Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/18c7dd-241b-4b92-8ebf-77794fbfd2e4/1/TIEnPcsDw0V7eSUL4Qnhml508P0.mft
File: TIEnPcsDw0V7eSUL4Qnhml508P0.mft (raw, json)
Hash identifier: mJF9ekzwDKVjQOqlaF2wCHDI/UFFgqktNmuA/UBNkcM=
Subject key identifier: A4:7F:51:6B:69:0B:12:0F:A6:C4:82:0C:49:B5:33:8F:B3:8A:E9:68
Authority key identifier: 4C:81:27:3D:CB:03:C3:45:7B:79:25:0B:E1:09:E1:9A:5E:74:F0:FD
Certificate issuer: /CN=4c81273dcb03c3457b79250be109e19a5e74f0fd
Certificate serial: 019A003591DE6625549360BEBA58E3DC4465
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TIEnPcsDw0V7eSUL4Qnhml508P0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/18c7dd-241b-4b92-8ebf-77794fbfd2e4/1/TIEnPcsDw0V7eSUL4Qnhml508P0.mft
Manifest number: 08DE
Signing time: Mon 20 Oct 2025 06:01:42 +0000
Manifest this update: Mon 20 Oct 2025 06:01:42 +0000
Manifest next update: Tue 21 Oct 2025 06:01:42 +0000
Files and hashes: 1: 09h3HegSzHCmBBBWGcTWBjEqm-k.roa (hash: e2MlTegDWzHw8Qc0vpcn4p75pDoA+fAb45rhwd6sZ2c=)
2: 2H-bW8UZI3iJgi7-SD7ICzn-6yE.roa (hash: 6BFAD/kuUp8ggYQ5Z6VEt8Ffgu906xvZpM65LYf/A40=)
3: Nrmj7OZr3VRqV-mPGEt59p2belk.roa (hash: qKP+VMvb5X+LyJaWae51YmN4HE54Q3kw6hy8LaIxSiU=)
4: TIEnPcsDw0V7eSUL4Qnhml508P0.crl (hash: eL5lqQKouTxm2htos/zR05fIEBdJ+tYQaMK4HizGTBA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/18c7dd-241b-4b92-8ebf-77794fbfd2e4/1/TIEnPcsDw0V7eSUL4Qnhml508P0.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/18c7dd-241b-4b92-8ebf-77794fbfd2e4/1/TIEnPcsDw0V7eSUL4Qnhml508P0.mft
rsync://rpki.ripe.net/repository/DEFAULT/TIEnPcsDw0V7eSUL4Qnhml508P0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:00:35:91:de:66:25:54:93:60:be:ba:58:e3:dc:44:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c81273dcb03c3457b79250be109e19a5e74f0fd
Validity
Not Before: Oct 20 06:01:42 2025 GMT
Not After : Oct 21 06:01:42 2025 GMT
Subject: CN=a47f516b690b120fa6c4820c49b5338fb38ae968
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:92:f4:7c:29:70:31:a6:1e:bc:76:7d:a7:f2:
4d:4a:80:81:fa:44:52:c3:1b:04:68:8d:91:60:f9:
c1:69:d4:43:09:a2:3f:9e:86:6e:10:e3:fc:53:4e:
8b:96:0b:54:c7:99:39:31:cc:87:ff:7a:39:3c:b0:
e8:49:4b:81:85:87:96:be:56:24:9e:04:d1:d0:f1:
de:97:80:3e:08:d3:49:23:2f:39:ae:ee:a9:a8:ea:
22:1c:99:55:51:5a:7d:91:c2:1d:42:7d:05:59:40:
3d:dd:a7:d8:16:b7:55:53:df:b7:98:d2:14:6c:3b:
2b:de:07:3f:14:37:38:a1:a6:59:4c:11:25:fe:c4:
87:d5:d5:72:c9:c1:c0:ed:f4:ef:7e:09:1e:64:82:
05:3a:4d:a9:f9:10:75:c9:ad:b7:7e:be:4f:0a:c6:
71:03:0e:31:e5:b7:a6:e5:df:27:e0:c3:51:1e:6c:
f9:cc:50:8e:83:ff:8e:9c:11:b5:51:87:9c:39:bf:
35:eb:66:5e:d3:c3:bf:5e:b9:99:c2:40:dd:9d:b8:
36:9b:1f:ce:c3:8e:1e:d4:73:29:57:0a:e4:85:34:
7a:b5:d7:0e:5b:9a:93:60:f4:a7:ba:77:1c:31:9c:
13:2f:28:84:de:ba:56:c2:e8:7b:a8:c1:b5:2c:5a:
a8:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:7F:51:6B:69:0B:12:0F:A6:C4:82:0C:49:B5:33:8F:B3:8A:E9:68
X509v3 Authority Key Identifier:
keyid:4C:81:27:3D:CB:03:C3:45:7B:79:25:0B:E1:09:E1:9A:5E:74:F0:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TIEnPcsDw0V7eSUL4Qnhml508P0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/18c7dd-241b-4b92-8ebf-77794fbfd2e4/1/TIEnPcsDw0V7eSUL4Qnhml508P0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/18c7dd-241b-4b92-8ebf-77794fbfd2e4/1/TIEnPcsDw0V7eSUL4Qnhml508P0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:59:ca:28:d1:4c:4a:61:3f:d1:b0:32:8c:b5:a3:74:02:2b:
6f:21:be:90:82:fc:c5:01:33:fb:7d:c7:3c:43:2b:d3:88:28:
ea:bd:92:df:54:49:44:42:32:98:09:d4:23:43:7e:08:32:24:
3f:62:c3:0f:31:de:4d:d2:3e:cc:a9:9a:fd:38:59:a9:5a:7a:
3f:25:60:ed:0a:81:05:06:a6:99:1b:ec:98:d5:67:a1:b1:7f:
78:f4:b2:49:33:89:24:9b:61:3b:c5:14:b0:b7:92:1b:50:83:
ef:bf:4b:16:6d:f6:3b:e4:9f:fe:7f:1e:fd:a3:6e:8e:9a:d0:
49:34:83:61:20:9f:dc:d9:64:a9:62:1e:ec:66:09:76:aa:1e:
4d:5a:f4:2f:96:71:39:b0:73:d3:34:9a:16:b8:e2:b6:56:d1:
b8:b0:18:a5:d6:d2:f6:0e:74:99:93:51:96:77:e4:79:1b:31:
57:20:0d:9c:fa:85:a0:52:74:6a:90:21:ed:37:7a:7f:67:29:
2c:3e:1e:18:45:64:55:89:a4:52:e9:0a:7f:9e:b8:fc:81:c2:
3c:8a:42:fd:c0:c4:d5:64:52:23:49:3b:9b:7c:35:63:3a:7e:
55:88:7d:ed:3a:09:c9:80:45:14:d0:3f:54:a8:9d:07:62:52:
85:48:20:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 09:01:49 2025 by rpki-client