Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/8631f5-54a2-486f-b9a5-081a1ae6ebd6/1/tvvGPvVhSn75WhBhiOPXh1XGh7k.mft
File: tvvGPvVhSn75WhBhiOPXh1XGh7k.mft (raw, json)
Hash identifier: gdGbVynlQOdCbB5+8bhCnunu2FFsgSTMVIPPfVCTykM=
Subject key identifier: C1:7F:94:B0:76:EB:77:29:BD:EE:2B:F7:9E:14:5C:01:6E:56:35:07
Authority key identifier: B6:FB:C6:3E:F5:61:4A:7E:F9:5A:10:61:88:E3:D7:87:55:C6:87:B9
Certificate issuer: /CN=b6fbc63ef5614a7ef95a106188e3d78755c687b9
Certificate serial: 0199FB0F0C45F95EA8CF908A3E1EEE6FEF18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tvvGPvVhSn75WhBhiOPXh1XGh7k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/8631f5-54a2-486f-b9a5-081a1ae6ebd6/1/tvvGPvVhSn75WhBhiOPXh1XGh7k.mft
Manifest number: 16E3
Signing time: Sun 19 Oct 2025 06:01:31 +0000
Manifest this update: Sun 19 Oct 2025 06:01:31 +0000
Manifest next update: Mon 20 Oct 2025 06:01:31 +0000
Files and hashes: 1: YUVqQdQIyjArliTwomJUYJEwCGQ.roa (hash: 4idaosIzVzGBgf2LXtYCKacvmrm3Vvf4Nk86J3M+nPs=)
2: buQG-wtVNpUrPJ_2t7dekqYzUho.roa (hash: AC4DBN7YxMjhR0VzHY+/cw0VJl+DFBoERdFnKk3z5Ac=)
3: tvvGPvVhSn75WhBhiOPXh1XGh7k.crl (hash: rQyf8KzojHsMSWS9aaGwiMVFClxfG0s3FXCC2pevL8k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/8631f5-54a2-486f-b9a5-081a1ae6ebd6/1/tvvGPvVhSn75WhBhiOPXh1XGh7k.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/8631f5-54a2-486f-b9a5-081a1ae6ebd6/1/tvvGPvVhSn75WhBhiOPXh1XGh7k.mft
rsync://rpki.ripe.net/repository/DEFAULT/tvvGPvVhSn75WhBhiOPXh1XGh7k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:0f:0c:45:f9:5e:a8:cf:90:8a:3e:1e:ee:6f:ef:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b6fbc63ef5614a7ef95a106188e3d78755c687b9
Validity
Not Before: Oct 19 06:01:31 2025 GMT
Not After : Oct 20 06:01:31 2025 GMT
Subject: CN=c17f94b076eb7729bdee2bf79e145c016e563507
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:d5:80:7a:70:94:27:e9:b0:78:d0:29:c9:d4:
10:fc:f6:a0:87:ba:54:b7:37:43:77:4f:6a:1e:2b:
bb:f6:25:03:ce:f9:01:ea:b6:63:52:9f:97:f3:1d:
3b:5a:a4:9d:bb:4e:1e:27:e8:b6:b1:c5:35:64:a5:
a4:1e:e8:b8:fe:de:07:8c:74:65:5e:93:ed:bc:89:
8d:f2:a8:d4:ad:24:98:5a:3c:14:95:e2:25:6b:27:
6d:57:fa:c7:ed:6e:b3:2e:79:9e:4a:c0:fd:e9:05:
5c:5e:db:70:05:2b:5e:b1:97:7f:ea:3b:9c:23:d1:
d4:a1:39:07:09:3f:e7:40:20:5d:2d:d7:f7:e8:63:
b2:e2:df:0f:82:6b:af:53:67:24:56:a8:55:be:bc:
43:5f:d3:03:ef:5e:b8:ff:53:63:89:f0:ce:fa:cd:
3b:ec:c7:6f:19:c0:bd:6a:04:b8:99:9f:45:c0:57:
aa:84:23:20:b0:1e:ed:6f:3f:c1:ee:c8:d0:22:21:
9e:e5:8e:8b:3d:77:7c:6d:2d:e6:fd:75:40:8b:2f:
b8:d0:52:19:21:bf:af:07:0c:10:2d:31:fe:b9:aa:
e5:3c:e3:ea:b5:f4:81:0d:51:c0:97:41:5b:c1:0a:
92:73:97:a6:fb:1f:eb:f9:e2:12:af:f9:b4:92:e8:
87:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:7F:94:B0:76:EB:77:29:BD:EE:2B:F7:9E:14:5C:01:6E:56:35:07
X509v3 Authority Key Identifier:
keyid:B6:FB:C6:3E:F5:61:4A:7E:F9:5A:10:61:88:E3:D7:87:55:C6:87:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tvvGPvVhSn75WhBhiOPXh1XGh7k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/8631f5-54a2-486f-b9a5-081a1ae6ebd6/1/tvvGPvVhSn75WhBhiOPXh1XGh7k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/8631f5-54a2-486f-b9a5-081a1ae6ebd6/1/tvvGPvVhSn75WhBhiOPXh1XGh7k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:c8:03:81:2e:9b:fc:f9:32:90:4d:51:7c:9e:0f:76:d7:34:
30:e9:02:b6:39:73:b6:58:13:8f:e5:fe:3c:15:8b:7f:92:03:
66:b0:4b:38:22:91:d3:cc:97:ed:db:41:d1:31:3a:25:7f:5a:
8f:ca:2d:3c:6f:d0:6e:3c:81:c5:64:4f:4b:47:c2:f7:4c:b5:
ee:39:a7:f0:54:89:73:76:fd:ad:d9:6d:e0:79:41:3a:23:c5:
58:54:37:b3:74:f7:20:39:80:2f:3a:7e:94:0d:0f:0c:5e:dd:
63:47:3f:86:53:2c:52:d1:4d:a4:f9:f0:e5:44:d3:89:02:9a:
06:c5:91:61:fc:74:81:7e:fd:bf:53:86:06:a1:04:0f:17:8e:
7a:ed:fb:85:79:66:8d:87:b4:5f:51:33:d9:50:a2:69:fa:23:
c5:2e:ce:36:d1:d2:63:79:cd:29:e8:68:a9:a0:26:e7:71:6c:
10:01:13:2b:df:f6:f8:0c:90:95:43:24:32:30:e3:d3:22:e0:
d2:d3:1b:d2:d9:42:fa:53:b6:93:fb:e3:c3:b8:e0:e6:1d:18:
bb:d5:20:5c:74:06:fd:90:5b:44:4b:dd:00:25:94:22:1f:68:
15:9b:98:21:27:d6:48:f0:ce:dc:6c:b8:87:4c:c5:b1:fd:f8:
30:7d:62:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:11:28 2025 by rpki-client