Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/fc7c82-3159-4d54-a0a1-35171aedd313/1/tkB0qoRJgw2psgs6-waC08Ay-f4.mft
File: tkB0qoRJgw2psgs6-waC08Ay-f4.mft (raw, json)
Hash identifier: P5Q/Yc87HbPEhnXE3kMYOfALqwccCihi5wAaUrDokTE=
Subject key identifier: A5:3D:E8:17:31:04:CB:DA:F5:6D:70:1B:2A:7A:98:19:E2:94:A5:27
Authority key identifier: B6:40:74:AA:84:49:83:0D:A9:B2:0B:3A:FB:06:82:D3:C0:32:F9:FE
Certificate issuer: /CN=b64074aa8449830da9b20b3afb0682d3c032f9fe
Certificate serial: 0199FAA0B53514E9C0A83C5F080D1B5EA68D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tkB0qoRJgw2psgs6-waC08Ay-f4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/fc7c82-3159-4d54-a0a1-35171aedd313/1/tkB0qoRJgw2psgs6-waC08Ay-f4.mft
Manifest number: 16E9
Signing time: Sun 19 Oct 2025 04:00:59 +0000
Manifest this update: Sun 19 Oct 2025 04:00:59 +0000
Manifest next update: Mon 20 Oct 2025 04:00:59 +0000
Files and hashes: 1: BdOIN-x7p5NQNZFat3HBRk8aNP8.roa (hash: E6O+SQKCroETYNOj7yjRqDXwGgY2i2+LPEeaEfVM6HA=)
2: SvbWjBtA5USrFJEFyfsvP-SCofs.roa (hash: La++FukCI88aoCCAWTG9ojz1zryPe+WC1BNRSElIvDw=)
3: ZqMh09XL_OuL0ICq-TfvGdj4pmM.roa (hash: l5g5wXS3ZWKojPoOXqpehHnI+SHAfeYcurBv6Xo/WU8=)
4: tkB0qoRJgw2psgs6-waC08Ay-f4.crl (hash: Ih6UMIIjcbARzYuRo4Tia84N2pI7yrDv5uXxk8Ng9x8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/fc7c82-3159-4d54-a0a1-35171aedd313/1/tkB0qoRJgw2psgs6-waC08Ay-f4.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/fc7c82-3159-4d54-a0a1-35171aedd313/1/tkB0qoRJgw2psgs6-waC08Ay-f4.mft
rsync://rpki.ripe.net/repository/DEFAULT/tkB0qoRJgw2psgs6-waC08Ay-f4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 04:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fa:a0:b5:35:14:e9:c0:a8:3c:5f:08:0d:1b:5e:a6:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b64074aa8449830da9b20b3afb0682d3c032f9fe
Validity
Not Before: Oct 19 04:00:59 2025 GMT
Not After : Oct 20 04:00:59 2025 GMT
Subject: CN=a53de8173104cbdaf56d701b2a7a9819e294a527
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:1c:e4:f1:ae:42:f9:c5:3e:f4:fe:d8:71:62:
00:1a:b7:65:0d:68:51:1d:79:b8:05:ed:c6:4d:2f:
56:ca:07:23:d4:c2:a7:8d:09:ed:b7:94:8a:c3:0f:
56:b7:19:cc:ce:97:1b:0a:86:34:2a:6e:00:ac:f9:
7e:a5:16:1a:e0:ca:50:73:70:89:34:85:3f:7b:44:
79:51:b0:b6:fc:d0:94:16:1c:9c:b1:42:58:36:5f:
0b:b1:0e:d2:a5:d3:58:a2:1b:db:d2:c9:be:c6:c1:
01:0c:0c:3b:fc:2f:b5:28:20:da:ce:60:45:64:3b:
80:fb:51:8d:25:ef:93:f0:d2:fe:51:89:62:51:ab:
cc:bc:f4:ce:97:20:dd:8b:6e:00:77:7d:10:aa:7f:
8a:0a:6b:7e:61:c7:fd:06:fc:ee:54:a9:02:e8:ad:
a8:90:49:90:4c:07:2b:c8:a9:cc:43:c1:7e:14:34:
f7:bb:22:8e:2e:3e:2d:80:45:49:6f:02:2e:6e:79:
87:d4:94:14:f4:87:c6:3a:6f:0b:df:6c:d8:ca:73:
3d:5d:34:0a:b5:a4:83:9b:2a:98:fd:7a:b0:9f:69:
7c:0e:c4:da:53:e8:3e:03:79:1b:0e:02:ad:17:cd:
01:0d:2b:bb:ed:c8:f8:75:bb:ae:d6:52:d6:0c:45:
a6:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:3D:E8:17:31:04:CB:DA:F5:6D:70:1B:2A:7A:98:19:E2:94:A5:27
X509v3 Authority Key Identifier:
keyid:B6:40:74:AA:84:49:83:0D:A9:B2:0B:3A:FB:06:82:D3:C0:32:F9:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tkB0qoRJgw2psgs6-waC08Ay-f4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/fc7c82-3159-4d54-a0a1-35171aedd313/1/tkB0qoRJgw2psgs6-waC08Ay-f4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/fc7c82-3159-4d54-a0a1-35171aedd313/1/tkB0qoRJgw2psgs6-waC08Ay-f4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:67:ac:22:9a:d9:23:b5:26:f7:d4:9f:b3:c2:9e:52:61:2d:
78:66:9f:e2:59:1e:50:3a:21:d3:cc:1a:46:d3:ff:0a:89:51:
db:bf:9d:2b:db:b9:a3:0d:6e:27:f6:cf:80:3a:2e:ae:ba:83:
55:25:51:41:b3:f9:ac:58:94:40:9e:3a:ae:ca:5e:cf:e4:f3:
c6:7e:dc:20:67:e5:da:55:d6:9e:df:1a:db:33:7e:60:ac:ba:
71:22:ee:fc:fa:e0:58:76:9e:4a:3c:2c:88:58:1c:34:85:52:
67:4d:c5:e4:83:d1:36:1c:ca:bb:3b:58:33:54:3c:54:04:53:
20:16:42:de:a1:22:b9:fb:16:af:60:02:57:95:6c:85:a7:9c:
0c:f3:80:78:6d:e8:0b:13:5b:86:13:eb:a0:96:03:1f:6f:2a:
e4:68:e1:0c:9a:23:2e:d8:7a:f4:f0:bd:10:9f:36:d3:90:40:
de:32:59:b3:18:2f:83:8d:80:20:8d:3a:f9:c6:16:7e:5c:4a:
2d:ac:6a:d2:85:ca:a2:a9:3b:98:b8:8d:d6:46:a8:05:a2:cd:
c6:80:40:9d:35:79:bc:e3:96:aa:71:8d:4f:47:19:b7:8a:fe:
a8:fe:b6:57:31:3c:ad:e1:aa:b6:b1:26:87:c3:ef:78:92:7e:
51:97:23:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:11:03 2025 by rpki-client