Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/15afe5-42b3-4ce6-9d9d-87c3368cb3fa/1/tXRbuO8AiMtRmkCV1lFxnvUe41Q.mft
File: tXRbuO8AiMtRmkCV1lFxnvUe41Q.mft (raw, json)
Hash identifier: 4vg82M2tJqrAmOejtWUwhhHi3iLu8h/Dh08lwBBq7+I=
Subject key identifier: 12:20:27:80:05:38:A9:D5:0A:61:22:18:85:40:C8:8E:95:65:1E:A5
Authority key identifier: B5:74:5B:B8:EF:00:88:CB:51:9A:40:95:D6:51:71:9E:F5:1E:E3:54
Certificate issuer: /CN=b5745bb8ef0088cb519a4095d651719ef51ee354
Certificate serial: 0199FC8F45B134FD6E453CC6AD4AEC3BBA4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tXRbuO8AiMtRmkCV1lFxnvUe41Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/15afe5-42b3-4ce6-9d9d-87c3368cb3fa/1/tXRbuO8AiMtRmkCV1lFxnvUe41Q.mft
Manifest number: 0FF7
Signing time: Sun 19 Oct 2025 13:01:11 +0000
Manifest this update: Sun 19 Oct 2025 13:01:11 +0000
Manifest next update: Mon 20 Oct 2025 13:01:11 +0000
Files and hashes: 1: n153dY1GpJ4_UwUqUY3HaTEGP7I.roa (hash: Xk7KXK61rmwLqoIHj+t2jV4riZg2jXu+cWnVquz+ZXA=)
2: tXRbuO8AiMtRmkCV1lFxnvUe41Q.crl (hash: ai2uKLBI1bxIl8FF+neA9MfnMgEWr/G84KkfkbAusic=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/15afe5-42b3-4ce6-9d9d-87c3368cb3fa/1/tXRbuO8AiMtRmkCV1lFxnvUe41Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/15afe5-42b3-4ce6-9d9d-87c3368cb3fa/1/tXRbuO8AiMtRmkCV1lFxnvUe41Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/tXRbuO8AiMtRmkCV1lFxnvUe41Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:45:b1:34:fd:6e:45:3c:c6:ad:4a:ec:3b:ba:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5745bb8ef0088cb519a4095d651719ef51ee354
Validity
Not Before: Oct 19 13:01:11 2025 GMT
Not After : Oct 20 13:01:11 2025 GMT
Subject: CN=122027800538a9d50a6122188540c88e95651ea5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:7b:07:1c:63:47:16:f5:ab:c8:10:74:52:39:
9c:0c:52:c3:0d:81:b3:d8:05:a3:a5:7f:6c:b5:41:
44:f4:93:09:63:88:5f:3b:be:d9:70:69:bb:57:b2:
6d:d4:23:82:3c:2c:8b:66:5f:7c:b7:13:45:87:ac:
a6:c6:3b:f2:d4:8c:f3:c3:08:6a:c7:f9:de:e4:97:
11:ff:7e:00:aa:f9:ff:4e:97:e9:9d:ef:17:a7:fe:
b1:1b:32:af:23:ad:30:ed:4c:ff:c4:29:a1:9a:41:
fe:42:db:3f:2c:12:a8:79:b0:87:1f:7a:d7:e3:8d:
4d:a8:31:ed:32:40:7d:6d:52:9c:e5:71:8b:54:41:
64:69:61:0d:5a:63:c5:fa:0a:38:00:3c:19:dd:fb:
a8:ed:59:5c:8e:13:17:a7:7e:cb:02:95:3e:6e:a7:
37:70:4a:3d:78:6e:82:59:69:05:40:c5:4a:38:cd:
f3:c4:e0:7c:be:6b:88:8f:b0:80:ea:4f:1e:63:1a:
81:16:c5:5d:06:d4:53:6a:11:e0:ee:49:01:7d:21:
f7:0c:89:57:27:75:4e:63:44:8b:56:a8:b8:99:17:
35:13:3c:3b:fd:89:64:b6:38:ad:7a:13:2a:ad:78:
4a:8c:7b:45:c4:30:95:45:47:46:c4:53:85:30:15:
dd:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:20:27:80:05:38:A9:D5:0A:61:22:18:85:40:C8:8E:95:65:1E:A5
X509v3 Authority Key Identifier:
keyid:B5:74:5B:B8:EF:00:88:CB:51:9A:40:95:D6:51:71:9E:F5:1E:E3:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tXRbuO8AiMtRmkCV1lFxnvUe41Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/15afe5-42b3-4ce6-9d9d-87c3368cb3fa/1/tXRbuO8AiMtRmkCV1lFxnvUe41Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/15afe5-42b3-4ce6-9d9d-87c3368cb3fa/1/tXRbuO8AiMtRmkCV1lFxnvUe41Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:62:86:19:26:d0:08:72:de:eb:47:d6:ff:12:bc:72:cd:ea:
a5:6b:06:6d:e6:97:84:ba:3c:47:6c:b9:c5:27:e0:81:c2:3d:
3b:a8:e4:ae:cd:6a:5b:83:f1:7a:45:10:1f:00:c8:e0:70:c3:
8e:d1:bb:86:41:0a:65:89:02:6a:76:03:5f:dc:58:7f:d8:75:
56:a5:2c:d5:db:c9:d9:16:f0:a2:c0:ad:85:4c:ea:ba:69:a9:
8a:ee:0b:91:cc:ab:ac:f2:cd:ef:a7:42:b2:0a:55:fb:df:83:
f4:c9:9d:7b:1e:80:3c:05:d2:be:d8:47:cf:ca:8c:2e:c3:9a:
48:22:85:0b:ab:33:df:5b:8b:5e:fc:67:03:74:fa:db:18:9c:
f4:5a:35:ac:96:e0:70:ad:2d:c9:d2:2b:2c:ff:3f:94:81:be:
1d:8f:11:bb:d2:19:d1:34:69:3a:f0:f7:73:ef:04:48:86:51:
ef:f9:fe:79:db:5d:c0:91:e1:13:09:86:44:b2:db:60:c0:1a:
56:a5:ab:0c:cd:ba:2f:02:f4:f4:8d:70:19:06:54:c6:93:69:
8d:fb:fe:85:a5:a9:be:92:7e:b5:87:91:8d:41:49:09:dc:d8:
a2:3b:33:7f:fc:84:b8:fb:cf:ec:47:65:14:db:80:11:c8:6c:
7c:f5:f8:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:18:50 2025 by rpki-client