Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/649a98-339a-4f4b-8750-6e9d3b732b08/1/tWyxebPbXGs2zTMINAgB_tsrfRk.mft
File: tWyxebPbXGs2zTMINAgB_tsrfRk.mft (raw, json)
Hash identifier: lWpNec6g+mXE/ODHaRw262eXB0IJFseWG5VkmHPIopo=
Subject key identifier: F4:1D:46:06:DF:7A:42:66:72:6A:6C:26:9F:FB:9D:68:B4:90:21:85
Authority key identifier: B5:6C:B1:79:B3:DB:5C:6B:36:CD:33:08:34:08:01:FE:DB:2B:7D:19
Certificate issuer: /CN=b56cb179b3db5c6b36cd3308340801fedb2b7d19
Certificate serial: 0199FC582D5C1E9856CC1C7A98B254003213
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tWyxebPbXGs2zTMINAgB_tsrfRk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/649a98-339a-4f4b-8750-6e9d3b732b08/1/tWyxebPbXGs2zTMINAgB_tsrfRk.mft
Manifest number: 16E4
Signing time: Sun 19 Oct 2025 12:01:01 +0000
Manifest this update: Sun 19 Oct 2025 12:01:01 +0000
Manifest next update: Mon 20 Oct 2025 12:01:01 +0000
Files and hashes: 1: egERklG4JDoNVaiZcO7pQtm8HwI.roa (hash: UCPCOxDDKaXVSI1SbOM7CcRIC7mRuotxlKVUCRUv8VQ=)
2: tWyxebPbXGs2zTMINAgB_tsrfRk.crl (hash: dezMDD6HPIPdpt8J7e5KDouXsSU55BqYK9EvMsso9l4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/649a98-339a-4f4b-8750-6e9d3b732b08/1/tWyxebPbXGs2zTMINAgB_tsrfRk.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/649a98-339a-4f4b-8750-6e9d3b732b08/1/tWyxebPbXGs2zTMINAgB_tsrfRk.mft
rsync://rpki.ripe.net/repository/DEFAULT/tWyxebPbXGs2zTMINAgB_tsrfRk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:2d:5c:1e:98:56:cc:1c:7a:98:b2:54:00:32:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b56cb179b3db5c6b36cd3308340801fedb2b7d19
Validity
Not Before: Oct 19 12:01:01 2025 GMT
Not After : Oct 20 12:01:01 2025 GMT
Subject: CN=f41d4606df7a4266726a6c269ffb9d68b4902185
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:dc:ed:54:12:60:75:9c:d0:91:c4:c1:a9:9a:
ef:1d:76:dd:a8:30:67:af:90:42:40:b6:ee:6e:f9:
9f:90:c2:c0:ac:3c:4d:0f:49:5b:8d:c1:31:93:0a:
f2:85:22:3e:f3:1f:57:72:ae:c4:5d:6a:07:bf:21:
3f:f5:3e:a9:ee:ec:f6:1e:6c:49:83:9c:bb:27:1e:
00:72:b5:ed:36:87:60:ee:3d:c9:75:06:77:92:d4:
e2:2c:df:95:29:e7:13:6b:0f:ce:fe:5f:65:26:0f:
97:40:7e:4f:97:fd:8b:30:b2:48:78:50:c5:f2:c3:
aa:87:85:bd:03:0a:ce:c3:ed:7d:81:a1:22:e9:d2:
1f:9d:0e:28:cc:37:87:bd:71:21:8b:1b:ad:96:e2:
ca:45:87:71:51:66:d9:85:64:3f:55:b4:0b:7f:22:
cf:34:df:c3:19:9b:fa:2f:2c:9f:27:a9:aa:6a:b7:
0d:65:09:35:77:65:9c:e7:bb:19:90:4a:4a:22:e2:
ad:cf:8c:d9:48:cf:3c:c0:9d:3a:3b:41:d8:74:6e:
e5:43:0d:f3:22:8f:58:cf:9b:7c:03:94:6d:79:e8:
11:46:0e:e9:7a:0f:6c:d0:86:76:d3:f1:b8:1d:00:
07:c9:ff:34:54:b4:29:d3:d2:dd:21:79:7e:13:45:
ad:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:1D:46:06:DF:7A:42:66:72:6A:6C:26:9F:FB:9D:68:B4:90:21:85
X509v3 Authority Key Identifier:
keyid:B5:6C:B1:79:B3:DB:5C:6B:36:CD:33:08:34:08:01:FE:DB:2B:7D:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tWyxebPbXGs2zTMINAgB_tsrfRk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/649a98-339a-4f4b-8750-6e9d3b732b08/1/tWyxebPbXGs2zTMINAgB_tsrfRk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/649a98-339a-4f4b-8750-6e9d3b732b08/1/tWyxebPbXGs2zTMINAgB_tsrfRk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:15:1b:4a:0d:35:e4:5c:fb:96:ae:01:7c:62:de:5f:c3:69:
2d:81:e0:bd:33:35:4a:09:9b:9a:7b:91:db:b0:ba:34:28:28:
ea:e9:2c:38:42:3b:a1:c2:38:ba:a9:3e:4e:a1:21:d8:1f:7a:
48:49:40:b8:a0:e2:b5:97:3c:87:ae:1b:4d:71:7b:c6:8f:ac:
2a:cd:b2:43:e2:30:66:a2:ad:c0:f2:c1:9d:2d:66:d1:76:46:
98:2e:6b:4e:7c:49:11:3c:ed:47:89:26:dc:a4:55:2f:ee:ac:
42:1f:f2:f9:46:47:13:12:14:d2:6d:e3:7f:87:1f:3f:ba:6e:
b2:93:e9:5e:e2:e6:34:ad:44:90:db:a2:31:ee:7d:9a:f0:f7:
ae:f5:ab:cf:08:1f:2c:2a:88:e6:8d:c1:7f:23:ae:78:15:39:
80:91:b7:98:45:72:a6:1c:80:24:c3:39:35:af:a7:80:45:e9:
e6:57:8f:b5:33:7c:f7:d2:e2:98:7a:af:d1:f0:1b:a5:e9:81:
d0:fa:ee:a3:13:16:99:68:71:38:79:5f:58:e8:8f:59:ff:a5:
31:62:fd:98:f9:e0:f8:4f:e7:7a:e0:8a:60:a5:95:eb:19:6d:
54:37:0a:35:b6:72:1c:e3:2a:7d:e0:84:c8:85:82:79:be:e7:
06:2d:34:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:37:18 2025 by rpki-client