Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/995fbd-91fb-43bb-8f26-cd4bd44275c5/1/tTAFYZaI77r_0G4QikO98gZD4NY.mft
File: tTAFYZaI77r_0G4QikO98gZD4NY.mft (raw, json)
Hash identifier: Fq0MpRtAH2b3kKO+3c5Ha9FY8JqsDqE+XYHa+OBjP2s=
Subject key identifier: 0E:DD:17:29:5A:5A:7C:28:42:80:44:DF:96:19:A1:E0:F0:8A:5E:75
Authority key identifier: B5:30:05:61:96:88:EF:BA:FF:D0:6E:10:8A:43:BD:F2:06:43:E0:D6
Certificate issuer: /CN=b53005619688efbaffd06e108a43bdf20643e0d6
Certificate serial: 0199FB0F4BD0AD943ED237835DE38C50899E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tTAFYZaI77r_0G4QikO98gZD4NY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/995fbd-91fb-43bb-8f26-cd4bd44275c5/1/tTAFYZaI77r_0G4QikO98gZD4NY.mft
Manifest number: 16E7
Signing time: Sun 19 Oct 2025 06:01:47 +0000
Manifest this update: Sun 19 Oct 2025 06:01:47 +0000
Manifest next update: Mon 20 Oct 2025 06:01:47 +0000
Files and hashes: 1: H94mgXcbmEPiObELGoT_irqbFZA.roa (hash: zafi3kAgrBwpb+xZqeS8u0za5f6rLKTWup2Rk4ukWyE=)
2: cpfSzQsU6bXhLoYlLCepUpPhGUA.roa (hash: I8cvRLDssMsd0UHP/4nXy9rkIVrQ1W/PN2dEJTBJ8Vc=)
3: tTAFYZaI77r_0G4QikO98gZD4NY.crl (hash: D6EhjB2vRyrGZvFGQyJmrOmSizDWBij1Em1JvgeDZoU=)
4: v0ygM5ko9tgsiV9gTnymwBnpZD8.roa (hash: Qr8YJSCtuGUwCDefoz4H2ImMBPjSdowCdy9x6G8wdbw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/995fbd-91fb-43bb-8f26-cd4bd44275c5/1/tTAFYZaI77r_0G4QikO98gZD4NY.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/995fbd-91fb-43bb-8f26-cd4bd44275c5/1/tTAFYZaI77r_0G4QikO98gZD4NY.mft
rsync://rpki.ripe.net/repository/DEFAULT/tTAFYZaI77r_0G4QikO98gZD4NY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:0f:4b:d0:ad:94:3e:d2:37:83:5d:e3:8c:50:89:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b53005619688efbaffd06e108a43bdf20643e0d6
Validity
Not Before: Oct 19 06:01:47 2025 GMT
Not After : Oct 20 06:01:47 2025 GMT
Subject: CN=0edd17295a5a7c28428044df9619a1e0f08a5e75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:5c:a9:a6:14:82:46:5b:fa:e2:9e:43:ae:76:
3d:aa:5a:01:79:16:ba:12:0d:49:d0:27:61:00:c6:
08:83:6c:ee:ab:c2:a7:6b:b7:e5:5d:db:a3:62:19:
4a:6d:8e:e6:dd:e6:62:d3:a7:95:59:42:45:80:c0:
21:7c:57:3a:70:16:4c:55:c5:af:8e:47:b0:bb:84:
3b:77:67:10:a5:83:d3:fe:c0:1f:32:6e:e6:5a:48:
08:21:d9:ff:7f:7d:eb:5e:73:52:92:d8:32:8a:9c:
a8:2b:68:4b:a6:75:c9:61:c8:82:1b:30:9c:ec:3a:
4b:5e:af:10:ea:7c:1c:2c:ba:60:b7:0e:d6:cd:6f:
3c:24:31:2d:d2:b6:56:1c:a7:ea:f4:6d:18:2c:85:
e4:6a:29:08:db:f1:7c:13:02:de:15:4f:a3:13:8a:
82:32:f8:e7:56:12:c4:e6:f1:0e:8e:42:cc:8c:6d:
43:6c:dc:09:6d:e1:51:12:b6:8a:1d:79:eb:18:70:
65:41:00:da:30:04:44:d2:7d:87:06:17:40:47:5e:
55:af:5f:5f:55:0b:78:e3:45:10:bb:6a:c5:da:e4:
2d:f2:bf:3a:91:28:a4:dd:39:a9:92:12:39:6d:96:
eb:11:0d:0b:3d:20:a9:66:fb:5f:0f:25:07:0a:bb:
09:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:DD:17:29:5A:5A:7C:28:42:80:44:DF:96:19:A1:E0:F0:8A:5E:75
X509v3 Authority Key Identifier:
keyid:B5:30:05:61:96:88:EF:BA:FF:D0:6E:10:8A:43:BD:F2:06:43:E0:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tTAFYZaI77r_0G4QikO98gZD4NY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/995fbd-91fb-43bb-8f26-cd4bd44275c5/1/tTAFYZaI77r_0G4QikO98gZD4NY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/995fbd-91fb-43bb-8f26-cd4bd44275c5/1/tTAFYZaI77r_0G4QikO98gZD4NY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:7b:4d:62:09:a7:e6:06:f0:1f:bf:d2:00:a5:ee:bb:7e:38:
bc:5f:92:72:f6:4c:2f:60:cd:b2:fb:9f:c7:cb:56:5e:b7:14:
34:d3:51:68:a2:c8:36:69:30:0b:4e:a3:c5:56:c2:57:e4:87:
77:e2:ef:1f:69:7d:1e:13:ca:3a:01:1a:19:6f:8f:97:ec:e8:
27:f1:1a:e6:ab:20:e8:64:75:60:52:f2:35:8b:bb:19:72:72:
fe:00:f9:a2:c5:1c:da:a3:46:77:ca:fa:ec:ba:8c:ca:30:fc:
5e:1d:0e:48:dc:fe:fe:c5:ca:36:d6:09:f8:bf:8a:2d:30:14:
03:f6:04:95:cc:9d:a1:f9:13:a3:8b:8d:fd:27:ac:31:e5:e4:
b9:c0:8f:63:83:c7:fb:eb:9c:e3:eb:40:16:7e:af:88:05:ac:
77:e9:3c:92:37:4e:44:54:7a:5b:e7:57:b4:7c:46:e7:dc:10:
7c:40:e4:b9:a7:86:f7:ce:46:96:ce:58:71:4c:39:f7:57:47:
4a:2d:46:6d:0b:b5:d8:3d:4f:d0:08:cd:a3:cf:2c:51:66:bc:
03:2b:f9:d8:f9:d6:65:79:d2:6b:47:6a:e0:c3:7f:73:74:92:
4b:a5:b2:81:9b:2e:51:12:72:5a:5f:46:b7:dc:18:51:21:03:
8a:ea:84:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:28:15 2025 by rpki-client