Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/cb8339-cee3-4037-bacc-dc8b52e3ea0a/1/TV8MsGpaR7TdrH9Nbf1Eq6TTHy4.mft
File: TV8MsGpaR7TdrH9Nbf1Eq6TTHy4.mft (raw, json)
Hash identifier: I4VLmISeH7zjeN+BT6Ypv+IOcPOnBuBzH528sg8a6jc=
Subject key identifier: 42:17:99:0C:39:12:8C:2A:72:8B:4B:5D:8F:8E:CC:55:32:1B:02:5B
Authority key identifier: 4D:5F:0C:B0:6A:5A:47:B4:DD:AC:7F:4D:6D:FD:44:AB:A4:D3:1F:2E
Certificate issuer: /CN=4d5f0cb06a5a47b4ddac7f4d6dfd44aba4d31f2e
Certificate serial: 019A003554A97BAF9A29354DA61FCAF5CFCA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TV8MsGpaR7TdrH9Nbf1Eq6TTHy4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/cb8339-cee3-4037-bacc-dc8b52e3ea0a/1/TV8MsGpaR7TdrH9Nbf1Eq6TTHy4.mft
Manifest number: 16F0
Signing time: Mon 20 Oct 2025 06:01:26 +0000
Manifest this update: Mon 20 Oct 2025 06:01:26 +0000
Manifest next update: Tue 21 Oct 2025 06:01:26 +0000
Files and hashes: 1: TV8MsGpaR7TdrH9Nbf1Eq6TTHy4.crl (hash: zjHiQ9kAgP3/Qrwuaf4WJDMR2MwSSoiw7/di5vRNP78=)
2: YDDERAGfQG_P54V0MZVSyMjIVyk.roa (hash: C7Lh2t1ISlqhYDOs1dQ1HUfrAnVeSgApqdOD+isddQ8=)
3: kjjmj3_M89wAaSRBkczk1njDNSI.roa (hash: dWOfnCb6lmXwSX8QD5pO5gwpjqkbkqa9qW8b5CDCAF4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/cb8339-cee3-4037-bacc-dc8b52e3ea0a/1/TV8MsGpaR7TdrH9Nbf1Eq6TTHy4.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/cb8339-cee3-4037-bacc-dc8b52e3ea0a/1/TV8MsGpaR7TdrH9Nbf1Eq6TTHy4.mft
rsync://rpki.ripe.net/repository/DEFAULT/TV8MsGpaR7TdrH9Nbf1Eq6TTHy4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 06:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:00:35:54:a9:7b:af:9a:29:35:4d:a6:1f:ca:f5:cf:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d5f0cb06a5a47b4ddac7f4d6dfd44aba4d31f2e
Validity
Not Before: Oct 20 06:01:26 2025 GMT
Not After : Oct 21 06:01:26 2025 GMT
Subject: CN=4217990c39128c2a728b4b5d8f8ecc55321b025b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:f6:f8:7c:5f:87:2a:b4:86:3c:49:8f:e6:39:
3c:22:4f:a2:25:54:fd:b8:9a:45:df:d8:5a:66:68:
75:37:73:7d:3f:4d:0b:6e:76:8e:5f:89:4e:97:00:
ca:35:be:28:de:a8:bd:d3:b1:a1:6a:57:72:e0:22:
7f:6e:24:b8:a7:51:b4:ef:d6:98:39:be:10:cf:8b:
22:d8:1b:c2:6b:74:71:12:a4:cd:ff:aa:64:e5:1d:
88:2c:3a:b1:bd:b3:89:d3:22:a7:8d:9c:9e:c8:b0:
cd:a4:dd:61:bb:76:ca:26:56:89:a8:02:ba:bf:37:
90:cd:b2:da:b6:99:d8:94:35:80:88:c8:bd:02:4c:
58:68:51:ec:f0:be:59:62:6f:60:ac:d6:0a:70:c0:
18:36:8c:c8:7e:3e:8d:1b:37:05:a2:ff:9b:60:22:
23:fb:99:36:53:37:16:da:40:a3:f7:0a:79:8c:2e:
d7:4f:b2:72:fa:2f:7b:de:c5:ec:15:ca:18:70:52:
c5:2e:06:56:25:b6:66:f1:d1:9e:99:da:78:07:95:
53:0c:da:cf:b0:a0:e5:5c:0b:25:90:88:e4:e4:8a:
cb:ae:af:58:50:76:32:97:59:95:f6:b1:dc:4f:a7:
b2:bd:99:42:82:65:68:3e:b2:ae:b4:4f:f7:cd:12:
03:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:17:99:0C:39:12:8C:2A:72:8B:4B:5D:8F:8E:CC:55:32:1B:02:5B
X509v3 Authority Key Identifier:
keyid:4D:5F:0C:B0:6A:5A:47:B4:DD:AC:7F:4D:6D:FD:44:AB:A4:D3:1F:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TV8MsGpaR7TdrH9Nbf1Eq6TTHy4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/cb8339-cee3-4037-bacc-dc8b52e3ea0a/1/TV8MsGpaR7TdrH9Nbf1Eq6TTHy4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/cb8339-cee3-4037-bacc-dc8b52e3ea0a/1/TV8MsGpaR7TdrH9Nbf1Eq6TTHy4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:07:3a:bd:e8:17:ff:7b:16:07:14:e0:93:60:aa:be:b7:de:
12:fd:a3:b0:75:13:90:ec:88:59:7f:59:55:af:d2:07:c5:30:
6b:8b:fb:ee:05:f6:be:f5:4e:fd:6b:63:77:5c:89:5a:55:24:
bd:d2:35:86:73:c4:97:85:15:69:f0:aa:60:f8:b7:47:f2:76:
12:4d:2c:5d:92:7c:a9:99:26:85:9f:2a:37:08:97:f1:36:d3:
75:af:49:0f:07:35:33:2d:4d:4b:07:a8:e0:a6:fd:40:cc:43:
49:5a:c7:6c:be:5d:35:64:08:30:5e:24:db:1f:1d:92:ae:df:
63:bd:eb:e4:92:3c:2d:e0:7c:f1:05:93:0d:b7:d2:da:3d:b4:
80:3e:08:81:8e:2f:49:58:c2:38:84:f2:bc:8b:c9:fb:18:b7:
a4:fb:dd:8b:a7:8e:c1:27:ef:4f:60:cc:81:84:fd:36:da:3e:
59:79:b8:af:3d:d9:f6:9b:39:a4:4b:54:a8:e4:cd:6b:52:c3:
39:29:ec:73:79:15:1f:b7:86:a6:e1:7c:53:75:0d:25:36:62:
15:e5:2b:c1:a5:0f:ae:f9:3d:59:81:23:30:8e:78:5a:e1:fd:
0e:0d:32:75:f8:10:30:58:6a:70:59:65:9a:3e:ce:0a:71:27:
26:27:ae:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 14:00:44 2025 by rpki-client