Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/e2510d-e573-45d3-9d20-754b60c5b568/1/tTuhjVzrjnlMgTnOAqeRuFAYJe8.mft
File: tTuhjVzrjnlMgTnOAqeRuFAYJe8.mft (raw, json)
Hash identifier: lNWBIKua8n1PtiMWZIbACvVUHla6PdBC9sENhPJDeqI=
Subject key identifier: 20:A3:AA:07:D4:29:16:43:05:E5:9C:B4:A7:B0:2A:29:98:B5:27:88
Authority key identifier: B5:3B:A1:8D:5C:EB:8E:79:4C:81:39:CE:02:A7:91:B8:50:18:25:EF
Certificate issuer: /CN=b53ba18d5ceb8e794c8139ce02a791b8501825ef
Certificate serial: 019A72262EBAC773A6084808D8E3E244B880
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tTuhjVzrjnlMgTnOAqeRuFAYJe8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/e2510d-e573-45d3-9d20-754b60c5b568/1/tTuhjVzrjnlMgTnOAqeRuFAYJe8.mft
Manifest number: 0E46
Signing time: Tue 11 Nov 2025 09:01:36 +0000
Manifest this update: Tue 11 Nov 2025 09:01:36 +0000
Manifest next update: Wed 12 Nov 2025 09:01:36 +0000
Files and hashes: 1: 9FStBrS0NlZ9f0JDPC2m90a8BCY.roa (hash: xw+KW2Ni2Cd+C3tg5Q5Vf8DrtdT917ZQWwgX4LJaEm4=)
2: NcymNU3Ex55jeE07rsjVQP17Yc4.roa (hash: rqRVyPcE0vuZ2ea448N6H2EJDC40DdbDXkISgXkK53E=)
3: XUHwJb1I3gkKMlf7v2dTxFe6360.roa (hash: Gm/rvLP3jZuTC48xJtdoJ5/c1V7BDKST3JSzW3p7S08=)
4: tTuhjVzrjnlMgTnOAqeRuFAYJe8.crl (hash: MQMwrFNcPFXltFloH49qx0mpH5AXPjV2GF/eF8NnAIA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/e2510d-e573-45d3-9d20-754b60c5b568/1/tTuhjVzrjnlMgTnOAqeRuFAYJe8.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/e2510d-e573-45d3-9d20-754b60c5b568/1/tTuhjVzrjnlMgTnOAqeRuFAYJe8.mft
rsync://rpki.ripe.net/repository/DEFAULT/tTuhjVzrjnlMgTnOAqeRuFAYJe8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:26:2e:ba:c7:73:a6:08:48:08:d8:e3:e2:44:b8:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b53ba18d5ceb8e794c8139ce02a791b8501825ef
Validity
Not Before: Nov 11 09:01:36 2025 GMT
Not After : Nov 12 09:01:36 2025 GMT
Subject: CN=20a3aa07d429164305e59cb4a7b02a2998b52788
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:08:7e:82:3c:0c:6f:c5:ce:2d:d8:ef:9a:c4:
d1:d8:b1:2f:d5:fe:8e:ae:6e:12:0d:b7:59:81:6e:
01:4b:1b:d7:ea:e7:9b:4e:52:12:ad:33:f1:5a:e9:
e4:88:f2:38:3a:d5:0a:1b:22:ec:4a:01:ba:75:28:
16:78:79:18:4b:83:50:3d:0c:28:95:07:14:5e:e9:
b2:bd:3e:c3:2d:2a:fa:89:3f:c9:08:fc:95:c8:bf:
39:73:1d:ba:2f:df:12:f1:ac:db:bf:ce:ee:b7:9b:
ed:36:59:eb:f7:00:51:63:e8:01:aa:1c:54:86:0b:
c5:2a:24:9c:0f:50:e0:65:f7:44:49:70:f8:db:b0:
ac:ba:c0:c9:a2:12:58:b1:36:60:72:e9:de:e6:e6:
c4:4a:a2:0e:89:74:0e:1a:26:26:52:cd:53:83:77:
57:b4:8e:52:b4:83:17:dc:e7:ff:d7:83:26:23:26:
8e:7b:7a:ff:5e:de:c0:20:77:f7:ee:e7:6d:22:9e:
cc:e3:5d:a0:17:f1:9c:3b:67:f8:df:dd:e1:41:68:
8b:3c:bf:62:dc:8e:ee:68:e5:82:5a:af:26:b9:28:
c6:8a:97:f0:8c:a0:3d:de:69:de:cf:e5:f2:f8:4d:
25:f8:0e:2e:5f:50:64:3d:cd:85:51:e7:6a:13:b5:
8d:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:A3:AA:07:D4:29:16:43:05:E5:9C:B4:A7:B0:2A:29:98:B5:27:88
X509v3 Authority Key Identifier:
keyid:B5:3B:A1:8D:5C:EB:8E:79:4C:81:39:CE:02:A7:91:B8:50:18:25:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tTuhjVzrjnlMgTnOAqeRuFAYJe8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/e2510d-e573-45d3-9d20-754b60c5b568/1/tTuhjVzrjnlMgTnOAqeRuFAYJe8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/e2510d-e573-45d3-9d20-754b60c5b568/1/tTuhjVzrjnlMgTnOAqeRuFAYJe8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:71:1e:d8:f3:56:a5:bf:06:44:cc:36:62:0e:ce:c7:e4:92:
1b:a8:75:89:be:e2:32:c8:98:88:a4:1e:f3:8e:24:23:d0:b2:
6b:52:bc:45:e9:6c:93:c2:31:5d:66:fe:bf:72:8c:85:cb:bc:
79:29:a6:c7:d9:a9:ea:ca:13:83:5f:f5:f4:11:ef:79:e0:b9:
09:bd:25:bb:6e:80:91:6c:bb:e2:6f:59:15:a6:0e:f9:51:b8:
de:f4:08:b3:7e:1d:4c:26:ef:5b:c7:8e:26:30:4d:74:9e:23:
bf:57:79:6b:2e:93:8f:eb:60:3c:29:03:57:2c:14:3f:c8:7b:
23:bb:cc:3a:7c:fa:71:b4:4c:13:78:71:24:57:ea:23:be:f7:
6d:e7:f4:17:45:ab:31:b6:a0:dd:4e:a6:8b:dc:d2:07:e1:e0:
a0:be:78:c0:a4:e8:1c:ca:b8:ce:a8:f1:a1:db:3c:c5:85:d9:
8c:f8:d1:1b:8c:b5:ce:a1:0f:f5:c7:2c:39:e9:f4:f7:d3:95:
9c:5b:15:32:f7:8a:0c:80:52:0f:53:d7:50:3a:a7:e9:87:71:
51:82:8f:fd:d0:88:c1:d9:15:2e:4a:f8:5d:e1:5e:4e:b9:5f:
f5:83:8c:b1:e2:12:b6:6b:27:10:19:2d:17:5e:a3:a9:2e:f8:
65:02:8d:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:35:19 2025 by rpki-client