Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/2f672b-236c-40fb-aaf6-08d0f4bd2c28/1/tXPS3ak-QgQJFj2lnnQU7pGi7vI.mft
File: tXPS3ak-QgQJFj2lnnQU7pGi7vI.mft (raw, json)
Hash identifier: PU0xc8J94XCgwMFwG3jdkdni+VQSs/pwJ+QjrM5cAfI=
Subject key identifier: B4:3B:FD:0A:1C:2D:BF:4E:E0:C7:1A:27:7A:37:E1:7C:08:90:B5:3D
Authority key identifier: B5:73:D2:DD:A9:3E:42:04:09:16:3D:A5:9E:74:14:EE:91:A2:EE:F2
Certificate issuer: /CN=b573d2dda93e420409163da59e7414ee91a2eef2
Certificate serial: 019A02FEA4691563CB409E808653B7F3655C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tXPS3ak-QgQJFj2lnnQU7pGi7vI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/2f672b-236c-40fb-aaf6-08d0f4bd2c28/1/tXPS3ak-QgQJFj2lnnQU7pGi7vI.mft
Manifest number: 0183
Signing time: Mon 20 Oct 2025 19:00:33 +0000
Manifest this update: Mon 20 Oct 2025 19:00:33 +0000
Manifest next update: Tue 21 Oct 2025 19:00:33 +0000
Files and hashes: 1: r2p_nfti9wP7acQGEaKHM_xZ5Y4.roa (hash: 8x452bR9h9FZkxCtz0Hac6JBkLr+TCy/u9myFaRh5zg=)
2: tXPS3ak-QgQJFj2lnnQU7pGi7vI.crl (hash: uq738RjogunyhBPC3zyzvQqRM5CuKukVKXlWVWfKUq0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/2f672b-236c-40fb-aaf6-08d0f4bd2c28/1/tXPS3ak-QgQJFj2lnnQU7pGi7vI.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/2f672b-236c-40fb-aaf6-08d0f4bd2c28/1/tXPS3ak-QgQJFj2lnnQU7pGi7vI.mft
rsync://rpki.ripe.net/repository/DEFAULT/tXPS3ak-QgQJFj2lnnQU7pGi7vI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 19:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:02:fe:a4:69:15:63:cb:40:9e:80:86:53:b7:f3:65:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b573d2dda93e420409163da59e7414ee91a2eef2
Validity
Not Before: Oct 20 19:00:33 2025 GMT
Not After : Oct 21 19:00:33 2025 GMT
Subject: CN=b43bfd0a1c2dbf4ee0c71a277a37e17c0890b53d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:43:91:66:5a:cc:fd:1b:e7:64:46:79:d5:74:
d6:37:f8:03:2a:ca:17:c7:96:df:1b:f4:5a:8d:50:
07:3c:62:d2:38:fa:a3:7f:90:3e:c0:99:f2:7f:e9:
66:30:22:a2:6b:28:cc:a7:70:0a:ae:c8:ad:03:7a:
3d:8b:d6:56:e9:91:a0:a7:a4:7a:c8:36:2b:02:fa:
c6:9a:c8:36:ba:c3:05:8a:da:cc:12:29:92:97:f1:
6a:78:eb:82:0e:e9:21:f8:20:0b:3a:98:7e:81:e3:
e7:26:e5:99:4d:d7:9a:0b:29:10:c9:29:5e:21:d7:
b8:57:3f:22:c5:6a:4c:4f:1e:b0:e3:99:32:e0:47:
f2:48:9e:75:6a:6e:cc:9a:81:8d:65:dc:c0:05:c5:
c8:5f:23:46:bc:6a:e4:87:79:b8:72:d4:11:1c:9d:
14:9e:09:c3:54:c3:d3:b0:fd:71:23:ef:c2:7e:08:
02:9b:08:88:74:3a:bf:10:22:0a:61:4c:6e:26:1c:
83:b3:78:bc:17:48:57:1f:9f:3e:1e:78:5f:f1:e4:
ed:9c:8f:48:9a:b1:df:48:65:47:f8:c5:8e:13:4d:
70:b7:c4:9c:88:b8:45:f7:6c:61:a8:8d:71:7f:24:
50:91:16:0e:32:7f:2a:37:b2:2c:50:32:c8:6b:bf:
48:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:3B:FD:0A:1C:2D:BF:4E:E0:C7:1A:27:7A:37:E1:7C:08:90:B5:3D
X509v3 Authority Key Identifier:
keyid:B5:73:D2:DD:A9:3E:42:04:09:16:3D:A5:9E:74:14:EE:91:A2:EE:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tXPS3ak-QgQJFj2lnnQU7pGi7vI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/2f672b-236c-40fb-aaf6-08d0f4bd2c28/1/tXPS3ak-QgQJFj2lnnQU7pGi7vI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/2f672b-236c-40fb-aaf6-08d0f4bd2c28/1/tXPS3ak-QgQJFj2lnnQU7pGi7vI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:e1:60:bb:43:79:02:b0:4f:22:6e:99:02:96:b6:a1:8b:e8:
b2:9f:fd:2c:66:ea:14:fd:bf:d9:08:13:4e:13:8e:42:51:13:
59:d0:43:1d:52:57:73:5c:a3:c3:b8:61:27:47:b9:77:26:ef:
8d:a7:01:04:14:f6:0e:c5:37:5b:6a:60:ec:44:8c:42:fc:c6:
e6:ee:70:88:c0:c4:a3:a9:42:9f:0f:28:05:3f:88:1d:91:b2:
32:91:a2:3f:96:63:df:16:54:4e:b5:93:8b:f6:2c:4b:38:fe:
f9:f9:ae:78:24:e9:3f:1c:91:82:10:0a:7d:46:9c:9a:fc:f0:
21:25:53:13:36:ac:5e:60:e5:29:6d:b2:67:f8:74:a5:4e:bf:
91:3d:7d:61:b9:8d:5d:f2:e7:6e:94:7a:08:fc:44:aa:81:dc:
97:d4:31:99:03:f2:07:66:42:13:de:07:30:4e:dc:32:97:2d:
9f:65:50:93:83:6c:24:03:93:82:ce:0f:0b:b6:0a:46:4a:ab:
e1:a0:30:19:2d:dc:1b:a4:40:dd:a5:9b:9d:db:2d:77:18:0e:
25:24:42:5d:e2:75:82:92:f9:f0:a5:7c:58:1c:27:79:42:fb:
ec:39:3f:7d:c7:63:fa:66:2f:65:31:af:36:6a:d7:8c:4d:62:
d8:c9:ea:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 05:18:18 2025 by rpki-client