Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/a5a6b3-3ec3-487e-aba0-b8b1e4b4ecb9/1/tSCiBPTgnMg6YljXqkT30vD6RKA.mft
File: tSCiBPTgnMg6YljXqkT30vD6RKA.mft (raw, json)
Hash identifier: lumjeERnvOuWFiJTKXSRK4vscSmImp66lO4WKJzB5vc=
Subject key identifier: DD:52:34:18:A3:A6:55:EF:EB:BD:16:13:31:06:F0:73:33:7D:47:B4
Authority key identifier: B5:20:A2:04:F4:E0:9C:C8:3A:62:58:D7:AA:44:F7:D2:F0:FA:44:A0
Certificate issuer: /CN=b520a204f4e09cc83a6258d7aa44f7d2f0fa44a0
Certificate serial: 0199FB45D52C4B36F125396F6C0C3D27A018
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tSCiBPTgnMg6YljXqkT30vD6RKA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/a5a6b3-3ec3-487e-aba0-b8b1e4b4ecb9/1/tSCiBPTgnMg6YljXqkT30vD6RKA.mft
Manifest number: 1152
Signing time: Sun 19 Oct 2025 07:01:21 +0000
Manifest this update: Sun 19 Oct 2025 07:01:21 +0000
Manifest next update: Mon 20 Oct 2025 07:01:21 +0000
Files and hashes: 1: 7oTB9A6lOtEjQEsvoA-hCkKE_kU.roa (hash: CgqHCnrNWT0vsnk0wl9rl++PdFLv2TYzmWCCrA7fBCY=)
2: MfO1xzaCGvzf-Tdk8sWipKC3t-8.roa (hash: TSPXY1leU0O4gZ6iWESlm1g1sCeRvbsOHxtBl16fH1g=)
3: tSCiBPTgnMg6YljXqkT30vD6RKA.crl (hash: PyjsUG4NuX/kHhY/mV247s2FzftU+C3IVc3wKnN6jdg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/a5a6b3-3ec3-487e-aba0-b8b1e4b4ecb9/1/tSCiBPTgnMg6YljXqkT30vD6RKA.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/a5a6b3-3ec3-487e-aba0-b8b1e4b4ecb9/1/tSCiBPTgnMg6YljXqkT30vD6RKA.mft
rsync://rpki.ripe.net/repository/DEFAULT/tSCiBPTgnMg6YljXqkT30vD6RKA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:45:d5:2c:4b:36:f1:25:39:6f:6c:0c:3d:27:a0:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b520a204f4e09cc83a6258d7aa44f7d2f0fa44a0
Validity
Not Before: Oct 19 07:01:21 2025 GMT
Not After : Oct 20 07:01:21 2025 GMT
Subject: CN=dd523418a3a655efebbd16133106f073337d47b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:10:72:af:dd:5c:18:6d:8f:80:5e:18:d7:47:
12:d7:e9:aa:ff:8b:53:46:06:1c:93:9b:09:f6:75:
3d:91:82:95:9f:69:bb:57:7e:8b:93:d6:d6:b0:19:
59:5b:d2:90:65:91:2d:23:39:89:a0:84:ba:d2:ea:
bc:0c:37:d3:01:44:88:95:3c:19:f7:d5:96:63:2a:
00:06:46:e8:7f:24:9e:25:10:3a:33:e4:01:55:1e:
c6:5a:6c:0d:80:87:5c:13:78:33:5f:4e:19:01:10:
98:72:5a:71:f7:03:ec:d1:c2:49:32:83:83:60:f0:
c9:69:87:c9:ad:cc:df:ae:1b:16:5f:59:dc:80:e4:
6b:31:de:30:58:7f:cd:ad:df:89:1c:61:9a:65:3a:
6b:5d:99:6a:4a:d5:bc:19:18:7b:7f:b2:af:e8:8c:
fb:a6:12:d0:4b:80:84:a6:37:02:e3:3c:5c:a0:34:
15:7d:72:5e:dd:00:0a:03:6c:f7:03:07:b9:bc:d4:
47:8a:98:21:5b:94:5a:ef:58:1e:39:fa:9c:f1:1a:
c5:89:70:61:6d:68:ec:5e:2a:83:4f:87:d5:a4:b9:
bc:3a:95:b7:bf:a0:ec:94:f4:f5:1f:45:8c:72:1b:
a0:02:59:1f:f2:3a:33:af:60:cc:dc:0a:98:77:40:
7d:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:52:34:18:A3:A6:55:EF:EB:BD:16:13:31:06:F0:73:33:7D:47:B4
X509v3 Authority Key Identifier:
keyid:B5:20:A2:04:F4:E0:9C:C8:3A:62:58:D7:AA:44:F7:D2:F0:FA:44:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tSCiBPTgnMg6YljXqkT30vD6RKA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/a5a6b3-3ec3-487e-aba0-b8b1e4b4ecb9/1/tSCiBPTgnMg6YljXqkT30vD6RKA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/a5a6b3-3ec3-487e-aba0-b8b1e4b4ecb9/1/tSCiBPTgnMg6YljXqkT30vD6RKA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:e7:59:75:97:05:39:7e:30:3f:bf:63:ed:dd:c5:d7:a7:a7:
08:31:05:d6:d8:93:19:e2:c2:e5:81:a6:20:2b:08:09:ea:a1:
33:14:cf:21:3f:08:6d:df:3d:d6:88:f4:68:7a:e8:61:d7:cd:
82:d6:7e:70:e5:65:26:cc:74:65:ab:7c:5d:54:cb:89:65:23:
d4:0f:ec:c6:0d:c6:d2:64:59:da:7a:92:0a:d5:55:08:fd:09:
86:39:0b:ba:70:08:d1:7c:87:9c:3a:43:9f:39:3d:83:bb:1a:
c4:89:37:62:f0:1e:b9:0c:02:f8:30:02:35:8b:1f:85:d1:71:
1b:d6:68:9e:86:52:ac:6b:1a:7c:6e:e5:02:e4:7a:8b:cb:2f:
cb:04:12:b7:2f:1c:e2:41:3f:b5:13:48:19:62:19:1a:7d:c4:
36:d1:50:0e:2f:5e:05:e4:be:62:56:ba:cb:e1:c0:d4:56:24:
95:ed:95:7d:08:c9:1c:c8:e4:ec:f3:81:fa:ac:60:9d:c2:fa:
64:c3:79:f9:8f:0d:34:e5:b1:99:e9:cb:4b:79:a6:91:78:57:
9b:6a:1f:3e:00:9a:16:47:cf:40:25:4d:3d:54:0c:5a:28:cd:
43:e0:f1:7b:d0:ae:03:ff:97:b2:de:8b:d7:cd:21:82:d3:29:
d4:42:99:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:25:58 2025 by rpki-client