Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/5036be-138b-442e-963f-57cd72957b89/1/t6hswzTG4Oq4PyUr2D7ulWklykA.mft
File: t6hswzTG4Oq4PyUr2D7ulWklykA.mft (raw, json)
Hash identifier: 2pGJ7FxLkDeiNduegjtJztH+QPE90+XwlG5TYJAzRZI=
Subject key identifier: DD:D7:82:8C:AD:D1:41:D8:0C:B4:7E:D8:6B:3C:5D:F5:36:A7:25:A4
Authority key identifier: B7:A8:6C:C3:34:C6:E0:EA:B8:3F:25:2B:D8:3E:EE:95:69:25:CA:40
Certificate issuer: /CN=b7a86cc334c6e0eab83f252bd83eee956925ca40
Certificate serial: 0199FC58D5AAEE05CD9F7DC5680AD2D08DEB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t6hswzTG4Oq4PyUr2D7ulWklykA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/5036be-138b-442e-963f-57cd72957b89/1/t6hswzTG4Oq4PyUr2D7ulWklykA.mft
Manifest number: 16E0
Signing time: Sun 19 Oct 2025 12:01:44 +0000
Manifest this update: Sun 19 Oct 2025 12:01:44 +0000
Manifest next update: Mon 20 Oct 2025 12:01:44 +0000
Files and hashes: 1: YDZQqJLg6f9-JdbHT4bYmgUJjh0.roa (hash: cInsk0zvLYwt9OlQZPLFwtQxycESn1Vx2ttrJFC0hi8=)
2: t6hswzTG4Oq4PyUr2D7ulWklykA.crl (hash: 4bpVwClvDbrwaQllTLhfrnqz0u+Nt5XPrU1UE5AimWw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/5036be-138b-442e-963f-57cd72957b89/1/t6hswzTG4Oq4PyUr2D7ulWklykA.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/5036be-138b-442e-963f-57cd72957b89/1/t6hswzTG4Oq4PyUr2D7ulWklykA.mft
rsync://rpki.ripe.net/repository/DEFAULT/t6hswzTG4Oq4PyUr2D7ulWklykA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:d5:aa:ee:05:cd:9f:7d:c5:68:0a:d2:d0:8d:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b7a86cc334c6e0eab83f252bd83eee956925ca40
Validity
Not Before: Oct 19 12:01:44 2025 GMT
Not After : Oct 20 12:01:44 2025 GMT
Subject: CN=ddd7828cadd141d80cb47ed86b3c5df536a725a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:08:cd:33:95:b3:18:56:fd:90:7f:63:6d:f3:
c7:9e:ed:69:43:48:c5:18:31:5c:09:60:b8:2e:ee:
23:a6:a1:bd:41:f5:11:3d:42:2c:0b:20:e4:e9:e6:
d4:50:44:0e:1b:5b:bb:43:34:e4:d3:52:0e:fb:ea:
01:ad:65:9d:d2:a2:a8:b1:98:21:48:ce:f6:2b:46:
b6:71:37:06:71:db:6d:17:4d:00:64:b4:61:ca:b7:
e7:9d:9c:54:59:05:84:be:3a:fc:40:8d:c2:66:c1:
19:2c:72:2b:3f:ba:da:15:86:b3:2f:38:dc:b5:c5:
19:eb:3a:f4:7b:18:ec:4c:6f:24:9e:7a:1a:cf:92:
2e:85:0c:ae:8e:7a:33:1f:00:56:09:fa:88:0f:bd:
47:40:02:bc:bc:4c:7c:7d:96:c9:7e:6f:c8:d0:b4:
0a:b7:e2:ed:b3:9f:ac:3c:eb:18:1c:20:4f:72:39:
42:cb:6b:2f:c2:7e:c4:9a:b7:5b:f2:7f:fd:49:b7:
1e:ab:ff:0b:4d:59:5c:b7:9c:ba:e2:4d:d4:79:0a:
7f:a4:51:67:0c:2e:c7:e5:4e:87:02:d6:95:ed:b3:
ae:2f:11:47:55:4e:d0:7f:2c:0c:4d:ad:b6:17:8d:
58:53:3a:24:f1:34:8a:fb:2b:8e:83:d6:36:1f:f4:
4b:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:D7:82:8C:AD:D1:41:D8:0C:B4:7E:D8:6B:3C:5D:F5:36:A7:25:A4
X509v3 Authority Key Identifier:
keyid:B7:A8:6C:C3:34:C6:E0:EA:B8:3F:25:2B:D8:3E:EE:95:69:25:CA:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t6hswzTG4Oq4PyUr2D7ulWklykA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/5036be-138b-442e-963f-57cd72957b89/1/t6hswzTG4Oq4PyUr2D7ulWklykA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/5036be-138b-442e-963f-57cd72957b89/1/t6hswzTG4Oq4PyUr2D7ulWklykA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c8:69:34:47:ee:28:f3:48:4c:f8:f1:2a:76:b3:ac:b6:d8:6b:
c1:4f:98:16:49:d0:f4:ae:34:65:1c:ea:3d:3c:fb:df:66:d6:
29:f0:2f:5c:b5:5e:0e:5b:de:92:00:4c:85:e3:dc:bf:47:0e:
7d:4b:e1:3d:5c:5f:f6:d2:5b:c2:13:88:23:82:81:55:3a:37:
c0:7c:f4:21:34:10:a7:35:1f:2d:b0:03:94:c6:e7:68:ec:ab:
e2:04:3e:78:14:95:b5:70:88:b8:86:86:22:e9:37:bc:0b:5e:
a6:cc:31:e4:2c:9a:fe:05:57:37:0b:64:9c:bf:2d:91:3a:8c:
d0:0e:d3:3d:e9:ba:54:a7:64:3f:17:5a:35:fe:35:74:dd:62:
78:19:72:2c:ee:2a:76:76:08:ae:ca:e6:5e:2f:ac:63:fc:97:
b7:a7:ec:6c:a3:19:b2:ef:de:6c:ab:b2:8d:0b:bd:25:5b:75:
1d:f6:c9:b3:e0:3c:aa:34:99:78:af:1f:4a:e8:1b:06:bc:52:
a8:0d:05:12:18:ff:84:1a:45:fd:22:8a:64:6b:14:74:ec:3a:
0b:9e:d2:fa:e6:39:06:d4:ba:17:f0:75:c4:a6:72:3e:57:12:
15:3b:33:f8:27:e1:54:ad:d6:3b:71:79:98:54:51:16:fb:56:
d9:08:dd:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:32:47 2025 by rpki-client