Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/9e9122-bbff-48d9-98c6-0a4286f3cfbe/1/tfV-SevwmLxT6Ns4iIHJI2nZv4w.mft
File: tfV-SevwmLxT6Ns4iIHJI2nZv4w.mft (raw, json)
Hash identifier: cSkob7i5oi/fnrE8GlFYIhJTzuX6Vqj9gof6VbWItQQ=
Subject key identifier: 8A:1D:1E:92:EB:05:FC:D0:2A:D8:D8:1B:71:56:E5:63:53:57:61:A2
Authority key identifier: B5:F5:7E:49:EB:F0:98:BC:53:E8:DB:38:88:81:C9:23:69:D9:BF:8C
Certificate issuer: /CN=b5f57e49ebf098bc53e8db388881c92369d9bf8c
Certificate serial: 0199FC588D7193037C57717EFECE6D6B0767
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tfV-SevwmLxT6Ns4iIHJI2nZv4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/9e9122-bbff-48d9-98c6-0a4286f3cfbe/1/tfV-SevwmLxT6Ns4iIHJI2nZv4w.mft
Manifest number: 1465
Signing time: Sun 19 Oct 2025 12:01:25 +0000
Manifest this update: Sun 19 Oct 2025 12:01:25 +0000
Manifest next update: Mon 20 Oct 2025 12:01:25 +0000
Files and hashes: 1: HqctvWxlrIEslD4ELNpmV-XhZkU.roa (hash: CGfhQ4fck7gcAxsslFd0Q8T9jYmDIbHyBLNxPR9Qais=)
2: bKSpPE5-kXmlbnT7r_1atj4jQSY.roa (hash: L3QXcpXiam9j36oZrcZebMrghkDu87SD2DJXHj63ivw=)
3: tfV-SevwmLxT6Ns4iIHJI2nZv4w.crl (hash: 42Vc4fevT/Oduw77/BbFN303anaXclhVzhLdXYFyR88=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/9e9122-bbff-48d9-98c6-0a4286f3cfbe/1/tfV-SevwmLxT6Ns4iIHJI2nZv4w.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/9e9122-bbff-48d9-98c6-0a4286f3cfbe/1/tfV-SevwmLxT6Ns4iIHJI2nZv4w.mft
rsync://rpki.ripe.net/repository/DEFAULT/tfV-SevwmLxT6Ns4iIHJI2nZv4w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:8d:71:93:03:7c:57:71:7e:fe:ce:6d:6b:07:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5f57e49ebf098bc53e8db388881c92369d9bf8c
Validity
Not Before: Oct 19 12:01:25 2025 GMT
Not After : Oct 20 12:01:25 2025 GMT
Subject: CN=8a1d1e92eb05fcd02ad8d81b7156e563535761a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:33:de:38:72:cd:74:9e:01:59:20:51:89:1a:
65:1c:a4:43:dc:d1:7c:4b:a6:cb:62:d4:56:87:e5:
38:ab:a1:46:13:c9:0d:5e:e6:13:79:2a:56:bd:93:
71:61:7f:9b:dd:9f:40:af:4d:76:38:1f:b4:03:37:
49:67:e7:86:93:9b:a7:c9:6d:ff:3a:e2:6b:79:a6:
db:d1:04:6f:7e:f7:2c:b0:66:8e:86:e4:1c:3d:97:
6e:89:9e:f1:ca:ea:65:41:7b:7f:42:7f:55:9d:8c:
a4:c8:eb:db:5c:5e:6d:5f:a6:b7:20:89:0d:60:d4:
43:f7:0f:71:d2:a2:95:47:da:a6:d2:2f:47:c8:f6:
7f:d1:5c:9b:2e:fa:a2:f5:69:4e:6d:78:31:c6:d1:
aa:32:6d:88:51:97:51:aa:eb:35:03:86:f7:23:48:
4b:f1:18:9a:fe:ca:b4:e9:87:43:1d:b1:fc:30:3c:
76:0a:73:0e:ff:94:97:bc:6a:34:cc:c6:bd:3f:22:
26:13:37:a0:a3:5a:d8:94:e7:a2:90:dd:03:17:cc:
83:bb:07:a2:bd:03:12:e5:15:99:3c:82:3b:d9:84:
83:96:4d:f8:e8:26:15:9c:bf:4f:2d:87:7e:f9:b8:
02:06:23:d5:b8:c8:f3:cc:a4:dc:0a:c0:c5:52:7e:
52:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:1D:1E:92:EB:05:FC:D0:2A:D8:D8:1B:71:56:E5:63:53:57:61:A2
X509v3 Authority Key Identifier:
keyid:B5:F5:7E:49:EB:F0:98:BC:53:E8:DB:38:88:81:C9:23:69:D9:BF:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tfV-SevwmLxT6Ns4iIHJI2nZv4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/9e9122-bbff-48d9-98c6-0a4286f3cfbe/1/tfV-SevwmLxT6Ns4iIHJI2nZv4w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/9e9122-bbff-48d9-98c6-0a4286f3cfbe/1/tfV-SevwmLxT6Ns4iIHJI2nZv4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:4e:6a:6c:0e:61:a9:df:a5:0a:c9:8d:d9:b3:e1:93:49:e9:
a1:22:6f:0c:97:a2:0c:e1:f5:8e:c5:a5:b9:d5:02:1a:17:c9:
23:04:c5:3c:03:71:f9:77:7f:39:e8:a9:ea:d1:c1:bb:25:d9:
b5:e6:74:9a:17:80:8f:98:fc:3d:bb:4d:00:ae:da:40:b1:a1:
bc:e9:c6:ad:78:38:ff:a6:a2:02:f6:04:e4:f6:b4:48:ff:cb:
37:de:cd:96:cf:ce:fb:b9:da:a5:0b:31:c4:37:09:4e:a2:fa:
79:18:be:70:3d:ef:dd:8c:fc:2e:df:c9:7a:93:84:04:49:37:
d3:21:8c:63:cf:7d:77:82:c8:83:06:d2:7b:bf:8c:2c:85:fc:
dc:ad:80:b8:f2:cc:24:40:3c:a9:21:a2:4a:d6:61:79:19:8e:
e0:95:be:82:94:0a:48:cd:50:9d:d1:42:93:e4:6c:e9:77:c9:
8e:56:76:14:4d:cc:e0:ac:63:9b:ea:8e:73:43:df:98:50:f0:
25:2a:4b:de:66:30:79:29:87:ee:00:10:c7:d5:14:73:5e:32:
8f:6b:d3:08:7d:fb:a9:cf:d2:94:9b:ee:5c:15:e8:07:fc:8b:
15:46:ad:76:0c:c9:4f:07:22:9c:bd:b0:8e:20:0d:6a:02:83:
93:21:59:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:36:55 2025 by rpki-client