:58:39:c2:56:f8:c3:74:11:d4:27:7d:f8:40:a5:86:da:
1a:ce:0a:19:41:6b:5f:47:6b:49:af:c9:22:7b:c4:bb:5d:f9:
43:8f:7e:8e:3c:0d:64:6e:48:1d:2f:42:14:41:a7:ea:bd:e4:
a1:f6:74:5e:a9:f4:45:28:26:e7:c2:55:99:36:84:69:5c:c6:
83:c4:5d:76:2f:79:64:2c:72:fc:31:6c:e1:47:87:13:a9:c8:
51:f0:cc:80:11:ac:54:09:ba:16:a9:92:ad:3e:e2:2b:4f:1e:
86:0b:9b:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 16:24:29 2025 by rpki-client