Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/1d0171-3307-4531-a73a-146a69b6d8e4/1/taJj0Y61xUD3R4glu3LvrG8o-Cs.mft
File: taJj0Y61xUD3R4glu3LvrG8o-Cs.mft (raw, json)
Hash identifier: NIjlId6X7xqVCXUHklMZMaSmY+BMItHIkvsRZ80zLKc=
Subject key identifier: 1A:3B:8A:19:0B:41:B5:59:9A:F7:0D:B5:60:8A:AB:65:83:BB:B1:3B
Authority key identifier: B5:A2:63:D1:8E:B5:C5:40:F7:47:88:25:BB:72:EF:AC:6F:28:F8:2B
Certificate issuer: /CN=b5a263d18eb5c540f7478825bb72efac6f28f82b
Certificate serial: 019A725C5833138C093FA15FC468EF5E67B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/taJj0Y61xUD3R4glu3LvrG8o-Cs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/1d0171-3307-4531-a73a-146a69b6d8e4/1/taJj0Y61xUD3R4glu3LvrG8o-Cs.mft
Manifest number: 16B0
Signing time: Tue 11 Nov 2025 10:00:45 +0000
Manifest this update: Tue 11 Nov 2025 10:00:45 +0000
Manifest next update: Wed 12 Nov 2025 10:00:45 +0000
Files and hashes: 1: FxOU5mcs5zu6It7tyYPtggiNpMw.roa (hash: HYzosP3W6gjE2lC2/EeCUTPjqHpatsBGbz79rZD00GQ=)
2: taJj0Y61xUD3R4glu3LvrG8o-Cs.crl (hash: sQjP6A92WHGtQ/NMCBzcrDOyyP88XgVtybGC2fejqhU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/1d0171-3307-4531-a73a-146a69b6d8e4/1/taJj0Y61xUD3R4glu3LvrG8o-Cs.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/1d0171-3307-4531-a73a-146a69b6d8e4/1/taJj0Y61xUD3R4glu3LvrG8o-Cs.mft
rsync://rpki.ripe.net/repository/DEFAULT/taJj0Y61xUD3R4glu3LvrG8o-Cs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:58:33:13:8c:09:3f:a1:5f:c4:68:ef:5e:67:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5a263d18eb5c540f7478825bb72efac6f28f82b
Validity
Not Before: Nov 11 10:00:45 2025 GMT
Not After : Nov 12 10:00:45 2025 GMT
Subject: CN=1a3b8a190b41b5599af70db5608aab6583bbb13b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:21:f2:97:74:93:24:23:5e:ab:c5:9b:24:b0:
0f:b3:1d:2d:84:f0:b1:6d:d2:98:f7:41:77:3a:a9:
8e:c9:c8:a6:2d:70:3b:72:5d:98:4b:b8:9c:29:c2:
a5:7b:8f:28:d6:73:50:3a:88:27:c8:2c:1a:f2:63:
ff:45:dd:4a:e7:58:f3:6e:2c:a7:1a:82:de:7d:ea:
f7:53:5e:2f:f3:b0:c1:37:c8:fe:87:a3:0a:36:03:
c6:6c:29:87:8f:c2:50:86:7f:39:74:3f:a1:b1:75:
71:0f:6c:3a:1d:d3:fc:5b:2d:cc:d6:50:6a:bf:52:
98:2f:b0:c5:91:c4:b3:e2:4c:6e:6a:07:44:7d:5d:
d5:45:43:7e:2d:4d:fa:d2:8c:0c:f6:41:91:42:69:
72:2c:56:dd:d8:db:6e:7d:f7:54:f8:20:3f:db:e1:
c1:d2:8c:2e:8e:1b:de:20:3f:63:29:83:12:1d:65:
81:71:3f:d9:8e:49:64:0f:5f:f0:f6:04:91:9e:a3:
66:65:1f:1b:3e:c5:f9:b9:f6:39:60:15:d1:97:e7:
c6:65:5d:fd:7d:c1:1f:7f:12:61:37:8b:aa:16:6f:
9a:a5:cc:23:8d:3a:ee:1b:ac:68:d8:47:b4:c8:84:
31:2a:73:c8:39:fd:58:da:65:8c:96:e3:49:cc:7d:
99:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:3B:8A:19:0B:41:B5:59:9A:F7:0D:B5:60:8A:AB:65:83:BB:B1:3B
X509v3 Authority Key Identifier:
keyid:B5:A2:63:D1:8E:B5:C5:40:F7:47:88:25:BB:72:EF:AC:6F:28:F8:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/taJj0Y61xUD3R4glu3LvrG8o-Cs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/1d0171-3307-4531-a73a-146a69b6d8e4/1/taJj0Y61xUD3R4glu3LvrG8o-Cs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/1d0171-3307-4531-a73a-146a69b6d8e4/1/taJj0Y61xUD3R4glu3LvrG8o-Cs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:e0:ae:35:a8:c0:d4:05:94:b9:c4:83:17:e3:65:dc:09:3f:
05:94:97:6d:00:09:a0:a2:ee:92:06:9a:46:ec:ed:91:2e:ef:
24:97:b2:c2:d6:07:5a:62:dc:f8:13:56:27:5b:d3:fd:fd:55:
2e:28:ef:19:3d:a3:e3:96:e3:eb:f9:70:8d:88:e7:e6:ca:f6:
32:09:56:78:8a:f8:2f:23:3d:06:2c:2f:16:74:e3:4a:96:81:
f9:68:95:a5:2c:ac:d9:dc:27:ba:5e:be:d4:20:76:3b:d8:f2:
ab:d4:28:71:70:e9:2b:2f:30:76:cd:2d:1d:f6:f4:4d:73:4d:
28:9f:51:bf:80:65:92:03:d3:44:c4:ce:66:a5:e0:2b:f5:67:
0d:d8:87:ee:96:16:95:68:ee:fc:9e:1e:1d:42:03:32:b9:3a:
16:95:68:e4:64:03:7d:a4:72:ca:62:f7:e4:5a:9f:2d:1b:34:
ec:a2:b1:c8:56:1c:3d:69:bf:d2:50:42:55:d4:75:3c:4f:40:
6a:fe:52:b6:9d:ee:f2:62:93:90:ad:a2:66:de:b3:20:df:b4:
84:32:a9:aa:3c:d2:d9:6d:e0:6f:fd:31:a5:3e:a6:b2:1e:06:
dd:f7:cb:c7:7f:64:0c:2d:55:aa:d2:38:97:a0:f4:bc:25:cc:
da:e2:88:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 16:46:17 2025 by rpki-client