Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/4c3e19-a489-4e3a-a3a2-7e52e749c3ad/1/tYe8Eust4poQJrj1a-jUafL1jPM.mft
File: tYe8Eust4poQJrj1a-jUafL1jPM.mft (raw, json)
Hash identifier: uvFidRoWPjNEvGzNbmVR5jDyMUKM+VAWpcdHj8tNXVk=
Subject key identifier: 39:9F:81:FA:A6:BB:DC:1A:3F:2E:5F:0A:AD:A6:3C:E0:CC:35:B9:62
Authority key identifier: B5:87:BC:12:EB:2D:E2:9A:10:26:B8:F5:6B:E8:D4:69:F2:F5:8C:F3
Certificate issuer: /CN=b587bc12eb2de29a1026b8f56be8d469f2f58cf3
Certificate serial: 019A733885169D68C8F2C285691F33A088E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tYe8Eust4poQJrj1a-jUafL1jPM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/4c3e19-a489-4e3a-a3a2-7e52e749c3ad/1/tYe8Eust4poQJrj1a-jUafL1jPM.mft
Manifest number: 171F
Signing time: Tue 11 Nov 2025 14:01:15 +0000
Manifest this update: Tue 11 Nov 2025 14:01:15 +0000
Manifest next update: Wed 12 Nov 2025 14:01:15 +0000
Files and hashes: 1: SRbcYTDvBK2K42GBZURfc-9owLk.roa (hash: ou7G18aw8/QVFexo/f3lobAxj/5Hzi02IWmge/V7dxQ=)
2: tYe8Eust4poQJrj1a-jUafL1jPM.crl (hash: T68dR02Ga3e/9v4hA4lM3ibNdzDOxdyHA6NSgN75D28=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/4c3e19-a489-4e3a-a3a2-7e52e749c3ad/1/tYe8Eust4poQJrj1a-jUafL1jPM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/4c3e19-a489-4e3a-a3a2-7e52e749c3ad/1/tYe8Eust4poQJrj1a-jUafL1jPM.mft
rsync://rpki.ripe.net/repository/DEFAULT/tYe8Eust4poQJrj1a-jUafL1jPM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:73:38:85:16:9d:68:c8:f2:c2:85:69:1f:33:a0:88:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b587bc12eb2de29a1026b8f56be8d469f2f58cf3
Validity
Not Before: Nov 11 14:01:15 2025 GMT
Not After : Nov 12 14:01:15 2025 GMT
Subject: CN=399f81faa6bbdc1a3f2e5f0aada63ce0cc35b962
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:71:da:58:40:13:b8:23:a4:eb:d0:05:c6:59:
2d:71:f4:2b:7a:70:c5:66:0d:f1:28:5b:ba:39:0c:
de:0e:db:cd:00:ff:7c:28:bc:bc:2a:62:98:bc:81:
1a:66:e5:1c:29:d5:d0:b0:e8:d2:97:f8:02:7e:18:
24:36:4f:a6:80:18:18:df:4f:a3:f3:40:b5:4c:a1:
e2:f2:7d:ec:f7:0e:42:e3:68:ef:ed:d2:04:e6:7d:
15:29:cd:b0:aa:49:f9:ab:48:be:e4:c5:d8:81:1a:
89:03:93:35:79:be:50:ff:1a:e8:06:42:e3:56:72:
bc:2d:9d:33:66:c7:d3:2f:4e:37:f1:96:81:6a:a1:
8e:b2:75:17:85:8a:cf:8f:28:7b:15:ed:ba:41:60:
52:75:69:1c:57:f9:8b:74:2e:00:f9:c7:7f:d4:39:
ef:ce:f3:49:7f:f8:6c:ae:6a:f7:11:b6:c3:a7:c9:
06:8c:41:e2:dd:bb:e5:5b:04:be:06:29:39:80:8c:
a6:d3:55:26:7f:c1:bc:d0:78:15:02:1e:e5:17:1c:
b3:c7:d6:33:ef:c1:81:b2:bc:7f:af:84:7f:7b:ee:
f3:93:a6:32:2e:44:7a:fa:40:7f:c7:48:a8:f5:b3:
fa:19:dd:e1:73:5f:3f:f1:35:f3:96:c2:4e:af:f2:
1f:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:9F:81:FA:A6:BB:DC:1A:3F:2E:5F:0A:AD:A6:3C:E0:CC:35:B9:62
X509v3 Authority Key Identifier:
keyid:B5:87:BC:12:EB:2D:E2:9A:10:26:B8:F5:6B:E8:D4:69:F2:F5:8C:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tYe8Eust4poQJrj1a-jUafL1jPM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/4c3e19-a489-4e3a-a3a2-7e52e749c3ad/1/tYe8Eust4poQJrj1a-jUafL1jPM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/4c3e19-a489-4e3a-a3a2-7e52e749c3ad/1/tYe8Eust4poQJrj1a-jUafL1jPM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:f6:4f:77:20:aa:4e:ed:ec:ac:9e:c5:20:34:83:fc:31:4c:
00:3d:c2:25:19:55:b4:a3:f7:45:f1:15:63:e6:09:18:af:25:
f2:45:8d:96:1f:67:60:09:71:bb:6d:90:68:b7:71:8f:99:5b:
b3:aa:3a:04:24:49:cd:67:31:d8:f4:26:34:db:c3:1b:d9:0d:
98:27:bc:16:cb:c9:01:3f:a3:45:eb:77:6d:c6:d0:ca:7c:b7:
4a:94:43:d9:84:67:e8:a5:af:70:25:2c:ea:6e:ea:c9:63:6c:
20:0f:2c:bd:fb:35:e3:74:7c:93:18:8c:f7:16:70:4a:1f:af:
26:cd:ce:fc:72:e1:b7:4f:03:54:8c:29:82:d1:81:6a:cf:2c:
23:5d:04:17:85:75:f8:aa:68:8e:35:2f:3b:fa:5d:43:63:a0:
ea:05:41:2d:27:d2:6d:ec:7a:8e:a5:b7:a5:fd:e2:15:cd:59:
12:b8:f6:32:c1:31:f7:34:0d:05:9a:c1:cd:0d:2e:08:be:02:
98:11:08:85:75:4f:e1:6b:68:b0:9a:ad:90:3e:2a:6f:14:c3:
c6:a2:5e:fc:9a:a9:24:7f:41:cf:37:26:8a:32:08:3a:e5:a5:
ae:22:71:36:55:c2:18:50:b7:75:00:db:f1:7f:ff:75:df:ee:
3e:3c:1d:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:19:12 2025 by rpki-client