Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/aca790-6329-414a-bed5-bad2cb480912/1/Tg8xxu_bmkRbjxcvC-Df1RQr4AA.mft
File: Tg8xxu_bmkRbjxcvC-Df1RQr4AA.mft (raw, json)
Hash identifier: LIq0JIe7B1iMSQUId/Rn+/nDHnWvKCu+25gM3GzDtls=
Subject key identifier: 52:CE:9C:A6:3C:0C:45:BB:E2:23:02:51:00:01:0A:B3:F7:E6:38:2A
Authority key identifier: 4E:0F:31:C6:EF:DB:9A:44:5B:8F:17:2F:0B:E0:DF:D5:14:2B:E0:00
Certificate issuer: /CN=4e0f31c6efdb9a445b8f172f0be0dfd5142be000
Certificate serial: 0199FF598263FC35FAE2D02A0403B57D3859
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tg8xxu_bmkRbjxcvC-Df1RQr4AA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/aca790-6329-414a-bed5-bad2cb480912/1/Tg8xxu_bmkRbjxcvC-Df1RQr4AA.mft
Manifest number: FF
Signing time: Mon 20 Oct 2025 02:01:20 +0000
Manifest this update: Mon 20 Oct 2025 02:01:20 +0000
Manifest next update: Tue 21 Oct 2025 02:01:20 +0000
Files and hashes: 1: 1-U8-4zu6FwPD_h-JBtHqluBUugc.roa (hash: B3V6UvPy+Yv+8toI+28gvW2unDO4YgNU77Me0s0gt9U=)
2: Tg8xxu_bmkRbjxcvC-Df1RQr4AA.crl (hash: duR5fGKgcPnwKhfmGwXi0+VyTGDElGFdy1SH7CMUBT8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/aca790-6329-414a-bed5-bad2cb480912/1/Tg8xxu_bmkRbjxcvC-Df1RQr4AA.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/aca790-6329-414a-bed5-bad2cb480912/1/Tg8xxu_bmkRbjxcvC-Df1RQr4AA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Tg8xxu_bmkRbjxcvC-Df1RQr4AA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 02:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:59:82:63:fc:35:fa:e2:d0:2a:04:03:b5:7d:38:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e0f31c6efdb9a445b8f172f0be0dfd5142be000
Validity
Not Before: Oct 20 02:01:20 2025 GMT
Not After : Oct 21 02:01:20 2025 GMT
Subject: CN=52ce9ca63c0c45bbe223025100010ab3f7e6382a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:fb:de:62:5a:83:c6:2e:e3:39:15:1d:60:fb:
75:88:c5:37:8a:5a:d0:63:48:07:f4:91:24:82:90:
69:38:62:e2:63:c7:e5:3c:8f:5c:33:ca:4b:1a:5d:
2c:54:71:6d:39:b7:66:bf:70:d5:69:04:ef:6f:ac:
d0:fa:ba:2f:e2:09:8b:1a:ff:db:16:93:89:04:f1:
fe:43:b0:0b:84:b5:84:9d:84:03:bc:32:cc:d4:4c:
1a:e8:a1:0e:ce:21:2a:ba:bd:15:df:74:c1:62:a4:
76:3b:24:91:c1:f4:9b:76:d4:fd:b2:4f:ba:a5:ea:
84:93:50:cb:ac:21:ed:39:ad:b8:8d:ea:8f:90:d9:
d7:fc:0e:56:63:02:f4:60:bb:4c:9d:cd:36:60:de:
84:c7:99:1d:9c:fa:e8:37:24:b5:62:ad:73:70:8f:
cf:6b:72:ae:1c:e0:4a:c7:de:25:80:64:11:ae:5e:
ac:69:04:d6:36:45:c3:85:2e:85:31:36:ba:f9:4a:
2f:42:53:1c:c2:4a:af:b6:3c:c6:4e:2c:8c:78:a1:
0e:92:33:c3:83:ff:b6:e6:ce:95:81:ec:08:c6:c9:
7e:ab:8e:3a:06:1d:1b:10:ef:8f:30:44:23:6d:28:
36:c0:ff:7a:f4:4d:d6:94:95:0d:a0:f9:31:d0:88:
70:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:CE:9C:A6:3C:0C:45:BB:E2:23:02:51:00:01:0A:B3:F7:E6:38:2A
X509v3 Authority Key Identifier:
keyid:4E:0F:31:C6:EF:DB:9A:44:5B:8F:17:2F:0B:E0:DF:D5:14:2B:E0:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tg8xxu_bmkRbjxcvC-Df1RQr4AA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/aca790-6329-414a-bed5-bad2cb480912/1/Tg8xxu_bmkRbjxcvC-Df1RQr4AA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/aca790-6329-414a-bed5-bad2cb480912/1/Tg8xxu_bmkRbjxcvC-Df1RQr4AA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:41:1d:69:4a:5a:19:15:d1:15:af:a4:75:b7:ee:3c:05:6f:
7f:00:9a:6e:04:d4:01:48:c3:9d:d4:8f:17:23:21:a6:98:2d:
48:46:c7:9c:81:ab:1a:00:6d:95:18:11:86:ab:bb:a5:47:64:
e2:82:b2:87:c2:83:a4:c7:ff:42:57:6f:b0:1e:25:0e:fa:dc:
11:2c:e9:cd:5b:46:f5:04:d7:96:f9:cd:6d:f3:80:64:c1:bb:
68:30:70:dc:71:05:c7:e5:df:48:37:2c:30:1e:92:f7:c2:43:
46:29:5a:08:a2:51:78:18:a6:d0:59:e8:d0:9f:94:27:5f:12:
1e:65:77:98:80:37:27:1e:ad:d6:8d:d1:03:ec:2c:76:48:56:
fd:05:95:de:fc:dc:31:40:e0:81:62:87:7e:90:ac:64:d4:de:
1b:24:bd:34:c8:05:e7:3c:1a:72:27:d5:71:4f:4a:52:a7:78:
9d:bb:79:76:ec:1a:8e:d7:85:0b:64:b8:c6:a4:72:b1:39:b4:
32:38:fa:d6:62:70:59:ff:3c:05:20:a0:24:a1:7e:ab:db:19:
df:49:f9:3a:3f:13:4c:fd:7d:b3:ed:0d:54:ea:a3:79:f7:93:
c5:db:83:27:18:5f:3d:e7:5a:d4:1d:d6:15:b7:78:1b:fa:43:
27:1a:10:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 11:32:45 2025 by rpki-client