Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/270b89-7c47-4263-86a0-0073c2b7a7ee/1/Tk9mXUbWoqvwUh5csffEUcozeoc.mft
File: Tk9mXUbWoqvwUh5csffEUcozeoc.mft (raw, json)
Hash identifier: lQkDAlWtETRTxuMay1MKKYOFzmDlcPWcON10XTJgVww=
Subject key identifier: 03:6A:06:56:60:18:BE:76:60:02:A4:A5:99:4B:D7:21:25:02:29:AC
Authority key identifier: 4E:4F:66:5D:46:D6:A2:AB:F0:52:1E:5C:B1:F7:C4:51:CA:33:7A:87
Certificate issuer: /CN=4e4f665d46d6a2abf0521e5cb1f7c451ca337a87
Certificate serial: 0199FB0EB765F5A1EEEE897F8188E0ACC4EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tk9mXUbWoqvwUh5csffEUcozeoc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/270b89-7c47-4263-86a0-0073c2b7a7ee/1/Tk9mXUbWoqvwUh5csffEUcozeoc.mft
Manifest number: 02C3
Signing time: Sun 19 Oct 2025 06:01:09 +0000
Manifest this update: Sun 19 Oct 2025 06:01:09 +0000
Manifest next update: Mon 20 Oct 2025 06:01:09 +0000
Files and hashes: 1: 1KxZYvxri1sxva3r2G7KLnG5z_Y.roa (hash: 9JXmyyV6BbeWSwFTBJAUkp5UHelZgOhj8wsWM2RqVyk=)
2: HrSejbS-39NivWEqBB6_ezmUBgQ.roa (hash: 8T3MTXu6asTJ46RNeuQMt6iMOXHZ2zW1uZEJeSesDDw=)
3: Tk9mXUbWoqvwUh5csffEUcozeoc.crl (hash: 8JXraIMNM9orl6eWmSeMTUpjYourSn4jDjs7a3ZcIBo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/270b89-7c47-4263-86a0-0073c2b7a7ee/1/Tk9mXUbWoqvwUh5csffEUcozeoc.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/270b89-7c47-4263-86a0-0073c2b7a7ee/1/Tk9mXUbWoqvwUh5csffEUcozeoc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Tk9mXUbWoqvwUh5csffEUcozeoc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:0e:b7:65:f5:a1:ee:ee:89:7f:81:88:e0:ac:c4:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e4f665d46d6a2abf0521e5cb1f7c451ca337a87
Validity
Not Before: Oct 19 06:01:09 2025 GMT
Not After : Oct 20 06:01:09 2025 GMT
Subject: CN=036a06566018be766002a4a5994bd721250229ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:b2:02:c0:5b:b4:6b:30:2a:49:e6:b9:de:1a:
e2:fc:5f:f3:5b:bb:76:ab:b9:e3:50:0a:8b:39:fc:
2e:7a:f0:3a:04:46:a1:7c:4b:99:93:5a:2a:18:1e:
88:8d:40:d6:7d:1b:33:17:70:63:1a:24:0a:80:ac:
84:2b:61:63:97:b0:01:1b:44:33:9e:66:4a:d7:fb:
2e:b5:f8:1a:ca:9f:f2:0c:9a:4a:d6:e6:b0:28:8b:
28:c2:40:76:74:1a:cc:50:22:86:18:13:4c:fa:88:
d3:99:c8:a8:dd:54:19:a2:8e:5c:5e:21:0b:92:94:
96:f9:40:4a:dd:38:13:eb:8c:3b:b5:10:72:7a:01:
b4:ce:8e:9d:d2:1c:6c:c1:e6:c9:4c:ad:ae:9a:7d:
80:a9:6d:25:13:e9:4c:e9:0d:22:d7:c0:42:b3:23:
c3:28:f8:20:2b:06:97:f1:07:de:e5:03:a2:8f:2c:
41:6f:e6:14:e4:23:2d:c2:e7:76:60:88:90:0b:b1:
6a:9d:34:69:79:ed:84:cd:f2:9b:a6:1c:11:c8:6f:
05:53:7c:0b:26:f7:0a:f7:54:8f:9c:25:c0:dc:c8:
6b:28:0e:0a:11:54:06:18:47:60:95:9b:59:7c:fe:
4a:97:88:8e:c1:3f:bb:01:9e:25:f2:41:31:25:35:
4a:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:6A:06:56:60:18:BE:76:60:02:A4:A5:99:4B:D7:21:25:02:29:AC
X509v3 Authority Key Identifier:
keyid:4E:4F:66:5D:46:D6:A2:AB:F0:52:1E:5C:B1:F7:C4:51:CA:33:7A:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tk9mXUbWoqvwUh5csffEUcozeoc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/270b89-7c47-4263-86a0-0073c2b7a7ee/1/Tk9mXUbWoqvwUh5csffEUcozeoc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/270b89-7c47-4263-86a0-0073c2b7a7ee/1/Tk9mXUbWoqvwUh5csffEUcozeoc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:ec:a1:93:3f:ae:21:d2:d9:26:e3:1c:cf:b0:e3:ee:6f:87:
f2:45:b1:62:b2:8b:91:1f:d6:0e:34:37:06:c7:90:90:2e:15:
30:d1:09:36:37:59:41:7a:82:6f:81:6f:c3:ee:bb:90:6f:64:
a0:5a:70:b1:d1:94:fe:3c:0f:75:89:16:a6:6a:62:5c:b1:f6:
fb:41:6a:2c:c3:5e:6a:b9:f8:ef:dd:37:71:8e:dc:94:53:e2:
e2:ef:27:d8:b9:63:18:20:5a:61:81:c7:a3:93:81:ca:d6:f2:
2f:39:85:ef:36:55:14:f2:e7:db:96:d3:ed:e7:d4:64:df:28:
0e:48:d9:67:61:8e:31:ef:69:d7:b0:79:1a:31:63:bd:2f:2e:
f9:d1:f8:b7:bc:65:18:9f:38:fd:52:f6:04:de:bf:81:27:65:
51:b9:fa:cb:e4:72:eb:04:66:21:d5:b5:dc:5d:cf:fd:35:ae:
3b:c2:e6:f8:08:7d:1b:35:1c:ec:ae:1b:9b:07:f3:1c:17:38:
e2:d3:6d:5a:6b:d7:0a:5e:63:45:44:9f:b0:2e:8e:3d:06:66:
67:55:d0:31:1a:ee:53:4d:ef:09:95:29:36:68:1e:42:50:7f:
71:97:86:d1:5f:75:79:f5:3c:57:bc:da:d8:ab:7b:02:bf:65:
38:70:7c:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:10:58 2025 by rpki-client