Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/18c8d5-089a-470e-906d-dc4e7988a28a/1/tBuxzdW4a-d4BoidLhsgKswnsiU.mft
File: tBuxzdW4a-d4BoidLhsgKswnsiU.mft (raw, json)
Hash identifier: oaYI4C1cPVU85da4Bni6ROfgcdNrn3NlBIvper2OkHQ=
Subject key identifier: 4E:7A:6A:79:5D:2F:1F:8E:D8:37:BC:24:1F:48:21:CF:B6:DD:6E:40
Authority key identifier: B4:1B:B1:CD:D5:B8:6B:E7:78:06:88:9D:2E:1B:20:2A:CC:27:B2:25
Certificate issuer: /CN=b41bb1cdd5b86be77806889d2e1b202acc27b225
Certificate serial: 0199FE102F0BF6A1FB3E8B1D87B7687C2043
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tBuxzdW4a-d4BoidLhsgKswnsiU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/18c8d5-089a-470e-906d-dc4e7988a28a/1/tBuxzdW4a-d4BoidLhsgKswnsiU.mft
Manifest number: 03B1
Signing time: Sun 19 Oct 2025 20:01:37 +0000
Manifest this update: Sun 19 Oct 2025 20:01:37 +0000
Manifest next update: Mon 20 Oct 2025 20:01:37 +0000
Files and hashes: 1: 7E7gyymF8j2toEenFO04AQuZbVQ.roa (hash: HKny0hIiEORMsHrCnF3pLBTGlpUFzpGxVsMxMmuOnho=)
2: tBuxzdW4a-d4BoidLhsgKswnsiU.crl (hash: fVIPwfDpirkxwd7NdpTGA0lwhyC7UTKt0JXJx9Bc48M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/18c8d5-089a-470e-906d-dc4e7988a28a/1/tBuxzdW4a-d4BoidLhsgKswnsiU.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/18c8d5-089a-470e-906d-dc4e7988a28a/1/tBuxzdW4a-d4BoidLhsgKswnsiU.mft
rsync://rpki.ripe.net/repository/DEFAULT/tBuxzdW4a-d4BoidLhsgKswnsiU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:10:2f:0b:f6:a1:fb:3e:8b:1d:87:b7:68:7c:20:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b41bb1cdd5b86be77806889d2e1b202acc27b225
Validity
Not Before: Oct 19 20:01:37 2025 GMT
Not After : Oct 20 20:01:37 2025 GMT
Subject: CN=4e7a6a795d2f1f8ed837bc241f4821cfb6dd6e40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:64:e8:5e:bb:92:15:97:26:7e:4f:20:4e:17:
2f:df:14:92:c8:8f:24:5d:d2:b2:89:82:a2:a3:70:
f1:fd:1f:d2:f7:04:c5:72:c0:12:04:8d:9e:df:99:
26:a2:5d:1e:50:2d:13:d0:cd:5e:8a:01:f7:73:d2:
44:16:63:d8:3f:30:24:bd:4d:83:f3:e8:f9:ed:4f:
2e:48:e6:ca:8f:7d:5e:e9:75:5d:37:92:d0:7a:b2:
9a:81:ec:d1:2a:55:54:1b:a8:fa:56:93:5a:55:5b:
84:20:97:8d:a3:ff:51:90:32:d5:e5:64:78:22:93:
57:b0:a3:0e:9b:fb:47:92:45:ba:67:22:6c:6a:11:
c2:05:9d:40:9a:e8:30:95:3f:04:49:a8:eb:e6:82:
05:80:e4:6a:04:3a:6a:5c:0d:de:07:66:61:45:b6:
29:c9:dd:2c:9c:64:13:fd:ca:79:1c:29:90:5e:31:
dc:33:ce:7b:5c:85:3c:74:6f:84:52:53:a8:8a:51:
dc:8e:fd:dc:d2:b4:55:6d:bf:07:f6:b3:a7:81:ed:
dd:7a:26:d2:c6:05:11:10:52:57:6f:37:0b:e2:38:
7d:9e:d2:67:8b:14:ff:d8:6f:de:5d:84:93:14:df:
7f:a9:d0:f4:06:4e:eb:53:c4:2d:89:25:d1:34:93:
77:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:7A:6A:79:5D:2F:1F:8E:D8:37:BC:24:1F:48:21:CF:B6:DD:6E:40
X509v3 Authority Key Identifier:
keyid:B4:1B:B1:CD:D5:B8:6B:E7:78:06:88:9D:2E:1B:20:2A:CC:27:B2:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tBuxzdW4a-d4BoidLhsgKswnsiU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/18c8d5-089a-470e-906d-dc4e7988a28a/1/tBuxzdW4a-d4BoidLhsgKswnsiU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/18c8d5-089a-470e-906d-dc4e7988a28a/1/tBuxzdW4a-d4BoidLhsgKswnsiU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:c7:c0:0e:f3:1f:da:9e:67:77:fe:21:4f:82:02:ee:21:1d:
13:14:37:89:fb:f4:9c:9c:06:47:b0:e6:96:67:45:d5:b4:24:
2f:cc:0e:17:1b:fc:6a:01:54:79:80:3f:d6:13:4d:47:1b:c6:
fd:3e:1e:aa:9d:61:49:ee:e4:d9:f4:a1:0a:f6:c2:c4:65:47:
6b:7b:80:6b:9d:96:b9:a1:4a:44:d4:7f:ab:0c:74:1e:94:55:
3d:26:6c:07:fa:7f:a2:3a:6d:66:7c:41:e5:20:a0:9c:44:67:
c3:27:d1:bb:00:8e:b0:6f:8a:4e:ce:dc:24:62:4f:eb:57:e8:
06:6f:f8:80:22:1c:de:39:f2:0f:c7:f4:bc:96:fc:ed:cc:bb:
a3:a7:01:20:a8:e0:43:dc:4a:b0:69:55:e4:29:d5:de:37:a4:
ba:06:f7:98:c3:80:0c:77:03:50:4f:fd:dd:fa:4d:d6:70:94:
e3:7e:56:d6:05:13:0f:09:95:96:26:44:04:4f:76:f3:1b:53:
ad:6d:70:ce:49:b2:cd:f3:1d:8e:14:e1:5e:ce:dc:9d:4c:ef:
52:a9:8a:76:e1:a7:c1:48:48:b5:d8:48:fb:8f:2c:fc:13:11:
92:1a:53:09:5a:d6:2e:aa:96:84:d1:e6:ea:c4:b2:a0:d1:fb:
66:c2:bd:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:12:56 2025 by rpki-client