Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/5cfbf3-e782-4013-8eee-de7d3bbfee88/1/tHhBAiSQRJTpwPfTVlCiYOX7YZM.mft
File: tHhBAiSQRJTpwPfTVlCiYOX7YZM.mft (raw, json)
Hash identifier: o9xlVV8DxYJV87LaLuRa77FuZNR1KlQobR+8nIePj9E=
Subject key identifier: D5:C9:2C:4F:D3:82:4B:76:3D:2D:13:78:B4:B5:9B:41:AB:20:66:69
Authority key identifier: B4:78:41:02:24:90:44:94:E9:C0:F7:D3:56:50:A2:60:E5:FB:61:93
Certificate issuer: /CN=b478410224904494e9c0f7d35650a260e5fb6193
Certificate serial: 019A725CA886B15F499752268FC2B376DC9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tHhBAiSQRJTpwPfTVlCiYOX7YZM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/5cfbf3-e782-4013-8eee-de7d3bbfee88/1/tHhBAiSQRJTpwPfTVlCiYOX7YZM.mft
Manifest number: 1720
Signing time: Tue 11 Nov 2025 10:01:06 +0000
Manifest this update: Tue 11 Nov 2025 10:01:06 +0000
Manifest next update: Wed 12 Nov 2025 10:01:06 +0000
Files and hashes: 1: tHhBAiSQRJTpwPfTVlCiYOX7YZM.crl (hash: 6TtQpOZvW9fcGCMS+f9UIWLsq6Dek60LgJtGwKUe5OY=)
2: uhCkTjed1Otbl84zKJAXa3t70aA.roa (hash: cZYpuZx9ZnpX3epsbIvoPloPaPVgbUbl6mh5Fr2F3pw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/5cfbf3-e782-4013-8eee-de7d3bbfee88/1/tHhBAiSQRJTpwPfTVlCiYOX7YZM.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/5cfbf3-e782-4013-8eee-de7d3bbfee88/1/tHhBAiSQRJTpwPfTVlCiYOX7YZM.mft
rsync://rpki.ripe.net/repository/DEFAULT/tHhBAiSQRJTpwPfTVlCiYOX7YZM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:a8:86:b1:5f:49:97:52:26:8f:c2:b3:76:dc:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b478410224904494e9c0f7d35650a260e5fb6193
Validity
Not Before: Nov 11 10:01:06 2025 GMT
Not After : Nov 12 10:01:06 2025 GMT
Subject: CN=d5c92c4fd3824b763d2d1378b4b59b41ab206669
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:45:17:91:ee:20:eb:4f:f6:fd:b4:3a:f2:d1:
c9:35:21:10:e9:1f:67:cd:84:5a:e0:90:1d:21:f3:
0a:fb:43:32:36:e3:31:68:10:ce:61:37:d3:4a:7e:
b6:58:38:17:93:24:91:5d:b6:5e:c9:0c:f1:12:76:
50:aa:a3:ce:da:8a:1a:3f:14:d5:5c:da:b0:ba:93:
5b:8a:50:93:67:fc:d0:0f:b7:6c:96:7a:67:d7:14:
8e:fb:5f:3d:80:d4:00:0e:13:d2:f5:98:af:0f:58:
82:c4:47:55:ec:7b:b0:2c:4a:9b:12:d4:ad:5e:6b:
07:5e:ed:5e:2d:c7:17:65:c8:de:34:db:57:56:65:
f7:9d:5b:8e:6c:cc:7a:9f:d6:d3:71:fb:0c:9d:bf:
92:7e:7b:95:bf:49:c6:63:2f:ed:96:db:a7:f7:02:
b5:f8:81:96:01:5c:9a:51:35:3d:85:7d:5c:0e:ca:
f3:0d:a6:e0:97:3d:ca:92:45:26:b8:09:c5:25:a2:
e3:5a:04:aa:3d:54:9d:40:1c:64:28:1e:b5:37:89:
83:1c:b6:58:2c:d6:a6:da:dc:00:e9:ce:95:b4:4f:
1f:6c:96:f3:fa:22:51:1c:ab:f6:64:ce:2d:4c:bb:
a6:03:fb:40:84:3f:84:dc:19:26:c3:59:25:f7:2f:
6c:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:C9:2C:4F:D3:82:4B:76:3D:2D:13:78:B4:B5:9B:41:AB:20:66:69
X509v3 Authority Key Identifier:
keyid:B4:78:41:02:24:90:44:94:E9:C0:F7:D3:56:50:A2:60:E5:FB:61:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tHhBAiSQRJTpwPfTVlCiYOX7YZM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5cfbf3-e782-4013-8eee-de7d3bbfee88/1/tHhBAiSQRJTpwPfTVlCiYOX7YZM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5cfbf3-e782-4013-8eee-de7d3bbfee88/1/tHhBAiSQRJTpwPfTVlCiYOX7YZM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:48:a5:24:dd:e0:95:75:bd:01:92:fd:03:f7:94:26:26:19:
17:4a:71:82:99:a3:b3:ed:8e:76:27:ff:de:ab:f4:6f:88:d5:
a7:d3:2c:5a:db:92:c8:17:8c:8a:59:b4:07:49:f6:d5:82:47:
40:9b:5f:67:61:e5:24:1e:d4:80:40:07:c2:93:1b:9c:79:59:
d3:87:c8:f2:15:07:3c:82:27:c9:2b:27:82:06:56:56:7d:1e:
a3:7a:7f:69:a9:1f:1f:f9:ed:32:27:f9:f2:74:07:b7:87:cb:
e7:e2:88:3d:d1:fd:6b:4a:54:4b:7b:29:df:5c:3e:2b:56:0d:
aa:99:2b:eb:b6:90:24:12:44:9f:63:4a:9b:2a:00:87:64:dc:
b0:d0:be:1c:7b:85:2b:1a:e6:17:4d:50:ab:c0:58:39:a4:54:
a4:c3:c7:91:3a:12:06:14:c5:c2:c5:45:97:89:fe:f5:70:1b:
f5:fe:12:0f:f8:02:e7:46:c3:bb:38:a2:e1:6d:57:7d:1b:a0:
76:c2:93:0d:31:68:d4:7d:c2:c4:4f:21:ff:a6:6b:f5:33:cd:
f3:51:8e:b5:c7:d3:a5:50:70:ec:19:e6:61:e8:12:70:de:53:
79:02:16:e7:ac:4d:36:40:7f:ed:45:2e:d9:96:09:85:68:81:
a2:57:12:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:46:56 2025 by rpki-client