Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/15a2c0-5c08-48bd-a8c3-3674a9010efd/1/tDNC8X1UqKPaDOTTGLO0w_oFk-Q.mft
File: tDNC8X1UqKPaDOTTGLO0w_oFk-Q.mft (raw, json)
Hash identifier: /zCnY7DDHTW68aj6VNNgyfEGeY0h/Z4Z+FoK9ZYFIPo=
Subject key identifier: 92:63:95:CC:41:3E:88:E9:B1:89:4E:3C:6F:47:AD:99:D0:5F:84:8B
Authority key identifier: B4:33:42:F1:7D:54:A8:A3:DA:0C:E4:D3:18:B3:B4:C3:FA:05:93:E4
Certificate issuer: /CN=b43342f17d54a8a3da0ce4d318b3b4c3fa0593e4
Certificate serial: 0199FB46081833DA4F1D512C46766975659A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDNC8X1UqKPaDOTTGLO0w_oFk-Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/15a2c0-5c08-48bd-a8c3-3674a9010efd/1/tDNC8X1UqKPaDOTTGLO0w_oFk-Q.mft
Manifest number: 16E3
Signing time: Sun 19 Oct 2025 07:01:34 +0000
Manifest this update: Sun 19 Oct 2025 07:01:34 +0000
Manifest next update: Mon 20 Oct 2025 07:01:34 +0000
Files and hashes: 1: E5ldtRDNq7PF5yZrAMEvxowWuR0.roa (hash: 4L7DIoeLgHz0Qv5KkaEDn/KJszMLQY8xsxtNREAtJGQ=)
2: tDNC8X1UqKPaDOTTGLO0w_oFk-Q.crl (hash: RzwqBBhSJiGZUg3ESlfYFrtvAVT9KsTku1qmo53LCx4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/15a2c0-5c08-48bd-a8c3-3674a9010efd/1/tDNC8X1UqKPaDOTTGLO0w_oFk-Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/15a2c0-5c08-48bd-a8c3-3674a9010efd/1/tDNC8X1UqKPaDOTTGLO0w_oFk-Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/tDNC8X1UqKPaDOTTGLO0w_oFk-Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:46:08:18:33:da:4f:1d:51:2c:46:76:69:75:65:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b43342f17d54a8a3da0ce4d318b3b4c3fa0593e4
Validity
Not Before: Oct 19 07:01:34 2025 GMT
Not After : Oct 20 07:01:34 2025 GMT
Subject: CN=926395cc413e88e9b1894e3c6f47ad99d05f848b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:3c:87:37:38:af:ad:88:4f:1a:e6:1a:50:68:
ec:f2:b0:2c:40:b0:65:ae:e2:dc:de:55:26:c8:7a:
8b:76:dc:e6:84:dc:54:19:ba:2f:10:58:c1:8a:ef:
b6:07:9c:11:13:00:b5:bf:3d:0f:9d:36:86:f6:aa:
e5:2b:64:47:77:3f:44:66:1a:1e:a2:f2:0e:46:bc:
48:75:e0:f0:56:2c:dd:ae:1e:60:66:2a:90:36:4d:
ac:7e:5b:cb:3f:00:a9:7b:cb:43:a8:ed:b5:99:e2:
16:70:03:a9:c1:fe:d9:a5:33:e4:4d:44:5e:e4:51:
af:40:cb:6d:26:70:e7:fb:6c:0b:d9:5a:3d:62:17:
30:44:5e:4e:5b:da:a3:6b:b4:3b:7e:81:1b:a4:fe:
59:ec:a9:f7:76:36:21:f7:e7:5f:21:9f:fb:27:b8:
09:90:01:6e:59:d9:73:0a:c2:fc:f8:c2:35:b9:99:
74:ae:85:9d:40:33:c8:bd:b0:91:20:55:5b:74:4a:
3f:5e:42:37:ff:1f:ae:f7:c0:4e:00:bf:20:47:7e:
8b:ca:51:77:f1:b0:a9:f2:50:a9:02:1c:31:47:66:
06:74:96:c6:1a:8b:4a:ff:02:16:61:a9:75:91:a5:
c9:83:dd:2c:9f:f0:71:5b:39:3b:e6:f0:8a:93:19:
2b:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:63:95:CC:41:3E:88:E9:B1:89:4E:3C:6F:47:AD:99:D0:5F:84:8B
X509v3 Authority Key Identifier:
keyid:B4:33:42:F1:7D:54:A8:A3:DA:0C:E4:D3:18:B3:B4:C3:FA:05:93:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDNC8X1UqKPaDOTTGLO0w_oFk-Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/15a2c0-5c08-48bd-a8c3-3674a9010efd/1/tDNC8X1UqKPaDOTTGLO0w_oFk-Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/15a2c0-5c08-48bd-a8c3-3674a9010efd/1/tDNC8X1UqKPaDOTTGLO0w_oFk-Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:8d:00:71:7b:e5:7c:e4:49:f5:e8:48:63:cb:0f:93:88:f7:
c1:8f:d1:11:2f:0f:f3:c8:47:69:92:39:66:53:32:f4:e9:5c:
dd:64:e6:c3:a3:c8:e1:2c:c1:19:f0:64:5a:8a:44:83:60:f1:
02:ab:8a:59:32:54:01:8e:dd:66:30:df:d5:37:71:4a:d6:73:
84:d1:7d:95:8c:1a:d9:92:c1:a7:b5:03:3e:b3:6b:d6:a6:56:
ec:e8:cd:c3:1e:0b:cb:bb:c7:f6:f4:91:de:73:f5:81:3b:c7:
9b:54:69:cc:f4:ca:8d:05:bf:a4:b0:15:88:7d:a5:61:2b:7c:
0f:d1:a7:36:a4:41:26:d7:57:17:9b:eb:72:7f:8e:a3:09:31:
15:ab:13:10:7a:fa:d9:39:c8:25:bc:47:9f:2b:86:9b:32:58:
9c:32:93:1c:5f:cd:52:5a:51:23:f4:f0:1d:88:61:cc:d2:d6:
82:0b:f5:59:27:f0:ea:be:6c:47:ff:d9:a8:58:81:92:80:8c:
a9:98:70:32:3d:f1:30:83:59:12:40:e9:02:46:eb:02:4b:52:
7f:b2:d9:37:a6:fb:b1:a4:b5:65:6a:0c:35:67:bd:b8:ae:4e:
74:59:00:3f:62:c2:8f:c0:07:b1:3a:33:c9:4a:b2:eb:25:3c:
c8:3e:9b:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:32:51 2025 by rpki-client