Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/daf212-f009-4bd4-874d-624c3e788cdf/1/tmDXgyCGDV7-cp4gi160sqvr4Hg.mft
File: tmDXgyCGDV7-cp4gi160sqvr4Hg.mft (raw, json)
Hash identifier: A+THoLFjou/cr89hzRmvxIzV6LKRxgTfW+T+3dToIW4=
Subject key identifier: 76:1D:9E:27:19:AE:1F:BF:C4:52:8A:10:93:C4:47:DD:5B:1B:0A:C9
Authority key identifier: B6:60:D7:83:20:86:0D:5E:FE:72:9E:20:8B:5E:B4:B2:AB:EB:E0:78
Certificate issuer: /CN=b660d78320860d5efe729e208b5eb4b2abebe078
Certificate serial: 0199FEEBA03A748E08F78969DABFAAD99D64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tmDXgyCGDV7-cp4gi160sqvr4Hg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/daf212-f009-4bd4-874d-624c3e788cdf/1/tmDXgyCGDV7-cp4gi160sqvr4Hg.mft
Manifest number: 0C96
Signing time: Mon 20 Oct 2025 00:01:18 +0000
Manifest this update: Mon 20 Oct 2025 00:01:18 +0000
Manifest next update: Tue 21 Oct 2025 00:01:18 +0000
Files and hashes: 1: H_s46FVu3VtqmBdzQOsgFtOpwm4.roa (hash: xXfRZ05adaRJT3b+JBMiwuYhoS+v9eiqRiPqJaWYY3s=)
2: tmDXgyCGDV7-cp4gi160sqvr4Hg.crl (hash: bqDigD+2GNr2ErZdWT76EHeBPn28Qrc/d6AiVD219HQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/daf212-f009-4bd4-874d-624c3e788cdf/1/tmDXgyCGDV7-cp4gi160sqvr4Hg.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/daf212-f009-4bd4-874d-624c3e788cdf/1/tmDXgyCGDV7-cp4gi160sqvr4Hg.mft
rsync://rpki.ripe.net/repository/DEFAULT/tmDXgyCGDV7-cp4gi160sqvr4Hg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:eb:a0:3a:74:8e:08:f7:89:69:da:bf:aa:d9:9d:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b660d78320860d5efe729e208b5eb4b2abebe078
Validity
Not Before: Oct 20 00:01:18 2025 GMT
Not After : Oct 21 00:01:18 2025 GMT
Subject: CN=761d9e2719ae1fbfc4528a1093c447dd5b1b0ac9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:c5:68:47:fd:18:14:6c:cf:f0:03:1a:c8:9a:
50:1e:da:34:70:86:4c:b3:dd:d0:ea:6e:7b:41:eb:
eb:94:af:64:5c:91:c3:7a:53:0f:41:be:62:e5:af:
c0:e8:6e:af:a9:85:85:a2:7a:45:25:bd:e5:f4:08:
99:08:ea:fd:b2:1a:ab:56:e9:8d:31:9a:52:58:43:
0c:8a:c0:dc:f3:33:d1:c7:2d:9f:23:ac:92:c3:7d:
ff:1c:b3:53:37:39:14:20:a8:04:ed:50:5a:a1:27:
71:fd:79:8a:68:3f:5b:6b:c4:fe:d3:1a:22:fb:ad:
21:30:1f:bb:18:1c:1d:ee:53:07:a3:56:85:29:bb:
6c:dc:7e:94:10:00:cd:96:e0:a1:63:46:fe:0c:f0:
b7:01:15:b9:a8:f5:c4:e6:04:09:88:12:8d:04:f0:
be:4e:8c:a8:1a:28:49:35:b5:53:15:45:1a:e1:dc:
34:bc:8f:38:37:68:3c:83:11:fa:83:4d:e9:41:0e:
e4:d5:93:39:95:5e:bd:57:5d:af:56:1d:0a:f4:b4:
93:30:e6:91:a0:52:3c:93:11:bd:80:17:23:3c:1b:
0e:af:52:4f:61:1e:20:99:ed:93:4f:5b:00:bf:71:
d2:d9:b4:bc:98:3c:df:2a:a2:37:4c:21:8d:76:bf:
2d:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:1D:9E:27:19:AE:1F:BF:C4:52:8A:10:93:C4:47:DD:5B:1B:0A:C9
X509v3 Authority Key Identifier:
keyid:B6:60:D7:83:20:86:0D:5E:FE:72:9E:20:8B:5E:B4:B2:AB:EB:E0:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tmDXgyCGDV7-cp4gi160sqvr4Hg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/daf212-f009-4bd4-874d-624c3e788cdf/1/tmDXgyCGDV7-cp4gi160sqvr4Hg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/daf212-f009-4bd4-874d-624c3e788cdf/1/tmDXgyCGDV7-cp4gi160sqvr4Hg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:04:16:2b:b3:a5:af:94:a9:ee:5c:8a:fe:2c:68:81:b0:df:
34:72:d7:c3:68:80:7b:d0:5f:a3:1e:b7:33:cb:a0:5b:ec:34:
36:0f:bf:b7:db:1c:94:b7:e9:69:89:25:24:6b:39:35:1e:ff:
5d:3b:13:aa:eb:c6:6d:8f:86:28:f0:76:d0:24:9b:61:25:f6:
ef:e3:22:9b:0e:a9:0c:b2:0f:db:f1:7f:08:3e:1a:f8:d6:1e:
b1:cb:c1:8a:c2:c5:a7:b3:0d:49:fe:88:82:35:65:cb:db:1a:
56:fe:b2:49:55:f0:a5:32:ab:77:a7:4b:a0:58:f3:c1:91:1e:
ea:38:3c:45:de:1c:29:cc:9c:41:99:59:b9:af:ea:9a:43:8c:
43:80:7b:7e:9f:af:5e:2f:f1:f3:0b:9d:18:fc:b5:d2:f0:12:
4a:03:fb:1c:82:84:2e:04:f1:80:98:3c:b6:7d:be:b4:db:b3:
ad:97:16:c6:28:ca:05:07:0e:45:f7:3f:d5:cb:68:e5:e7:fc:
90:7f:c7:2d:c1:eb:52:f5:a1:18:a7:86:d5:0d:62:5c:73:df:
1a:66:0e:80:f5:9c:52:e8:dc:e7:8e:9e:bc:fb:e9:58:02:cc:
5e:c0:c2:f2:2c:01:c1:2d:88:a0:8d:4a:a3:1b:60:c4:f8:d5:
5b:15:96:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 03:41:23 2025 by rpki-client