Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/eeb1b2-e3c3-413d-a164-80d4782437ff/1/tvpArb6TaxhPhEWGoPkNEjC2hTc.mft
File: tvpArb6TaxhPhEWGoPkNEjC2hTc.mft (raw, json)
Hash identifier: YtEzJfgYKG4w2LlCPBqDPC/gad1HQ1AEGb8zdBp8Zek=
Subject key identifier: FD:73:A7:C2:C5:32:95:8F:44:B9:78:90:8F:08:F8:F8:CA:00:7E:9F
Authority key identifier: B6:FA:40:AD:BE:93:6B:18:4F:84:45:86:A0:F9:0D:12:30:B6:85:37
Certificate issuer: /CN=b6fa40adbe936b184f844586a0f90d1230b68537
Certificate serial: 0199FE10592340343C234803F3F6149B5C82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tvpArb6TaxhPhEWGoPkNEjC2hTc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/eeb1b2-e3c3-413d-a164-80d4782437ff/1/tvpArb6TaxhPhEWGoPkNEjC2hTc.mft
Manifest number: 0ED8
Signing time: Sun 19 Oct 2025 20:01:48 +0000
Manifest this update: Sun 19 Oct 2025 20:01:48 +0000
Manifest next update: Mon 20 Oct 2025 20:01:48 +0000
Files and hashes: 1: 7XTv9hOTaLviFUQwCXilEpYpbHU.roa (hash: 4LkrU5FXjLzeM7TTaFB6Rd3GTMio8T94peCl7zXgOHM=)
2: tvpArb6TaxhPhEWGoPkNEjC2hTc.crl (hash: Qs5/ZIaZtokf2Y5UNvXKfqspRVK3Pvo++9fQ7DGO+9c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/eeb1b2-e3c3-413d-a164-80d4782437ff/1/tvpArb6TaxhPhEWGoPkNEjC2hTc.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/eeb1b2-e3c3-413d-a164-80d4782437ff/1/tvpArb6TaxhPhEWGoPkNEjC2hTc.mft
rsync://rpki.ripe.net/repository/DEFAULT/tvpArb6TaxhPhEWGoPkNEjC2hTc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:10:59:23:40:34:3c:23:48:03:f3:f6:14:9b:5c:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b6fa40adbe936b184f844586a0f90d1230b68537
Validity
Not Before: Oct 19 20:01:48 2025 GMT
Not After : Oct 20 20:01:48 2025 GMT
Subject: CN=fd73a7c2c532958f44b978908f08f8f8ca007e9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:68:77:03:58:60:69:aa:c5:ae:ee:95:a7:fb:
71:35:0e:5d:f0:ad:b0:1f:17:ee:a4:e5:c9:e6:93:
dd:2c:8d:84:df:61:9e:8c:d0:ab:c6:4e:5d:83:79:
04:a9:3d:3d:4d:35:ea:45:f6:b5:7b:44:71:19:f9:
ac:a0:33:5f:2c:54:bb:b8:c2:4a:13:f7:3c:5f:91:
48:46:01:86:ff:5e:5e:cd:fb:93:61:38:b9:c3:b4:
60:a3:00:3f:51:cd:98:56:32:3f:0a:5d:3b:32:c1:
a1:44:6b:cf:6b:a4:8e:ba:4f:39:a2:7d:f3:34:ba:
60:fc:a9:76:09:c0:23:9b:a8:90:cb:2b:e6:7b:7e:
84:4a:a3:e2:ba:9f:67:27:77:92:ce:60:48:85:77:
8e:c6:79:ab:01:2c:0b:28:0b:7a:34:99:81:91:f8:
4b:fa:a5:f5:42:5a:2b:1f:3c:16:76:27:29:80:dd:
ae:76:c4:79:6f:31:83:c3:f0:01:2f:8f:aa:1e:43:
c0:c2:cb:7e:3d:ae:61:66:75:24:d5:32:3f:07:93:
de:e8:fa:23:80:f9:a3:96:18:ea:7b:11:a5:d8:87:
37:15:39:b4:39:42:8f:d6:35:7c:99:dd:b1:03:ed:
a7:75:78:2d:25:80:77:b7:3c:3f:46:fe:d4:f5:4a:
f7:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:73:A7:C2:C5:32:95:8F:44:B9:78:90:8F:08:F8:F8:CA:00:7E:9F
X509v3 Authority Key Identifier:
keyid:B6:FA:40:AD:BE:93:6B:18:4F:84:45:86:A0:F9:0D:12:30:B6:85:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tvpArb6TaxhPhEWGoPkNEjC2hTc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/eeb1b2-e3c3-413d-a164-80d4782437ff/1/tvpArb6TaxhPhEWGoPkNEjC2hTc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/eeb1b2-e3c3-413d-a164-80d4782437ff/1/tvpArb6TaxhPhEWGoPkNEjC2hTc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:90:48:2f:0a:46:8f:56:96:98:53:66:da:e2:36:36:6b:52:
8f:8c:2c:3a:8e:d1:4a:1f:80:51:1e:fb:96:ff:45:0d:8e:1a:
9e:77:2e:e6:7e:29:e2:b8:f1:85:08:2c:46:86:d3:2d:80:98:
df:33:a1:da:cc:dd:92:c2:92:85:36:81:6d:f3:5b:14:03:1e:
08:9b:8e:21:cc:15:88:9b:57:fe:55:e9:d9:d6:a4:32:eb:cf:
42:30:50:c9:ad:36:c2:34:26:f5:27:c0:cc:88:4f:21:4a:9f:
aa:79:2a:43:6d:73:ed:ab:4e:eb:2a:47:bc:d6:41:29:09:6f:
d3:6e:a8:cb:40:dd:c6:c6:c7:d7:bb:bb:a8:5f:9b:2b:73:97:
10:4c:ed:bc:fd:ea:4b:76:73:29:5b:cd:01:1e:0e:21:fa:1d:
77:49:01:ae:f6:8e:2b:3b:17:c2:a6:ee:83:9d:fd:6d:20:2d:
34:30:e8:86:52:12:a8:c5:8e:e0:7a:a9:6b:df:7d:28:b4:c7:
af:5c:8e:a2:d7:d9:96:47:ff:c4:e9:a6:08:cf:f3:0e:4b:4c:
d0:5e:49:52:0b:f5:31:18:95:b8:bd:2a:e1:8a:b3:5b:d3:37:
ac:07:f3:cc:71:fc:65:01:d2:4d:19:fd:8f:ce:1e:d7:ca:a8:
a2:2f:11:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 00:01:31 2025 by rpki-client