Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/4acb83-f940-4766-bca9-608e7d779bc7/1/tGMgGICYUgw2Ynf3SaT3eh1ERDk.mft
File: tGMgGICYUgw2Ynf3SaT3eh1ERDk.mft (raw, json)
Hash identifier: 6nmtgDVjWjKA7swl7TvnP2hNmV+XO3sOxX+oohyIO/E=
Subject key identifier: AB:FC:67:8B:80:9E:48:65:0A:B5:83:50:BD:2E:B4:6E:1F:96:DB:6A
Authority key identifier: B4:63:20:18:80:98:52:0C:36:62:77:F7:49:A4:F7:7A:1D:44:44:39
Certificate issuer: /CN=b46320188098520c366277f749a4f77a1d444439
Certificate serial: 0199FBEC25AF57F93C6AC388737CE860A260
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tGMgGICYUgw2Ynf3SaT3eh1ERDk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/4acb83-f940-4766-bca9-608e7d779bc7/1/tGMgGICYUgw2Ynf3SaT3eh1ERDk.mft
Manifest number: 16E0
Signing time: Sun 19 Oct 2025 10:03:01 +0000
Manifest this update: Sun 19 Oct 2025 10:03:01 +0000
Manifest next update: Mon 20 Oct 2025 10:03:01 +0000
Files and hashes: 1: 1c-Abo0LxBVDDE4sBrG9JS_ePzI.roa (hash: rxDs0I1CVbIWmreeYb6ePZfwtg9Spev7LU71wCrsp/4=)
2: tGMgGICYUgw2Ynf3SaT3eh1ERDk.crl (hash: RnFb1vzHSfqCsDPW6cj8p5yFHwGwUjo1SF0iZSotVWk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/4acb83-f940-4766-bca9-608e7d779bc7/1/tGMgGICYUgw2Ynf3SaT3eh1ERDk.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/4acb83-f940-4766-bca9-608e7d779bc7/1/tGMgGICYUgw2Ynf3SaT3eh1ERDk.mft
rsync://rpki.ripe.net/repository/DEFAULT/tGMgGICYUgw2Ynf3SaT3eh1ERDk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:03:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ec:25:af:57:f9:3c:6a:c3:88:73:7c:e8:60:a2:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b46320188098520c366277f749a4f77a1d444439
Validity
Not Before: Oct 19 10:03:01 2025 GMT
Not After : Oct 20 10:03:01 2025 GMT
Subject: CN=abfc678b809e48650ab58350bd2eb46e1f96db6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:07:b3:37:68:18:85:65:72:d9:6b:5f:e3:30:
31:ac:5c:f9:21:21:59:7b:96:28:a8:46:6a:5e:29:
85:0b:bf:35:92:e7:34:09:75:a6:c4:4b:16:7e:3f:
49:7c:19:2a:17:14:da:aa:a8:0b:fa:42:13:ec:12:
91:81:c3:7e:dd:5b:18:5f:fe:a7:7d:31:08:29:d6:
ef:6f:7c:dd:36:d6:5b:92:db:a2:14:50:a1:b7:0d:
4c:3e:a4:3c:ab:30:9a:0e:b3:44:d4:db:de:98:38:
da:c9:d6:3a:d1:a5:41:dd:ab:91:1f:27:ba:8b:2e:
9d:52:8a:a0:af:ea:fe:dd:c1:12:e5:fc:f8:6d:bf:
88:3b:83:3b:0e:ed:c9:5a:0c:87:d9:ab:b1:ce:57:
70:aa:b4:2f:f3:4f:3d:b4:a4:b9:86:eb:7d:9f:40:
e5:84:39:29:3c:b7:b2:93:0d:1f:b6:99:d1:74:96:
b2:a0:7f:e9:d4:2c:a6:e7:68:f0:b5:c0:ea:fa:bc:
2a:80:eb:86:01:f0:23:89:8a:4b:a7:24:0a:96:ab:
01:da:a9:f4:a2:fa:a8:a5:75:cb:52:35:22:d5:29:
c3:81:63:79:05:a1:19:52:cc:ac:ff:29:26:e4:71:
1b:86:f5:85:ba:27:b2:0f:49:81:ca:43:19:2a:3d:
ab:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:FC:67:8B:80:9E:48:65:0A:B5:83:50:BD:2E:B4:6E:1F:96:DB:6A
X509v3 Authority Key Identifier:
keyid:B4:63:20:18:80:98:52:0C:36:62:77:F7:49:A4:F7:7A:1D:44:44:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tGMgGICYUgw2Ynf3SaT3eh1ERDk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/4acb83-f940-4766-bca9-608e7d779bc7/1/tGMgGICYUgw2Ynf3SaT3eh1ERDk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/4acb83-f940-4766-bca9-608e7d779bc7/1/tGMgGICYUgw2Ynf3SaT3eh1ERDk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:af:44:4c:81:17:ca:70:a2:e8:0c:04:63:fb:16:af:30:6d:
cf:bd:59:37:ec:10:63:21:19:6b:40:85:ab:e1:5f:61:9f:eb:
be:9b:04:db:e2:14:95:ef:e0:fb:a6:1f:07:8e:83:80:0a:b6:
f2:e8:35:a7:cb:b8:02:2c:e1:91:1f:7c:cc:7b:5f:35:2f:52:
b4:90:3c:b2:99:5c:b1:c6:09:74:70:42:9d:07:ab:12:46:9f:
eb:44:ab:c8:77:ec:4b:01:36:f5:4d:29:a7:a1:d0:2a:93:66:
e6:d6:78:42:3f:7a:87:2c:3a:40:2c:71:26:8d:4b:3e:5d:dc:
6d:e5:50:44:77:8d:74:27:04:c4:e7:1a:da:91:0d:a7:fc:66:
43:07:a0:11:0d:fe:d8:c9:9b:9e:6d:28:f0:56:16:2a:b5:67:
7e:a3:71:36:b6:ff:d9:ef:33:05:a0:0e:bf:ec:2e:13:90:5a:
13:17:11:b5:24:43:99:fd:a2:90:35:ad:1a:69:02:0b:51:cd:
1f:38:4f:6f:be:b7:40:84:3b:40:96:ca:24:62:cd:73:da:4c:
1b:3e:73:8e:c1:17:b1:6e:14:e0:17:be:8c:26:7e:57:ee:18:
ec:44:94:a5:84:2e:6f:37:c2:9e:66:96:2f:96:41:4f:74:9d:
8e:3a:78:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:56:19 2025 by rpki-client