Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/264934-2a7f-428b-afe5-81d214edf298/1/tN1tZY4UVx6Dn3gT2jHyIXQigY4.mft
File: tN1tZY4UVx6Dn3gT2jHyIXQigY4.mft (raw, json)
Hash identifier: OSWMkHqa6dK1GRTnRqh8Rg7o4QAPtJptc89TJ1fR3ls=
Subject key identifier: BA:E5:10:DF:0D:F6:60:B7:18:1D:B9:FB:AC:48:F9:1C:92:7D:21:99
Authority key identifier: B4:DD:6D:65:8E:14:57:1E:83:9F:78:13:DA:31:F2:21:74:22:81:8E
Certificate issuer: /CN=b4dd6d658e14571e839f7813da31f2217422818e
Certificate serial: 0199FB45B7B31A62B338C2D6A22290E753E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tN1tZY4UVx6Dn3gT2jHyIXQigY4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/264934-2a7f-428b-afe5-81d214edf298/1/tN1tZY4UVx6Dn3gT2jHyIXQigY4.mft
Manifest number: 16E2
Signing time: Sun 19 Oct 2025 07:01:14 +0000
Manifest this update: Sun 19 Oct 2025 07:01:14 +0000
Manifest next update: Mon 20 Oct 2025 07:01:14 +0000
Files and hashes: 1: i7TTR0PMX6DAq8x2EEX7tvYEy2w.roa (hash: iWmz0ZT2uDCkIA/K5JDubPnWXPlf7zxHizjmswntW2Y=)
2: tN1tZY4UVx6Dn3gT2jHyIXQigY4.crl (hash: DQ2AYPf322f27n5gSBlq+YGh5PsCmTkPSGBYXf4cUmM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/264934-2a7f-428b-afe5-81d214edf298/1/tN1tZY4UVx6Dn3gT2jHyIXQigY4.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/264934-2a7f-428b-afe5-81d214edf298/1/tN1tZY4UVx6Dn3gT2jHyIXQigY4.mft
rsync://rpki.ripe.net/repository/DEFAULT/tN1tZY4UVx6Dn3gT2jHyIXQigY4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:45:b7:b3:1a:62:b3:38:c2:d6:a2:22:90:e7:53:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4dd6d658e14571e839f7813da31f2217422818e
Validity
Not Before: Oct 19 07:01:14 2025 GMT
Not After : Oct 20 07:01:14 2025 GMT
Subject: CN=bae510df0df660b7181db9fbac48f91c927d2199
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:05:0f:39:5c:f9:bb:ee:47:b6:b4:ee:4c:7c:
36:31:8c:61:4a:89:9d:d4:30:d4:2f:59:34:19:c1:
19:eb:1e:d3:7b:f9:e2:89:b9:c0:c5:63:85:9b:78:
39:9e:58:a0:0e:fd:ad:a9:c3:3e:6f:c9:ac:97:3d:
20:32:d7:e5:4e:ac:62:f0:b5:32:0a:bc:ad:ef:08:
af:1a:ca:ef:08:a8:3a:71:1b:ac:ce:6a:89:9c:e7:
0c:ff:08:5d:80:20:0a:72:40:fa:2d:83:dc:9c:c0:
5e:4c:aa:5e:17:46:ff:d6:11:6f:3b:1d:2a:18:b6:
91:de:38:70:61:1f:17:78:9c:92:46:b6:3d:de:dc:
6d:ea:a9:19:1b:5e:83:a6:88:12:67:d2:be:d5:8c:
06:30:fd:dc:cf:3b:27:23:c3:62:5a:87:8c:38:69:
4f:36:30:06:64:aa:59:37:07:08:ab:e3:fb:41:85:
a0:05:32:eb:dd:48:1f:8e:3e:0d:22:33:d6:d9:c5:
24:8a:60:bd:8e:0f:9d:59:58:57:03:ba:48:1c:ec:
5e:ab:fc:67:e1:92:a9:be:61:ad:01:e6:94:e1:97:
7e:47:50:d0:f6:dc:5e:57:69:69:18:74:ca:d2:5b:
95:5c:7e:71:b0:32:3e:81:a6:2f:bf:7f:bc:f7:95:
91:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:E5:10:DF:0D:F6:60:B7:18:1D:B9:FB:AC:48:F9:1C:92:7D:21:99
X509v3 Authority Key Identifier:
keyid:B4:DD:6D:65:8E:14:57:1E:83:9F:78:13:DA:31:F2:21:74:22:81:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tN1tZY4UVx6Dn3gT2jHyIXQigY4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/264934-2a7f-428b-afe5-81d214edf298/1/tN1tZY4UVx6Dn3gT2jHyIXQigY4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/264934-2a7f-428b-afe5-81d214edf298/1/tN1tZY4UVx6Dn3gT2jHyIXQigY4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:90:56:28:43:38:f2:8b:d9:4f:8b:e3:f3:4a:97:8f:a4:33:
7b:20:a0:b5:9c:b4:84:b3:3a:5e:80:61:f5:61:81:7d:8a:42:
f5:45:f1:33:9b:3c:d9:bb:5e:34:76:73:05:2d:d1:6c:50:5b:
1a:63:65:c4:2c:42:be:e4:bd:82:aa:75:ba:c2:4f:66:13:9b:
7b:01:02:92:d1:a0:a2:27:00:92:be:1a:d7:72:3b:c9:13:64:
70:2b:c8:2c:cc:ab:99:51:53:46:5b:8f:94:84:34:32:4c:82:
2d:d6:f3:0f:76:f4:eb:6a:d5:9b:ef:01:ae:dd:a7:11:67:cd:
0d:9e:ef:ab:dd:af:a3:17:a2:2d:7a:e0:fa:8a:f3:6d:79:00:
b4:5d:aa:4f:7a:a4:0c:66:cf:c1:31:22:bb:7c:7a:b3:f0:c9:
cf:93:5b:a2:d9:95:47:d1:48:6f:f9:19:a1:32:cd:c6:3f:4c:
a9:0e:ea:d3:ee:33:a3:07:93:4a:ec:ec:15:4f:3d:d6:94:6f:
c6:b5:a2:81:74:cc:6b:bb:f8:18:0d:b8:dd:53:2a:f1:1c:5d:
0a:ed:82:5f:1c:b5:d1:fd:f8:ea:93:0a:07:24:4b:9b:3b:08:
ce:dc:a7:0c:76:dd:c9:a3:dc:e3:dc:06:52:80:61:57:e2:42:
e1:b0:85:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:43:22 2025 by rpki-client