Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/36ba9d-33af-4cf3-a27d-fa718ac9d758/1/tAkWj9tS6bfRp6Xo9Rjt-8LD-a8.mft
File: tAkWj9tS6bfRp6Xo9Rjt-8LD-a8.mft (raw, json)
Hash identifier: 1t62b9rJL5OmJ/En6Uq3gHXD9PIPQ/l873Rh/XcgqFQ=
Subject key identifier: 9B:27:29:55:58:97:72:E4:B6:3A:F1:BF:F3:AC:7A:F0:7F:66:80:8F
Authority key identifier: B4:09:16:8F:DB:52:E9:B7:D1:A7:A5:E8:F5:18:ED:FB:C2:C3:F9:AF
Certificate issuer: /CN=b409168fdb52e9b7d1a7a5e8f518edfbc2c3f9af
Certificate serial: 0199FBEB90F3DFB075E35EE4BAD6CF1DDEFB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tAkWj9tS6bfRp6Xo9Rjt-8LD-a8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/36ba9d-33af-4cf3-a27d-fa718ac9d758/1/tAkWj9tS6bfRp6Xo9Rjt-8LD-a8.mft
Manifest number: 0DAC
Signing time: Sun 19 Oct 2025 10:02:23 +0000
Manifest this update: Sun 19 Oct 2025 10:02:23 +0000
Manifest next update: Mon 20 Oct 2025 10:02:23 +0000
Files and hashes: 1: 3R1qEXucRzxQh626HSW1D35Fl4s.roa (hash: LtQHe1lS81VaVTgB7dK3iqoJ6l+gsJCEbPPIKSQ56qA=)
2: McrPxtZ4iO15y_FX1Gn0nEEhCRI.roa (hash: Di4q+SxrGvFBIxKBjSQx7OeEmS+PC0BTc6BdjCyUk3M=)
3: sLlY1jyLux_8WlPpVquZS_tXAMM.roa (hash: Ac6aebIzojMJX90LbFh/1SpU6qfnR41Si25oQuBA8+c=)
4: shBZifpLlKUixrRLPCki_9Cdo5k.roa (hash: vUCEHBiQ5vk3QwGcMpMB9RyrWPTOpvKerhzJgaIKpHk=)
5: tAkWj9tS6bfRp6Xo9Rjt-8LD-a8.crl (hash: ulQSF85HGNm5amXnN5BaMKODZmAzncT9+BZt5ypXAzI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/36ba9d-33af-4cf3-a27d-fa718ac9d758/1/tAkWj9tS6bfRp6Xo9Rjt-8LD-a8.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/36ba9d-33af-4cf3-a27d-fa718ac9d758/1/tAkWj9tS6bfRp6Xo9Rjt-8LD-a8.mft
rsync://rpki.ripe.net/repository/DEFAULT/tAkWj9tS6bfRp6Xo9Rjt-8LD-a8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:02:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:90:f3:df:b0:75:e3:5e:e4:ba:d6:cf:1d:de:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b409168fdb52e9b7d1a7a5e8f518edfbc2c3f9af
Validity
Not Before: Oct 19 10:02:23 2025 GMT
Not After : Oct 20 10:02:23 2025 GMT
Subject: CN=9b272955589772e4b63af1bff3ac7af07f66808f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:4e:75:c2:4d:a6:2c:73:63:cd:dc:3d:8f:7f:
0f:ca:6d:95:e7:93:d5:ac:94:53:80:db:f8:a1:0e:
0c:e2:06:98:37:cf:7e:49:36:ae:b5:37:19:c6:24:
dc:53:77:d8:fc:c5:e4:d5:18:af:27:ec:41:62:35:
e5:b8:b9:68:a3:f4:97:fd:f5:fe:0b:8b:d2:af:c8:
4b:6b:26:db:89:76:86:a7:97:f3:07:9f:56:ed:8c:
cc:95:d5:b4:ad:71:6b:8a:c6:9a:fd:8d:c5:94:9b:
14:42:1d:b5:31:2f:ba:39:e2:4b:17:dc:5a:9f:c9:
9b:ac:f5:3a:8d:a5:90:06:46:2c:a0:ca:c3:f3:a0:
2e:9d:12:23:7e:53:99:e3:13:41:b3:ef:2a:2c:30:
50:7f:c3:e9:fc:03:55:72:06:f3:38:a6:81:03:6e:
38:93:cf:22:b7:ed:67:1a:57:21:30:74:db:05:99:
f1:50:81:7e:ae:cf:01:a8:2e:a1:a1:c8:65:d4:c8:
53:ce:a2:b4:0f:69:23:08:99:23:e8:c8:da:f9:7f:
11:71:7c:8e:4c:73:cb:8a:3b:25:39:04:9a:2f:1a:
57:9e:51:4f:0f:c4:8c:c4:7a:21:98:4b:92:aa:78:
64:64:55:77:1c:25:10:91:de:49:78:32:c7:12:22:
36:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:27:29:55:58:97:72:E4:B6:3A:F1:BF:F3:AC:7A:F0:7F:66:80:8F
X509v3 Authority Key Identifier:
keyid:B4:09:16:8F:DB:52:E9:B7:D1:A7:A5:E8:F5:18:ED:FB:C2:C3:F9:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tAkWj9tS6bfRp6Xo9Rjt-8LD-a8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/36ba9d-33af-4cf3-a27d-fa718ac9d758/1/tAkWj9tS6bfRp6Xo9Rjt-8LD-a8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/36ba9d-33af-4cf3-a27d-fa718ac9d758/1/tAkWj9tS6bfRp6Xo9Rjt-8LD-a8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:1f:bb:d5:d8:3a:e5:4d:14:4d:b7:79:cd:44:ed:02:08:51:
d1:65:37:1f:37:7a:40:57:40:e7:9c:52:86:35:36:8b:df:bc:
66:48:16:d8:91:e6:f8:05:cf:38:b1:1a:41:72:1d:ea:9d:f1:
e3:bd:6e:fb:ee:81:3e:1c:9a:78:51:29:36:68:a8:e6:84:91:
a8:9d:71:ef:dd:e6:8d:03:bc:22:17:cb:75:3f:ee:4f:4a:ad:
e5:42:df:00:81:5a:70:2f:c6:45:80:c3:87:95:42:42:dc:26:
5d:c5:4f:18:49:4f:c4:01:63:cb:a2:66:c8:0c:41:dd:18:e0:
2d:8e:0f:f2:01:35:43:47:39:98:d1:63:b7:0f:6f:94:f2:0e:
31:61:56:c2:d4:65:54:16:3a:61:db:30:58:b4:63:c1:1f:d8:
08:16:4d:aa:65:44:46:74:1f:9d:e7:e3:01:15:9e:db:1e:f4:
7a:b7:c9:77:aa:53:34:a0:df:3e:e5:fc:1a:9d:7b:ca:85:40:
1d:49:87:5f:bc:be:3c:e7:b6:44:42:97:8a:e5:d9:36:4a:69:
47:b8:f5:60:8d:aa:3f:92:bf:03:a1:36:ef:67:c6:35:51:bf:
41:e7:e4:18:05:12:7f:b5:66:8d:c6:dc:dc:49:a5:cb:b8:3f:
02:32:1d:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:01:49 2025 by rpki-client