Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/dc13c1-de56-449f-9c29-c81266b7c49e/1/tu1iBVpRkcAuxREulRgaiawGDOs.mft
File: tu1iBVpRkcAuxREulRgaiawGDOs.mft (raw, json)
Hash identifier: SDFKrkOZm/paI9PNcUr49h0Av2VT9LpN/tNPswgjsH0=
Subject key identifier: D2:BC:99:E0:45:4D:41:46:C9:FB:DF:69:69:12:41:4B:2A:BC:06:81
Authority key identifier: B6:ED:62:05:5A:51:91:C0:2E:C5:11:2E:95:18:1A:89:AC:06:0C:EB
Certificate issuer: /CN=b6ed62055a5191c02ec5112e95181a89ac060ceb
Certificate serial: 0199FE10219D086B632A95E50C61150CAE9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tu1iBVpRkcAuxREulRgaiawGDOs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/dc13c1-de56-449f-9c29-c81266b7c49e/1/tu1iBVpRkcAuxREulRgaiawGDOs.mft
Manifest number: 0C3D
Signing time: Sun 19 Oct 2025 20:01:33 +0000
Manifest this update: Sun 19 Oct 2025 20:01:33 +0000
Manifest next update: Mon 20 Oct 2025 20:01:33 +0000
Files and hashes: 1: iOo8WZeBs16BOwEjC7IsPMOtPO0.roa (hash: FC5R1Hrtvnbfsyec/XOyQavDbuFW5mY0wSOTHI+QutE=)
2: tu1iBVpRkcAuxREulRgaiawGDOs.crl (hash: 8d1Lk3kQZyI7o73frV2JPXAZqxidtVYxf7/gyG8CzIo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/dc13c1-de56-449f-9c29-c81266b7c49e/1/tu1iBVpRkcAuxREulRgaiawGDOs.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/dc13c1-de56-449f-9c29-c81266b7c49e/1/tu1iBVpRkcAuxREulRgaiawGDOs.mft
rsync://rpki.ripe.net/repository/DEFAULT/tu1iBVpRkcAuxREulRgaiawGDOs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:10:21:9d:08:6b:63:2a:95:e5:0c:61:15:0c:ae:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b6ed62055a5191c02ec5112e95181a89ac060ceb
Validity
Not Before: Oct 19 20:01:33 2025 GMT
Not After : Oct 20 20:01:33 2025 GMT
Subject: CN=d2bc99e0454d4146c9fbdf696912414b2abc0681
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:d7:9e:29:31:f8:fb:c0:54:7e:ae:e5:67:b0:
7d:4d:0b:b4:68:9f:81:05:6a:69:0b:32:41:7a:f2:
23:0c:7b:0e:13:37:6c:22:f9:1e:87:78:dd:0d:4f:
8f:aa:d5:3e:f6:16:e9:17:93:12:0d:84:2a:3d:bb:
05:0f:85:99:45:ff:1b:c8:14:12:81:22:46:8f:38:
5f:c7:88:7e:1b:1d:0b:cc:96:de:56:41:0c:82:ad:
77:fa:8e:77:e2:72:a8:65:6b:aa:27:39:5a:a2:69:
69:5a:85:a8:77:9f:95:d3:9f:03:03:fa:c9:9b:54:
2c:2e:02:a6:cf:db:9d:ef:be:3d:36:fc:3a:a9:a3:
65:00:5b:f8:86:ac:e2:a3:82:c5:a4:1c:df:e1:9a:
03:5e:f4:6e:b6:a2:ee:6b:ed:0f:8b:cc:2e:94:1d:
83:2f:2e:30:8e:cb:a1:43:77:8e:81:0b:fd:92:30:
54:bc:f8:0c:13:12:bc:6c:05:ea:c4:eb:26:16:81:
e8:d3:7f:39:10:f8:f3:be:1d:f5:b4:36:5d:00:d4:
99:71:2d:20:e1:d8:ab:05:7a:3e:62:c3:45:20:c1:
c2:19:55:a6:be:60:53:d0:5b:96:9f:1c:42:d9:8a:
fe:1a:f6:ea:04:f8:b1:66:4c:a7:61:a8:ee:fd:6b:
a4:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:BC:99:E0:45:4D:41:46:C9:FB:DF:69:69:12:41:4B:2A:BC:06:81
X509v3 Authority Key Identifier:
keyid:B6:ED:62:05:5A:51:91:C0:2E:C5:11:2E:95:18:1A:89:AC:06:0C:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tu1iBVpRkcAuxREulRgaiawGDOs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/dc13c1-de56-449f-9c29-c81266b7c49e/1/tu1iBVpRkcAuxREulRgaiawGDOs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/dc13c1-de56-449f-9c29-c81266b7c49e/1/tu1iBVpRkcAuxREulRgaiawGDOs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:f6:ee:fc:86:84:2d:ed:9a:b9:3a:e7:44:03:31:5e:ad:32:
86:d6:72:37:04:ba:0f:b2:39:b6:5f:a1:1d:98:35:99:09:51:
46:19:dc:b7:33:b4:05:ce:87:17:9e:fa:89:18:48:06:c3:f8:
1d:60:af:89:12:5e:83:75:89:10:d1:23:a8:d1:c6:0c:57:30:
58:cb:38:3d:b3:28:46:d6:b7:6d:7c:3f:52:2e:f6:33:3f:b6:
59:ab:08:bd:a4:57:5d:0a:26:a3:e5:e4:01:ae:37:14:b5:11:
62:6e:53:cc:e6:a0:49:15:0d:23:29:0f:ee:41:11:54:47:e6:
8e:94:2c:62:ad:92:50:7a:4b:f0:24:47:64:86:cc:f2:9e:2b:
6c:e7:64:5e:c7:9e:35:20:5c:18:2e:cc:02:e6:c0:91:e3:30:
1a:63:cb:5a:83:10:9d:6e:fc:c4:7b:03:3c:39:68:ad:5e:97:
24:2a:4b:21:01:57:89:6b:c7:9c:9d:0e:53:9a:d0:04:02:f9:
2c:82:17:93:76:39:af:d0:0f:f0:83:1a:22:b9:09:20:a8:ae:
b8:0e:63:66:4a:6c:35:ce:ea:c3:ea:fb:0a:ac:96:f8:9f:a0:
3c:dc:37:e0:cf:2a:8c:0d:79:5f:39:c1:5c:64:16:b8:a1:e6:
b8:f7:2c:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 22:36:26 2025 by rpki-client