Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/225af9-f3f5-49e4-ba10-f5ea012b84fc/1/tFOob9MIG4A-3BDSO77akdeTICU.mft
File: tFOob9MIG4A-3BDSO77akdeTICU.mft (raw, json)
Hash identifier: 2QQBGAFeI/2L6VMMH3zAwP3gpBMilzUJaY8e+OtrhBM=
Subject key identifier: 97:B4:DE:47:C1:64:71:C0:F2:00:DE:B3:B1:6F:B2:7D:34:29:5E:EF
Authority key identifier: B4:53:A8:6F:D3:08:1B:80:3E:DC:10:D2:3B:BE:DA:91:D7:93:20:25
Certificate issuer: /CN=b453a86fd3081b803edc10d23bbeda91d7932025
Certificate serial: 0199FAD7A2CAB6B5E0B60306D317EF63DCE2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tFOob9MIG4A-3BDSO77akdeTICU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/225af9-f3f5-49e4-ba10-f5ea012b84fc/1/tFOob9MIG4A-3BDSO77akdeTICU.mft
Manifest number: 1675
Signing time: Sun 19 Oct 2025 05:00:59 +0000
Manifest this update: Sun 19 Oct 2025 05:00:59 +0000
Manifest next update: Mon 20 Oct 2025 05:00:59 +0000
Files and hashes: 1: 4PFxlTOs-98tpvMHS5yXn75NOOM.roa (hash: NikMUSzzpLJM1+OSBrAyuxchZ1m24pIf1f/fleT58OE=)
2: Z8zKwSwU-_AnJQp6zP0kmhvngxk.roa (hash: DKK2FLL+hiqeGN3n2BFldkSB9QGntlwHo6IOei4/Bt0=)
3: tFOob9MIG4A-3BDSO77akdeTICU.crl (hash: 0MHmupsCuwb8hNdq+k09DCuOqCxb0FqRqeOuRz5EgvE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/225af9-f3f5-49e4-ba10-f5ea012b84fc/1/tFOob9MIG4A-3BDSO77akdeTICU.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/225af9-f3f5-49e4-ba10-f5ea012b84fc/1/tFOob9MIG4A-3BDSO77akdeTICU.mft
rsync://rpki.ripe.net/repository/DEFAULT/tFOob9MIG4A-3BDSO77akdeTICU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 05:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fa:d7:a2:ca:b6:b5:e0:b6:03:06:d3:17:ef:63:dc:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b453a86fd3081b803edc10d23bbeda91d7932025
Validity
Not Before: Oct 19 05:00:59 2025 GMT
Not After : Oct 20 05:00:59 2025 GMT
Subject: CN=97b4de47c16471c0f200deb3b16fb27d34295eef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:17:27:29:75:70:59:f5:00:01:dd:36:e5:b6:
f1:33:4a:26:42:37:9f:70:cd:b7:5c:d6:12:e8:eb:
8b:a8:02:51:b7:10:38:ee:18:83:de:9f:e4:12:e2:
f3:7d:0c:50:17:9d:86:a2:5c:4e:87:81:cf:e6:8b:
4d:d8:46:60:f7:34:5d:46:df:c9:6d:d8:ef:1e:c8:
8e:8b:ad:ab:a5:72:fe:b5:25:ca:bc:e5:f6:f7:f5:
6d:45:71:f6:b8:88:3c:01:c3:94:dd:5c:73:46:72:
dc:7e:04:f8:04:fd:d4:6d:05:b4:c8:5b:a5:b0:5c:
00:cc:de:35:75:28:52:88:22:05:23:02:14:75:ab:
e5:69:ae:b1:84:92:38:68:2c:38:e2:35:d9:de:2b:
e7:51:26:7e:ea:b4:3d:81:45:7a:4e:1b:b5:e0:7b:
43:30:8b:0d:81:72:77:5d:10:1e:1f:de:90:53:5e:
96:ad:f8:c5:85:87:39:22:de:8d:a7:c4:60:8d:14:
8a:0a:f1:a7:ab:6d:f1:0c:8e:c7:95:89:d4:8f:d1:
71:95:2f:ab:1b:e9:f4:da:7b:64:91:cc:5f:4b:31:
a0:dc:1d:bc:f0:b3:72:f4:ec:c7:f4:de:64:ce:6d:
09:96:2d:e9:c6:09:14:cd:26:01:ab:ec:02:f1:44:
b7:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:B4:DE:47:C1:64:71:C0:F2:00:DE:B3:B1:6F:B2:7D:34:29:5E:EF
X509v3 Authority Key Identifier:
keyid:B4:53:A8:6F:D3:08:1B:80:3E:DC:10:D2:3B:BE:DA:91:D7:93:20:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tFOob9MIG4A-3BDSO77akdeTICU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/225af9-f3f5-49e4-ba10-f5ea012b84fc/1/tFOob9MIG4A-3BDSO77akdeTICU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/225af9-f3f5-49e4-ba10-f5ea012b84fc/1/tFOob9MIG4A-3BDSO77akdeTICU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:1c:68:9a:8a:57:f6:cb:d5:a3:b7:e0:9e:1b:61:9b:2f:19:
af:47:38:92:fa:5a:42:27:02:23:a7:f0:3a:11:81:40:d3:55:
05:8c:b9:62:df:b9:79:35:ef:d8:e2:26:5f:cf:f2:61:3b:6d:
3d:27:9b:8f:c1:87:f7:40:56:f4:05:6d:1c:5e:ad:c9:25:d9:
b2:eb:b4:86:00:9b:18:46:15:c0:81:9f:b8:c9:29:62:23:b0:
f4:4b:5c:c8:b2:f3:a4:0f:f9:12:36:cb:0b:6c:8b:60:49:a6:
5d:8a:1b:80:86:9a:f8:62:3c:72:5c:00:32:a6:90:c9:c5:bd:
85:bb:b6:18:e1:17:d7:9a:27:fa:cf:78:07:4e:ca:f3:5c:1c:
8f:91:a9:ad:e8:86:fd:89:1f:b4:a8:83:c3:58:ef:ce:4b:ce:
59:55:37:f1:fc:66:3a:72:c0:2e:2d:da:3d:6a:69:66:3e:72:
1b:c3:1e:da:c5:d2:54:53:33:4b:dc:1d:41:bd:3c:50:cf:7a:
ad:d1:a6:63:ce:77:7f:79:90:66:7b:9d:a2:87:3d:48:4b:fa:
de:16:11:95:26:7d:00:66:c0:e2:6b:c0:8f:60:fa:5d:d6:89:
0d:da:4f:f8:d9:e6:3a:eb:75:1c:d3:55:4b:52:88:89:ad:b5:
64:93:22:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:28:44 2025 by rpki-client