Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/db5989-19f6-468d-9fc3-f8a3780c348e/1/tFBrzj9-GuOn4sua0gXEzfsC3bU.mft
File: tFBrzj9-GuOn4sua0gXEzfsC3bU.mft (raw, json)
Hash identifier: Cdy1YmtPynWpEcDctW9eQAGm8NWnBgMcJfckBIRJL3A=
Subject key identifier: A6:FB:1F:83:2C:00:DB:C9:EC:14:91:D3:00:5E:38:CF:60:4E:A2:6B
Authority key identifier: B4:50:6B:CE:3F:7E:1A:E3:A7:E2:CB:9A:D2:05:C4:CD:FB:02:DD:B5
Certificate issuer: /CN=b4506bce3f7e1ae3a7e2cb9ad205c4cdfb02ddb5
Certificate serial: 0199FCC6704B9BE5AC5100660952F52843DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tFBrzj9-GuOn4sua0gXEzfsC3bU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/db5989-19f6-468d-9fc3-f8a3780c348e/1/tFBrzj9-GuOn4sua0gXEzfsC3bU.mft
Manifest number: 15F0
Signing time: Sun 19 Oct 2025 14:01:27 +0000
Manifest this update: Sun 19 Oct 2025 14:01:27 +0000
Manifest next update: Mon 20 Oct 2025 14:01:27 +0000
Files and hashes: 1: Kd39P6546NpKkTMGeJ0Di1Tm-dg.roa (hash: whkcH/ShQkUqu7p697My2+ymwjNji4wGQLqM0wmvkYA=)
2: To-uv46-3XmiPKg6c_GrFJdFcf0.roa (hash: SmXcvoxvyvRm/BeOwyu47J7sKwYa3+1oFy5V9rexUqQ=)
3: tFBrzj9-GuOn4sua0gXEzfsC3bU.crl (hash: rOG2aOAZP+xLf5okN3rXI8eBpqT/YnmgkHKY8KXUtoQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/db5989-19f6-468d-9fc3-f8a3780c348e/1/tFBrzj9-GuOn4sua0gXEzfsC3bU.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/db5989-19f6-468d-9fc3-f8a3780c348e/1/tFBrzj9-GuOn4sua0gXEzfsC3bU.mft
rsync://rpki.ripe.net/repository/DEFAULT/tFBrzj9-GuOn4sua0gXEzfsC3bU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:70:4b:9b:e5:ac:51:00:66:09:52:f5:28:43:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4506bce3f7e1ae3a7e2cb9ad205c4cdfb02ddb5
Validity
Not Before: Oct 19 14:01:27 2025 GMT
Not After : Oct 20 14:01:27 2025 GMT
Subject: CN=a6fb1f832c00dbc9ec1491d3005e38cf604ea26b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:13:04:7b:c1:d1:10:d1:d5:f5:bd:64:6c:cf:
5a:80:73:fa:46:ab:d0:44:9f:e2:78:25:c1:0a:84:
1d:83:9c:2e:48:b8:7c:63:79:43:c8:b0:ce:c2:2d:
24:aa:9e:fc:51:82:a1:75:95:32:e0:42:f1:8b:d1:
9b:b3:41:a3:6c:63:e5:6a:a3:ff:bc:c2:c5:a6:6e:
0f:64:be:e3:ed:00:a3:be:fa:7e:24:60:fa:76:32:
82:49:a3:16:10:4e:8e:3f:bd:1d:1b:2b:69:1b:b6:
8e:fa:50:40:87:db:66:a5:75:e2:26:01:34:a6:bb:
f4:e8:a7:55:a2:2d:47:d6:0e:c2:9b:a4:e1:29:e3:
f7:d9:47:cd:5b:8c:d3:c0:60:8a:46:62:91:ff:e0:
49:7b:6d:9a:09:df:3f:b3:24:40:b4:44:c4:2d:1f:
58:29:00:8b:13:79:cf:7a:ef:c8:8c:ad:22:fd:6d:
d4:62:bb:86:53:d7:95:0a:51:c9:83:8f:05:93:b3:
49:b6:ae:9b:52:f4:db:37:f2:d1:04:79:39:ab:4e:
95:a6:d4:3d:26:12:e1:b7:df:7a:03:61:6e:8b:20:
f5:87:14:7b:e3:4f:7f:9d:07:0b:b0:45:89:f8:20:
33:c1:bf:fe:8d:41:5e:e0:38:b4:15:2b:f0:47:45:
57:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:FB:1F:83:2C:00:DB:C9:EC:14:91:D3:00:5E:38:CF:60:4E:A2:6B
X509v3 Authority Key Identifier:
keyid:B4:50:6B:CE:3F:7E:1A:E3:A7:E2:CB:9A:D2:05:C4:CD:FB:02:DD:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tFBrzj9-GuOn4sua0gXEzfsC3bU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/db5989-19f6-468d-9fc3-f8a3780c348e/1/tFBrzj9-GuOn4sua0gXEzfsC3bU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/db5989-19f6-468d-9fc3-f8a3780c348e/1/tFBrzj9-GuOn4sua0gXEzfsC3bU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:5c:84:d5:d4:d8:11:1e:5a:47:b0:3e:12:dd:9e:a1:ee:27:
b2:ce:85:fd:96:2e:a6:0d:3e:83:57:d5:58:c2:d0:c9:d9:a8:
5f:b6:e2:e1:24:34:dc:e7:0a:70:b4:53:6e:d5:36:f7:d3:c4:
38:01:10:80:0b:cf:52:04:19:90:47:71:3e:26:9e:8b:a8:9c:
71:ed:4a:f1:97:26:1d:cf:0d:b7:70:a5:80:89:39:27:48:05:
28:07:a2:0b:a4:b7:81:3c:23:7a:0b:1c:66:5b:f0:c8:c4:13:
e2:6e:66:29:5c:29:c7:02:0d:b3:a5:be:d6:d0:c8:8d:0a:11:
4b:79:94:83:e1:dd:a1:17:27:0c:bd:e5:70:71:b3:cb:2a:50:
3d:9e:52:04:f7:c1:67:9d:b4:30:03:c8:6d:60:d8:5c:31:df:
6a:73:ac:ac:f6:d3:87:d5:06:97:f7:a5:b2:32:f7:fa:bc:cb:
8a:89:e3:17:c5:83:38:82:2b:cb:83:ce:07:71:c2:7b:f6:c8:
20:f9:42:6d:83:7e:c2:b1:dd:a5:5a:ba:fa:ca:a5:eb:c2:91:
2e:81:f6:34:35:10:09:56:b7:15:7c:f7:af:5c:69:4f:68:07:
39:45:f4:dd:c2:a7:15:d1:32:db:5d:e2:80:5a:65:94:d2:75:
b5:3e:30:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:51:14 2025 by rpki-client