Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/52f5ad-850d-4a7e-9946-3b745dd8e21e/1/tAI8jFGPpCn_yiWXe2qPhD-PDEo.mft
File: tAI8jFGPpCn_yiWXe2qPhD-PDEo.mft (raw, json)
Hash identifier: ncJlDlbfgWn5UsPedySsAppGnZSR+C3IYuY36Z61S/E=
Subject key identifier: 9B:D6:35:C4:A3:90:74:69:2B:0B:7C:C5:E9:6E:CB:70:E7:04:5A:48
Authority key identifier: B4:02:3C:8C:51:8F:A4:29:FF:CA:25:97:7B:6A:8F:84:3F:8F:0C:4A
Certificate issuer: /CN=b4023c8c518fa429ffca25977b6a8f843f8f0c4a
Certificate serial: 0199FD3457D8BB63EA50EEE141CEF37D06AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tAI8jFGPpCn_yiWXe2qPhD-PDEo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/52f5ad-850d-4a7e-9946-3b745dd8e21e/1/tAI8jFGPpCn_yiWXe2qPhD-PDEo.mft
Manifest number: 16E0
Signing time: Sun 19 Oct 2025 16:01:30 +0000
Manifest this update: Sun 19 Oct 2025 16:01:30 +0000
Manifest next update: Mon 20 Oct 2025 16:01:30 +0000
Files and hashes: 1: R61HPMD68kIaSjuhapTR2hk_o_k.roa (hash: eWM7uVRHKJ0h/TzbbEISOsoLOvqx2gFtMEnPl7A/Y18=)
2: tAI8jFGPpCn_yiWXe2qPhD-PDEo.crl (hash: ohukg3oiroKVW64HD2ExEU8gV/OP5bCp/RDJCBC/2vY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/52f5ad-850d-4a7e-9946-3b745dd8e21e/1/tAI8jFGPpCn_yiWXe2qPhD-PDEo.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/52f5ad-850d-4a7e-9946-3b745dd8e21e/1/tAI8jFGPpCn_yiWXe2qPhD-PDEo.mft
rsync://rpki.ripe.net/repository/DEFAULT/tAI8jFGPpCn_yiWXe2qPhD-PDEo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 16:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:34:57:d8:bb:63:ea:50:ee:e1:41:ce:f3:7d:06:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4023c8c518fa429ffca25977b6a8f843f8f0c4a
Validity
Not Before: Oct 19 16:01:30 2025 GMT
Not After : Oct 20 16:01:30 2025 GMT
Subject: CN=9bd635c4a39074692b0b7cc5e96ecb70e7045a48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:30:49:a1:9a:6d:7f:46:0a:84:7b:3f:c2:b9:
4a:4b:e5:1d:26:f2:cb:1a:59:eb:dd:49:4f:db:d2:
a0:22:5d:73:3a:d4:de:4c:f1:a5:44:3b:54:20:31:
bd:ae:a0:51:b4:3a:74:2a:c2:4f:b3:a8:2e:86:11:
42:9b:24:ca:26:e3:73:7e:bd:f0:60:83:54:b9:cb:
d2:a6:c6:b7:0d:dd:e1:eb:73:6c:c2:6f:8c:aa:9d:
8d:71:b1:d3:77:db:2b:72:8b:75:88:84:98:39:38:
bc:b3:ea:7c:66:ea:af:4f:fa:63:a6:1b:5f:a2:78:
9f:1a:9f:e7:0e:e1:3a:bf:a5:a5:dd:6d:0f:fd:94:
44:40:75:b8:73:4b:7d:4a:d2:5f:f8:93:53:e0:88:
94:a3:3d:98:9e:d1:ed:ae:9e:c9:15:c9:04:00:1a:
5b:25:86:39:32:0a:b7:95:32:14:ea:33:8d:a9:fe:
0e:c5:e7:67:cd:f2:f1:e8:19:81:80:68:ea:b8:67:
f2:74:ae:24:a7:df:11:c6:c2:4d:3f:8a:6f:c7:df:
d4:c7:41:1d:65:de:f6:6e:4e:7c:65:32:72:24:dd:
e0:84:1a:f8:cc:71:14:c3:cd:fd:31:b3:66:40:2b:
1d:67:bc:81:ad:23:4a:4a:cd:40:18:3c:c2:a9:6a:
dd:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:D6:35:C4:A3:90:74:69:2B:0B:7C:C5:E9:6E:CB:70:E7:04:5A:48
X509v3 Authority Key Identifier:
keyid:B4:02:3C:8C:51:8F:A4:29:FF:CA:25:97:7B:6A:8F:84:3F:8F:0C:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tAI8jFGPpCn_yiWXe2qPhD-PDEo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/52f5ad-850d-4a7e-9946-3b745dd8e21e/1/tAI8jFGPpCn_yiWXe2qPhD-PDEo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/52f5ad-850d-4a7e-9946-3b745dd8e21e/1/tAI8jFGPpCn_yiWXe2qPhD-PDEo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:f1:b1:92:07:82:7e:ca:14:44:c3:11:02:88:32:e2:a0:94:
e3:a7:99:4f:2e:a7:2f:d9:04:98:98:0b:cf:e4:65:85:70:5d:
46:37:64:8f:33:ee:d6:9e:eb:d7:d3:97:0e:33:a6:38:4d:28:
82:46:1f:d1:51:1c:9a:f3:00:5b:7a:72:ef:dc:3a:0e:3d:50:
33:44:a6:03:9a:7c:57:80:e5:25:47:e4:67:ff:c2:06:14:c5:
d5:cf:01:fb:e9:36:f7:17:92:5a:3a:45:c9:57:54:5d:bc:36:
29:e9:54:63:f9:cb:28:ad:31:87:73:bf:56:52:2e:f0:42:ba:
e9:de:5a:e1:05:7d:59:3a:ea:2c:ad:f7:b6:f8:f8:6c:16:ef:
c1:23:eb:47:52:3e:c7:97:71:68:b0:5c:8f:77:3b:68:3f:5c:
bd:07:99:ca:f0:b8:92:59:f4:34:e8:24:fa:96:58:02:b6:91:
9a:25:f3:09:1d:cf:c8:71:21:32:6c:e2:25:2d:0f:e6:d9:60:
22:68:7a:17:2d:3e:01:09:43:f0:30:69:0d:26:36:12:80:e3:
9f:42:a7:34:d2:1e:90:a3:b6:c3:c7:7e:1d:20:bd:a1:d5:97:
35:5c:45:a9:db:48:ed:12:b5:92:d4:89:4b:0d:fd:71:3c:12:
56:ac:59:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:15:26 2025 by rpki-client