Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/6c0b54-b06e-4d44-8120-370b8688feaf/1/tUSbCOpqJn33NmpolcfJJMLxkm0.mft
File: tUSbCOpqJn33NmpolcfJJMLxkm0.mft (raw, json)
Hash identifier: /PuI92paH2vELPJ59beHmXBZnZn2n51RxqKxOQXn+fY=
Subject key identifier: A0:E8:82:1E:BA:69:8F:0C:1E:F7:EB:BA:47:F6:A2:C5:2A:6D:5A:B6
Authority key identifier: B5:44:9B:08:EA:6A:26:7D:F7:36:6A:68:95:C7:C9:24:C2:F1:92:6D
Certificate issuer: /CN=b5449b08ea6a267df7366a6895c7c924c2f1926d
Certificate serial: 0199FDDA4BC1243FF28E92596A39D1E29F37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tUSbCOpqJn33NmpolcfJJMLxkm0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/6c0b54-b06e-4d44-8120-370b8688feaf/1/tUSbCOpqJn33NmpolcfJJMLxkm0.mft
Manifest number: 0283
Signing time: Sun 19 Oct 2025 19:02:45 +0000
Manifest this update: Sun 19 Oct 2025 19:02:45 +0000
Manifest next update: Mon 20 Oct 2025 19:02:45 +0000
Files and hashes: 1: 12VZdcmHAZ40OHT9mrIrMjn0594.roa (hash: ET8sgbp54z2ReDcdD/bnaoyAnFdtN16gcR5nsUzXKcM=)
2: tUSbCOpqJn33NmpolcfJJMLxkm0.crl (hash: Fw96G9GcpEYdpxp5ocjMfNGpMcR0PVyFgcnGFh8KBg0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/6c0b54-b06e-4d44-8120-370b8688feaf/1/tUSbCOpqJn33NmpolcfJJMLxkm0.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/6c0b54-b06e-4d44-8120-370b8688feaf/1/tUSbCOpqJn33NmpolcfJJMLxkm0.mft
rsync://rpki.ripe.net/repository/DEFAULT/tUSbCOpqJn33NmpolcfJJMLxkm0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:da:4b:c1:24:3f:f2:8e:92:59:6a:39:d1:e2:9f:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5449b08ea6a267df7366a6895c7c924c2f1926d
Validity
Not Before: Oct 19 19:02:45 2025 GMT
Not After : Oct 20 19:02:45 2025 GMT
Subject: CN=a0e8821eba698f0c1ef7ebba47f6a2c52a6d5ab6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:70:29:cf:ac:29:08:45:a6:67:1a:b2:71:74:
6a:7a:32:fd:7b:50:f6:ab:e0:c4:3e:30:71:cc:cf:
45:ed:8b:ab:b9:3f:e0:a2:1d:66:e3:9a:be:8f:cf:
9a:d3:81:c9:2f:dd:7d:04:2d:07:16:1f:3a:ea:9f:
e3:86:c1:82:eb:c5:aa:7c:84:6c:74:c6:27:f2:49:
f5:57:4e:a0:71:4c:cd:c9:f9:9e:d9:46:8c:16:29:
c9:9e:b4:d0:b2:e4:7c:4d:36:93:9f:dc:4c:64:25:
fc:2d:91:a3:f5:df:e1:86:7d:61:e6:ec:d7:53:2b:
71:29:f8:71:bb:6a:8f:52:7e:80:aa:ca:fd:a4:9f:
7e:8d:2f:f8:b7:de:b8:3d:2e:9b:c3:82:c3:bb:8d:
12:c0:f1:ff:a1:b1:69:07:19:e2:50:a1:c2:bf:8d:
41:74:0f:b7:44:3d:fd:f5:6e:60:20:ac:a2:a9:48:
c5:67:3a:04:b5:bb:b9:d9:a6:1c:77:fa:fa:0a:d4:
03:31:21:f7:02:86:90:7c:c3:16:c2:c8:1c:bd:e2:
9a:61:41:63:f7:0e:0f:54:b2:87:e1:5c:07:0a:c5:
e6:cc:b1:43:11:a9:67:8f:4c:2e:a8:b4:b8:38:bf:
30:ee:99:2c:12:aa:9c:d0:4f:d3:ff:c4:fc:5e:57:
ec:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:E8:82:1E:BA:69:8F:0C:1E:F7:EB:BA:47:F6:A2:C5:2A:6D:5A:B6
X509v3 Authority Key Identifier:
keyid:B5:44:9B:08:EA:6A:26:7D:F7:36:6A:68:95:C7:C9:24:C2:F1:92:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tUSbCOpqJn33NmpolcfJJMLxkm0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/6c0b54-b06e-4d44-8120-370b8688feaf/1/tUSbCOpqJn33NmpolcfJJMLxkm0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/6c0b54-b06e-4d44-8120-370b8688feaf/1/tUSbCOpqJn33NmpolcfJJMLxkm0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:04:27:4d:ed:2c:21:b4:11:ca:2e:e7:83:a1:0a:dd:4f:63:
a4:3e:d6:02:b8:96:95:d2:9c:6f:45:bf:d8:b0:8f:27:d1:3a:
91:9d:80:e0:05:ec:ad:08:bf:6d:80:2b:53:a5:68:26:65:89:
15:de:4d:07:5d:62:12:47:8f:4f:99:0c:48:8f:cd:74:0c:02:
b4:2e:fc:2e:66:5e:16:a0:8f:1f:9d:2e:1d:18:41:f9:4c:12:
15:24:58:bf:26:aa:e2:19:b5:2c:f6:9f:71:14:5f:1d:f9:8e:
ef:fc:dc:db:84:4f:c0:2b:c5:aa:39:9b:c5:91:96:ec:f4:06:
a2:2e:2a:1c:39:49:20:4b:b6:bb:8f:63:24:60:55:19:f2:ad:
72:99:a3:b2:4e:37:f8:6a:04:72:1f:47:77:3e:ea:b4:4f:4a:
eb:d4:c0:15:00:03:65:97:6d:89:62:75:d6:d4:43:ac:0b:47:
1e:af:2e:78:cd:f2:10:11:d3:dc:64:4e:e9:58:b2:a8:4f:e6:
8a:33:c3:e4:cc:2f:dd:8b:a8:5b:cc:59:22:dd:81:af:e5:5e:
0b:b4:b5:0e:a6:f9:6b:e4:e7:91:c2:82:86:cc:3b:8f:92:89:
c5:9c:a4:0b:bc:57:c1:e6:fe:43:95:96:9e:0d:2d:84:fa:39:
49:20:be:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:44:10 2025 by rpki-client