Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/4d77d9-b0a3-48ad-aa2a-1c6ee5bbeb66/1/T5CKbYaKuem9sQRy--wxyWbpQnQ.mft
File: T5CKbYaKuem9sQRy--wxyWbpQnQ.mft (raw, json)
Hash identifier: +BUemm9T4u0e1qlgE5Ei+UbZE8mHAOUnZMPQyUXJjvE=
Subject key identifier: 19:B7:44:47:7F:A4:1E:6C:A6:E1:CD:F8:CE:44:53:7E:5F:C8:13:EC
Authority key identifier: 4F:90:8A:6D:86:8A:B9:E9:BD:B1:04:72:FB:EC:31:C9:66:E9:42:74
Certificate issuer: /CN=4f908a6d868ab9e9bdb10472fbec31c966e94274
Certificate serial: 0199FDD8F0C5D1638EFA0592CBF7BD06ECF2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T5CKbYaKuem9sQRy--wxyWbpQnQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/4d77d9-b0a3-48ad-aa2a-1c6ee5bbeb66/1/T5CKbYaKuem9sQRy--wxyWbpQnQ.mft
Manifest number: 16E5
Signing time: Sun 19 Oct 2025 19:01:16 +0000
Manifest this update: Sun 19 Oct 2025 19:01:16 +0000
Manifest next update: Mon 20 Oct 2025 19:01:16 +0000
Files and hashes: 1: N4O1f1HdN3aaUng8Ezj5qGov-Js.roa (hash: sfcsuhZVAT4PlLRFtuXFGetuMIfE20AC6DkhL2YQizc=)
2: T5CKbYaKuem9sQRy--wxyWbpQnQ.crl (hash: tkYSgGJgj/flCtHdSLDWNO2BUYX5W61DTIDt1cB4cHs=)
3: _UFtjPZkJY8PTrDfIiY7fIJkM78.roa (hash: 8nSnhnVWRfLLWBF2I/d3mZE5/5hk3aPfKW0pXvBb3bk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/4d77d9-b0a3-48ad-aa2a-1c6ee5bbeb66/1/T5CKbYaKuem9sQRy--wxyWbpQnQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/4d77d9-b0a3-48ad-aa2a-1c6ee5bbeb66/1/T5CKbYaKuem9sQRy--wxyWbpQnQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/T5CKbYaKuem9sQRy--wxyWbpQnQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d8:f0:c5:d1:63:8e:fa:05:92:cb:f7:bd:06:ec:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f908a6d868ab9e9bdb10472fbec31c966e94274
Validity
Not Before: Oct 19 19:01:16 2025 GMT
Not After : Oct 20 19:01:16 2025 GMT
Subject: CN=19b744477fa41e6ca6e1cdf8ce44537e5fc813ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:7c:39:bf:31:26:5e:a1:87:48:be:b7:8d:cf:
bd:b1:7b:6d:90:81:3e:21:d6:a3:1f:b6:e5:a2:17:
1e:81:7e:f5:83:28:96:fb:d3:d4:f9:55:55:26:69:
87:a7:a8:fc:71:6f:f7:26:44:1e:67:c0:c8:38:1b:
5a:13:04:ed:f2:d5:d7:9b:91:b1:ac:97:0e:9f:35:
9a:53:70:4d:af:37:96:e9:7e:61:30:0d:77:46:61:
56:83:2e:9e:03:eb:ba:94:92:24:d7:1a:d0:ba:9b:
c2:ab:fb:92:52:1d:16:0f:dd:d7:3c:25:76:68:dd:
0f:d5:db:e8:89:51:57:dc:01:b9:39:d7:86:7c:7a:
ea:0b:25:e0:11:86:a4:ea:28:bc:e0:f3:43:1d:2e:
9d:bb:95:e2:ee:bd:83:33:e4:ee:21:1e:5b:30:e3:
59:bd:f7:2c:2f:95:52:ce:d9:cd:a0:68:18:3c:56:
87:d5:90:8c:c7:ea:26:95:27:1f:da:d7:3e:f6:c0:
38:f7:4b:1b:76:12:2b:67:ce:ff:86:26:d4:6a:31:
be:f8:91:37:0a:33:be:56:be:6a:78:22:d6:19:a3:
86:df:b9:0e:a1:8a:87:ac:14:0c:6f:91:fe:3b:64:
34:e4:94:3f:84:e5:21:dd:99:69:d6:a2:ca:55:b8:
0c:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:B7:44:47:7F:A4:1E:6C:A6:E1:CD:F8:CE:44:53:7E:5F:C8:13:EC
X509v3 Authority Key Identifier:
keyid:4F:90:8A:6D:86:8A:B9:E9:BD:B1:04:72:FB:EC:31:C9:66:E9:42:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T5CKbYaKuem9sQRy--wxyWbpQnQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/4d77d9-b0a3-48ad-aa2a-1c6ee5bbeb66/1/T5CKbYaKuem9sQRy--wxyWbpQnQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/4d77d9-b0a3-48ad-aa2a-1c6ee5bbeb66/1/T5CKbYaKuem9sQRy--wxyWbpQnQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:cf:04:2d:57:ca:df:03:7f:d1:d3:62:13:92:e7:f5:73:69:
13:ab:bb:22:0e:bd:89:04:47:8f:84:f9:b5:60:53:38:64:40:
1e:6d:60:fd:40:25:81:ff:f5:af:4e:94:10:2e:04:59:12:b2:
f6:74:bd:c8:de:75:db:9f:a5:c6:ab:17:4d:f1:30:d2:bd:8b:
2d:1d:a7:0e:cc:73:e1:33:ce:cd:ee:71:64:d3:99:b4:02:98:
d3:4e:a4:62:41:51:23:b6:90:35:e2:82:50:16:e4:18:4f:4b:
6e:e9:8a:2f:66:e3:9e:9a:65:c8:62:ce:78:41:69:50:6a:98:
5b:73:c6:dd:33:20:f3:00:01:dd:e0:04:04:fa:2a:68:94:bb:
fe:04:e2:f3:14:3e:58:64:2a:62:e0:43:44:90:3c:03:e1:7a:
9b:90:94:db:68:d8:f6:f0:65:6b:48:8c:37:3b:12:66:37:bd:
8d:72:14:1d:4d:9a:85:3a:61:f0:23:5f:02:3d:56:b6:f0:af:
2a:88:cc:b3:96:8b:c2:0e:3b:fa:65:b4:e9:1f:95:01:86:a4:
76:58:4b:46:76:ac:a4:8e:9f:7f:fd:6b:90:05:dc:62:4e:89:
09:23:b3:d9:53:93:fd:73:d6:fb:2c:51:a1:f6:e2:32:1d:a0:
7e:92:7e:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:48:59 2025 by rpki-client