Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/0cee34-5acc-42d5-a5bf-fc1c0ccbc0b7/1/tXikYahZ3cmGwIqI6VEtXD0iEOY.mft
File: tXikYahZ3cmGwIqI6VEtXD0iEOY.mft (raw, json)
Hash identifier: TROfwDeI4TppmmgR0IzMDCAHZhmwFtMsiQGhyzu52oc=
Subject key identifier: 8A:80:26:FA:EB:64:63:11:2B:DA:ED:98:76:09:6A:C1:7F:37:75:0B
Authority key identifier: B5:78:A4:61:A8:59:DD:C9:86:C0:8A:88:E9:51:2D:5C:3D:22:10:E6
Certificate issuer: /CN=b578a461a859ddc986c08a88e9512d5c3d2210e6
Certificate serial: 0199FD6AD98770C1C073A7CCD647102F7EB4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tXikYahZ3cmGwIqI6VEtXD0iEOY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/0cee34-5acc-42d5-a5bf-fc1c0ccbc0b7/1/tXikYahZ3cmGwIqI6VEtXD0iEOY.mft
Manifest number: 13BC
Signing time: Sun 19 Oct 2025 17:01:02 +0000
Manifest this update: Sun 19 Oct 2025 17:01:02 +0000
Manifest next update: Mon 20 Oct 2025 17:01:02 +0000
Files and hashes: 1: fOeHWLSvpiv5KgmUiK2xlWpmRm4.roa (hash: 70iF+LPpbMiVmu1EBYdz2CkmI0h0sZ5SaRk5YWSmNI0=)
2: tXikYahZ3cmGwIqI6VEtXD0iEOY.crl (hash: vmSLwJL21adR0Dow4ffxqavdzh5dDeKjYBKiXb+4C9c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/0cee34-5acc-42d5-a5bf-fc1c0ccbc0b7/1/tXikYahZ3cmGwIqI6VEtXD0iEOY.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/0cee34-5acc-42d5-a5bf-fc1c0ccbc0b7/1/tXikYahZ3cmGwIqI6VEtXD0iEOY.mft
rsync://rpki.ripe.net/repository/DEFAULT/tXikYahZ3cmGwIqI6VEtXD0iEOY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:6a:d9:87:70:c1:c0:73:a7:cc:d6:47:10:2f:7e:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b578a461a859ddc986c08a88e9512d5c3d2210e6
Validity
Not Before: Oct 19 17:01:02 2025 GMT
Not After : Oct 20 17:01:02 2025 GMT
Subject: CN=8a8026faeb6463112bdaed9876096ac17f37750b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:30:a5:02:f2:17:b3:0a:2e:31:bc:c1:be:3d:
76:e9:8f:68:93:01:c4:f7:c0:3e:66:59:27:bf:d7:
62:fb:22:a8:aa:18:6a:d1:df:8b:eb:29:fa:c9:70:
63:d0:d5:86:05:8c:0a:39:70:61:34:e8:d3:85:b3:
b1:06:32:a4:cc:56:1a:d6:25:f8:bb:3b:bf:79:cc:
72:1f:61:47:3c:88:e9:3e:87:d7:fa:42:c6:5b:57:
d3:eb:a5:06:2a:04:ce:87:7a:f0:d7:fd:07:e2:c9:
eb:29:c4:bb:0e:bd:89:67:c4:f4:a1:17:ee:17:2a:
59:6c:81:f1:f9:8d:ef:09:19:88:49:a0:ee:10:ef:
e9:80:83:c3:64:64:91:eb:8d:41:0f:a7:04:25:e9:
4f:88:3f:96:01:7a:1f:d4:10:3c:7d:79:e0:5f:f2:
0d:9d:b7:58:fe:c2:2b:7e:77:09:a5:2b:7f:76:81:
62:f9:69:35:75:72:42:8f:7d:ea:23:d8:b4:20:7f:
70:a0:94:1d:d5:8b:9d:47:26:64:76:65:5f:ee:fe:
0a:20:ac:12:5b:cf:5b:b3:2a:08:fd:a4:64:2c:92:
d6:e8:e6:55:60:e7:12:4f:54:9f:88:52:f1:9e:08:
6f:57:fe:3b:26:7e:97:30:b3:1e:a4:32:81:21:dc:
97:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:80:26:FA:EB:64:63:11:2B:DA:ED:98:76:09:6A:C1:7F:37:75:0B
X509v3 Authority Key Identifier:
keyid:B5:78:A4:61:A8:59:DD:C9:86:C0:8A:88:E9:51:2D:5C:3D:22:10:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tXikYahZ3cmGwIqI6VEtXD0iEOY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/0cee34-5acc-42d5-a5bf-fc1c0ccbc0b7/1/tXikYahZ3cmGwIqI6VEtXD0iEOY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/0cee34-5acc-42d5-a5bf-fc1c0ccbc0b7/1/tXikYahZ3cmGwIqI6VEtXD0iEOY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:48:39:6a:6b:11:1c:35:25:5b:b6:11:00:23:19:2a:81:b4:
c8:09:31:b5:a6:81:2f:65:c5:09:03:34:ef:68:cc:e3:ce:c1:
c8:c1:6c:ce:a0:3f:de:54:bb:73:59:87:71:1a:3c:d7:c7:3a:
58:ee:ba:7c:63:9d:fc:1e:cc:08:0f:a5:2b:5a:3c:0f:04:8e:
47:ef:ae:d3:65:3b:95:88:25:ca:98:47:ce:be:a9:71:74:ba:
ae:39:d3:3e:c2:1c:53:86:c3:ff:12:cf:a0:6a:59:ef:ce:86:
94:4a:19:78:ff:14:8e:25:bd:08:dd:ac:75:dc:3f:52:7b:14:
d4:9c:ce:b9:1a:3d:0f:22:9e:65:37:96:75:ac:ed:94:fb:97:
fd:88:b6:69:e2:b0:aa:5a:e8:4d:14:6d:ca:7c:6c:78:c2:2c:
33:6d:47:26:7f:72:f8:7a:49:cc:88:e3:2a:8b:93:53:2a:c5:
af:58:74:23:f2:0e:e5:b1:d0:fa:24:c8:4f:8a:ea:e5:21:e1:
a9:94:59:c6:9d:9c:7f:cc:42:0c:39:52:be:96:8f:c3:73:22:
2a:03:25:53:ea:79:fc:bd:e4:00:cb:82:c1:f7:de:f8:66:8f:
51:be:1b:f1:6d:1d:8b:dd:8f:b5:7d:19:05:96:48:e7:77:60:
3a:bc:13:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:28:31 2025 by rpki-client