Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/tFmZiZ920uLkzN_IF_mHnPrAa74.mft
File: tFmZiZ920uLkzN_IF_mHnPrAa74.mft (raw, json)
Hash identifier: Voo27gWx5rQ848KvtSFup/N8o5MUbei/q6wxfZ4V8go=
Subject key identifier: F2:13:B3:55:51:B8:15:76:D7:FC:7D:46:4C:03:E6:B1:F2:FF:94:BA
Authority key identifier: B4:59:99:89:9F:76:D2:E2:E4:CC:DF:C8:17:F9:87:9C:FA:C0:6B:BE
Certificate issuer: /CN=b45999899f76d2e2e4ccdfc817f9879cfac06bbe
Certificate serial: 0199FDD9F7C986CC035AB32E5DC102F237A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tFmZiZ920uLkzN_IF_mHnPrAa74.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/tFmZiZ920uLkzN_IF_mHnPrAa74.mft
Manifest number: 0FA1
Signing time: Sun 19 Oct 2025 19:02:24 +0000
Manifest this update: Sun 19 Oct 2025 19:02:24 +0000
Manifest next update: Mon 20 Oct 2025 19:02:24 +0000
Files and hashes: 1: 3zqfORCdmAQhCBJ7wuytTgGzZpo.roa (hash: +GYcuS49a0taqSXWJ2e7eMKTOj5Srw2BrzQEPcEzHkQ=)
2: bVwdAY_3tzeIYh1lGjq9dC2K998.roa (hash: Cy+JJP0r30GikInnGPQvx8BcElRVxD8+sorOU6VuUOU=)
3: kzkxlAjNluX99z1bTtF79HY_wp4.roa (hash: TFi7zUlhEhQqH665vNFOO2zhHl+RI/6mE+V//oHUM0w=)
4: tFmZiZ920uLkzN_IF_mHnPrAa74.crl (hash: xuOLRaAA1k/vhQj+I+z8ldRf7lx3V0HI1i70pj3Yi4Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/tFmZiZ920uLkzN_IF_mHnPrAa74.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/tFmZiZ920uLkzN_IF_mHnPrAa74.mft
rsync://rpki.ripe.net/repository/DEFAULT/tFmZiZ920uLkzN_IF_mHnPrAa74.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d9:f7:c9:86:cc:03:5a:b3:2e:5d:c1:02:f2:37:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b45999899f76d2e2e4ccdfc817f9879cfac06bbe
Validity
Not Before: Oct 19 19:02:24 2025 GMT
Not After : Oct 20 19:02:24 2025 GMT
Subject: CN=f213b35551b81576d7fc7d464c03e6b1f2ff94ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:25:64:ce:a5:c1:ff:b9:3c:c2:8d:f5:fa:3b:
23:cc:e8:68:0a:8e:35:5b:ef:7c:47:67:c3:be:31:
f6:97:43:f6:83:ee:e1:03:17:41:73:54:c1:6f:a1:
53:f1:5b:4e:83:25:fb:1b:d4:89:46:14:fb:43:22:
92:3c:ea:85:c2:74:32:37:5b:80:d8:d1:1f:f3:c6:
88:ef:04:cd:79:0e:2e:0f:e9:e3:90:ef:39:3c:6c:
cf:73:13:34:04:9a:26:53:34:3e:89:38:e3:51:c8:
0a:36:45:94:6d:98:b2:6b:fc:23:5d:80:97:c9:5b:
5d:ca:94:ca:13:c8:f6:21:d5:e4:1c:5d:14:4f:54:
89:41:ba:66:0e:ec:ce:1c:a1:0d:e5:22:c9:95:43:
5d:96:3e:2a:1c:9f:51:03:9a:ef:ce:64:90:80:c5:
cc:64:5a:4d:78:23:52:b1:e7:31:49:44:8f:2d:d8:
7b:f8:09:7f:0e:6c:70:80:9d:4e:1d:69:87:2c:19:
69:e4:71:8e:74:ae:ee:6c:04:e1:86:1b:a6:80:a1:
78:6d:d6:71:f8:cb:62:50:86:06:c8:69:41:c1:7e:
6a:3d:56:f8:f4:91:69:fe:33:00:89:2d:90:14:3e:
40:d5:08:59:ec:9f:1b:fd:84:bf:72:b5:27:4d:f7:
d2:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:13:B3:55:51:B8:15:76:D7:FC:7D:46:4C:03:E6:B1:F2:FF:94:BA
X509v3 Authority Key Identifier:
keyid:B4:59:99:89:9F:76:D2:E2:E4:CC:DF:C8:17:F9:87:9C:FA:C0:6B:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tFmZiZ920uLkzN_IF_mHnPrAa74.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/tFmZiZ920uLkzN_IF_mHnPrAa74.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/tFmZiZ920uLkzN_IF_mHnPrAa74.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:e1:35:3b:ea:7b:54:98:56:8e:bf:20:b3:a0:c5:78:74:e7:
af:db:ac:a5:3b:7f:af:fa:47:fa:6c:53:ef:48:a5:5d:79:33:
09:63:18:4e:0a:51:8b:2a:6e:84:98:b7:e3:39:91:d5:63:d8:
51:8d:fd:87:06:21:54:a2:10:f6:13:3d:72:e7:ee:9c:2e:03:
97:ae:d4:6f:61:f0:34:ce:30:17:ac:0f:91:c0:d4:cd:62:2b:
23:5e:0f:cb:03:7f:5e:37:f8:a8:f5:a4:c1:fc:a4:cf:c5:5b:
b5:3d:93:77:59:2f:10:e1:56:1d:20:bc:b9:21:dd:b3:41:dd:
4a:50:47:86:a0:c1:1c:cf:a7:f9:aa:a3:82:23:7a:3b:d5:ba:
36:e6:0f:7b:91:4b:da:ca:7c:0b:cd:2d:01:ff:28:39:86:f7:
0f:6c:30:4c:1c:0a:97:ba:90:29:90:4f:fc:de:88:43:d8:fa:
7e:28:45:62:48:08:5b:34:3b:6d:9a:36:34:eb:b6:2c:30:d4:
3a:04:d4:59:bd:1c:dc:db:76:b8:9d:9b:62:52:77:c8:3c:32:
53:23:25:cd:17:db:17:64:42:80:fc:3d:1a:62:90:52:78:7c:
82:66:a7:65:92:da:9b:10:93:16:30:e9:dc:02:1d:89:41:0a:
41:b4:1d:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:47:17 2025 by rpki-client