Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/1aae45-f6be-401c-b3d0-f467b2f42af6/1/tMgU_8pTEIYqIiTwr9kMqpasC1Q.mft
File: tMgU_8pTEIYqIiTwr9kMqpasC1Q.mft (raw, json)
Hash identifier: 9KYZglWNLN4PBPTHbXhG6uB4sNBrppRsn1T9xJmGfE0=
Subject key identifier: B5:F9:9D:26:6A:4B:15:F4:70:B0:B6:3F:88:1B:6E:1D:1A:28:45:B7
Authority key identifier: B4:C8:14:FF:CA:53:10:86:2A:22:24:F0:AF:D9:0C:AA:96:AC:0B:54
Certificate issuer: /CN=b4c814ffca5310862a2224f0afd90caa96ac0b54
Certificate serial: 0199FAD80FB164EBBA4E0CDC063E389884F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tMgU_8pTEIYqIiTwr9kMqpasC1Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/1aae45-f6be-401c-b3d0-f467b2f42af6/1/tMgU_8pTEIYqIiTwr9kMqpasC1Q.mft
Manifest number: 062B
Signing time: Sun 19 Oct 2025 05:01:27 +0000
Manifest this update: Sun 19 Oct 2025 05:01:27 +0000
Manifest next update: Mon 20 Oct 2025 05:01:27 +0000
Files and hashes: 1: JboF5duYkSjIw0cFCDow2D7hhYA.roa (hash: 5ee85IvEdLLZLBu0IK/0DK9QgLyt71g8oPTMmxnM7ss=)
2: bPHOfPhRt9UxNoPYUZyx6NkEcPE.roa (hash: l5CD77LRDYrviJN2I+kUm6dy7C8YOi2kiqH568j84ZE=)
3: tMgU_8pTEIYqIiTwr9kMqpasC1Q.crl (hash: 8b3aWkvxYN8LwK4CL5waKzZYfLIPbxdIehN5mRT7Bk8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/1aae45-f6be-401c-b3d0-f467b2f42af6/1/tMgU_8pTEIYqIiTwr9kMqpasC1Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/1aae45-f6be-401c-b3d0-f467b2f42af6/1/tMgU_8pTEIYqIiTwr9kMqpasC1Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/tMgU_8pTEIYqIiTwr9kMqpasC1Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 05:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fa:d8:0f:b1:64:eb:ba:4e:0c:dc:06:3e:38:98:84:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4c814ffca5310862a2224f0afd90caa96ac0b54
Validity
Not Before: Oct 19 05:01:27 2025 GMT
Not After : Oct 20 05:01:27 2025 GMT
Subject: CN=b5f99d266a4b15f470b0b63f881b6e1d1a2845b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:f0:63:6d:3a:d8:33:a4:5b:3d:4b:1d:54:2a:
82:a8:65:ae:fe:f7:1e:de:8f:c3:22:65:c1:78:23:
3a:c6:25:ad:aa:b4:34:d5:06:1f:de:9a:33:03:bd:
2f:32:c8:70:76:3a:9e:0e:00:6e:60:b6:3d:3a:ca:
bb:46:dc:3b:e0:ce:8f:0c:97:03:0d:34:c2:94:53:
61:b8:b2:02:27:7b:80:35:65:5f:bb:b3:49:06:39:
ac:60:22:19:6e:1a:99:8e:40:d2:df:5f:a0:26:ec:
49:93:e6:cd:e6:0d:34:d5:e3:a3:37:80:6c:3b:ed:
c4:f7:dc:75:9f:61:0e:68:09:18:26:59:8f:4b:ad:
ff:48:33:d6:84:23:c5:2d:3a:0e:ca:7d:ea:11:4c:
aa:13:56:52:01:07:c8:9e:3e:08:d9:99:c0:0f:b6:
27:bc:ad:f0:73:89:cd:ea:d7:90:2a:a8:12:24:f9:
67:46:db:da:27:de:33:8a:8c:fe:96:93:ff:25:81:
b0:7f:c4:56:57:a1:9c:a8:95:60:d5:67:58:8c:4d:
80:c7:07:5c:51:e8:92:a4:59:0d:eb:b1:53:5a:b6:
ae:0f:d3:85:97:8e:9d:e6:13:90:b5:ec:d5:2b:1a:
cc:9d:f8:ab:e7:dd:85:52:3e:47:76:bd:b0:77:d6:
c7:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:F9:9D:26:6A:4B:15:F4:70:B0:B6:3F:88:1B:6E:1D:1A:28:45:B7
X509v3 Authority Key Identifier:
keyid:B4:C8:14:FF:CA:53:10:86:2A:22:24:F0:AF:D9:0C:AA:96:AC:0B:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tMgU_8pTEIYqIiTwr9kMqpasC1Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/1aae45-f6be-401c-b3d0-f467b2f42af6/1/tMgU_8pTEIYqIiTwr9kMqpasC1Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/1aae45-f6be-401c-b3d0-f467b2f42af6/1/tMgU_8pTEIYqIiTwr9kMqpasC1Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:a3:ad:4f:13:8a:6a:32:e7:07:23:f5:b2:c4:56:d1:bc:68:
94:5f:7d:d0:a1:9f:f8:65:6f:21:c4:3e:e6:78:6d:88:83:77:
88:04:e9:f6:52:08:f9:eb:86:97:de:0b:8a:f3:0c:6e:e2:c3:
86:f9:44:75:46:69:b4:4d:4b:72:fe:d7:41:3e:40:ce:66:da:
0d:cf:e1:59:94:73:b5:f8:93:df:8a:3d:da:e3:fe:62:fc:4c:
7b:01:4a:39:4b:c3:26:cf:56:7a:01:92:ad:8d:64:db:b5:c1:
43:2d:63:e5:cd:b9:26:89:89:2c:36:16:68:97:c1:d9:fd:c5:
cd:dd:9c:e9:23:e5:aa:0d:2f:36:24:93:18:08:af:9d:1c:f2:
26:d3:80:8b:09:71:72:14:65:0d:42:2e:e4:cb:e8:17:fc:a9:
97:e5:ed:70:38:22:c0:b6:b7:1b:7a:fc:c2:02:94:c8:ca:27:
68:be:da:d1:b5:93:2e:ac:b8:51:0b:15:b8:4b:dd:fe:f4:b1:
3d:7c:3c:39:66:90:3b:bc:bd:52:2e:1f:73:71:de:6f:8c:e6:
ce:35:e9:36:55:fe:0a:7c:a3:78:6d:a1:4f:fb:1c:36:44:3f:
91:7e:9e:0f:b6:63:e4:eb:1e:91:0d:63:32:9f:37:73:6d:32:
fc:67:08:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:27:02 2025 by rpki-client