Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/2b38b3-12f1-4242-adae-b7d1cac51e0c/1/TJETJOhpvEyl7IutDT3f9oVEGXk.mft
File: TJETJOhpvEyl7IutDT3f9oVEGXk.mft (raw, json)
Hash identifier: 3Em3bb4AjggmhYzIawTwnnHPcWN6CEPrL6EBvpMStZU=
Subject key identifier: 33:69:B1:72:53:1E:5A:B0:AD:FF:7F:33:2F:1E:3F:3E:CC:F2:B2:7D
Authority key identifier: 4C:91:13:24:E8:69:BC:4C:A5:EC:8B:AD:0D:3D:DF:F6:85:44:19:79
Certificate issuer: /CN=4c911324e869bc4ca5ec8bad0d3ddff685441979
Certificate serial: 0199FF225F92B07D669661342356C428D16C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TJETJOhpvEyl7IutDT3f9oVEGXk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/2b38b3-12f1-4242-adae-b7d1cac51e0c/1/TJETJOhpvEyl7IutDT3f9oVEGXk.mft
Manifest number: 16EA
Signing time: Mon 20 Oct 2025 01:01:06 +0000
Manifest this update: Mon 20 Oct 2025 01:01:06 +0000
Manifest next update: Tue 21 Oct 2025 01:01:06 +0000
Files and hashes: 1: 06AfR8ZbdQ5_MZMYhDQjdfTo_kA.roa (hash: EEGnzX0afqpfc3Kn5NnezY7IPw+uVu1JdUrzEk+iDpk=)
2: 1-g-A4hn_DsUBjrSOtmwbaV2sjfc.roa (hash: H/p8gImyoUDaEoDvhM9gHqspIznQXZjV/layX0BmypQ=)
3: 43zHI9RV_-UV0H8FudTqslXERT8.roa (hash: jjlOWoTue0eCIb3Fk8Ot7n6TxzmNBAQWzlFe/V95Bl4=)
4: NBksY7qoZYso21Vw3xYrZFLq5eE.roa (hash: uWalzSU+haa+ieD4qUwSSt1pReJEBtMSVsUZjZILj3c=)
5: TJETJOhpvEyl7IutDT3f9oVEGXk.crl (hash: svIrFkcINRmxhENnMF+/P9Kx2o65flimTzmY+QDN3qs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/2b38b3-12f1-4242-adae-b7d1cac51e0c/1/TJETJOhpvEyl7IutDT3f9oVEGXk.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/2b38b3-12f1-4242-adae-b7d1cac51e0c/1/TJETJOhpvEyl7IutDT3f9oVEGXk.mft
rsync://rpki.ripe.net/repository/DEFAULT/TJETJOhpvEyl7IutDT3f9oVEGXk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:22:5f:92:b0:7d:66:96:61:34:23:56:c4:28:d1:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c911324e869bc4ca5ec8bad0d3ddff685441979
Validity
Not Before: Oct 20 01:01:06 2025 GMT
Not After : Oct 21 01:01:06 2025 GMT
Subject: CN=3369b172531e5ab0adff7f332f1e3f3eccf2b27d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:4e:60:fc:ee:e1:82:1a:64:93:c3:7e:c4:7d:
2b:bd:84:dc:43:77:73:44:e4:e6:fe:bf:42:93:ef:
94:d6:49:6c:93:64:38:62:66:d1:83:93:51:f8:4f:
21:04:5e:8e:2f:2e:ae:03:4c:e5:80:e2:d2:1d:77:
01:3a:d4:00:6d:eb:19:a5:ee:c8:81:78:4a:7e:f1:
07:ee:65:59:fd:f7:41:75:80:44:aa:f0:2d:29:c8:
81:38:56:eb:f9:2f:d4:8d:fe:0b:05:65:6c:7d:eb:
dd:f0:e9:b7:f9:9f:04:8c:8e:41:ee:4c:b8:65:63:
ce:18:7d:32:7d:b2:2e:5b:8b:eb:b0:10:ea:e5:86:
30:ed:88:a1:b0:3a:7b:a5:1d:f0:e1:21:b5:f5:68:
7a:80:54:a0:c6:6e:bf:84:e2:ee:37:40:b0:94:59:
b8:ad:c0:a6:40:83:ee:95:aa:8c:39:3b:b1:3d:d9:
b0:12:7e:19:85:63:5c:5b:ac:7f:44:c3:fe:72:0b:
54:bc:9e:58:d5:40:4c:3b:19:58:c0:4a:50:dd:4e:
b1:66:17:fa:16:e2:19:50:a1:e1:ad:e6:7d:8c:ce:
3b:2d:0f:59:4c:45:86:67:66:7b:02:d6:f6:dc:3c:
34:0c:8a:49:6e:50:d3:7d:32:24:e6:0e:d4:99:3c:
08:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:69:B1:72:53:1E:5A:B0:AD:FF:7F:33:2F:1E:3F:3E:CC:F2:B2:7D
X509v3 Authority Key Identifier:
keyid:4C:91:13:24:E8:69:BC:4C:A5:EC:8B:AD:0D:3D:DF:F6:85:44:19:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TJETJOhpvEyl7IutDT3f9oVEGXk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/2b38b3-12f1-4242-adae-b7d1cac51e0c/1/TJETJOhpvEyl7IutDT3f9oVEGXk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/2b38b3-12f1-4242-adae-b7d1cac51e0c/1/TJETJOhpvEyl7IutDT3f9oVEGXk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:aa:77:a8:82:52:12:0c:94:61:08:a2:81:d1:49:b7:11:39:
78:a0:17:56:69:91:ab:3e:3a:b5:1c:87:ac:18:3f:26:a4:56:
45:69:4a:ec:d1:ee:6a:0c:0b:b6:c4:1a:3e:29:29:85:fd:5f:
fa:ff:dd:8d:cb:c3:a6:a8:73:8d:28:26:cc:39:45:5e:57:2f:
5c:0b:7a:7a:98:66:a4:19:6f:a7:9c:2c:c6:0d:02:3e:e4:4c:
fc:56:c3:44:28:46:e0:a4:dd:47:22:f7:0e:ed:25:81:f1:57:
92:a8:2e:b9:f9:43:0e:a3:25:08:5a:83:83:56:bd:26:96:f7:
3b:55:67:79:2a:5a:6e:13:21:38:09:44:23:15:d1:ad:b7:a2:
7f:c4:4e:1d:3b:76:5f:fe:9c:1c:08:71:14:cb:1c:b5:65:a9:
93:49:35:7a:d9:ca:1b:4a:da:ef:ea:e0:4d:26:f9:9e:79:ce:
e1:b9:0b:42:47:d6:98:95:8f:e7:f1:6d:ae:dd:86:be:7e:b0:
8d:cf:73:5a:a1:8b:0e:fd:4b:55:07:c9:f2:8e:3f:8d:1f:b8:
e2:e1:c5:b1:ed:74:12:ac:be:f0:36:74:b8:73:44:93:ee:7b:
31:05:14:d4:ed:10:62:c5:84:1c:ee:55:cc:8a:b0:e9:03:42:
b3:37:9e:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 06:38:27 2025 by rpki-client