Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/c49c08-92ab-4cb1-809b-4ec7b5efae37/1/tVNDqiHHSjn81Rg_T99V3EZ56D0.mft
File: tVNDqiHHSjn81Rg_T99V3EZ56D0.mft (raw, json)
Hash identifier: JR9/FnXynYZbIAvkm8acI+p1JZgv0AOvzL52aG1EIBI=
Subject key identifier: EC:4C:4E:D5:70:3C:DE:17:61:DF:D7:80:BA:A0:5C:37:32:C2:0E:B4
Authority key identifier: B5:53:43:AA:21:C7:4A:39:FC:D5:18:3F:4F:DF:55:DC:46:79:E8:3D
Certificate issuer: /CN=b55343aa21c74a39fcd5183f4fdf55dc4679e83d
Certificate serial: 019A7226742B4DB9CF4B69DFFFCF8BDEB333
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tVNDqiHHSjn81Rg_T99V3EZ56D0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/c49c08-92ab-4cb1-809b-4ec7b5efae37/1/tVNDqiHHSjn81Rg_T99V3EZ56D0.mft
Manifest number: 0257
Signing time: Tue 11 Nov 2025 09:01:53 +0000
Manifest this update: Tue 11 Nov 2025 09:01:53 +0000
Manifest next update: Wed 12 Nov 2025 09:01:53 +0000
Files and hashes: 1: RXmLcd13ajoTVlcEirVukYVayjY.roa (hash: VMYnLhwMDYwO9ah7mzCKDLgq1vs8pRSHkOzi/+9nkdg=)
2: tVNDqiHHSjn81Rg_T99V3EZ56D0.crl (hash: T+73qY2uFDLqsEwRtPmN98HAE85U7f7qNz9nK07j1n8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/c49c08-92ab-4cb1-809b-4ec7b5efae37/1/tVNDqiHHSjn81Rg_T99V3EZ56D0.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/c49c08-92ab-4cb1-809b-4ec7b5efae37/1/tVNDqiHHSjn81Rg_T99V3EZ56D0.mft
rsync://rpki.ripe.net/repository/DEFAULT/tVNDqiHHSjn81Rg_T99V3EZ56D0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:26:74:2b:4d:b9:cf:4b:69:df:ff:cf:8b:de:b3:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b55343aa21c74a39fcd5183f4fdf55dc4679e83d
Validity
Not Before: Nov 11 09:01:53 2025 GMT
Not After : Nov 12 09:01:53 2025 GMT
Subject: CN=ec4c4ed5703cde1761dfd780baa05c3732c20eb4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:86:9a:eb:c5:c3:03:84:e2:6a:89:32:04:ac:
81:1f:57:ac:49:ef:bf:e6:58:25:2e:3e:e0:55:03:
9e:29:db:11:33:81:fd:c4:ec:95:72:96:54:cd:26:
34:44:7c:d5:4a:94:4b:a8:5d:a9:b3:e8:23:9a:54:
41:6f:e3:fc:30:62:6d:96:53:4c:f8:f3:79:a3:ab:
c4:c0:82:47:2e:f6:45:be:81:cb:e8:24:81:ca:b4:
0f:06:c0:e2:a1:c1:e5:ae:19:2a:ff:ce:27:70:70:
41:37:98:d4:bc:f0:b9:81:ab:7d:2a:47:c3:5d:05:
c1:73:7a:0c:47:ca:f3:f4:ca:1f:d7:07:7f:c1:d6:
b4:f7:28:8a:55:c0:40:d4:c6:f1:ca:4d:39:fb:6b:
d4:67:71:ba:c0:8e:54:fb:be:f1:3e:96:c6:89:d3:
17:1b:bf:82:f5:ce:32:11:ba:be:e5:e9:40:07:b3:
94:17:f9:72:76:71:4b:c5:9c:92:14:5d:5b:d5:80:
2b:69:87:8a:79:05:72:17:36:6d:d4:7c:45:4f:e8:
34:b9:50:5a:9b:d3:5d:22:e0:1c:6b:93:6f:cd:c0:
8d:de:96:24:0a:2f:49:08:b4:44:cd:c6:a5:f6:7d:
7c:22:ec:84:74:e4:1b:69:dc:5a:2d:4c:4f:9e:1e:
ef:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:4C:4E:D5:70:3C:DE:17:61:DF:D7:80:BA:A0:5C:37:32:C2:0E:B4
X509v3 Authority Key Identifier:
keyid:B5:53:43:AA:21:C7:4A:39:FC:D5:18:3F:4F:DF:55:DC:46:79:E8:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tVNDqiHHSjn81Rg_T99V3EZ56D0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/c49c08-92ab-4cb1-809b-4ec7b5efae37/1/tVNDqiHHSjn81Rg_T99V3EZ56D0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/c49c08-92ab-4cb1-809b-4ec7b5efae37/1/tVNDqiHHSjn81Rg_T99V3EZ56D0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:02:e2:6f:0e:7a:28:47:29:fa:f2:6e:7d:a2:c1:ad:bd:ad:
17:64:4a:81:9d:44:7d:fe:06:93:f2:07:73:c7:c8:30:f6:8e:
9b:9b:b4:37:14:0d:83:18:98:98:13:d6:46:2e:95:0b:90:14:
67:fb:19:bd:d3:e8:82:f1:c1:0a:91:09:03:ce:9c:ca:fb:e9:
8b:7f:e8:ad:60:10:53:55:f4:3e:2d:d4:01:39:3c:9d:f5:e2:
4c:2a:93:bc:4b:00:0f:05:ee:a9:ab:43:5a:04:72:21:fb:b0:
0d:e0:1d:d2:0c:ff:b4:13:00:18:91:31:92:88:af:e6:2b:e3:
4b:4e:17:56:b7:1d:c4:1f:ce:d7:d1:66:dc:af:db:7b:9e:45:
0f:45:db:c5:1a:a1:be:4f:f3:b3:47:aa:92:e3:a1:4c:e1:f1:
96:fd:f5:64:cd:e9:54:0a:ac:19:55:be:cc:01:23:7c:3d:60:
1a:c9:1c:26:27:d9:ed:35:06:e3:18:ed:f2:bd:fe:55:ff:4f:
c4:eb:a4:d6:20:5b:75:a0:8b:c6:14:70:a6:0f:7b:4d:2a:48:
e9:8f:ef:3f:68:d9:55:89:c5:d1:5d:e4:87:4c:d7:15:63:50:
7a:9d:be:ff:08:2b:ee:3a:34:4e:fa:ca:08:36:af:23:52:49:
ec:b5:0c:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:32:42 2025 by rpki-client