
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/800eb6-868b-4a30-b402-4bce424723d9/1/tBSwm-6rkF_0HmgTJWBUsYIpQpc.mft
File: tBSwm-6rkF_0HmgTJWBUsYIpQpc.mft (raw, json)
Hash identifier: Prc3mV0lNypBUgOg5gErdy9P9/+VQcyawSctf+jjErc=
Subject key identifier: 1A:12:D2:40:36:F9:21:BB:53:C5:04:E5:A5:96:85:F9:C0:E2:AF:EF
Authority key identifier: B4:14:B0:9B:EE:AB:90:5F:F4:1E:68:13:25:60:54:B1:82:29:42:97
Certificate issuer: /CN=b414b09beeab905ff41e6813256054b182294297
Certificate serial: 0199FBEC05320F34FD596E09FD0FCADB24DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tBSwm-6rkF_0HmgTJWBUsYIpQpc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/800eb6-868b-4a30-b402-4bce424723d9/1/tBSwm-6rkF_0HmgTJWBUsYIpQpc.mft
Manifest number: 0C43
Signing time: Sun 19 Oct 2025 10:02:53 +0000
Manifest this update: Sun 19 Oct 2025 10:02:53 +0000
Manifest next update: Mon 20 Oct 2025 10:02:53 +0000
Files and hashes: 1: 9ie56jozGctsQMPeP2PnRQlQSUc.roa (hash: 5kDUdIA6jw7l4e4ssTIC7py/rMtiw/D++uBoc2CI0Qo=)
2: mT-8_dVnmXbsJKgoN35LXNaAywM.roa (hash: o5cN5KMUIwn/VQVHMV9OAvcCU4Z7KPV9dR9Yvh1kUlg=)
3: tBSwm-6rkF_0HmgTJWBUsYIpQpc.crl (hash: eK2X4XFaai+t95isN1OBRFgRMB3aRyglOZRGZFNKKCc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/800eb6-868b-4a30-b402-4bce424723d9/1/tBSwm-6rkF_0HmgTJWBUsYIpQpc.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/800eb6-868b-4a30-b402-4bce424723d9/1/tBSwm-6rkF_0HmgTJWBUsYIpQpc.mft
rsync://rpki.ripe.net/repository/DEFAULT/tBSwm-6rkF_0HmgTJWBUsYIpQpc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ec:05:32:0f:34:fd:59:6e:09:fd:0f:ca:db:24:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b414b09beeab905ff41e6813256054b182294297
Validity
Not Before: Oct 19 10:02:53 2025 GMT
Not After : Oct 20 10:02:53 2025 GMT
Subject: CN=1a12d24036f921bb53c504e5a59685f9c0e2afef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:02:a5:fc:91:4d:db:d4:7c:39:6b:9c:ba:ee:
11:7a:b7:ba:3d:0f:43:6c:4e:fd:3f:0b:3e:4c:38:
8e:2b:e6:bd:c5:4a:b3:2c:82:26:ba:04:5d:47:a0:
e2:3c:92:03:6e:9d:02:37:2b:d8:f7:09:91:bc:3e:
9f:1f:7e:8f:74:87:5c:0e:34:b1:02:79:8d:77:9e:
4a:db:24:2f:6f:98:55:5b:c4:01:0c:11:a9:2e:3f:
f9:b7:30:39:91:3c:3c:e0:62:4b:b7:2d:4f:46:7a:
0a:85:a0:13:27:b1:8f:97:2b:73:b3:1f:2b:a1:58:
ed:84:d6:15:c8:ff:ec:7e:27:18:02:8d:0b:05:d7:
1d:8e:7e:4d:63:92:19:31:2d:be:5a:31:8e:0f:ba:
d3:7c:46:c9:30:9e:ac:49:34:1f:50:f9:33:cb:6a:
0c:3e:42:47:30:56:af:9e:25:cb:ca:06:2c:78:85:
35:95:1f:4a:06:71:5f:f0:68:66:83:67:8b:50:65:
89:51:e3:19:c4:ab:99:c2:7c:ab:ce:b1:4d:68:81:
af:6d:df:82:9e:ac:68:8c:f4:19:84:cd:2e:e0:d2:
ee:6f:66:7b:a1:4e:1b:b0:ef:9d:e8:e4:26:22:5d:
15:8e:89:9d:46:eb:f4:62:73:f7:a3:7f:96:91:26:
2b:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:12:D2:40:36:F9:21:BB:53:C5:04:E5:A5:96:85:F9:C0:E2:AF:EF
X509v3 Authority Key Identifier:
keyid:B4:14:B0:9B:EE:AB:90:5F:F4:1E:68:13:25:60:54:B1:82:29:42:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tBSwm-6rkF_0HmgTJWBUsYIpQpc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/800eb6-868b-4a30-b402-4bce424723d9/1/tBSwm-6rkF_0HmgTJWBUsYIpQpc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/800eb6-868b-4a30-b402-4bce424723d9/1/tBSwm-6rkF_0HmgTJWBUsYIpQpc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:f6:18:49:a4:e9:63:4b:32:1f:44:12:3f:91:d0:81:19:76:
55:8f:18:c6:10:91:84:c3:15:53:3c:4b:6f:09:f2:b8:9f:5d:
42:69:8b:94:d1:ad:14:7a:7b:54:1d:e4:6d:13:d9:2e:3e:75:
63:2e:03:73:12:6f:60:bd:5f:48:6a:05:a2:51:8d:dd:1c:09:
f9:95:03:82:d0:9e:34:6d:1d:3f:30:61:80:44:ac:29:a5:a9:
23:cb:10:02:93:ed:e8:a0:4f:50:75:0e:bf:b5:72:42:d8:92:
54:c4:70:6e:23:40:8d:6c:fe:ab:da:5d:a7:cc:b4:38:2f:90:
5c:e0:00:e7:2c:c1:4c:f8:fc:a8:fc:ad:77:f8:ea:40:7c:32:
fc:14:08:43:6d:8f:be:04:55:c1:91:60:6b:cd:2c:c4:65:8e:
fb:01:b3:6c:7c:f2:9a:a0:b5:e9:4a:4e:b8:69:05:71:26:70:
57:44:a0:11:e6:f3:35:96:e6:cd:10:08:68:ca:e5:76:87:bb:
ce:5d:6f:16:0c:e5:6e:2f:a7:71:ff:3d:a1:4f:9e:bd:d4:46:
ae:89:5f:4e:4a:5b:de:39:0f:48:d5:bc:07:9a:f1:97:5d:c6:
89:ad:da:e3:e3:75:32:92:70:04:8a:3f:0f:3a:5a:bb:87:14:
ec:64:86:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:12:29 2025 by rpki-client