Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/645f6a-2653-4d31-bb4e-1f87976137a0/1/tAifhEgwV6w2RkfIChsjyXa5MBY.mft
File: tAifhEgwV6w2RkfIChsjyXa5MBY.mft (raw, json)
Hash identifier: Xn+LCUapgqxQGR7mozeSfO5YlaB/p+gOP1tK2afvuVQ=
Subject key identifier: 3D:32:89:5C:8C:F4:4F:35:40:AA:30:6F:0D:70:30:7A:D1:2A:F8:6D
Authority key identifier: B4:08:9F:84:48:30:57:AC:36:46:47:C8:0A:1B:23:C9:76:B9:30:16
Certificate issuer: /CN=b4089f84483057ac364647c80a1b23c976b93016
Certificate serial: 0199FFC87B62C0DFF7085C9B31770DAC9121
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tAifhEgwV6w2RkfIChsjyXa5MBY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/645f6a-2653-4d31-bb4e-1f87976137a0/1/tAifhEgwV6w2RkfIChsjyXa5MBY.mft
Manifest number: 16E4
Signing time: Mon 20 Oct 2025 04:02:32 +0000
Manifest this update: Mon 20 Oct 2025 04:02:32 +0000
Manifest next update: Tue 21 Oct 2025 04:02:32 +0000
Files and hashes: 1: ZZlyR1qePInNwWMshU_T-zKOIRs.roa (hash: 1/uH+W7Kksp46/1+HMCQDG/zqQ+/+VqifvgRn9tMf2U=)
2: tAifhEgwV6w2RkfIChsjyXa5MBY.crl (hash: 8VwAunnp4sZ1/HLStU+aIxjVIzsGvjhBMCmwQanbl0Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/645f6a-2653-4d31-bb4e-1f87976137a0/1/tAifhEgwV6w2RkfIChsjyXa5MBY.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/645f6a-2653-4d31-bb4e-1f87976137a0/1/tAifhEgwV6w2RkfIChsjyXa5MBY.mft
rsync://rpki.ripe.net/repository/DEFAULT/tAifhEgwV6w2RkfIChsjyXa5MBY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 04:02:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:c8:7b:62:c0:df:f7:08:5c:9b:31:77:0d:ac:91:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4089f84483057ac364647c80a1b23c976b93016
Validity
Not Before: Oct 20 04:02:32 2025 GMT
Not After : Oct 21 04:02:32 2025 GMT
Subject: CN=3d32895c8cf44f3540aa306f0d70307ad12af86d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:29:46:3b:79:66:2c:30:08:09:1c:ad:81:04:
5a:48:6e:c3:b8:67:c1:1c:9c:64:b5:4b:81:f6:33:
8a:49:79:89:0d:00:2d:91:a8:b2:29:34:d9:47:de:
cf:7e:85:12:08:4a:ad:9c:5a:00:c4:5a:38:db:65:
dd:38:dc:c4:6f:6f:4b:3e:6b:c7:55:90:ef:b8:e0:
20:b2:95:fe:1d:b8:4c:be:37:55:78:ab:58:2a:be:
c5:de:4f:36:b3:69:cb:07:02:4b:ad:da:4e:f9:21:
b5:85:da:3f:e9:38:51:5e:62:40:66:4f:9a:7a:ab:
ee:a0:12:d1:8a:9e:5c:a9:4f:f7:25:b7:18:78:9c:
0d:d1:25:af:5e:ad:28:69:e3:29:4f:9a:99:9a:13:
6b:25:fa:72:a3:19:55:b3:8c:d0:5a:ff:f6:ba:1d:
f4:dd:ae:ce:c7:cd:dc:fe:e0:b7:d3:70:7f:03:ac:
e5:c0:e1:49:42:29:54:dc:49:eb:19:b7:e4:7b:02:
43:b2:90:eb:f3:77:cf:8d:18:cb:ae:1b:ae:06:8d:
80:3a:3c:7f:13:66:a9:e7:6e:51:d8:b8:a8:a6:0a:
79:ef:65:33:f6:71:15:a8:77:0e:c4:72:28:c6:d9:
9d:fc:56:d2:09:79:34:1c:b0:54:fe:ec:b5:4e:27:
b8:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:32:89:5C:8C:F4:4F:35:40:AA:30:6F:0D:70:30:7A:D1:2A:F8:6D
X509v3 Authority Key Identifier:
keyid:B4:08:9F:84:48:30:57:AC:36:46:47:C8:0A:1B:23:C9:76:B9:30:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tAifhEgwV6w2RkfIChsjyXa5MBY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/645f6a-2653-4d31-bb4e-1f87976137a0/1/tAifhEgwV6w2RkfIChsjyXa5MBY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/645f6a-2653-4d31-bb4e-1f87976137a0/1/tAifhEgwV6w2RkfIChsjyXa5MBY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:b4:92:61:59:a9:c0:b7:39:e7:70:4a:fd:2c:d6:e0:d1:51:
35:14:d6:82:23:f9:d2:a9:c0:de:0d:c3:1d:07:e5:d7:07:c3:
a4:e9:c7:c6:07:b5:32:95:31:38:11:a5:23:b5:0d:e4:ca:a3:
50:23:1b:c5:e4:5f:36:fc:41:52:17:69:16:0f:48:ae:44:17:
a6:11:e1:f2:8d:da:ab:4b:25:db:a4:0e:6a:9e:85:26:b0:f8:
aa:d8:9d:17:e1:ac:a1:77:c4:de:62:fb:df:cf:56:4b:9d:59:
69:3b:0b:80:58:a6:0d:c4:da:75:91:51:6e:0d:2e:6d:c5:49:
a3:37:d8:72:f5:95:e9:18:49:88:7b:5d:02:c9:37:e8:66:cc:
af:59:59:56:df:c5:3f:28:7b:a0:df:4a:c0:6f:5f:d8:c7:ee:
70:67:13:c6:5b:1a:09:31:b2:2c:b4:14:25:af:36:54:e2:47:
ec:c0:49:38:cb:2e:9e:62:72:35:bb:9e:91:61:a2:3e:0a:fd:
25:9c:85:8b:ad:3d:05:b0:09:4f:d1:5c:11:a2:db:b0:be:54:
15:1c:f5:12:2e:ed:16:4c:10:c5:6d:5c:5c:e9:78:ee:cd:d2:
23:3b:51:4e:ba:c6:07:71:87:17:93:c0:60:fd:bb:08:d2:22:
26:02:4f:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:44:11 2025 by rpki-client