Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/3e3d08-e4c5-4f3d-be01-450ad55d325a/1/tpHQC9tiauVzB9XNTord2UdWgLM.mft
File: tpHQC9tiauVzB9XNTord2UdWgLM.mft (raw, json)
Hash identifier: rku4K1c9XzHL10KWKQIrTnUWa8MpNreq8aLtnSLiMo4=
Subject key identifier: F5:88:51:05:88:64:DB:8F:AE:D1:F7:DB:BD:03:A2:47:A5:83:F3:3B
Authority key identifier: B6:91:D0:0B:DB:62:6A:E5:73:07:D5:CD:4E:8A:DD:D9:47:56:80:B3
Certificate issuer: /CN=b691d00bdb626ae57307d5cd4e8addd9475680b3
Certificate serial: 0199FAD818CFDEDE7288DAC03A386E5B4CCC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tpHQC9tiauVzB9XNTord2UdWgLM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/3e3d08-e4c5-4f3d-be01-450ad55d325a/1/tpHQC9tiauVzB9XNTord2UdWgLM.mft
Manifest number: 0FB5
Signing time: Sun 19 Oct 2025 05:01:30 +0000
Manifest this update: Sun 19 Oct 2025 05:01:30 +0000
Manifest next update: Mon 20 Oct 2025 05:01:30 +0000
Files and hashes: 1: AQvnwjdpCCJVGghqg0nwe9L0mVk.roa (hash: lmMkrxQHgFH9/tCkdiNxxBNSfZZ+AeKUjyZG6YnOW/4=)
2: tpHQC9tiauVzB9XNTord2UdWgLM.crl (hash: 0glrRDNbLk9mmr990naWjOLvIAR8gjW+BUpOT3SE+TY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/3e3d08-e4c5-4f3d-be01-450ad55d325a/1/tpHQC9tiauVzB9XNTord2UdWgLM.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/3e3d08-e4c5-4f3d-be01-450ad55d325a/1/tpHQC9tiauVzB9XNTord2UdWgLM.mft
rsync://rpki.ripe.net/repository/DEFAULT/tpHQC9tiauVzB9XNTord2UdWgLM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 05:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fa:d8:18:cf:de:de:72:88:da:c0:3a:38:6e:5b:4c:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b691d00bdb626ae57307d5cd4e8addd9475680b3
Validity
Not Before: Oct 19 05:01:30 2025 GMT
Not After : Oct 20 05:01:30 2025 GMT
Subject: CN=f58851058864db8faed1f7dbbd03a247a583f33b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:c6:d9:e8:59:3d:da:15:d5:79:53:d0:d3:ac:
4e:90:13:15:c1:00:1c:70:3e:cb:0f:b5:21:ba:73:
13:af:90:9a:9a:18:b9:22:69:28:80:2e:c0:c0:c2:
3c:32:99:be:30:1c:5e:fe:d6:3f:83:2c:fd:b2:8f:
40:9d:9e:b9:45:bb:2f:88:58:63:65:2a:17:fe:55:
ef:15:3a:2d:dc:ae:2a:44:f0:5e:56:d0:36:9c:b8:
62:1f:0b:59:b9:2a:05:32:05:8d:67:bd:cc:9a:60:
ac:f3:62:b5:c1:64:df:a5:a0:3e:57:a8:f7:d9:b5:
af:df:93:4a:67:86:17:84:77:5e:c4:90:38:f2:a9:
96:90:0d:60:ad:6f:29:44:f5:eb:35:b8:eb:51:d6:
79:46:19:99:d3:df:9f:48:04:b5:99:40:29:48:ff:
2a:09:9b:33:f2:10:e6:e1:15:d7:a7:f9:5a:c4:21:
3e:42:2b:1a:63:0a:e3:b6:b6:f9:5b:25:76:3b:2b:
67:94:8b:44:87:20:49:15:29:6d:a4:e7:f3:72:f7:
fd:12:9e:72:ad:d7:7e:ba:af:ad:5a:78:e4:87:6d:
3a:41:14:d7:ae:b7:47:a8:af:b3:2c:39:c5:52:d7:
e1:59:49:75:73:b6:9d:69:fe:78:b6:72:04:0c:37:
a8:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:88:51:05:88:64:DB:8F:AE:D1:F7:DB:BD:03:A2:47:A5:83:F3:3B
X509v3 Authority Key Identifier:
keyid:B6:91:D0:0B:DB:62:6A:E5:73:07:D5:CD:4E:8A:DD:D9:47:56:80:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tpHQC9tiauVzB9XNTord2UdWgLM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/3e3d08-e4c5-4f3d-be01-450ad55d325a/1/tpHQC9tiauVzB9XNTord2UdWgLM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/3e3d08-e4c5-4f3d-be01-450ad55d325a/1/tpHQC9tiauVzB9XNTord2UdWgLM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:14:94:79:a0:67:b5:35:a4:57:df:bb:40:0f:a6:fa:2d:bd:
80:05:07:31:11:54:c4:4e:1b:af:5d:6f:ff:94:f2:79:45:0f:
2c:dd:86:0e:56:71:52:db:e7:3c:55:63:c7:04:48:f1:af:a6:
ba:a7:65:0c:e9:61:8f:29:b8:b8:6d:bd:0e:fc:03:da:8b:86:
f8:b1:d2:99:0f:93:91:ca:f9:e6:ea:70:ce:66:bb:62:b2:d8:
d1:e9:85:40:e2:3f:08:ae:b2:9d:9b:70:b2:a8:4d:0a:5d:e4:
bf:5a:51:a9:29:76:ba:df:7d:56:d0:dd:87:11:51:51:bc:14:
63:66:a6:71:b2:9c:c1:d7:f3:2e:08:08:0a:eb:e8:48:f2:68:
6b:00:f1:67:2a:c9:ea:80:98:ba:3c:01:d0:00:e5:dd:43:e3:
67:65:76:e6:bd:ba:0f:84:a1:30:0c:d1:f7:d4:5e:51:98:c4:
ad:a3:5b:26:d5:21:aa:b3:ea:3d:de:ae:ea:a7:07:54:a6:6f:
2e:6d:e7:30:b3:64:6d:46:3a:7d:21:df:66:c4:25:3b:8e:ef:
13:1f:fc:93:74:25:6a:1d:3c:79:a8:8b:f0:9a:cb:6d:d5:a6:
e7:c7:a7:10:78:69:47:df:57:55:b5:1f:ef:0e:5a:e8:80:ee:
75:0a:4d:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:14:00 2025 by rpki-client