Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/2a7bf4-3454-4d14-9e0c-183f9975fc94/1/tA1JQzPLTZ5f0QyEbEfPVkRcUDo.mft
File: tA1JQzPLTZ5f0QyEbEfPVkRcUDo.mft (raw, json)
Hash identifier: hIE+gL+jrw8WFgj5hebP44HyR9ploiCtJ37D77jUDEg=
Subject key identifier: DC:9E:D0:91:E2:89:7E:91:E6:65:38:39:3D:10:47:88:5A:A8:06:27
Authority key identifier: B4:0D:49:43:33:CB:4D:9E:5F:D1:0C:84:6C:47:CF:56:44:5C:50:3A
Certificate issuer: /CN=b40d494333cb4d9e5fd10c846c47cf56445c503a
Certificate serial: 0199FC58801896D5A689F466BCFAC9289100
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tA1JQzPLTZ5f0QyEbEfPVkRcUDo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/2a7bf4-3454-4d14-9e0c-183f9975fc94/1/tA1JQzPLTZ5f0QyEbEfPVkRcUDo.mft
Manifest number: 0FF7
Signing time: Sun 19 Oct 2025 12:01:22 +0000
Manifest this update: Sun 19 Oct 2025 12:01:22 +0000
Manifest next update: Mon 20 Oct 2025 12:01:22 +0000
Files and hashes: 1: VYJ9qKilNSj9Z30pGpYaNAGU4Z0.roa (hash: j29BGrdUX9gZWLn/MqLu3C1IYATOJG6BtpBREfenzkc=)
2: dek1yBz9hU9Sw_jKA33of_zM9K4.roa (hash: yub3ufVUEc3WS+XkUJMCp9euptnf3DjONJgSPtRCvNQ=)
3: tA1JQzPLTZ5f0QyEbEfPVkRcUDo.crl (hash: iux8gBCVK3IoU3WMTdXxFPX+cF0q2iFL6Vu7WnAalyQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/2a7bf4-3454-4d14-9e0c-183f9975fc94/1/tA1JQzPLTZ5f0QyEbEfPVkRcUDo.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/2a7bf4-3454-4d14-9e0c-183f9975fc94/1/tA1JQzPLTZ5f0QyEbEfPVkRcUDo.mft
rsync://rpki.ripe.net/repository/DEFAULT/tA1JQzPLTZ5f0QyEbEfPVkRcUDo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:80:18:96:d5:a6:89:f4:66:bc:fa:c9:28:91:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b40d494333cb4d9e5fd10c846c47cf56445c503a
Validity
Not Before: Oct 19 12:01:22 2025 GMT
Not After : Oct 20 12:01:22 2025 GMT
Subject: CN=dc9ed091e2897e91e66538393d1047885aa80627
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:80:4c:c4:8e:7a:b4:4b:31:88:e8:b6:55:72:
50:69:a1:5e:c5:bf:6c:4e:3b:80:9d:5a:61:4a:01:
33:21:e0:1f:90:5d:dd:1c:f1:3b:68:e6:f5:4c:8d:
96:55:3d:f5:97:a7:2f:d1:45:bd:5e:30:7f:18:c7:
9e:18:20:54:c5:47:94:ee:03:c4:3e:14:5e:f7:23:
65:12:21:d0:c3:ac:d0:cb:1c:62:b3:8f:43:a9:ff:
ce:e5:53:70:99:eb:a9:db:95:b0:ff:2a:d6:92:76:
45:ce:3c:66:32:fc:6b:c3:bf:c7:09:9f:f8:03:18:
36:89:da:03:fa:83:ed:67:67:b9:03:3a:10:0f:58:
75:cb:b0:a4:2e:23:e2:23:4d:48:f2:cc:7e:30:a0:
26:a7:67:9b:8d:4b:ad:f4:a4:97:1f:35:04:f0:bd:
74:50:6b:2e:d7:26:5b:48:c9:32:93:9b:19:d5:a6:
fe:85:bd:f8:3a:21:36:d5:40:59:af:4d:2c:0f:d0:
09:eb:78:fd:3b:85:51:4b:cd:e3:5b:4d:98:ff:b7:
fd:f0:c9:de:75:eb:e2:4f:ac:0f:1b:83:0a:a3:50:
fc:d7:f9:18:14:4b:db:e4:68:cb:23:3e:65:d1:33:
8a:cd:6f:0f:f2:7c:cf:00:3c:57:3b:6a:87:e5:3e:
27:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:9E:D0:91:E2:89:7E:91:E6:65:38:39:3D:10:47:88:5A:A8:06:27
X509v3 Authority Key Identifier:
keyid:B4:0D:49:43:33:CB:4D:9E:5F:D1:0C:84:6C:47:CF:56:44:5C:50:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tA1JQzPLTZ5f0QyEbEfPVkRcUDo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/2a7bf4-3454-4d14-9e0c-183f9975fc94/1/tA1JQzPLTZ5f0QyEbEfPVkRcUDo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/2a7bf4-3454-4d14-9e0c-183f9975fc94/1/tA1JQzPLTZ5f0QyEbEfPVkRcUDo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e9:16:77:0c:b7:45:3e:73:c3:17:2a:e4:0c:9a:f2:58:dd:68:
43:99:07:7f:01:44:9b:bb:7a:5c:dd:f2:9f:4a:9c:12:c1:d8:
12:53:72:10:c3:e2:82:92:32:5e:ba:41:eb:1a:4c:7d:26:b9:
ff:2f:31:07:53:bd:00:2f:b4:ea:9b:fb:5f:a5:42:14:5f:d1:
a3:f9:a4:df:1b:87:7f:26:78:25:e0:c0:78:6f:16:08:fa:a5:
21:df:f1:ad:c8:53:4d:10:34:04:2a:bb:1e:19:8a:76:1a:c7:
fb:ea:6d:be:6d:6c:33:63:d4:58:4c:6e:96:c4:be:12:23:7f:
23:2b:55:35:46:16:6b:a5:78:28:19:38:b7:27:00:25:32:38:
bd:d7:f9:04:98:a6:b0:5d:4d:1a:56:d3:a5:1e:17:5f:87:64:
2c:37:3d:f8:68:ba:00:f0:fa:5e:64:5a:f0:c1:25:3e:10:31:
5a:2f:08:36:35:19:f8:c2:c5:10:72:3c:8b:68:11:91:75:bb:
84:6e:7d:b8:f9:f8:f1:26:c9:a3:ab:0c:7e:d2:b6:fd:42:02:
73:fa:52:38:78:d2:d4:2b:e8:83:7c:00:8f:a1:bf:07:26:d6:
30:1f:32:9d:34:a7:d7:d2:ad:86:f0:a9:b4:94:1a:24:53:f9:
b4:33:5d:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:49:51 2025 by rpki-client