Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/7e7ee7-1bd4-4435-871f-6cf8e567ff1c/1/tNc6atd6j4WbQD2yznFegtHPMv4.mft
File: tNc6atd6j4WbQD2yznFegtHPMv4.mft (raw, json)
Hash identifier: 3b82x3HFRXdbA69k60oZ8zjqBIfatjQLBUCd/FEFB30=
Subject key identifier: 88:B8:8F:D0:8A:16:32:26:B7:24:7B:FC:14:56:8C:60:1B:72:A6:8F
Authority key identifier: B4:D7:3A:6A:D7:7A:8F:85:9B:40:3D:B2:CE:71:5E:82:D1:CF:32:FE
Certificate issuer: /CN=b4d73a6ad77a8f859b403db2ce715e82d1cf32fe
Certificate serial: 0199FFFE72F7240F6F8348A9F6684644C006
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tNc6atd6j4WbQD2yznFegtHPMv4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/7e7ee7-1bd4-4435-871f-6cf8e567ff1c/1/tNc6atd6j4WbQD2yznFegtHPMv4.mft
Manifest number: 16E4
Signing time: Mon 20 Oct 2025 05:01:29 +0000
Manifest this update: Mon 20 Oct 2025 05:01:29 +0000
Manifest next update: Tue 21 Oct 2025 05:01:29 +0000
Files and hashes: 1: YO-tGwbdqI4YYY7I1KqnEaElBoQ.roa (hash: XZFdc4B2lVuIwGuWp8Gzl21H5s/bjgOkXy1zS/FUzmY=)
2: r8uOOwHL3Wt4pGrUJebg8yZ8WaY.roa (hash: Eioa5I9ONK/XZQXZG+CzeC8xkMTpLpCoDVH43Ycxzzc=)
3: tNc6atd6j4WbQD2yznFegtHPMv4.crl (hash: +olk+eJqPkpejd37mp9mERHJFeAMyxUJumCYnr+k/lA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/7e7ee7-1bd4-4435-871f-6cf8e567ff1c/1/tNc6atd6j4WbQD2yznFegtHPMv4.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/7e7ee7-1bd4-4435-871f-6cf8e567ff1c/1/tNc6atd6j4WbQD2yznFegtHPMv4.mft
rsync://rpki.ripe.net/repository/DEFAULT/tNc6atd6j4WbQD2yznFegtHPMv4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:fe:72:f7:24:0f:6f:83:48:a9:f6:68:46:44:c0:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4d73a6ad77a8f859b403db2ce715e82d1cf32fe
Validity
Not Before: Oct 20 05:01:29 2025 GMT
Not After : Oct 21 05:01:29 2025 GMT
Subject: CN=88b88fd08a163226b7247bfc14568c601b72a68f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:be:03:41:b7:4f:d0:b5:ef:da:53:04:74:bb:
b6:55:c9:70:ba:a4:b3:6f:2b:01:d3:a5:08:c3:7d:
3c:ea:61:2b:48:00:35:98:d9:28:ba:2e:2d:5e:94:
5b:a1:06:95:e4:64:23:6f:29:f2:ab:8c:a9:d4:f1:
00:5a:93:b9:47:c7:c2:fd:98:2d:d3:75:6c:1e:ac:
70:e1:a8:72:0e:da:26:bf:90:4b:6d:22:7a:17:23:
63:bf:40:34:3b:b5:3a:e9:45:bb:d7:ec:52:56:44:
64:57:23:6c:bc:9e:89:76:b2:65:17:c2:34:91:08:
e1:01:eb:63:73:e1:f8:53:d1:26:0d:cd:f6:15:3e:
00:db:68:41:76:08:1c:d9:79:b4:3d:51:05:63:6c:
22:ee:89:86:7a:40:c0:18:ee:70:be:59:19:d6:4e:
df:a2:6d:cd:c0:fa:94:95:b4:67:53:31:f3:97:cc:
ea:a0:5a:78:01:21:55:9b:15:38:eb:8a:45:d6:fa:
7c:a3:8b:04:8f:90:ba:c6:19:95:24:d9:00:a1:b1:
86:84:26:7d:51:b0:35:ba:f0:33:29:df:2c:ab:9a:
02:fa:92:fc:85:d9:00:25:74:7f:0e:a7:2a:76:a8:
2e:90:40:d1:69:c6:92:ea:38:51:d4:28:62:2c:d4:
39:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:B8:8F:D0:8A:16:32:26:B7:24:7B:FC:14:56:8C:60:1B:72:A6:8F
X509v3 Authority Key Identifier:
keyid:B4:D7:3A:6A:D7:7A:8F:85:9B:40:3D:B2:CE:71:5E:82:D1:CF:32:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tNc6atd6j4WbQD2yznFegtHPMv4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/7e7ee7-1bd4-4435-871f-6cf8e567ff1c/1/tNc6atd6j4WbQD2yznFegtHPMv4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/7e7ee7-1bd4-4435-871f-6cf8e567ff1c/1/tNc6atd6j4WbQD2yznFegtHPMv4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:e5:5b:c8:7b:03:19:1a:e1:4f:3c:e9:68:ba:7d:16:40:13:
25:51:c0:5c:3e:97:f3:f5:2a:7f:9e:2c:4a:26:eb:bd:37:cb:
0d:78:c1:56:e0:89:bb:9f:55:d6:b5:a4:4a:1e:51:11:2c:d7:
c1:58:ca:01:53:0f:04:c9:9d:8f:5b:a3:b0:9e:95:3d:ef:c0:
87:11:e1:41:df:ac:14:2c:39:5c:20:7b:12:bf:ce:e1:6a:3d:
7c:77:e5:0c:a0:49:7e:c1:2b:3b:2b:a9:00:9e:08:ad:57:6a:
cb:2f:7a:28:17:c4:e3:bf:ba:25:27:71:c2:f2:8e:98:f8:0b:
b4:e4:fc:c1:26:48:6f:5b:4c:cb:f3:89:43:ed:70:e0:52:eb:
11:da:6c:59:7e:80:bb:50:58:91:28:e4:74:c7:ce:5f:bc:8c:
5b:63:55:08:7c:33:b5:fd:22:56:9e:90:83:59:87:5d:73:97:
b2:43:16:2b:d3:cb:0c:fe:63:44:1a:24:19:b6:1e:7f:74:f8:
c8:79:50:36:10:36:d0:b7:c4:bc:c8:8c:2b:4f:0e:8f:a9:bd:
b4:41:31:5a:64:be:b8:56:ad:62:d0:1c:d9:d2:15:9a:8b:a5:
68:7c:b8:37:45:fa:e2:0f:5b:94:ab:24:a9:35:3a:79:7d:a5:
40:22:cd:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 09:23:45 2025 by rpki-client