Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/533416-5192-4944-ab50-813c76ff40b4/1/tUXkNLukc3BtqDNv2gFrsuaLNiM.mft
File: tUXkNLukc3BtqDNv2gFrsuaLNiM.mft (raw, json)
Hash identifier: ScYYO8XRzcwBCOskLlSjj86g6qTbbA4VMC93prf0nk4=
Subject key identifier: FB:72:57:DF:DF:76:3F:F3:DF:2B:DB:1A:B2:B1:4D:9D:A5:F3:FD:C8
Authority key identifier: B5:45:E4:34:BB:A4:73:70:6D:A8:33:6F:DA:01:6B:B2:E6:8B:36:23
Certificate issuer: /CN=b545e434bba473706da8336fda016bb2e68b3623
Certificate serial: 0199FFC85C2322ABFE6B28255F24FAB69FA3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tUXkNLukc3BtqDNv2gFrsuaLNiM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/533416-5192-4944-ab50-813c76ff40b4/1/tUXkNLukc3BtqDNv2gFrsuaLNiM.mft
Manifest number: 16E4
Signing time: Mon 20 Oct 2025 04:02:24 +0000
Manifest this update: Mon 20 Oct 2025 04:02:24 +0000
Manifest next update: Tue 21 Oct 2025 04:02:24 +0000
Files and hashes: 1: 8c1jWLNSWx4cTuK9ZEnAPJAmwwU.roa (hash: zNldb7jsDCF4ycQz0X2hLLJLeALZnhbBqN35ToOj1oI=)
2: tUXkNLukc3BtqDNv2gFrsuaLNiM.crl (hash: HdcfA4WANu6YbKAlXRhQNI6WzYbmMX1qvArW8A7KBks=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/533416-5192-4944-ab50-813c76ff40b4/1/tUXkNLukc3BtqDNv2gFrsuaLNiM.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/533416-5192-4944-ab50-813c76ff40b4/1/tUXkNLukc3BtqDNv2gFrsuaLNiM.mft
rsync://rpki.ripe.net/repository/DEFAULT/tUXkNLukc3BtqDNv2gFrsuaLNiM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:c8:5c:23:22:ab:fe:6b:28:25:5f:24:fa:b6:9f:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b545e434bba473706da8336fda016bb2e68b3623
Validity
Not Before: Oct 20 04:02:24 2025 GMT
Not After : Oct 21 04:02:24 2025 GMT
Subject: CN=fb7257dfdf763ff3df2bdb1ab2b14d9da5f3fdc8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:be:fb:0f:70:ca:95:ef:99:51:1c:8f:c3:34:
f9:35:22:39:42:fb:6b:7e:a6:51:31:3c:f1:4a:06:
43:4d:a9:10:ee:f0:1b:61:5d:c4:9c:dc:02:3d:0e:
1e:8a:b3:0d:b0:2c:cb:c0:57:a3:c2:31:01:12:6b:
0b:85:00:be:6b:3f:9b:7a:a7:0e:d4:dd:ac:15:65:
0c:93:95:35:8e:44:da:38:71:36:00:80:b5:61:80:
c6:e3:79:71:e5:47:c1:9f:1e:50:f8:dd:06:8b:a8:
39:74:bc:02:b0:c6:38:50:78:ae:ca:97:ad:de:db:
4c:58:0a:80:7b:1e:f4:b2:b9:1c:14:1f:49:3e:e0:
d3:ce:87:b5:5e:f6:f9:e4:b1:e7:26:9a:c4:f2:a7:
53:ef:5b:70:9a:9f:62:73:af:56:69:9a:84:2c:e4:
9a:9a:1f:20:37:02:ec:e1:80:f0:7d:d2:63:8c:68:
bb:12:4b:04:76:22:9b:fe:cb:3d:2f:32:62:dc:d2:
d8:ee:f8:f1:fb:b4:b6:98:40:1d:4c:28:a7:f5:18:
be:13:42:84:22:11:1e:ac:55:da:e0:65:16:fe:84:
47:64:95:27:44:ef:2b:55:06:09:7d:8e:28:03:b9:
e4:50:47:a0:0d:2b:65:4b:57:b7:92:7c:3b:69:04:
01:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:72:57:DF:DF:76:3F:F3:DF:2B:DB:1A:B2:B1:4D:9D:A5:F3:FD:C8
X509v3 Authority Key Identifier:
keyid:B5:45:E4:34:BB:A4:73:70:6D:A8:33:6F:DA:01:6B:B2:E6:8B:36:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tUXkNLukc3BtqDNv2gFrsuaLNiM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/533416-5192-4944-ab50-813c76ff40b4/1/tUXkNLukc3BtqDNv2gFrsuaLNiM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/533416-5192-4944-ab50-813c76ff40b4/1/tUXkNLukc3BtqDNv2gFrsuaLNiM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:0b:9c:eb:fd:24:09:2f:90:4e:06:e8:f8:04:3c:59:da:a5:
04:7d:1d:22:3d:f3:a4:a5:2f:1f:2f:ce:42:db:9e:f4:45:06:
d8:2a:9c:7e:a7:d3:51:fa:2a:9f:1b:f3:76:71:ad:7a:9d:34:
f2:ef:98:8a:5d:9c:04:d4:41:8b:94:03:59:62:c6:2d:e8:fc:
9d:59:25:c4:74:24:7b:e4:31:a3:44:ea:b8:31:d7:47:f8:37:
e6:96:c3:31:99:e3:8a:ac:95:51:23:bf:ab:92:64:f5:a1:f7:
b6:2f:b7:61:eb:2f:34:a3:50:d7:0d:c2:d9:83:7c:24:92:40:
3b:eb:cd:1f:b8:b3:aa:0e:3a:21:8f:73:3e:92:a8:99:b9:1a:
f6:a4:ef:8d:d7:03:b0:c0:0c:b0:f1:07:e9:ea:f3:3d:ab:bd:
a3:b5:ce:3f:19:2d:68:9c:b0:f3:25:66:a1:23:a6:09:c2:8e:
0e:5e:2d:54:c0:a5:1e:19:cd:5e:f5:fc:b4:21:a5:c7:7a:7a:
05:32:c9:9c:1f:1e:3e:55:e1:ad:12:73:c5:ed:70:8c:1d:ef:
a0:d7:93:80:6c:66:4e:75:dc:35:c2:cd:f6:2f:49:07:60:22:
d7:ef:25:0a:67:01:2f:a4:06:99:99:5e:be:ec:a8:df:65:d2:
4b:25:ad:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 07:55:20 2025 by rpki-client