Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/9ff43e-f817-4ebe-a0d9-7a18931d985b/1/tn8bh-Z1L0VDm4UozJaLR3CloPs.mft
File: tn8bh-Z1L0VDm4UozJaLR3CloPs.mft (raw, json)
Hash identifier: /Ku6fM/1GBTu4QBTWHTDK86rLk9bA/SNrQ8cRZBYqtw=
Subject key identifier: 9B:DD:08:B2:CA:D8:A5:5D:EE:30:4A:C0:5F:1A:2C:0A:EB:76:7D:63
Authority key identifier: B6:7F:1B:87:E6:75:2F:45:43:9B:85:28:CC:96:8B:47:70:A5:A0:FB
Certificate issuer: /CN=b67f1b87e6752f45439b8528cc968b4770a5a0fb
Certificate serial: 0199FC58D74CE797E21898D71031D5ABB674
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tn8bh-Z1L0VDm4UozJaLR3CloPs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/9ff43e-f817-4ebe-a0d9-7a18931d985b/1/tn8bh-Z1L0VDm4UozJaLR3CloPs.mft
Manifest number: 16E0
Signing time: Sun 19 Oct 2025 12:01:44 +0000
Manifest this update: Sun 19 Oct 2025 12:01:44 +0000
Manifest next update: Mon 20 Oct 2025 12:01:44 +0000
Files and hashes: 1: kYfhtSfEKW3P-62E9GiF_Ua9EUo.roa (hash: p1no5bz1+uk9Sv3KCtgs/QuEn0taiRhnvBxPn7m9ACY=)
2: tn8bh-Z1L0VDm4UozJaLR3CloPs.crl (hash: Vb9UJtD2WV6Gb/IiuyDzv9L41agrSiEN0PvBE0HU3bg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/9ff43e-f817-4ebe-a0d9-7a18931d985b/1/tn8bh-Z1L0VDm4UozJaLR3CloPs.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/9ff43e-f817-4ebe-a0d9-7a18931d985b/1/tn8bh-Z1L0VDm4UozJaLR3CloPs.mft
rsync://rpki.ripe.net/repository/DEFAULT/tn8bh-Z1L0VDm4UozJaLR3CloPs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:d7:4c:e7:97:e2:18:98:d7:10:31:d5:ab:b6:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b67f1b87e6752f45439b8528cc968b4770a5a0fb
Validity
Not Before: Oct 19 12:01:44 2025 GMT
Not After : Oct 20 12:01:44 2025 GMT
Subject: CN=9bdd08b2cad8a55dee304ac05f1a2c0aeb767d63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:fc:87:36:9d:68:03:c6:f4:aa:8b:e6:fd:64:
74:2c:1f:26:d6:47:ff:75:81:5f:ff:bf:ac:7a:6d:
db:ba:eb:a0:53:21:d6:67:a6:ae:31:34:2f:41:6d:
1f:0a:21:70:ae:a6:97:4c:2e:06:ff:38:f0:f5:ba:
8e:43:ce:90:b5:60:64:d4:22:c1:11:41:33:9b:a8:
d3:77:dc:95:04:31:9f:33:8c:c1:11:ac:e7:75:b3:
cc:61:38:b0:0d:89:1c:e9:ce:2e:2e:ab:dd:cc:8c:
96:74:d3:48:d3:4d:3a:42:34:dd:8a:c5:b1:41:f8:
67:6d:b9:68:ae:e0:bd:a0:4f:e8:bd:a9:30:9a:5a:
2e:59:0d:46:d1:d5:15:84:af:1a:47:af:7d:19:c2:
51:1f:8c:3c:b4:91:de:e6:88:a7:89:80:a2:cd:ea:
5a:27:5f:eb:be:de:be:ca:be:87:00:bc:68:9d:90:
68:84:f2:d9:2d:0a:50:25:8f:ec:08:c0:a6:35:29:
4f:95:79:30:bb:75:b5:fc:bd:85:0d:07:00:19:88:
31:f9:24:5c:0e:29:e1:29:02:04:51:9d:8d:75:f9:
21:83:a1:7f:da:91:e9:94:57:f2:b5:5f:1a:be:7e:
0b:fd:0f:61:13:d8:52:3f:ca:15:58:f8:e5:b5:a0:
5e:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:DD:08:B2:CA:D8:A5:5D:EE:30:4A:C0:5F:1A:2C:0A:EB:76:7D:63
X509v3 Authority Key Identifier:
keyid:B6:7F:1B:87:E6:75:2F:45:43:9B:85:28:CC:96:8B:47:70:A5:A0:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tn8bh-Z1L0VDm4UozJaLR3CloPs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/9ff43e-f817-4ebe-a0d9-7a18931d985b/1/tn8bh-Z1L0VDm4UozJaLR3CloPs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/9ff43e-f817-4ebe-a0d9-7a18931d985b/1/tn8bh-Z1L0VDm4UozJaLR3CloPs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:a5:04:60:52:2e:d0:0b:02:0b:75:33:99:9b:c8:67:20:4a:
2e:9b:aa:08:cd:60:0b:03:b5:d3:58:f6:42:bd:59:60:ae:82:
5e:d3:ff:26:b2:e4:2e:cb:23:aa:ec:80:41:09:6b:a2:85:6f:
2d:24:54:4d:ae:36:9d:6d:cd:5b:27:c9:dd:f6:e2:4f:0e:7f:
e4:c5:b3:b0:15:18:d6:bc:ff:8b:68:05:3f:44:28:bd:91:eb:
74:93:2e:47:4e:7f:93:c9:ba:51:d1:ab:44:d6:e6:9f:e1:5d:
f9:d9:a6:a1:d2:d5:93:fa:fd:78:d0:06:e8:f9:1b:bf:84:ba:
1e:be:71:96:7e:cd:33:bf:85:5d:f3:b2:61:c8:3f:78:86:67:
85:50:e2:c1:2b:a3:ad:51:3d:da:a2:30:b0:14:24:62:45:0c:
cc:b0:7e:ff:e1:98:01:1e:da:f3:30:31:c5:fb:4e:0a:91:19:
a5:2b:aa:45:a0:6a:33:29:61:f3:50:8c:4a:7e:ea:68:51:99:
3b:00:0d:53:33:83:0e:07:b0:fc:57:17:07:42:60:5f:a1:c1:
7c:3a:f7:14:42:be:26:94:24:6d:3b:78:a5:1a:98:46:f9:0b:
d1:89:8b:ae:39:62:1b:0f:3f:16:dd:37:75:9b:3c:1e:47:4d:
cd:b9:ce:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:26:38 2025 by rpki-client