Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/9a4cce-fd12-4707-be95-0a246ab05946/1/tSJ4dZnxeY4kX5k_jLgYL5nP0QQ.mft
File: tSJ4dZnxeY4kX5k_jLgYL5nP0QQ.mft (raw, json)
Hash identifier: +km+pJKSWtc7iCNb87b1yRAB9cd+tz36gapCAz52LcM=
Subject key identifier: BA:50:2D:D3:79:E7:BC:F2:2A:EC:B9:4F:23:17:4C:5F:A9:14:5D:07
Authority key identifier: B5:22:78:75:99:F1:79:8E:24:5F:99:3F:8C:B8:18:2F:99:CF:D1:04
Certificate issuer: /CN=b522787599f1798e245f993f8cb8182f99cfd104
Certificate serial: 019A71EE86AE6A2144472EE75DE42324F97A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tSJ4dZnxeY4kX5k_jLgYL5nP0QQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/9a4cce-fd12-4707-be95-0a246ab05946/1/tSJ4dZnxeY4kX5k_jLgYL5nP0QQ.mft
Manifest number: 0E9C
Signing time: Tue 11 Nov 2025 08:00:48 +0000
Manifest this update: Tue 11 Nov 2025 08:00:48 +0000
Manifest next update: Wed 12 Nov 2025 08:00:48 +0000
Files and hashes: 1: 2o-thtsUmdvMYHtv9qjNUTl4ar8.roa (hash: lFf88qPAFyfJ0i5OxU8GOvf0pF7V0Wi7poD5MDkBh2U=)
2: tSJ4dZnxeY4kX5k_jLgYL5nP0QQ.crl (hash: DgSHBt2utEWZYROxvuNXCEeAs/8qysyJLS9HeKuPqys=)
3: xzr06xbQWPKGyePi4W8ezv0xyXU.roa (hash: r6Ttugun2Irp6PGhhAikFJmsuU2fRdTtE284A/50Ue4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/9a4cce-fd12-4707-be95-0a246ab05946/1/tSJ4dZnxeY4kX5k_jLgYL5nP0QQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/9a4cce-fd12-4707-be95-0a246ab05946/1/tSJ4dZnxeY4kX5k_jLgYL5nP0QQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/tSJ4dZnxeY4kX5k_jLgYL5nP0QQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:86:ae:6a:21:44:47:2e:e7:5d:e4:23:24:f9:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b522787599f1798e245f993f8cb8182f99cfd104
Validity
Not Before: Nov 11 08:00:48 2025 GMT
Not After : Nov 12 08:00:48 2025 GMT
Subject: CN=ba502dd379e7bcf22aecb94f23174c5fa9145d07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:22:32:c8:c1:88:ea:b6:29:a2:cf:fb:c8:cf:
5a:1e:b0:8e:f1:52:d5:d3:60:d0:c4:b3:4f:26:11:
e2:25:b4:20:7a:9d:5e:d5:94:18:b9:f0:08:ef:ed:
5e:25:46:04:10:be:2e:e9:61:33:99:5e:5e:77:b3:
ae:e9:5e:e4:14:7c:16:cd:3d:8f:56:1d:08:12:7e:
5c:e7:74:c1:e0:c6:3c:f6:b9:54:ad:c6:70:4f:50:
bd:a5:70:86:b3:ee:f9:29:71:45:17:cb:7e:8e:41:
3b:08:45:e7:45:db:3a:5d:b0:e8:bd:26:b8:4c:bb:
35:98:26:42:6a:f9:a6:f9:9e:b6:8f:80:c4:07:2a:
5a:8e:26:c1:33:e5:05:ed:c7:71:1e:33:63:e9:ea:
87:df:b0:6a:8a:ff:7b:6b:ca:3d:e2:bb:af:6b:a3:
01:bc:16:ef:7b:96:4d:77:7f:3f:c4:16:29:9e:2a:
2f:ca:b6:c2:66:c0:77:7f:07:1f:21:1f:01:54:57:
00:80:e1:9d:e4:d9:7e:13:e0:9a:f1:21:56:d8:69:
86:5a:32:81:e2:c8:0c:47:29:83:95:f8:0d:16:6a:
c8:bd:cf:6d:84:bb:ab:ec:49:f2:cd:f9:83:31:12:
2d:28:92:09:2e:7a:81:5a:3c:18:bf:09:6b:82:f5:
a2:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:50:2D:D3:79:E7:BC:F2:2A:EC:B9:4F:23:17:4C:5F:A9:14:5D:07
X509v3 Authority Key Identifier:
keyid:B5:22:78:75:99:F1:79:8E:24:5F:99:3F:8C:B8:18:2F:99:CF:D1:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tSJ4dZnxeY4kX5k_jLgYL5nP0QQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/9a4cce-fd12-4707-be95-0a246ab05946/1/tSJ4dZnxeY4kX5k_jLgYL5nP0QQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/9a4cce-fd12-4707-be95-0a246ab05946/1/tSJ4dZnxeY4kX5k_jLgYL5nP0QQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:6c:f6:57:f8:f2:15:cd:e9:ef:87:53:07:06:ce:7f:f0:1a:
50:c5:f3:8c:84:c2:05:5f:b2:13:97:22:ef:a4:49:bb:8d:6f:
cf:b2:31:94:14:27:30:15:76:30:a7:01:8e:a0:a9:1e:31:f2:
92:68:30:cf:23:c0:7f:c3:a1:68:78:f7:3a:e5:50:f1:e7:66:
80:94:86:e0:98:5b:45:4c:77:d8:87:e4:a9:68:26:0d:0c:9c:
75:05:7e:30:51:f0:fa:c7:6d:6b:69:39:93:30:12:eb:4b:fe:
b0:8a:cb:46:e3:0e:fc:8a:e7:57:31:f6:e4:b5:66:8a:8c:45:
87:42:f2:1d:24:c8:f4:d7:03:e6:15:12:b5:e7:5a:b7:c5:15:
4b:96:4e:31:97:81:7c:ea:2c:5f:97:22:7b:b8:89:2d:6a:d5:
47:a8:03:47:06:cb:be:18:fa:02:fb:a1:21:3a:48:f9:84:45:
f3:be:ab:47:0c:08:d4:d1:11:06:9f:97:a9:fb:42:e6:a3:53:
62:57:64:7e:a5:29:db:ba:27:89:e1:df:5d:02:2c:6b:38:bd:
65:14:c7:2d:61:80:fc:46:e7:6e:0e:9b:b5:53:24:c6:9e:46:
24:7d:02:5a:be:7f:30:33:59:ad:60:ca:d8:5b:7b:d8:4d:ec:
5f:38:03:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:47:04 2025 by rpki-client