Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/975c5e-6b05-4a47-9e91-13699365c3c7/1/Ts9hevNfNyTn2oYOv75OwTiuGAA.mft
File: Ts9hevNfNyTn2oYOv75OwTiuGAA.mft (raw, json)
Hash identifier: uocJrHD5+GF/l+KYhr3b7T7i76RHm3YdmYdyRpdtK6g=
Subject key identifier: 8F:34:51:79:87:1C:EE:1D:FF:FE:C0:59:9C:F2:28:BD:2D:E6:BA:C1
Authority key identifier: 4E:CF:61:7A:F3:5F:37:24:E7:DA:86:0E:BF:BE:4E:C1:38:AE:18:00
Certificate issuer: /CN=4ecf617af35f3724e7da860ebfbe4ec138ae1800
Certificate serial: 0199FD3429AEEA82B022CCBF808A293631BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ts9hevNfNyTn2oYOv75OwTiuGAA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/975c5e-6b05-4a47-9e91-13699365c3c7/1/Ts9hevNfNyTn2oYOv75OwTiuGAA.mft
Manifest number: 1427
Signing time: Sun 19 Oct 2025 16:01:18 +0000
Manifest this update: Sun 19 Oct 2025 16:01:18 +0000
Manifest next update: Mon 20 Oct 2025 16:01:18 +0000
Files and hashes: 1: PhMpSawzWF4ex2C_9UJlDInR9Qw.roa (hash: 8Mwytw2cAElmiryd1WCNePGo22yW+hClbYeRH6uFgoU=)
2: Ts9hevNfNyTn2oYOv75OwTiuGAA.crl (hash: Ng3c9l4cKzm/2eZTAaqywgolA3EPZeTFZwv0RPpNNmE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/975c5e-6b05-4a47-9e91-13699365c3c7/1/Ts9hevNfNyTn2oYOv75OwTiuGAA.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/975c5e-6b05-4a47-9e91-13699365c3c7/1/Ts9hevNfNyTn2oYOv75OwTiuGAA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ts9hevNfNyTn2oYOv75OwTiuGAA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:34:29:ae:ea:82:b0:22:cc:bf:80:8a:29:36:31:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ecf617af35f3724e7da860ebfbe4ec138ae1800
Validity
Not Before: Oct 19 16:01:18 2025 GMT
Not After : Oct 20 16:01:18 2025 GMT
Subject: CN=8f345179871cee1dfffec0599cf228bd2de6bac1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:97:93:37:c1:70:46:cd:a7:49:3f:55:16:23:
ba:41:e8:2f:a7:89:b0:6d:62:53:9c:ae:53:f3:1e:
71:0f:9e:d2:51:58:bf:db:31:f3:88:be:6d:4d:25:
ee:6e:17:76:60:d5:1c:cb:f6:d5:00:e1:f6:a7:f6:
91:5d:32:71:03:c7:cc:4d:fc:ab:4f:ed:e3:36:04:
5c:db:7a:44:ee:99:f1:e1:dd:41:37:77:2a:af:7b:
94:ec:fd:16:5f:2b:3e:e6:9f:b1:85:ad:20:10:11:
e4:19:94:e9:46:e2:bd:41:2e:d8:f9:15:15:e9:c0:
37:87:69:01:2a:d3:6b:91:c7:d1:48:f1:d9:cb:ad:
1b:37:3c:00:8c:16:45:64:39:7a:4f:fd:02:5c:40:
4f:1c:80:7d:75:68:66:b8:b8:4c:e1:ff:fe:5b:7f:
63:78:8f:f4:d3:24:ab:f5:0d:2a:20:b2:27:91:11:
89:aa:ce:6d:d4:9d:e3:84:bb:d7:3c:07:f0:b6:b8:
1c:ab:38:9f:59:28:bc:87:75:0e:96:5e:0c:79:b9:
db:a8:01:80:22:fb:32:42:8b:52:8d:95:a6:f5:d4:
e2:77:bc:2e:f0:3a:98:01:f0:8c:e2:11:7e:20:cc:
21:82:5e:a8:7d:6b:89:c8:fd:65:08:e6:ed:98:e9:
4f:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:34:51:79:87:1C:EE:1D:FF:FE:C0:59:9C:F2:28:BD:2D:E6:BA:C1
X509v3 Authority Key Identifier:
keyid:4E:CF:61:7A:F3:5F:37:24:E7:DA:86:0E:BF:BE:4E:C1:38:AE:18:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ts9hevNfNyTn2oYOv75OwTiuGAA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/975c5e-6b05-4a47-9e91-13699365c3c7/1/Ts9hevNfNyTn2oYOv75OwTiuGAA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/975c5e-6b05-4a47-9e91-13699365c3c7/1/Ts9hevNfNyTn2oYOv75OwTiuGAA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:d3:d4:ae:4a:57:f8:f4:1f:de:89:7f:80:39:7d:be:24:97:
a2:61:0c:b6:e2:99:ba:d7:de:b2:9a:5c:04:12:c2:87:d4:da:
fc:e4:d1:9c:ef:b1:f4:77:33:41:9e:0e:9c:1a:7a:97:8a:2d:
0a:b4:93:c5:f0:ed:aa:2c:f4:6b:15:79:0c:bc:d6:0f:11:b5:
f3:b9:d1:5a:24:58:3c:b9:f7:39:38:95:6f:f1:33:b9:65:f7:
84:5d:a6:84:0a:84:cf:24:84:17:80:2f:e1:97:01:b9:c0:30:
78:44:7b:d0:5d:db:02:59:65:f1:81:dd:c0:5e:f0:7b:53:2e:
7a:cc:98:72:2a:9a:17:d1:b2:bb:52:62:a2:da:26:a6:1f:fb:
5e:fa:9f:23:e1:8d:fa:49:10:34:b9:ca:4b:ec:47:c8:a1:5c:
f3:2b:44:32:3f:e3:3a:13:60:5b:7e:23:9a:c4:a4:ac:c8:cb:
3a:72:17:2a:11:57:42:28:6e:12:25:b3:2f:44:07:d5:41:66:
98:00:62:99:fb:a7:f3:55:3a:a0:db:bb:5f:25:f9:ba:24:05:
21:a8:15:42:63:27:4d:19:35:4b:2d:c4:a1:91:07:08:53:21:
b6:6d:3c:6a:82:15:79:7a:3c:64:0f:5e:da:12:66:91:b1:bd:
2a:09:ad:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:31:42 2025 by rpki-client