Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/c3a85d-9d0b-4562-9238-46ee0cd7fcba/1/TsoQXOSvbCHNQp6ZLQbqfQbYpW0.mft
File: TsoQXOSvbCHNQp6ZLQbqfQbYpW0.mft (raw, json)
Hash identifier: wayi8ToLZvIDjYMHQZc5uQ/msCSxHVwHpxccGeYVwhU=
Subject key identifier: 1D:41:EA:CA:48:3A:CA:7C:30:45:CB:4C:6F:AC:E6:99:29:B0:04:5C
Authority key identifier: 4E:CA:10:5C:E4:AF:6C:21:CD:42:9E:99:2D:06:EA:7D:06:D8:A5:6D
Certificate issuer: /CN=4eca105ce4af6c21cd429e992d06ea7d06d8a56d
Certificate serial: 0199FBB371FEEA4889A451561948E5C31A00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TsoQXOSvbCHNQp6ZLQbqfQbYpW0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/c3a85d-9d0b-4562-9238-46ee0cd7fcba/1/TsoQXOSvbCHNQp6ZLQbqfQbYpW0.mft
Manifest number: 16E5
Signing time: Sun 19 Oct 2025 09:01:05 +0000
Manifest this update: Sun 19 Oct 2025 09:01:05 +0000
Manifest next update: Mon 20 Oct 2025 09:01:05 +0000
Files and hashes: 1: AuQnPlvYaXKRlM4K_qYnSQH8XhU.roa (hash: qvJ/L4CGhxXYThfrwcSRz9uge4t0blzZ120bzRELDv8=)
2: F7DtnHMe2aPaEVwgJdRXETJ3B3E.roa (hash: MXWzMDDGEU1JVdMLECcVtcWDfSvCJBYg9H2NNF7s8es=)
3: NT96ZXytZXeLYG8nYXbccb_AzMM.roa (hash: jF7i9U0X2AT56VYqylel02ci97XBnH5+7EoAI42ntOM=)
4: TsoQXOSvbCHNQp6ZLQbqfQbYpW0.crl (hash: t+zFxs0Sx+tNZzpuJohW68w/ffW72DbnN8mW0Jabt3U=)
5: dZ8FONS7KKnXtPOWC1aUQDIHQr4.roa (hash: eYi/BgNAuN/BBQLuz4zrndBhjJKwJ84q4OAoqSVG8XI=)
6: kw0uZTx7n5NT55NNgp7YJmoV9Go.roa (hash: 8XlRvDMZFDhRr5qjjN+VGMeejBbNLMwpbYD6/C4LFwY=)
7: mLDvK3-bwZrItlCvgdik3bR3f2M.roa (hash: YyM0oKefpsy5Jzp3sMVhcN2qGFNdHn75iID1HMnlHcs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/c3a85d-9d0b-4562-9238-46ee0cd7fcba/1/TsoQXOSvbCHNQp6ZLQbqfQbYpW0.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/c3a85d-9d0b-4562-9238-46ee0cd7fcba/1/TsoQXOSvbCHNQp6ZLQbqfQbYpW0.mft
rsync://rpki.ripe.net/repository/DEFAULT/TsoQXOSvbCHNQp6ZLQbqfQbYpW0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:b3:71:fe:ea:48:89:a4:51:56:19:48:e5:c3:1a:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4eca105ce4af6c21cd429e992d06ea7d06d8a56d
Validity
Not Before: Oct 19 09:01:05 2025 GMT
Not After : Oct 20 09:01:05 2025 GMT
Subject: CN=1d41eaca483aca7c3045cb4c6face69929b0045c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:b5:ad:4a:c5:ba:58:f3:a9:f1:46:67:c9:1a:
89:50:a2:e9:f3:3c:29:95:52:3d:fc:7d:15:fc:38:
f6:9e:0e:85:72:c8:49:6f:76:a8:73:29:3a:68:c0:
7e:49:69:79:0d:fe:28:13:28:45:45:3b:48:d1:0c:
f3:c5:7a:d9:83:9e:53:9a:e9:f1:5f:fd:4c:80:39:
cb:22:3b:04:01:32:3e:78:87:0f:65:73:ba:a7:5a:
89:d6:f7:b3:4e:5c:6a:33:94:b2:6e:cd:e1:7e:43:
17:44:4b:9f:8f:81:be:ce:af:5a:66:52:b2:e7:1d:
07:9b:5a:17:a8:2b:80:39:53:ed:17:b5:71:09:5f:
9c:29:04:75:5e:0a:c2:80:1f:70:fe:f8:21:48:1a:
97:5c:80:ce:57:ae:5f:20:63:23:ac:41:34:c2:bd:
bd:1a:96:57:c5:c1:67:55:38:1f:65:ba:e1:3d:c1:
d4:89:0d:a9:b2:90:6d:06:ea:0a:85:2d:b8:e2:f3:
30:4e:1d:d7:62:66:5d:86:56:13:3e:ad:16:49:4a:
2e:b2:56:7c:e2:ae:fb:0a:73:2b:54:d0:2e:09:e5:
0d:cb:be:d7:28:b9:88:24:42:d2:7d:35:df:b7:83:
a9:0e:86:7e:7c:d3:49:30:b6:f5:54:54:12:20:e4:
16:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:41:EA:CA:48:3A:CA:7C:30:45:CB:4C:6F:AC:E6:99:29:B0:04:5C
X509v3 Authority Key Identifier:
keyid:4E:CA:10:5C:E4:AF:6C:21:CD:42:9E:99:2D:06:EA:7D:06:D8:A5:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TsoQXOSvbCHNQp6ZLQbqfQbYpW0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/c3a85d-9d0b-4562-9238-46ee0cd7fcba/1/TsoQXOSvbCHNQp6ZLQbqfQbYpW0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/c3a85d-9d0b-4562-9238-46ee0cd7fcba/1/TsoQXOSvbCHNQp6ZLQbqfQbYpW0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:c2:95:04:4c:b6:ac:2f:50:d9:91:39:a1:22:49:2a:5a:96:
a8:17:0b:aa:81:ab:0c:94:8e:42:f5:a3:f0:9b:94:74:41:91:
03:98:69:23:16:0a:af:96:37:a3:15:da:c4:b9:22:a4:ad:83:
1f:42:1c:c8:a9:ca:e3:02:9a:02:6a:e0:2f:55:16:bd:0d:0f:
18:5d:29:c5:47:ff:ed:f2:9a:c5:f3:b9:31:0d:52:50:b8:65:
cd:77:cb:ba:ae:e4:63:61:48:ea:44:db:4b:f2:1a:68:e4:f2:
b2:d3:d9:6f:f7:26:51:97:72:8e:a4:b0:32:dc:cc:9d:68:db:
41:f5:d9:0b:1a:d7:73:6c:0b:c8:76:7c:5b:b8:1a:bb:18:a8:
f6:07:47:30:1f:ef:90:77:43:c8:f4:2f:77:df:5b:fc:3a:5b:
51:aa:eb:f7:2b:d3:e9:5d:87:4d:e6:17:09:f7:fa:51:06:14:
50:0f:6e:e4:c7:ac:f5:98:8f:43:94:db:cd:1e:44:16:4b:c6:
b9:48:e1:a6:8b:3b:7f:ad:0c:4c:2f:6f:f4:0f:d1:0a:95:c3:
6a:84:53:a3:83:fd:15:4b:19:cd:bf:b6:35:5c:c7:e5:dd:1e:
96:e8:a1:3a:0b:41:27:92:63:c7:68:34:a1:5b:23:dd:88:38:
1a:3e:8d:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:28:25 2025 by rpki-client