Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/c68bd1-8a98-41b2-b36b-386eea8d8dd6/1/Tu6GsiwkvKdxMHHeldaCLDOc_Rw.mft
File: Tu6GsiwkvKdxMHHeldaCLDOc_Rw.mft (raw, json)
Hash identifier: mxK63i1K8ZMo90tKm0OenRlY+QLehg3l5khpo+aW38Y=
Subject key identifier: 65:28:09:24:5F:DD:06:5B:55:A1:01:9E:B4:7F:01:3B:C0:83:9F:12
Authority key identifier: 4E:EE:86:B2:2C:24:BC:A7:71:30:71:DE:95:D6:82:2C:33:9C:FD:1C
Certificate issuer: /CN=4eee86b22c24bca7713071de95d6822c339cfd1c
Certificate serial: 0199FE47816C7D385EF66472B36DCEC293C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tu6GsiwkvKdxMHHeldaCLDOc_Rw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/c68bd1-8a98-41b2-b36b-386eea8d8dd6/1/Tu6GsiwkvKdxMHHeldaCLDOc_Rw.mft
Manifest number: 1408
Signing time: Sun 19 Oct 2025 21:02:02 +0000
Manifest this update: Sun 19 Oct 2025 21:02:02 +0000
Manifest next update: Mon 20 Oct 2025 21:02:02 +0000
Files and hashes: 1: DAiAlkKu2uIH3tPrZHXW35UovoY.roa (hash: ii+y3ES147W1gYE6b/JQu7S5U4fp3robU9GiKGcJGDs=)
2: Tu6GsiwkvKdxMHHeldaCLDOc_Rw.crl (hash: F3VVpVg6HW8z63/62tCLxqacR6JcL7vkxqE0Z4spOGY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/c68bd1-8a98-41b2-b36b-386eea8d8dd6/1/Tu6GsiwkvKdxMHHeldaCLDOc_Rw.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/c68bd1-8a98-41b2-b36b-386eea8d8dd6/1/Tu6GsiwkvKdxMHHeldaCLDOc_Rw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Tu6GsiwkvKdxMHHeldaCLDOc_Rw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:47:81:6c:7d:38:5e:f6:64:72:b3:6d:ce:c2:93:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4eee86b22c24bca7713071de95d6822c339cfd1c
Validity
Not Before: Oct 19 21:02:02 2025 GMT
Not After : Oct 20 21:02:02 2025 GMT
Subject: CN=652809245fdd065b55a1019eb47f013bc0839f12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:54:ae:45:27:e8:ac:1e:72:89:3d:c3:f9:10:
68:13:1c:d5:02:2b:0d:1c:30:99:64:69:3a:eb:a8:
07:54:37:9c:ee:0a:6b:92:34:78:82:1f:21:8f:b5:
d7:15:9c:54:04:3a:08:65:17:fa:e2:94:b8:23:0b:
96:b3:5c:ef:7e:1b:05:1f:19:f5:f4:52:16:d4:77:
86:ef:21:08:61:f6:db:9d:62:44:85:7c:f2:f9:e1:
e9:1b:98:b8:d8:47:06:63:45:05:ba:43:4e:7b:fd:
44:d6:16:3e:23:be:33:72:6e:b6:d0:e0:93:cd:c2:
00:14:53:67:6f:92:41:66:bd:ab:bc:4c:ae:64:3d:
fc:a0:fe:f2:bc:c8:a6:6b:e8:82:ce:ab:2c:a2:b5:
68:37:57:b2:ed:dc:e0:ee:36:77:35:be:dd:fe:dd:
59:b3:d5:57:d9:69:2a:e6:ee:a7:5b:96:1b:72:d2:
7a:3e:23:2f:75:10:be:28:d5:21:fc:ec:81:85:cd:
56:f1:85:a2:7d:90:0d:f4:0d:83:c9:49:43:67:77:
80:d9:14:83:38:b7:7f:cc:9e:02:5c:0b:59:3b:f8:
1b:d8:3c:13:6b:61:8e:bb:31:fe:f4:ca:32:91:d7:
ea:27:51:83:50:89:81:f4:e9:70:97:4a:68:80:a3:
19:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:28:09:24:5F:DD:06:5B:55:A1:01:9E:B4:7F:01:3B:C0:83:9F:12
X509v3 Authority Key Identifier:
keyid:4E:EE:86:B2:2C:24:BC:A7:71:30:71:DE:95:D6:82:2C:33:9C:FD:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tu6GsiwkvKdxMHHeldaCLDOc_Rw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/c68bd1-8a98-41b2-b36b-386eea8d8dd6/1/Tu6GsiwkvKdxMHHeldaCLDOc_Rw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/c68bd1-8a98-41b2-b36b-386eea8d8dd6/1/Tu6GsiwkvKdxMHHeldaCLDOc_Rw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:bb:a2:5b:8d:24:d8:10:31:c3:f8:22:18:ee:80:54:e9:be:
9f:e2:4a:84:2e:bd:2d:b8:fa:b2:ea:5a:18:fe:9c:78:84:8a:
a4:77:b6:07:e9:4e:cd:d9:c8:f0:fa:20:a3:50:cc:1c:b8:8c:
c1:83:94:32:1f:90:84:60:56:81:e7:84:c8:ae:cf:8f:11:05:
15:38:9d:c3:29:9b:78:ce:ee:51:9c:e0:b7:14:87:31:d3:d4:
bb:c2:2b:82:71:23:b0:39:88:a9:c7:6d:ee:b2:95:32:1a:ee:
15:01:37:aa:c6:f5:1a:40:c4:a2:c8:fa:92:f2:f7:7c:d0:10:
e9:92:f6:1c:e6:36:1d:86:31:77:26:d5:7c:10:db:d4:40:26:
2f:73:fe:d9:28:bf:98:ee:7e:c3:5f:b0:7e:dc:b2:3e:65:5c:
35:eb:29:4a:59:86:74:0b:70:93:e8:98:59:02:4e:58:c8:16:
0d:a2:a3:f8:de:dd:67:19:8e:45:0b:24:ef:13:fc:4f:9b:03:
82:4a:c1:11:f4:55:83:c2:c2:3a:0e:80:ae:02:51:9b:f2:58:
cb:7c:d5:83:3b:97:82:f2:5e:8d:a8:f6:c5:71:79:3a:ac:8e:
87:b7:ae:21:77:41:d8:3a:6b:cd:3b:03:05:92:c2:4e:ea:95:
f1:d2:db:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 22:30:33 2025 by rpki-client