
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.mft
File: t1oFZtC2Oh-GLYNFjk8upv2PfSE.mft (raw, json)
Hash identifier: TkAhezfmzMF/12jKJv3cbpkm18pHlUU8cfLmQ8kcD/0=
Subject key identifier: 97:8F:CA:4B:FE:65:73:E6:96:69:19:34:0D:FC:FC:F0:88:99:29:D5
Authority key identifier: B7:5A:05:66:D0:B6:3A:1F:86:2D:83:45:8E:4F:2E:A6:FD:8F:7D:21
Certificate issuer: /CN=b75a0566d0b63a1f862d83458e4f2ea6fd8f7d21
Certificate serial: 0199FE0FF6C2C5ECFCDE7A7D41B1DA42931F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t1oFZtC2Oh-GLYNFjk8upv2PfSE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.mft
Manifest number: 16E7
Signing time: Sun 19 Oct 2025 20:01:23 +0000
Manifest this update: Sun 19 Oct 2025 20:01:23 +0000
Manifest next update: Mon 20 Oct 2025 20:01:23 +0000
Files and hashes: 1: 0qa8r-MxNMLt6tCXa-K5V6QBkro.roa (hash: oU+YFw1zeHKoa31/el8AmGzlkf3ldrnYHs0Qc542gzw=)
2: 2s9R-8NKLGYziws7CzdBBuI05qY.roa (hash: 8cPZV8bL1izy9SNqvDNd1+gha6xq2vYnb61KexJW8KE=)
3: 8trwTS6zWWIc2CXU2a9uB3EK1CE.roa (hash: cB6Sm/NTvhdg/vAHTGU6288+fVcpUIfblu8fCuXy72c=)
4: t1oFZtC2Oh-GLYNFjk8upv2PfSE.crl (hash: I1UZRABsBN+WYWGG4v4IZ5EU2CZyLygxuMPGlzQLIfw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.mft
rsync://rpki.ripe.net/repository/DEFAULT/t1oFZtC2Oh-GLYNFjk8upv2PfSE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:0f:f6:c2:c5:ec:fc:de:7a:7d:41:b1:da:42:93:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b75a0566d0b63a1f862d83458e4f2ea6fd8f7d21
Validity
Not Before: Oct 19 20:01:23 2025 GMT
Not After : Oct 20 20:01:23 2025 GMT
Subject: CN=978fca4bfe6573e6966919340dfcfcf0889929d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:5a:9d:6b:be:a9:5e:37:c4:a1:e5:e8:42:72:
7b:92:be:6b:a4:e8:ff:fd:42:32:74:2e:d4:68:a3:
61:fd:7b:59:46:16:87:b9:e0:9a:86:30:5a:01:9c:
03:45:66:82:51:92:a7:e4:eb:c5:05:a9:04:89:46:
16:a9:fd:eb:07:07:ef:9a:ac:a7:af:9e:37:b6:16:
0a:04:7f:8a:a8:f6:08:16:68:e2:ca:31:eb:2c:08:
a1:97:9b:d2:00:da:51:f6:33:17:8b:68:cf:5e:27:
89:e7:a2:e4:37:fa:83:a4:cf:d7:bb:ad:61:a2:ad:
fa:d3:ed:09:40:7f:54:f1:e4:e6:35:9c:32:54:45:
31:a4:ce:a5:c2:a0:9f:e6:6a:a0:f9:74:26:03:91:
a9:9c:e6:52:85:a8:39:55:3a:29:3c:1f:4d:ee:6f:
6b:33:82:b5:e3:f7:98:0a:b7:6e:3a:d1:e7:33:63:
f1:1a:87:b3:c9:d8:3b:a2:dc:dd:a0:7f:91:42:5b:
7d:13:62:37:98:e6:42:dc:90:70:3a:9e:6b:21:d3:
2a:90:5e:79:60:8f:de:8a:ad:a7:87:71:0a:e4:24:
69:ff:7d:04:35:d4:80:49:24:8b:3c:21:72:49:c8:
db:3b:84:cc:6d:3f:28:f8:b2:f4:9f:f6:2c:3c:89:
ed:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:8F:CA:4B:FE:65:73:E6:96:69:19:34:0D:FC:FC:F0:88:99:29:D5
X509v3 Authority Key Identifier:
keyid:B7:5A:05:66:D0:B6:3A:1F:86:2D:83:45:8E:4F:2E:A6:FD:8F:7D:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t1oFZtC2Oh-GLYNFjk8upv2PfSE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:ff:58:7d:f0:d3:4c:12:42:c3:23:d9:c5:48:ce:04:65:ae:
7b:50:35:f8:f9:cc:6e:a3:28:32:cc:42:e3:74:98:92:a2:a2:
f7:08:57:fe:56:be:c7:5d:4c:fc:ed:eb:8d:03:b4:8c:d1:44:
f2:f0:3d:29:7c:a8:91:ba:20:72:b7:48:60:a1:56:70:d3:6e:
78:24:4b:74:f5:c1:6c:d8:51:76:02:7a:df:cc:45:3f:26:34:
3e:82:94:32:e6:7c:e3:c0:a3:68:be:9a:1d:42:28:b4:ba:51:
43:6b:67:b5:12:84:63:e9:c1:91:81:6a:7c:56:d6:0a:fc:a1:
cb:9a:87:dc:1c:41:88:bb:3c:9e:b5:46:0a:20:eb:8e:31:16:
02:a7:4a:ec:8e:c8:7b:aa:dc:e0:27:d5:73:e2:44:6a:cb:f9:
92:71:da:b5:a6:d9:c9:3a:6c:64:2a:15:08:38:71:99:c5:4c:
a3:3d:e3:f0:7c:ca:39:16:5c:34:5b:64:b2:aa:67:ce:1c:e2:
c0:87:f7:49:69:3e:0e:41:4f:76:be:b0:64:30:43:41:6d:d8:
0b:08:89:10:71:7c:6c:d0:aa:51:99:21:e7:18:18:8f:b8:78:
53:d2:dc:96:ea:d2:36:90:45:e9:ae:11:b1:e0:df:19:67:e0:
ef:8e:d6:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 05:24:11 2025 by rpki-client