Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/c70928-cede-4b62-89a7-60f6fa9110e2/1/T51fuq92qApl4OksAgYeiVsrgRc.mft
File: T51fuq92qApl4OksAgYeiVsrgRc.mft (raw, json)
Hash identifier: TlSNG0TqLHg0z16W+B7oQSRMtJA6CnUMQikICD/+Ldc=
Subject key identifier: A8:BE:49:8E:8C:11:B5:1C:47:61:81:1D:95:34:AC:66:D7:DE:39:5D
Authority key identifier: 4F:9D:5F:BA:AF:76:A8:0A:65:E0:E9:2C:02:06:1E:89:5B:2B:81:17
Certificate issuer: /CN=4f9d5fbaaf76a80a65e0e92c02061e895b2b8117
Certificate serial: 0199FE10322864B2FC0B2683475C1341F506
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T51fuq92qApl4OksAgYeiVsrgRc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/c70928-cede-4b62-89a7-60f6fa9110e2/1/T51fuq92qApl4OksAgYeiVsrgRc.mft
Manifest number: 16E3
Signing time: Sun 19 Oct 2025 20:01:38 +0000
Manifest this update: Sun 19 Oct 2025 20:01:38 +0000
Manifest next update: Mon 20 Oct 2025 20:01:38 +0000
Files and hashes: 1: T51fuq92qApl4OksAgYeiVsrgRc.crl (hash: Y8jexlb2MUi6BMGmj7wCOf1jLz58MAvIrB0c+0JqPa0=)
2: oudSfHdCLiNB6U8UydMcb_Ovg84.roa (hash: LQDm0fv1Tzx1NMtk5XfrPEJuzKPUwQiMUZ87fbukA4c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/c70928-cede-4b62-89a7-60f6fa9110e2/1/T51fuq92qApl4OksAgYeiVsrgRc.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/c70928-cede-4b62-89a7-60f6fa9110e2/1/T51fuq92qApl4OksAgYeiVsrgRc.mft
rsync://rpki.ripe.net/repository/DEFAULT/T51fuq92qApl4OksAgYeiVsrgRc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:10:32:28:64:b2:fc:0b:26:83:47:5c:13:41:f5:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f9d5fbaaf76a80a65e0e92c02061e895b2b8117
Validity
Not Before: Oct 19 20:01:38 2025 GMT
Not After : Oct 20 20:01:38 2025 GMT
Subject: CN=a8be498e8c11b51c4761811d9534ac66d7de395d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:4c:3a:0b:55:64:49:dd:a3:3c:e4:d3:2a:51:
35:1e:41:f6:3d:67:fa:7a:c8:6e:52:3f:20:e6:74:
e2:d0:9c:e4:30:4b:c5:b1:fe:29:9e:8f:82:d3:e7:
82:ae:68:33:18:4d:f6:9d:42:32:05:9b:af:82:0d:
7f:f2:37:4b:f5:d8:d8:8b:c7:62:01:b2:d1:05:30:
21:5b:dd:82:ef:b3:07:8b:2e:3e:8d:b1:d1:1b:de:
c7:e9:85:8a:dd:88:bf:89:08:04:8b:bc:12:5d:9c:
df:0a:eb:b0:31:19:47:37:bb:3c:5a:34:67:0f:12:
3d:d6:e2:84:8c:83:ff:8c:05:95:e4:c2:e3:1b:cf:
f1:78:3c:9d:a0:d9:dd:aa:18:cb:3d:23:be:7f:12:
69:92:da:3b:fe:cf:1c:fa:71:dc:5b:5f:9d:8b:77:
43:06:82:39:e3:fa:9c:01:9b:79:a1:86:d9:79:33:
39:c4:e8:46:53:f8:02:b4:e7:0f:9c:3f:d9:40:ba:
4c:93:b4:2b:39:1e:18:13:83:7e:fe:6e:18:a5:f4:
d7:63:42:9b:e7:19:f7:ab:8f:7d:8d:55:4b:44:29:
12:59:5e:c0:41:d4:bd:21:c6:86:65:a3:a0:c3:46:
90:74:b3:db:c5:1b:3e:2d:cd:5c:53:81:6e:5f:55:
66:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:BE:49:8E:8C:11:B5:1C:47:61:81:1D:95:34:AC:66:D7:DE:39:5D
X509v3 Authority Key Identifier:
keyid:4F:9D:5F:BA:AF:76:A8:0A:65:E0:E9:2C:02:06:1E:89:5B:2B:81:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T51fuq92qApl4OksAgYeiVsrgRc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/c70928-cede-4b62-89a7-60f6fa9110e2/1/T51fuq92qApl4OksAgYeiVsrgRc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/c70928-cede-4b62-89a7-60f6fa9110e2/1/T51fuq92qApl4OksAgYeiVsrgRc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ce:57:78:d9:e9:2c:3b:7b:6b:fa:3a:ff:0a:07:b1:db:4a:d3:
1b:d4:7c:1b:81:69:14:96:c3:e1:c6:d3:63:9a:fc:d3:bb:d5:
f8:21:e7:3f:a1:7b:bd:30:df:ea:06:df:02:d7:af:0e:00:a7:
1c:d8:1e:d1:b1:29:9b:8e:78:03:02:c1:07:e5:33:be:73:2a:
de:1d:75:c1:66:4d:f9:bb:df:6c:b5:dc:08:83:88:0d:14:a6:
94:78:63:b3:7e:9b:18:9d:a4:1a:9c:ad:58:be:57:a2:41:cc:
8b:57:e1:63:d1:8f:28:9a:a8:a3:da:78:fb:af:e0:0c:d0:ec:
25:4e:b4:15:e7:8a:24:92:95:b9:74:e0:68:e6:e5:da:31:0e:
62:f8:2c:53:3c:ea:1a:f6:e9:5d:a6:24:d0:1e:62:59:59:1e:
67:37:67:b6:06:49:70:72:48:8b:2d:5d:aa:3a:ab:44:62:cf:
e6:8d:bb:84:47:6e:a2:f8:b7:f9:d3:07:b6:b9:26:59:1f:ea:
76:33:73:6f:28:bb:fd:cb:47:cb:8a:70:c7:a9:dd:37:44:9a:
b6:68:a8:e9:fe:b5:eb:4d:0a:49:f9:49:aa:34:80:0e:57:10:
f2:a7:9c:65:b9:f3:c2:4b:a6:32:0e:06:67:67:07:ad:47:35:
6b:ba:25:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 22:37:08 2025 by rpki-client