Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/48c9f6-5b5f-41d4-8e56-08e4b79387c0/1/TuFxPha0_Y8zAYh95qERmARJsp4.mft
File: TuFxPha0_Y8zAYh95qERmARJsp4.mft (raw, json)
Hash identifier: OGGaDNT7+az+z3U2/iU6u/MW/vs8Z2eu/QVBUys09uk=
Subject key identifier: 45:0A:A3:19:56:6F:BF:02:EB:29:F2:7A:F9:C1:30:F1:0B:ED:8C:FF
Authority key identifier: 4E:E1:71:3E:16:B4:FD:8F:33:01:88:7D:E6:A1:11:98:04:49:B2:9E
Certificate issuer: /CN=4ee1713e16b4fd8f3301887de6a111980449b29e
Certificate serial: 0199FB45DB357EB183BE2C66E4128126B10B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TuFxPha0_Y8zAYh95qERmARJsp4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/48c9f6-5b5f-41d4-8e56-08e4b79387c0/1/TuFxPha0_Y8zAYh95qERmARJsp4.mft
Manifest number: 16E3
Signing time: Sun 19 Oct 2025 07:01:23 +0000
Manifest this update: Sun 19 Oct 2025 07:01:23 +0000
Manifest next update: Mon 20 Oct 2025 07:01:23 +0000
Files and hashes: 1: IJqJkkG32juZ9JC_-n807ugagLE.roa (hash: a5ckR7gAH5+zi6QRTimZRXE/Wgs09xk/gP8A83O6nQM=)
2: TuFxPha0_Y8zAYh95qERmARJsp4.crl (hash: bkoRb5cXTmdzLO2baxsTLHzLrT2dyx9eSTEp4mzkyTo=)
3: yXKulFLipTbjSUmowLRqtzSALEA.roa (hash: LNf43mdJtw9mAKFqBqZr/MgvJNf0ToK4qGWZ05MJPz4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/48c9f6-5b5f-41d4-8e56-08e4b79387c0/1/TuFxPha0_Y8zAYh95qERmARJsp4.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/48c9f6-5b5f-41d4-8e56-08e4b79387c0/1/TuFxPha0_Y8zAYh95qERmARJsp4.mft
rsync://rpki.ripe.net/repository/DEFAULT/TuFxPha0_Y8zAYh95qERmARJsp4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:45:db:35:7e:b1:83:be:2c:66:e4:12:81:26:b1:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ee1713e16b4fd8f3301887de6a111980449b29e
Validity
Not Before: Oct 19 07:01:23 2025 GMT
Not After : Oct 20 07:01:23 2025 GMT
Subject: CN=450aa319566fbf02eb29f27af9c130f10bed8cff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:38:bc:e5:10:16:24:61:f4:f9:1e:db:2b:97:
f6:a4:49:1a:c1:e5:99:0f:90:fe:65:37:0e:40:76:
d1:34:a3:5b:8c:31:29:37:db:69:d3:46:39:41:ba:
92:95:af:78:5e:fa:67:21:31:10:79:ac:1c:c8:ff:
d5:f0:c7:16:2a:3b:3e:38:06:8f:d0:1a:2b:2f:99:
0d:9f:11:57:7a:76:07:f9:f7:f0:2b:51:e7:f9:ee:
f6:05:6a:ad:f5:69:e2:ab:2d:3d:49:f9:ca:54:fe:
6f:83:f3:5d:cc:91:9b:e7:cd:8e:3c:66:27:dd:3b:
de:64:ed:2c:7a:64:74:a4:04:dd:d6:82:fb:43:30:
f6:3a:30:c0:d4:39:52:dc:b1:23:fc:13:55:23:bd:
2a:5b:e5:55:a7:de:41:5d:63:86:9a:c4:aa:47:a9:
1e:ff:f7:c0:7a:07:43:23:aa:0b:bd:79:06:f8:cc:
88:f7:42:47:2a:cf:10:75:ac:c7:38:40:94:63:1c:
f4:f4:d7:2c:05:bc:aa:73:c3:17:b5:ca:d9:08:bc:
ac:f9:f6:6d:0f:4e:be:32:09:9c:63:fb:70:2c:42:
11:19:60:49:63:eb:4c:1f:98:2a:2a:d8:4e:8b:5b:
64:d4:f1:71:1a:2d:9f:bc:34:a7:d6:81:5a:29:4c:
fc:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:0A:A3:19:56:6F:BF:02:EB:29:F2:7A:F9:C1:30:F1:0B:ED:8C:FF
X509v3 Authority Key Identifier:
keyid:4E:E1:71:3E:16:B4:FD:8F:33:01:88:7D:E6:A1:11:98:04:49:B2:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TuFxPha0_Y8zAYh95qERmARJsp4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/48c9f6-5b5f-41d4-8e56-08e4b79387c0/1/TuFxPha0_Y8zAYh95qERmARJsp4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/48c9f6-5b5f-41d4-8e56-08e4b79387c0/1/TuFxPha0_Y8zAYh95qERmARJsp4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:22:39:2f:33:83:d0:37:a5:8c:93:6f:7a:c5:21:72:f6:bf:
60:f2:8e:c0:21:5b:bf:3f:1d:24:6e:2d:ad:96:fd:84:6e:b2:
99:e7:1e:ef:1a:7e:4a:84:a0:c6:76:27:33:e2:75:20:27:c9:
54:e6:58:4e:87:43:60:02:f0:63:d3:5b:51:60:1a:3c:b7:06:
8a:cc:49:c2:e5:a9:c8:d4:9f:c6:0d:e7:89:55:0e:c2:f0:3c:
b0:40:bf:00:a6:62:b0:2e:78:de:33:3c:31:99:fc:9e:cb:72:
87:ea:37:c3:87:56:37:24:2a:2d:35:6a:f4:0b:fb:93:4e:54:
d5:73:d9:e0:b2:67:68:4f:84:99:9b:2d:3a:7c:73:b1:b3:2d:
e3:c0:03:fb:87:cc:ae:4c:d5:3d:d3:4a:0e:bb:ee:5c:01:7c:
ed:49:a7:7e:d9:65:33:38:35:c3:d3:f0:fd:4e:34:27:f8:f2:
f0:2b:9c:59:18:a8:10:35:4f:33:e7:b3:f7:0a:dd:36:ba:17:
4b:30:4d:3b:76:0b:ee:6a:a9:51:51:7a:e1:e8:c9:04:46:80:
34:3a:82:17:e8:81:29:41:5f:35:a6:e9:c8:79:08:57:70:bd:
97:27:4b:f2:be:dc:e8:9c:14:a4:0d:a2:1f:c1:31:d1:81:3e:
e7:39:2c:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:26:36 2025 by rpki-client