Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/8146d8-31b0-4022-af7e-fa5b2199a739/1/tW-ivPsboZnQpll_uIlUwKbFEtU.mft
File: tW-ivPsboZnQpll_uIlUwKbFEtU.mft (raw, json)
Hash identifier: F9qgutxkBGpMKco+6UYN41F0LPdJ2QVXBrXJn3MK6ns=
Subject key identifier: B8:71:02:1F:52:A9:1B:29:D3:00:55:55:1A:DB:48:3E:DB:D3:4F:FC
Authority key identifier: B5:6F:A2:BC:FB:1B:A1:99:D0:A6:59:7F:B8:89:54:C0:A6:C5:12:D5
Certificate issuer: /CN=b56fa2bcfb1ba199d0a6597fb88954c0a6c512d5
Certificate serial: 0199FBEB161CC8406F097652831E2E4D2051
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tW-ivPsboZnQpll_uIlUwKbFEtU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/8146d8-31b0-4022-af7e-fa5b2199a739/1/tW-ivPsboZnQpll_uIlUwKbFEtU.mft
Manifest number: 0BD4
Signing time: Sun 19 Oct 2025 10:01:51 +0000
Manifest this update: Sun 19 Oct 2025 10:01:51 +0000
Manifest next update: Mon 20 Oct 2025 10:01:51 +0000
Files and hashes: 1: iJgFNTZ7IhnRGcD9bd_FqPtqDEU.roa (hash: IcZI5thj3Qr91vjQiVj5vIexM3iUd5S8V76AbgBrsvg=)
2: tW-ivPsboZnQpll_uIlUwKbFEtU.crl (hash: pYyX0c21l5dwsRjFxhbMG6bB1RccdoApNv9DRlRsSSo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/8146d8-31b0-4022-af7e-fa5b2199a739/1/tW-ivPsboZnQpll_uIlUwKbFEtU.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/8146d8-31b0-4022-af7e-fa5b2199a739/1/tW-ivPsboZnQpll_uIlUwKbFEtU.mft
rsync://rpki.ripe.net/repository/DEFAULT/tW-ivPsboZnQpll_uIlUwKbFEtU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:16:1c:c8:40:6f:09:76:52:83:1e:2e:4d:20:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b56fa2bcfb1ba199d0a6597fb88954c0a6c512d5
Validity
Not Before: Oct 19 10:01:51 2025 GMT
Not After : Oct 20 10:01:51 2025 GMT
Subject: CN=b871021f52a91b29d30055551adb483edbd34ffc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:fc:5e:c8:8f:72:e2:90:13:da:66:07:de:d8:
1d:47:96:dd:33:7d:97:6a:84:e1:90:4b:cc:7d:c8:
bc:89:db:af:8c:3c:3d:ee:ca:45:21:07:6a:a2:51:
60:ea:c5:a8:34:f4:a4:5b:47:74:4b:1f:19:34:d8:
75:9f:08:4c:81:3d:80:91:94:2b:7e:be:58:a9:7b:
78:66:93:3f:cf:cd:6a:7c:6e:55:53:20:8a:de:ab:
42:22:ff:77:98:23:74:fc:62:c2:aa:c4:c4:e0:66:
6f:00:a7:39:e0:0b:21:c8:16:c4:4a:e3:e5:1f:56:
9d:c2:05:63:d4:10:ec:4b:66:3c:8f:4a:c6:96:f3:
08:ed:24:47:e5:97:9f:60:cb:a0:61:59:95:cd:76:
f1:76:ab:cc:a2:75:44:82:84:6d:2b:5b:87:76:58:
1b:7e:11:82:5b:e3:1d:54:dd:87:ec:18:58:99:8a:
dd:18:07:0c:54:03:29:79:02:12:1a:b9:84:fb:ab:
30:1f:f2:49:b1:61:80:82:54:71:59:d2:23:30:77:
aa:a5:57:9c:6e:cf:c6:53:0a:55:b3:9e:ed:8c:c2:
3e:bf:8d:77:21:da:4c:60:5f:d5:a4:25:90:b4:05:
d3:73:51:62:45:4e:c4:ff:11:9c:af:35:d7:85:21:
81:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:71:02:1F:52:A9:1B:29:D3:00:55:55:1A:DB:48:3E:DB:D3:4F:FC
X509v3 Authority Key Identifier:
keyid:B5:6F:A2:BC:FB:1B:A1:99:D0:A6:59:7F:B8:89:54:C0:A6:C5:12:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tW-ivPsboZnQpll_uIlUwKbFEtU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/8146d8-31b0-4022-af7e-fa5b2199a739/1/tW-ivPsboZnQpll_uIlUwKbFEtU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/8146d8-31b0-4022-af7e-fa5b2199a739/1/tW-ivPsboZnQpll_uIlUwKbFEtU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:cf:66:09:e6:1c:08:97:d6:f0:c6:1d:5d:c6:37:a2:1c:f8:
b2:7d:25:c6:b9:02:25:51:8f:c7:6a:8d:87:1a:d8:e8:0d:be:
40:b8:bc:9c:4e:95:e8:ae:0b:e1:ff:57:44:82:9e:92:13:b5:
c3:3d:b5:9d:b2:c2:93:8d:8d:04:c8:31:27:d8:1e:6d:63:8a:
46:4e:3e:33:a5:9d:87:95:3d:21:3c:21:34:ad:fb:b8:b7:44:
68:36:3d:83:41:3e:6d:56:49:a4:89:c8:af:dd:71:22:d3:65:
5f:e2:67:5f:5a:ec:b5:d1:c6:bc:91:c1:df:2f:a4:fb:51:07:
64:85:6f:90:95:95:ad:e7:a7:5e:13:4f:22:dd:9d:7b:2a:0a:
28:7a:d6:69:d8:4a:69:85:0d:22:15:f4:f1:99:ac:b8:78:7f:
d2:dc:9a:f6:e9:91:31:98:74:99:d8:cc:8b:db:eb:3b:41:63:
9e:99:6c:af:f1:25:3a:6f:cd:57:61:df:dc:1c:7b:d2:ac:60:
55:de:32:d8:06:7b:44:cc:09:55:62:b7:09:e0:d7:37:ab:af:
7f:aa:13:00:8e:5d:bc:27:4d:ec:d1:7e:1b:fe:cd:01:ae:e5:
3c:7d:78:54:1d:ad:7b:de:58:39:89:13:1e:bf:a7:bb:41:2c:
8f:28:be:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:34:16 2025 by rpki-client