Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/767119-28aa-4339-b741-4eeed8a4308b/1/TlqjjuoyTivXq2Qn51lqn6QdsOM.mft
File: TlqjjuoyTivXq2Qn51lqn6QdsOM.mft (raw, json)
Hash identifier: E46/F7TrU/h1iUehzI/JLVCURdemO4YWrH6mtPwJbKk=
Subject key identifier: B0:3A:84:05:03:8F:51:91:26:3D:0F:07:1A:F0:1C:F6:ED:51:9E:0C
Authority key identifier: 4E:5A:A3:8E:EA:32:4E:2B:D7:AB:64:27:E7:59:6A:9F:A4:1D:B0:E3
Certificate issuer: /CN=4e5aa38eea324e2bd7ab6427e7596a9fa41db0e3
Certificate serial: 0199FBEC322593D0A6189884BDA0B08CC2C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TlqjjuoyTivXq2Qn51lqn6QdsOM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/767119-28aa-4339-b741-4eeed8a4308b/1/TlqjjuoyTivXq2Qn51lqn6QdsOM.mft
Manifest number: 16E6
Signing time: Sun 19 Oct 2025 10:03:04 +0000
Manifest this update: Sun 19 Oct 2025 10:03:04 +0000
Manifest next update: Mon 20 Oct 2025 10:03:04 +0000
Files and hashes: 1: GE0QPlemROw8Sbhr36vqfxvh7PA.roa (hash: +MZLj56FBFDLK0DCRu2QzT8kaBrzw0Ux8MFgsr68gZ8=)
2: TlqjjuoyTivXq2Qn51lqn6QdsOM.crl (hash: GZFtnWZo1wiGzZu8cee1ylxIZVgaQngss4/tfneQ6b0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/767119-28aa-4339-b741-4eeed8a4308b/1/TlqjjuoyTivXq2Qn51lqn6QdsOM.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/767119-28aa-4339-b741-4eeed8a4308b/1/TlqjjuoyTivXq2Qn51lqn6QdsOM.mft
rsync://rpki.ripe.net/repository/DEFAULT/TlqjjuoyTivXq2Qn51lqn6QdsOM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ec:32:25:93:d0:a6:18:98:84:bd:a0:b0:8c:c2:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e5aa38eea324e2bd7ab6427e7596a9fa41db0e3
Validity
Not Before: Oct 19 10:03:04 2025 GMT
Not After : Oct 20 10:03:04 2025 GMT
Subject: CN=b03a8405038f5191263d0f071af01cf6ed519e0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:29:30:85:6e:65:5d:ab:91:26:36:ff:84:09:
9d:0f:f3:c2:c4:67:71:61:7b:20:42:7e:e5:d0:b4:
4d:5b:5c:13:b3:d7:c2:d7:52:0e:eb:61:33:b5:9b:
ed:46:59:29:f0:65:9b:f6:2e:be:61:37:ed:79:a5:
72:99:29:13:70:ca:ae:a9:66:77:21:b4:75:d5:a8:
dc:e0:8c:23:c1:6f:d0:93:bc:e9:13:d9:43:e3:a4:
f2:2c:47:d7:79:f7:e0:6c:d0:2b:4e:ec:f9:17:1d:
ef:eb:00:64:dd:ca:2f:29:0b:d4:77:1f:ee:47:d3:
c6:f5:a6:ae:82:08:e4:d5:1b:77:a8:b4:d0:26:20:
44:32:ff:33:de:cd:c2:43:94:6e:74:07:bb:4a:1b:
22:84:8f:4a:96:3a:44:2c:f9:e0:9a:f9:01:7a:7e:
00:21:35:ca:47:74:ec:1a:ae:b1:31:35:a3:cf:bd:
4d:89:57:d9:fd:53:a7:71:70:e2:d3:c2:ea:31:83:
70:5f:35:ca:56:65:3d:79:b4:75:95:ea:46:c9:cf:
a4:e1:4b:85:90:c3:3a:9b:f8:96:c9:9d:08:66:ea:
a3:7b:0d:90:54:b9:91:af:21:43:b8:0e:6b:5b:0e:
62:5d:e7:8f:02:8b:65:e4:51:d5:c9:7c:ed:8f:ad:
e3:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:3A:84:05:03:8F:51:91:26:3D:0F:07:1A:F0:1C:F6:ED:51:9E:0C
X509v3 Authority Key Identifier:
keyid:4E:5A:A3:8E:EA:32:4E:2B:D7:AB:64:27:E7:59:6A:9F:A4:1D:B0:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TlqjjuoyTivXq2Qn51lqn6QdsOM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/767119-28aa-4339-b741-4eeed8a4308b/1/TlqjjuoyTivXq2Qn51lqn6QdsOM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/767119-28aa-4339-b741-4eeed8a4308b/1/TlqjjuoyTivXq2Qn51lqn6QdsOM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:8e:58:d3:3b:dc:ee:fa:3d:69:45:98:42:56:d2:df:f3:05:
11:27:a1:c4:2f:79:88:99:fe:4b:59:ad:a9:ef:cd:11:c7:42:
5b:4f:c3:df:61:12:60:90:f2:1c:b5:7d:e2:ee:39:56:bf:a9:
ff:40:27:05:f0:8f:7b:a8:78:d9:6c:05:4e:6d:2f:7d:fb:b3:
23:46:a4:d4:14:6c:19:1e:78:14:fa:9b:cc:28:79:9e:b7:4f:
45:65:c8:2c:d2:d1:88:38:73:6c:e2:e9:62:9b:41:f4:33:3a:
7c:3e:dd:2d:2e:41:59:e8:e6:ac:91:51:e5:9c:be:22:42:9b:
55:ad:0a:cd:b5:21:c4:1a:e4:97:30:37:0f:8b:e7:d8:7a:f9:
02:29:ab:63:21:d0:3e:90:46:93:bd:e4:66:14:1e:20:87:4e:
0d:39:ee:b0:79:8b:10:b4:f8:01:f5:15:7a:0c:41:4e:47:22:
eb:82:f4:8f:43:f4:78:05:c0:2a:13:42:03:c2:58:b4:56:08:
c7:6d:46:e1:79:44:7d:ce:9d:50:34:b9:e2:8a:2a:f1:43:18:
88:68:a4:be:c0:04:7c:91:52:90:80:44:af:f6:93:27:2b:08:
18:8d:67:e2:1d:4b:f4:88:00:37:7a:cb:91:fe:1f:e1:d5:20:
6d:24:70:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:43:43 2025 by rpki-client