Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/19ddad-c458-441e-984e-573f17d2aef3/1/tM2Wsn6IQ1BLtb1VwynsAtufD_0.mft
File: tM2Wsn6IQ1BLtb1VwynsAtufD_0.mft (raw, json)
Hash identifier: qfw/5H8zVy595Cawvw5BjMkPrYZLv2VcO1iWslwuZGI=
Subject key identifier: C5:BF:86:B4:69:DB:11:76:81:22:64:61:B1:7B:67:53:5C:89:01:4A
Authority key identifier: B4:CD:96:B2:7E:88:43:50:4B:B5:BD:55:C3:29:EC:02:DB:9F:0F:FD
Certificate issuer: /CN=b4cd96b27e8843504bb5bd55c329ec02db9f0ffd
Certificate serial: 019A03356D1874CB45FC95CA3B4577F1BFF9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tM2Wsn6IQ1BLtb1VwynsAtufD_0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/19ddad-c458-441e-984e-573f17d2aef3/1/tM2Wsn6IQ1BLtb1VwynsAtufD_0.mft
Manifest number: 16E4
Signing time: Mon 20 Oct 2025 20:00:24 +0000
Manifest this update: Mon 20 Oct 2025 20:00:24 +0000
Manifest next update: Tue 21 Oct 2025 20:00:24 +0000
Files and hashes: 1: bCO5bqFLQTtaSqSwTRLhrpm3wCA.roa (hash: xHiR4ALGk4+cM6JODCM19LWc7pantvAdvK3viET0qj4=)
2: tM2Wsn6IQ1BLtb1VwynsAtufD_0.crl (hash: akMo6YrcXJnvIbE6rTkyZXRfDXjTW742UJcgK503FXY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/19ddad-c458-441e-984e-573f17d2aef3/1/tM2Wsn6IQ1BLtb1VwynsAtufD_0.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/19ddad-c458-441e-984e-573f17d2aef3/1/tM2Wsn6IQ1BLtb1VwynsAtufD_0.mft
rsync://rpki.ripe.net/repository/DEFAULT/tM2Wsn6IQ1BLtb1VwynsAtufD_0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 13:42:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:03:35:6d:18:74:cb:45:fc:95:ca:3b:45:77:f1:bf:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4cd96b27e8843504bb5bd55c329ec02db9f0ffd
Validity
Not Before: Oct 20 20:00:24 2025 GMT
Not After : Oct 21 20:00:24 2025 GMT
Subject: CN=c5bf86b469db117681226461b17b67535c89014a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:92:c3:32:30:89:80:fd:39:8c:75:10:ff:c1:
60:d0:56:b6:34:38:93:b2:ec:81:ec:60:ab:e8:d9:
bd:d4:7c:d0:2a:f8:d8:63:27:f4:88:1d:7a:4b:57:
b6:59:7d:bc:62:b2:cd:53:bf:f7:52:46:6e:2d:ae:
57:ca:65:21:81:54:2e:e4:9b:23:6a:b3:d0:ce:af:
cc:15:cf:d1:a0:de:e0:ae:a4:23:37:1d:6b:bb:88:
bb:14:cf:9d:be:f9:a3:d1:dd:ac:fd:cc:66:6f:8b:
62:32:65:2f:5d:d2:03:b3:63:d2:cb:22:91:0b:87:
00:d4:1d:60:c1:23:fb:6c:1b:e3:72:0e:33:bd:71:
e1:2d:c0:68:8e:99:a7:56:e7:aa:17:3f:c3:93:ed:
7a:f2:1c:93:ce:15:99:9e:65:ff:66:55:de:d3:ff:
92:3a:f3:f3:24:3a:42:65:e5:06:2e:7d:a4:e7:c6:
a6:19:ba:28:20:b5:b7:6a:01:e1:e2:89:d1:b0:13:
7f:e0:2f:1e:da:ae:4e:32:bb:1e:b0:eb:1b:5c:d7:
85:a8:f3:11:98:1c:62:3e:a3:03:23:b2:54:9b:1b:
70:3f:6b:92:82:13:5b:7e:2d:c2:d8:a6:36:ce:4a:
7d:84:10:99:85:b5:30:71:5f:6c:1a:80:d7:d0:16:
8b:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:BF:86:B4:69:DB:11:76:81:22:64:61:B1:7B:67:53:5C:89:01:4A
X509v3 Authority Key Identifier:
keyid:B4:CD:96:B2:7E:88:43:50:4B:B5:BD:55:C3:29:EC:02:DB:9F:0F:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tM2Wsn6IQ1BLtb1VwynsAtufD_0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/19ddad-c458-441e-984e-573f17d2aef3/1/tM2Wsn6IQ1BLtb1VwynsAtufD_0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/19ddad-c458-441e-984e-573f17d2aef3/1/tM2Wsn6IQ1BLtb1VwynsAtufD_0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:aa:cb:23:4a:ea:69:bf:4f:ca:b2:08:82:4e:16:07:b1:fc:
ba:18:7a:3a:f2:0d:8a:80:b3:f7:d0:8a:53:3f:b9:96:50:17:
2e:c0:84:e5:fd:55:bf:99:8b:a1:99:7a:50:0e:bf:e1:30:52:
50:ab:b8:84:8b:df:1a:75:c1:26:c6:7a:f3:20:a4:3b:96:40:
46:ed:6e:6e:e6:2b:ae:32:5d:ac:25:d0:18:9c:0c:94:42:d5:
2d:8f:40:9b:36:91:46:0a:39:14:f0:fa:e6:0e:b4:f5:8d:6c:
81:57:25:cb:a7:1a:d6:a7:02:2c:2b:48:21:5c:b2:ec:ca:67:
73:a6:fc:e8:c7:3a:e5:db:20:f2:84:40:e5:cd:88:c5:0b:fb:
3e:36:e8:9e:9d:ae:6a:03:5e:38:b6:66:08:8e:41:d7:6e:a1:
86:7f:1b:5a:ff:fd:5a:8e:56:76:48:96:e9:05:a4:59:ec:0d:
5a:c2:07:59:63:08:59:0c:ee:55:25:96:50:22:46:2c:f9:a9:
4c:cd:aa:38:9d:e7:dc:e8:c4:63:86:8e:17:39:bc:ce:a3:12:
dc:18:78:62:43:c1:c9:8a:18:93:b5:97:ec:7d:fe:eb:f2:0b:
44:bb:8d:a0:59:ff:57:58:8b:de:44:a2:14:ec:ee:5f:15:5d:
2f:b8:16:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 22:41:11 2025 by rpki-client