Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/884aae-2203-4f21-91a4-8f1ff3880102/1/Tu24VWoM8egtjnx5BY8O-1BALKY.mft
File: Tu24VWoM8egtjnx5BY8O-1BALKY.mft (raw, json)
Hash identifier: dk12Xp8Anr5jvj24tzKvgP0pwW7Fuxd8r43VMxVJmNE=
Subject key identifier: 1D:7A:C7:FE:95:EB:8B:58:DA:80:4B:29:B0:1E:7E:13:15:03:C0:97
Authority key identifier: 4E:ED:B8:55:6A:0C:F1:E8:2D:8E:7C:79:05:8F:0E:FB:50:40:2C:A6
Certificate issuer: /CN=4eedb8556a0cf1e82d8e7c79058f0efb50402ca6
Certificate serial: 0199FB7CCEDCFCED426EC972B005DA4E90A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tu24VWoM8egtjnx5BY8O-1BALKY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/884aae-2203-4f21-91a4-8f1ff3880102/1/Tu24VWoM8egtjnx5BY8O-1BALKY.mft
Manifest number: 5A
Signing time: Sun 19 Oct 2025 08:01:24 +0000
Manifest this update: Sun 19 Oct 2025 08:01:24 +0000
Manifest next update: Mon 20 Oct 2025 08:01:24 +0000
Files and hashes: 1: SRXsV36P-CVrg5tozNoMPCpnyF4.roa (hash: OCSCJQF696SWQeZY+m9KrqSwCcjrgufE4o3QCg0DxDs=)
2: Tu24VWoM8egtjnx5BY8O-1BALKY.crl (hash: rUcbcCpq6R7bzAHXSIVOV8gWHeE/5DppKMr09kWRA9k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/884aae-2203-4f21-91a4-8f1ff3880102/1/Tu24VWoM8egtjnx5BY8O-1BALKY.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/884aae-2203-4f21-91a4-8f1ff3880102/1/Tu24VWoM8egtjnx5BY8O-1BALKY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Tu24VWoM8egtjnx5BY8O-1BALKY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:7c:ce:dc:fc:ed:42:6e:c9:72:b0:05:da:4e:90:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4eedb8556a0cf1e82d8e7c79058f0efb50402ca6
Validity
Not Before: Oct 19 08:01:24 2025 GMT
Not After : Oct 20 08:01:24 2025 GMT
Subject: CN=1d7ac7fe95eb8b58da804b29b01e7e131503c097
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:9c:9c:52:0c:e3:9e:6d:ec:c2:d4:24:3f:13:
98:ea:f8:1b:f9:c1:a5:ea:4e:aa:84:d9:e6:d3:6b:
a8:18:6e:f5:43:0d:d3:65:86:69:2f:5c:0b:4c:c4:
4e:f2:67:c1:8e:1e:92:67:a1:43:20:78:97:b6:9a:
54:16:b2:df:47:05:d2:d7:94:be:91:58:dc:a2:b3:
bb:f0:6e:54:c9:dd:36:9d:77:1d:fb:d7:63:b6:6c:
dc:ac:3f:29:b9:f6:6c:be:46:b8:a3:19:3e:5b:b5:
65:1e:0f:ee:a7:e4:9c:dd:b3:11:fa:39:7c:e0:c3:
2b:ff:08:c7:92:3a:78:7d:e7:5b:2a:ae:fd:73:46:
0f:eb:b6:d2:e0:19:3e:ce:cf:f8:f8:3b:40:1f:d9:
c2:4e:d3:ee:6c:4b:9f:f3:cc:dc:71:38:08:ce:40:
68:6b:69:c6:ae:51:25:19:5d:b4:77:9b:0d:46:10:
39:f1:02:60:d6:eb:f2:24:18:52:c3:b4:48:b3:5b:
30:8c:c8:80:99:d0:26:c5:d1:62:05:61:8a:e1:47:
08:19:36:ac:82:a2:f7:41:2a:46:b1:60:38:3e:8e:
a8:b6:97:75:d5:89:e8:d6:6a:7d:79:c7:af:d0:7a:
43:d0:78:fc:b3:a6:5d:91:79:cb:76:7c:3c:2e:f5:
71:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:7A:C7:FE:95:EB:8B:58:DA:80:4B:29:B0:1E:7E:13:15:03:C0:97
X509v3 Authority Key Identifier:
keyid:4E:ED:B8:55:6A:0C:F1:E8:2D:8E:7C:79:05:8F:0E:FB:50:40:2C:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tu24VWoM8egtjnx5BY8O-1BALKY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/884aae-2203-4f21-91a4-8f1ff3880102/1/Tu24VWoM8egtjnx5BY8O-1BALKY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/884aae-2203-4f21-91a4-8f1ff3880102/1/Tu24VWoM8egtjnx5BY8O-1BALKY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:8a:2b:89:a6:5f:8d:1a:09:b3:cf:66:c1:8b:a8:99:f4:fc:
f9:e3:24:1f:ec:7a:5d:2d:53:5b:e5:14:1e:9b:5d:c2:01:48:
86:be:3f:44:d3:18:00:15:df:5a:8f:c8:dd:dd:48:82:5d:6a:
6c:5d:a6:c6:49:89:b1:cc:5d:04:d2:bb:42:ae:57:e8:70:59:
2f:36:72:6f:59:66:0a:95:1b:c5:c8:d2:f1:55:cc:d6:ce:3c:
a4:36:28:73:49:ac:ce:1b:d3:c7:b0:70:7f:60:a4:ac:30:0f:
ae:e0:8d:6d:e8:c6:3b:8f:15:f3:af:4d:be:03:8b:bc:44:e2:
7c:28:64:c3:ce:82:52:9b:20:bd:bc:09:ca:82:7b:9e:04:15:
df:d7:83:56:ce:7e:5d:a9:37:e7:66:43:5f:b7:1b:82:d2:76:
37:17:ef:04:6c:a1:3e:51:e5:14:57:b9:2a:56:32:df:99:09:
65:b5:02:ef:ae:67:6d:a1:ba:d3:6b:88:c7:7e:c5:be:0f:7b:
75:a9:50:cf:71:79:b0:1a:c8:e2:ad:d2:f2:15:31:84:0c:e1:
72:90:f0:b8:6f:ff:e8:78:e2:19:89:34:2e:0a:e1:3c:d3:2d:
95:3d:ab:ab:39:df:26:88:27:de:4a:f0:7f:9f:5b:59:9f:3a:
ac:e6:ef:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:04:03 2025 by rpki-client