Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/ed3b2e-f0fe-4460-850d-5847b1469326/1/TWh9higIIltFn6OZ5l-KBpRpq6M.mft
File: TWh9higIIltFn6OZ5l-KBpRpq6M.mft (raw, json)
Hash identifier: 9ixKnPMa4aFRMj26wayUDL5+VMoJl0WTZ3A8+C9L3Q4=
Subject key identifier: 86:35:B1:DB:A1:17:47:30:9A:03:87:78:94:EA:E0:5A:04:9E:24:42
Authority key identifier: 4D:68:7D:86:28:08:22:5B:45:9F:A3:99:E6:5F:8A:06:94:69:AB:A3
Certificate issuer: /CN=4d687d862808225b459fa399e65f8a069469aba3
Certificate serial: 0199FC8F186E1694EE9902F9BAABA7DFFF33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TWh9higIIltFn6OZ5l-KBpRpq6M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/ed3b2e-f0fe-4460-850d-5847b1469326/1/TWh9higIIltFn6OZ5l-KBpRpq6M.mft
Manifest number: 1673
Signing time: Sun 19 Oct 2025 13:01:00 +0000
Manifest this update: Sun 19 Oct 2025 13:01:00 +0000
Manifest next update: Mon 20 Oct 2025 13:01:00 +0000
Files and hashes: 1: TWh9higIIltFn6OZ5l-KBpRpq6M.crl (hash: tiTjvMEX42LjTcl7498eeq+LlwYGxk3EKwIYnOBwchw=)
2: yj8S8MOtSmVKNjXl11Yr8esDgtY.roa (hash: px/AqUdCFaeUdcOlWlEpkaK3sSjZNzpfw2t/zU4ncMc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/ed3b2e-f0fe-4460-850d-5847b1469326/1/TWh9higIIltFn6OZ5l-KBpRpq6M.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/ed3b2e-f0fe-4460-850d-5847b1469326/1/TWh9higIIltFn6OZ5l-KBpRpq6M.mft
rsync://rpki.ripe.net/repository/DEFAULT/TWh9higIIltFn6OZ5l-KBpRpq6M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 13:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:18:6e:16:94:ee:99:02:f9:ba:ab:a7:df:ff:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d687d862808225b459fa399e65f8a069469aba3
Validity
Not Before: Oct 19 13:01:00 2025 GMT
Not After : Oct 20 13:01:00 2025 GMT
Subject: CN=8635b1dba11747309a03877894eae05a049e2442
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:7c:80:42:5a:57:70:bd:0d:96:d8:bc:f1:27:
95:aa:5c:fd:28:95:2a:23:6b:19:0e:7e:7c:32:a1:
d4:23:c2:50:9d:f4:82:59:fe:eb:1c:5a:16:d7:b9:
3b:a5:04:d0:8d:d9:0e:c8:a4:99:56:7b:73:41:6a:
9e:f1:c8:14:b1:65:47:c4:df:f3:07:57:4b:8b:e0:
f1:f4:bd:89:db:8e:61:d1:46:6b:99:f1:fc:1d:40:
6a:de:7b:c0:f1:d2:68:b5:ef:cd:fb:a7:31:2f:f2:
f2:48:7d:c2:c4:d4:bd:52:e1:07:30:51:04:bd:86:
ec:9d:3c:d9:ec:ab:12:72:81:fd:ef:6a:a8:a4:58:
47:82:a9:4f:c1:dd:d2:48:09:1c:4f:10:7a:5e:48:
67:97:57:d0:b9:2e:93:e1:e2:ea:3b:e5:54:12:90:
ad:20:0e:7f:02:89:29:3e:5b:0a:3f:c3:0a:5f:77:
79:f2:00:7f:1d:5e:05:6c:2a:91:85:4d:62:2f:1d:
cb:80:d2:c7:66:75:e8:e2:08:c1:1c:ad:d3:12:9e:
ec:91:b9:14:6f:7f:2e:9f:70:18:52:0a:b8:08:21:
07:eb:a2:47:73:2a:65:3d:ff:6f:a1:8e:ea:07:46:
0a:bf:f9:26:7e:33:fe:9b:f0:90:a9:4c:2d:24:4b:
48:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:35:B1:DB:A1:17:47:30:9A:03:87:78:94:EA:E0:5A:04:9E:24:42
X509v3 Authority Key Identifier:
keyid:4D:68:7D:86:28:08:22:5B:45:9F:A3:99:E6:5F:8A:06:94:69:AB:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TWh9higIIltFn6OZ5l-KBpRpq6M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/ed3b2e-f0fe-4460-850d-5847b1469326/1/TWh9higIIltFn6OZ5l-KBpRpq6M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/ed3b2e-f0fe-4460-850d-5847b1469326/1/TWh9higIIltFn6OZ5l-KBpRpq6M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:58:16:8d:ad:f5:d4:d5:47:40:44:92:0a:95:ba:a2:7c:25:
8a:9a:a8:c9:e6:73:c0:5f:31:a1:6a:a0:fc:04:c5:74:6a:66:
cd:4a:cd:0b:86:1f:da:c9:06:8b:31:29:14:c7:5b:e3:5f:8e:
04:01:a0:57:88:33:73:16:f8:75:e3:ff:0f:b2:2d:cf:e4:8d:
ae:07:40:2a:09:19:11:e2:84:dd:bd:f5:31:0b:98:11:9d:ed:
5a:f0:3f:42:9f:0f:6c:2d:52:0f:bd:53:ec:bb:11:c2:02:08:
ac:8e:92:26:1c:a4:5d:48:0b:da:48:d4:61:a1:bd:da:94:8d:
14:29:1a:4e:05:87:bc:71:83:fc:c7:5a:b5:f6:15:a0:cd:9e:
07:35:f1:ee:9b:39:af:d2:b9:1d:a4:55:8e:8f:2c:10:0d:33:
0d:4c:e9:cf:bd:56:88:fe:39:6b:30:63:30:46:5b:e3:30:32:
2f:ef:14:20:33:a6:5a:66:d6:ac:fa:31:8c:85:e0:d3:03:c0:
9b:2a:95:19:a9:23:86:db:0e:8b:31:05:ed:54:67:b6:53:30:
42:57:cd:e0:f1:b5:c8:fb:4c:ad:bc:93:f5:c0:c6:ea:7e:2b:
ac:eb:55:74:f3:21:94:48:c1:11:09:39:b0:61:b6:42:b7:d5:
a0:eb:86:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 22:36:08 2025 by rpki-client