Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/359179-4ac2-431c-9531-0b7a33dd5b56/1/tFBkwayGkOLHepWaUCVG6YvNNyc.mft
File: tFBkwayGkOLHepWaUCVG6YvNNyc.mft (raw, json)
Hash identifier: EQ2C1Sqfo+f+WTDSYyiDi++XT7/4dvn6CJD1zYfs6Zo=
Subject key identifier: 45:4E:3A:4D:FD:58:B8:8D:12:58:F8:08:84:73:90:34:93:9B:2B:FB
Authority key identifier: B4:50:64:C1:AC:86:90:E2:C7:7A:95:9A:50:25:46:E9:8B:CD:37:27
Certificate issuer: /CN=b45064c1ac8690e2c77a959a502546e98bcd3727
Certificate serial: 019A2E20DB618EAFEB37C8223566F7D3469E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tFBkwayGkOLHepWaUCVG6YvNNyc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/359179-4ac2-431c-9531-0b7a33dd5b56/1/tFBkwayGkOLHepWaUCVG6YvNNyc.mft
Manifest number: 0D7C
Signing time: Wed 29 Oct 2025 04:01:36 +0000
Manifest this update: Wed 29 Oct 2025 04:01:36 +0000
Manifest next update: Thu 30 Oct 2025 04:01:36 +0000
Files and hashes: 1: _INaZ6DycFqZuVm42lkSOfz9oRs.roa (hash: N1fFaEC6dFW7nNDOY6nEbXrF6dJ7s2tSPU9xB9zA38k=)
2: tFBkwayGkOLHepWaUCVG6YvNNyc.crl (hash: T+R+LU1jRya5OaJ8VJnkmWMJmiUljm0kbgvvFjdUEts=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/359179-4ac2-431c-9531-0b7a33dd5b56/1/tFBkwayGkOLHepWaUCVG6YvNNyc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/359179-4ac2-431c-9531-0b7a33dd5b56/1/tFBkwayGkOLHepWaUCVG6YvNNyc.mft
rsync://rpki.ripe.net/repository/DEFAULT/tFBkwayGkOLHepWaUCVG6YvNNyc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:2e:20:db:61:8e:af:eb:37:c8:22:35:66:f7:d3:46:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b45064c1ac8690e2c77a959a502546e98bcd3727
Validity
Not Before: Oct 29 04:01:36 2025 GMT
Not After : Oct 30 04:01:36 2025 GMT
Subject: CN=454e3a4dfd58b88d1258f80884739034939b2bfb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:56:0b:2e:f5:b7:33:4d:31:d5:d9:8c:5f:18:
ee:5b:fd:bb:19:37:51:fa:54:0d:b0:6e:1d:45:53:
33:d3:cb:a5:3b:94:13:e0:dc:b3:5a:02:82:14:9a:
27:df:95:cb:8a:ea:f6:9a:85:c8:4c:bd:91:b2:c2:
29:7f:90:4e:84:48:ed:fa:8b:96:55:0d:1f:f0:a7:
df:62:ec:80:83:a5:d6:9b:63:9f:76:46:72:c1:b1:
80:88:0f:5c:38:94:71:07:cc:6b:eb:07:3e:46:1f:
5b:41:11:6c:a7:17:d4:7d:d4:0a:e2:00:14:85:14:
6f:3c:2b:6e:16:b8:e8:0d:b1:61:71:b0:ac:95:a3:
f0:28:b6:f7:b8:c6:f4:a5:8b:20:d0:69:0b:f3:c2:
0d:c5:19:9d:33:f9:b0:06:8a:d6:ea:89:b6:fe:32:
88:17:26:79:19:73:6a:db:eb:71:4a:d6:dc:b8:39:
ea:e3:32:fc:08:71:14:a7:be:26:cb:87:1f:de:38:
18:37:33:cf:72:3c:43:2d:e6:0e:fa:6a:f5:b3:41:
4f:7a:0a:66:c7:4b:82:7c:2b:2f:a8:de:a1:c9:8b:
d5:12:54:4a:36:91:4c:79:bc:1e:d4:b5:a3:2a:d1:
23:15:8f:ce:43:cb:b7:ef:56:37:f5:05:58:4f:77:
f0:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:4E:3A:4D:FD:58:B8:8D:12:58:F8:08:84:73:90:34:93:9B:2B:FB
X509v3 Authority Key Identifier:
keyid:B4:50:64:C1:AC:86:90:E2:C7:7A:95:9A:50:25:46:E9:8B:CD:37:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tFBkwayGkOLHepWaUCVG6YvNNyc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/359179-4ac2-431c-9531-0b7a33dd5b56/1/tFBkwayGkOLHepWaUCVG6YvNNyc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/359179-4ac2-431c-9531-0b7a33dd5b56/1/tFBkwayGkOLHepWaUCVG6YvNNyc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:e5:e5:67:d6:2e:a9:fc:30:c7:fe:f7:3a:09:36:3a:e4:d3:
49:78:be:6d:e4:93:b6:9f:c2:60:86:9e:88:8f:44:c1:a0:27:
5a:c1:d9:ee:69:d3:b9:da:73:5c:5f:4a:fc:67:77:f7:9d:9f:
06:9c:63:e0:1c:d9:84:04:f7:d7:18:5a:9c:7d:97:ac:16:0e:
d7:34:98:1e:c7:a7:42:8f:0c:49:37:30:f9:04:82:31:7d:b0:
b0:6e:56:35:16:19:08:3c:04:94:dc:28:ed:4e:fd:7a:4b:12:
de:74:52:92:53:02:a2:d9:62:00:c3:ac:46:18:1f:67:4c:83:
eb:b4:03:61:37:77:20:93:01:88:6e:aa:04:f5:92:51:17:f1:
ed:1a:29:a3:68:cb:21:90:2b:32:76:7c:5f:11:a4:03:7c:4f:
57:6b:51:e1:e1:1f:f5:fd:15:38:f1:f3:88:32:2e:8a:3a:4e:
a2:88:81:ec:55:57:2e:15:0b:03:53:83:4e:6f:81:b0:7c:33:
63:72:f4:83:55:a1:7f:03:8c:08:9a:3e:08:84:50:d0:e2:18:
cf:d8:2c:9e:51:08:79:83:cd:b2:4d:25:ed:d9:38:ed:9f:4d:
61:e1:2e:06:08:fb:a3:1b:1d:bc:c0:ac:cf:d3:58:d5:12:51:
a0:ab:52:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 29 05:32:20 2025 by rpki-client