
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/485769-5835-47f4-a9ff-8ec68e7886e2/1/tI9Br9xglWj7Izj9sgstDEIrcjs.mft
File: tI9Br9xglWj7Izj9sgstDEIrcjs.mft (raw, json)
Hash identifier: cTOwv64CXYRbuFdWe2MRtOz0V5XH4LzZGnNfcb3dJIM=
Subject key identifier: A5:F5:1A:8E:19:DE:5E:29:CB:13:3B:D5:D0:7A:AE:04:48:47:1D:B3
Authority key identifier: B4:8F:41:AF:DC:60:95:68:FB:23:38:FD:B2:0B:2D:0C:42:2B:72:3B
Certificate issuer: /CN=b48f41afdc609568fb2338fdb20b2d0c422b723b
Certificate serial: 0199FAD7BFE576A0F31B6D2E0A0F261A4DE0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tI9Br9xglWj7Izj9sgstDEIrcjs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/485769-5835-47f4-a9ff-8ec68e7886e2/1/tI9Br9xglWj7Izj9sgstDEIrcjs.mft
Manifest number: 16E3
Signing time: Sun 19 Oct 2025 05:01:07 +0000
Manifest this update: Sun 19 Oct 2025 05:01:07 +0000
Manifest next update: Mon 20 Oct 2025 05:01:07 +0000
Files and hashes: 1: pA8DlYtcvRNA-jdEe_3R7YRB6rk.roa (hash: XB3O2NdSBoC9ldQGDUty/6gqx/qt/ZpvhUOCQP6iI1c=)
2: rg67AeqtMD0wJ1IIvMd4YeaFTyI.roa (hash: po3w7Qi8ZlRiTSE2vYAsVYJZWCbY0SnfvN8Hrjn9vnc=)
3: tI9Br9xglWj7Izj9sgstDEIrcjs.crl (hash: qeFv+vD25kHJkr0/WhpxWYoaFAWOqCCmjVmDfCHvYp0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/485769-5835-47f4-a9ff-8ec68e7886e2/1/tI9Br9xglWj7Izj9sgstDEIrcjs.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/485769-5835-47f4-a9ff-8ec68e7886e2/1/tI9Br9xglWj7Izj9sgstDEIrcjs.mft
rsync://rpki.ripe.net/repository/DEFAULT/tI9Br9xglWj7Izj9sgstDEIrcjs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 05:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fa:d7:bf:e5:76:a0:f3:1b:6d:2e:0a:0f:26:1a:4d:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b48f41afdc609568fb2338fdb20b2d0c422b723b
Validity
Not Before: Oct 19 05:01:07 2025 GMT
Not After : Oct 20 05:01:07 2025 GMT
Subject: CN=a5f51a8e19de5e29cb133bd5d07aae0448471db3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:32:ac:5c:ad:77:48:e7:8e:e4:67:04:72:95:
b0:bb:a7:07:bd:a0:4b:fb:3b:6c:9d:be:60:c9:2d:
70:21:ef:1a:a5:81:e6:92:d8:8c:d7:73:ff:bd:b4:
e5:c4:dd:05:8f:a8:c2:ba:77:2c:9b:11:6f:c3:26:
78:96:27:bb:d0:4d:46:84:f1:f4:d2:d5:c0:67:6e:
6e:21:46:25:b6:16:5a:dd:03:e9:36:d6:d4:4f:3c:
00:be:a9:9d:e4:de:1c:c6:c8:97:89:78:2b:9a:50:
30:00:f4:4a:a0:ff:07:04:70:17:c2:ca:c8:5f:57:
f5:d5:d7:58:e4:df:3b:8f:b6:53:7d:1d:c4:ab:e1:
ad:7a:05:d1:93:83:2d:dd:a8:6d:43:62:dc:5e:2d:
d5:9c:cb:a1:3d:94:2e:f8:2e:3a:83:24:56:db:80:
ae:08:ec:33:14:42:77:c3:23:a5:11:34:8b:ba:85:
4f:10:4c:5f:08:c6:33:3a:26:6d:d0:e1:21:db:37:
eb:f1:cc:f6:52:4b:6e:91:43:c6:04:74:60:2e:d8:
21:17:a3:42:68:c3:c5:61:0e:2f:dd:b6:be:60:85:
55:09:e6:d9:18:dd:16:1f:4b:8e:d7:8d:b5:f8:55:
d6:93:96:f5:15:37:4c:d7:0f:cd:db:2a:9e:2d:89:
55:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:F5:1A:8E:19:DE:5E:29:CB:13:3B:D5:D0:7A:AE:04:48:47:1D:B3
X509v3 Authority Key Identifier:
keyid:B4:8F:41:AF:DC:60:95:68:FB:23:38:FD:B2:0B:2D:0C:42:2B:72:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tI9Br9xglWj7Izj9sgstDEIrcjs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/485769-5835-47f4-a9ff-8ec68e7886e2/1/tI9Br9xglWj7Izj9sgstDEIrcjs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/485769-5835-47f4-a9ff-8ec68e7886e2/1/tI9Br9xglWj7Izj9sgstDEIrcjs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:79:4d:01:d2:b9:2b:0c:e3:1a:e0:63:29:df:3a:c2:1f:2b:
85:1a:ad:80:88:19:ab:ee:98:33:50:25:08:8b:ad:9d:24:96:
b2:16:07:c7:c4:be:d1:0d:fb:00:fb:22:47:9f:b5:0c:c7:cf:
f9:5f:42:63:75:9c:7c:ae:de:1e:ce:21:a2:76:70:61:bb:4d:
59:d8:e3:fa:1b:ca:fc:9e:a5:77:cc:dd:67:75:68:f0:4e:0c:
83:55:34:c5:06:81:ce:5e:b9:64:40:8c:43:0c:64:15:b1:f7:
ea:ea:8a:70:0e:f0:fa:d0:e1:f9:3f:a4:71:c5:b0:ff:31:66:
6a:23:63:73:95:1f:41:e4:4d:45:b0:a2:de:22:c1:76:e2:0b:
64:e9:da:ab:02:c9:97:d9:36:a7:1c:32:d0:e6:76:37:82:c3:
64:8a:9c:cc:f9:61:1e:53:6f:3f:e3:1c:bc:f6:94:01:0c:18:
24:22:df:ca:0b:2f:30:5b:d4:49:ce:50:37:d8:16:8a:f5:5e:
2c:8b:da:1d:81:27:45:ae:38:34:c0:d3:1b:eb:58:16:c5:f4:
f0:71:bd:53:1d:87:2e:3d:ec:f4:4d:62:5c:e3:97:fb:61:09:
e1:96:9c:84:55:6e:61:fc:34:e1:cc:7b:78:72:06:85:37:c0:
e1:3d:d0:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:07:12 2025 by rpki-client