Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/40ea14-dc50-4aa0-aa85-28d010603529/1/tL3DdqFZ0F4q-XF2o-uoNg5g0XY.mft
File: tL3DdqFZ0F4q-XF2o-uoNg5g0XY.mft (raw, json)
Hash identifier: zO6xy6rNzwPKP0VC/exsbbppJyJ3HGDjLL5bIp8NnwQ=
Subject key identifier: 71:A9:45:D0:F8:B4:7A:C6:00:D3:D4:68:25:26:EF:9A:E6:86:13:23
Authority key identifier: B4:BD:C3:76:A1:59:D0:5E:2A:F9:71:76:A3:EB:A8:36:0E:60:D1:76
Certificate issuer: /CN=b4bdc376a159d05e2af97176a3eba8360e60d176
Certificate serial: 019A50070343E00A2A395B56B81FDE5733D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tL3DdqFZ0F4q-XF2o-uoNg5g0XY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/40ea14-dc50-4aa0-aa85-28d010603529/1/tL3DdqFZ0F4q-XF2o-uoNg5g0XY.mft
Manifest number: 1715
Signing time: Tue 04 Nov 2025 18:00:27 +0000
Manifest this update: Tue 04 Nov 2025 18:00:27 +0000
Manifest next update: Wed 05 Nov 2025 18:00:27 +0000
Files and hashes: 1: F0xtYGfQ_s_LJkUkk89IHcL9J5M.roa (hash: JVjlGGRIJlPuTdOW/N8SfdRvr3fAH3HHybxJ5aP4RD0=)
2: tL3DdqFZ0F4q-XF2o-uoNg5g0XY.crl (hash: 0DQDh9l08m8/qfOtqVY3HK/pCiyBV/26kgCndJbhP7k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/40ea14-dc50-4aa0-aa85-28d010603529/1/tL3DdqFZ0F4q-XF2o-uoNg5g0XY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/40ea14-dc50-4aa0-aa85-28d010603529/1/tL3DdqFZ0F4q-XF2o-uoNg5g0XY.mft
rsync://rpki.ripe.net/repository/DEFAULT/tL3DdqFZ0F4q-XF2o-uoNg5g0XY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:07:03:43:e0:0a:2a:39:5b:56:b8:1f:de:57:33:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4bdc376a159d05e2af97176a3eba8360e60d176
Validity
Not Before: Nov 4 18:00:27 2025 GMT
Not After : Nov 5 18:00:27 2025 GMT
Subject: CN=71a945d0f8b47ac600d3d4682526ef9ae6861323
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:2f:17:07:82:40:4e:11:f4:a3:e2:63:94:31:
14:ae:77:e6:05:60:d7:91:89:70:44:24:f3:69:9f:
38:62:0b:f3:fe:f8:26:fa:93:51:16:f5:c2:e7:37:
9b:eb:a8:32:e8:41:85:62:64:63:f6:a6:41:4c:0b:
8b:26:fe:a7:b9:ae:8f:32:ac:85:ab:8c:30:fe:35:
16:af:2a:52:34:1c:07:8b:06:58:57:9f:58:16:32:
95:d7:16:3c:42:5e:67:bc:04:0e:a8:a6:8a:03:ef:
d2:12:14:db:72:0a:64:49:f8:d2:51:92:c0:15:a3:
0c:2b:78:df:ea:67:58:ee:f8:02:e9:1a:bb:8d:29:
2c:7d:11:47:b1:b3:6f:68:60:5f:9e:25:25:c3:a5:
a5:2d:d1:99:f0:9c:7e:a3:8e:7b:cd:15:e8:06:a0:
a1:83:b6:b4:c0:f6:67:c0:ca:23:d0:5b:ff:96:d8:
58:06:f3:21:21:48:25:9b:ec:5c:0b:46:a1:d6:b0:
e2:89:02:be:b3:56:85:54:72:31:44:51:0d:a7:56:
0b:fd:41:87:5c:a2:4c:1e:65:7a:f8:6c:c9:fe:f1:
00:88:1b:ee:f1:9a:1a:95:85:4d:99:bd:73:2e:2e:
39:72:2c:74:5f:32:5b:83:cd:2d:dd:46:53:ad:90:
0d:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:A9:45:D0:F8:B4:7A:C6:00:D3:D4:68:25:26:EF:9A:E6:86:13:23
X509v3 Authority Key Identifier:
keyid:B4:BD:C3:76:A1:59:D0:5E:2A:F9:71:76:A3:EB:A8:36:0E:60:D1:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tL3DdqFZ0F4q-XF2o-uoNg5g0XY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/40ea14-dc50-4aa0-aa85-28d010603529/1/tL3DdqFZ0F4q-XF2o-uoNg5g0XY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/40ea14-dc50-4aa0-aa85-28d010603529/1/tL3DdqFZ0F4q-XF2o-uoNg5g0XY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:83:25:35:73:35:91:4d:41:30:c9:a3:b6:28:69:04:bb:65:
8b:92:1b:22:f0:16:7d:b1:06:72:b2:49:2e:01:87:4d:80:8c:
a8:bf:d7:2e:c4:db:e6:39:21:5a:69:be:e0:d8:ec:b5:f2:f7:
52:9e:19:76:61:f9:c1:cf:bd:c4:e6:ba:7c:b8:7d:0b:b6:23:
3c:c7:8a:31:77:00:06:a7:a0:c2:78:e4:ee:d6:59:32:16:00:
32:ed:4e:46:c8:49:a0:e3:aa:c4:e3:5c:42:d1:38:f0:15:99:
bf:f0:c1:df:ca:bf:eb:cb:1b:d8:0e:6d:e8:65:a9:c0:03:96:
4a:92:98:86:f6:ee:af:40:fe:0f:4e:87:89:08:8c:08:66:02:
2e:45:2c:15:1f:ad:23:a4:91:6a:fd:01:6f:f4:ce:67:9d:2d:
91:2a:8f:ae:e2:1e:e3:7b:c4:c7:b0:26:06:7e:76:b9:e6:e9:
38:9e:9f:02:a5:4a:f6:bb:c4:24:09:95:e0:2c:de:58:7d:96:
9d:a0:89:1d:11:04:11:d2:87:a8:90:5d:26:75:9f:bd:f4:e4:
d1:a1:0a:58:f0:84:cb:e0:42:65:a3:c4:71:b5:36:90:1c:6c:
ba:b6:bb:f1:f0:50:18:49:b2:a0:f5:ce:a9:1d:9d:ef:13:09:
7c:8f:ae:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 00:13:48 2025 by rpki-client