
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/ee54d1-5b15-4f93-897b-0c909bf5be4d/1/tJvYTaF5l8uyhq-QIqsuBboItEI.mft
File: tJvYTaF5l8uyhq-QIqsuBboItEI.mft (raw, json)
Hash identifier: n/nVuhnlwV37vfjw/gq5FlF/9IionWHSdcKzyeEmkS0=
Subject key identifier: B4:30:7D:26:79:B3:F9:9B:6E:AC:09:7E:B5:6C:88:DC:2C:A5:A7:7E
Authority key identifier: B4:9B:D8:4D:A1:79:97:CB:B2:86:AF:90:22:AB:2E:05:BA:08:B4:42
Certificate issuer: /CN=b49bd84da17997cbb286af9022ab2e05ba08b442
Certificate serial: 0199FB7CCEDEF0711C7FFD50F5195E35FD19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tJvYTaF5l8uyhq-QIqsuBboItEI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/ee54d1-5b15-4f93-897b-0c909bf5be4d/1/tJvYTaF5l8uyhq-QIqsuBboItEI.mft
Manifest number: 1242
Signing time: Sun 19 Oct 2025 08:01:24 +0000
Manifest this update: Sun 19 Oct 2025 08:01:24 +0000
Manifest next update: Mon 20 Oct 2025 08:01:24 +0000
Files and hashes: 1: 1-PqW8UmiSaov5LQilBVWMK5ZalY.roa (hash: TOVF5pxyQFktaD7ChGQ0pQzpTOW/D5b1AiH6KqbdxuQ=)
2: DaHb-AgbaohKBsaZFPAVDGbt_RI.roa (hash: T2KsBuhVxG35+5zMSgS7xBXEVKNyKlB23AKVgPghBi4=)
3: ZKaLH1RF9q1E6524_CLGwNAeKPU.roa (hash: NYm5o8T+AXl6BoN5iWRobD4OTRMc9uAM7u/9BRILK/4=)
4: tJvYTaF5l8uyhq-QIqsuBboItEI.crl (hash: y1EVmz8286HPk55KuE+tAigaZZcblGET/TYwsA6dtVk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/ee54d1-5b15-4f93-897b-0c909bf5be4d/1/tJvYTaF5l8uyhq-QIqsuBboItEI.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/ee54d1-5b15-4f93-897b-0c909bf5be4d/1/tJvYTaF5l8uyhq-QIqsuBboItEI.mft
rsync://rpki.ripe.net/repository/DEFAULT/tJvYTaF5l8uyhq-QIqsuBboItEI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 08:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:7c:ce:de:f0:71:1c:7f:fd:50:f5:19:5e:35:fd:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b49bd84da17997cbb286af9022ab2e05ba08b442
Validity
Not Before: Oct 19 08:01:24 2025 GMT
Not After : Oct 20 08:01:24 2025 GMT
Subject: CN=b4307d2679b3f99b6eac097eb56c88dc2ca5a77e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:6a:3c:63:9b:06:db:47:08:17:5f:ba:82:14:
86:77:0c:df:5d:0a:a7:e8:71:47:c9:59:4e:22:68:
b2:3e:29:37:29:05:4a:c1:33:3f:11:ca:61:38:11:
4a:98:83:47:fe:ac:b5:ad:eb:9c:dd:7c:8c:96:03:
74:da:63:80:4a:bb:4b:ae:78:65:be:16:e5:99:45:
4c:9a:6b:3f:5e:5f:0f:84:34:3b:0a:7f:d0:5c:68:
a6:58:06:e7:14:fe:83:28:44:00:63:7c:f0:bc:92:
5b:93:00:d3:60:2f:a2:38:2f:d8:c8:1b:34:27:f0:
82:34:cc:23:82:4a:00:6e:53:a4:12:74:75:0a:9e:
26:08:7d:8d:d0:ae:32:0f:b0:e3:b1:dd:2b:74:fa:
da:5f:f1:2a:8f:22:e3:ec:54:ad:4e:b7:ab:dd:5c:
8c:9c:1e:26:fc:6f:11:27:e1:4d:74:e8:f0:c6:ee:
fd:4d:d9:bd:a6:d1:9e:1b:52:be:4d:69:54:77:14:
75:2a:b9:f0:59:82:f4:7e:91:2e:01:aa:c2:bf:f0:
8b:2c:36:5f:86:f0:3a:cf:4b:48:ae:c8:58:f8:02:
eb:8c:67:31:f3:1d:05:b0:b4:c6:a8:5f:f9:3b:dd:
cd:eb:ae:e4:ea:dd:6c:3a:1d:69:df:14:28:33:8d:
2c:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:30:7D:26:79:B3:F9:9B:6E:AC:09:7E:B5:6C:88:DC:2C:A5:A7:7E
X509v3 Authority Key Identifier:
keyid:B4:9B:D8:4D:A1:79:97:CB:B2:86:AF:90:22:AB:2E:05:BA:08:B4:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tJvYTaF5l8uyhq-QIqsuBboItEI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/ee54d1-5b15-4f93-897b-0c909bf5be4d/1/tJvYTaF5l8uyhq-QIqsuBboItEI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/ee54d1-5b15-4f93-897b-0c909bf5be4d/1/tJvYTaF5l8uyhq-QIqsuBboItEI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:3b:d3:dc:6c:24:c4:76:9d:29:d6:9b:fa:1e:c4:e8:c9:e6:
b9:27:3f:90:b2:29:07:ff:2c:46:cb:ce:3d:7b:c1:ea:2c:79:
87:92:1d:e4:52:0a:96:2c:21:a2:de:52:f7:c4:07:51:73:40:
e6:24:dc:c3:52:73:53:d7:3e:93:76:0b:50:ce:0e:67:2e:c5:
81:a5:e0:6e:fc:69:00:ef:32:7c:fb:29:89:4d:ea:2b:8b:e5:
ba:3f:f9:2e:43:01:df:ed:0c:75:75:ed:0b:d1:f9:a3:33:49:
ee:07:d9:33:d0:9a:21:b9:13:fe:4c:ed:78:3c:79:c3:1a:43:
f5:04:9d:89:26:fd:22:9e:91:ed:8e:83:09:62:35:be:28:21:
f5:64:b5:f0:7c:1e:47:15:6a:5f:b0:8c:ab:d5:cf:1c:b2:43:
f3:1b:14:d9:a1:29:82:77:61:1d:22:6d:4b:58:6e:7b:a5:c6:
09:61:d2:7a:45:91:21:73:b9:0d:f7:4e:9c:5c:6f:ad:e6:05:
29:53:46:55:d4:b5:84:a8:d2:0f:db:db:50:74:24:15:49:68:
fd:a5:cc:50:fa:80:e7:96:30:56:43:68:69:93:43:e1:76:63:
26:08:cc:94:85:92:83:e1:33:d6:41:46:a0:f0:ee:4b:49:8e:
9f:39:ce:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:55:13 2025 by rpki-client