Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/adad20-c512-4fb0-a127-48cf412b387b/1/TuhDqF3WZOncAxCJK9fdnOUlkcc.mft
File: TuhDqF3WZOncAxCJK9fdnOUlkcc.mft (raw, json)
Hash identifier: VFqWVnaUH0zlysYB4SCN7FzwJtXN7jYYcgHOwKP/a4k=
Subject key identifier: C0:D9:64:88:F7:C5:34:EA:17:44:C7:80:AE:67:6E:BF:1B:49:A9:58
Authority key identifier: 4E:E8:43:A8:5D:D6:64:E9:DC:03:10:89:2B:D7:DD:9C:E5:25:91:C7
Certificate issuer: /CN=4ee843a85dd664e9dc0310892bd7dd9ce52591c7
Certificate serial: 0199FCFD91EF2E5422682359713BB3136095
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TuhDqF3WZOncAxCJK9fdnOUlkcc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/adad20-c512-4fb0-a127-48cf412b387b/1/TuhDqF3WZOncAxCJK9fdnOUlkcc.mft
Manifest number: 16F6
Signing time: Sun 19 Oct 2025 15:01:40 +0000
Manifest this update: Sun 19 Oct 2025 15:01:40 +0000
Manifest next update: Mon 20 Oct 2025 15:01:40 +0000
Files and hashes: 1: C0z6DdMKY0011CEMg0brREHft8I.roa (hash: +dbFWwxBIyFnN27a31OlolUnKb6JKZSNaPcmvgDSLGs=)
2: HGF0XnEulxWULqSPMu5rErMyWs8.roa (hash: 00NcZYCZGF+IaFRnbk/Q2PKjg8CgZv2ruaoed5i5QAU=)
3: T5IqxO0s3d3X9Y1GttHlSthoJkA.roa (hash: jGjUBiUWn1NYJl7CNkq/qe+4X44OgJIbeG2hNg3nO48=)
4: TuhDqF3WZOncAxCJK9fdnOUlkcc.crl (hash: cmdTNM5K8MJDzI1iXhPS41Lc4m9T8Khae3T7l9jzCeI=)
5: UM40IJoMbmC2E6_NVNk7myz37CE.roa (hash: ho6wywXgZcMzdgmZ/BHVUcsSpC5snRTwoXFhr5WOwMg=)
6: _jJzyRmJqrwFJuS0RLJ0hiZgdfA.roa (hash: sbAUhaABWE5Yto64ATcg+Zla28iIZdfHxrQK/XE2Z0c=)
7: d2OIjSeYBVWvYxP4n_ODfkSTTf4.roa (hash: be0M2z23DoEhwT4FhHP2BW24O0nYk4oyMfhX4PQ+pRo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/adad20-c512-4fb0-a127-48cf412b387b/1/TuhDqF3WZOncAxCJK9fdnOUlkcc.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/adad20-c512-4fb0-a127-48cf412b387b/1/TuhDqF3WZOncAxCJK9fdnOUlkcc.mft
rsync://rpki.ripe.net/repository/DEFAULT/TuhDqF3WZOncAxCJK9fdnOUlkcc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:fd:91:ef:2e:54:22:68:23:59:71:3b:b3:13:60:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ee843a85dd664e9dc0310892bd7dd9ce52591c7
Validity
Not Before: Oct 19 15:01:40 2025 GMT
Not After : Oct 20 15:01:40 2025 GMT
Subject: CN=c0d96488f7c534ea1744c780ae676ebf1b49a958
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:bb:54:ea:a5:df:1a:f7:ff:ad:84:be:72:1c:
07:63:8c:dd:3f:56:68:0a:2b:3d:71:1d:f0:f3:eb:
dd:e6:ab:e2:68:11:a4:bb:37:01:e6:52:ca:2e:f9:
2d:17:c6:9b:49:51:d6:3a:d6:e7:6c:c2:15:fd:76:
a5:05:1a:7d:ca:66:e2:3a:da:97:d5:bb:02:2f:bb:
fe:94:da:4f:81:86:31:ad:d1:f3:ad:70:ef:3f:f9:
0f:8e:ae:78:2e:36:81:1e:12:5b:1c:ed:75:d1:21:
58:90:01:c9:90:8a:79:4f:ad:6c:71:e3:5d:99:69:
c6:64:40:6c:b0:08:55:a4:71:83:6b:bb:1a:97:bb:
5f:4c:a1:a8:52:c2:9b:65:f5:ab:30:c0:e5:b8:23:
e6:ce:18:40:b9:08:17:3e:2e:d8:43:4d:3e:5e:f4:
09:d1:f3:92:96:8a:b1:17:67:fb:55:7a:a8:25:b9:
98:61:89:be:17:a3:b6:28:53:1c:bc:ed:2b:3a:5b:
99:7e:32:65:ef:0b:e7:8d:84:ef:27:49:63:64:30:
b5:50:30:ac:33:28:2a:d7:5b:01:48:2c:68:d0:5e:
cd:53:ba:4a:7a:54:a4:e3:0c:5b:10:75:50:c6:20:
42:b5:81:1e:32:8c:c7:54:08:25:15:9f:4a:3b:5a:
4f:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:D9:64:88:F7:C5:34:EA:17:44:C7:80:AE:67:6E:BF:1B:49:A9:58
X509v3 Authority Key Identifier:
keyid:4E:E8:43:A8:5D:D6:64:E9:DC:03:10:89:2B:D7:DD:9C:E5:25:91:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TuhDqF3WZOncAxCJK9fdnOUlkcc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/adad20-c512-4fb0-a127-48cf412b387b/1/TuhDqF3WZOncAxCJK9fdnOUlkcc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/adad20-c512-4fb0-a127-48cf412b387b/1/TuhDqF3WZOncAxCJK9fdnOUlkcc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:81:30:98:23:e7:2d:c3:0b:b4:04:a3:b7:7d:ba:cc:85:ef:
60:86:59:db:9e:81:98:5e:79:1b:92:da:03:4e:2f:d8:51:74:
15:8f:f9:84:59:d8:fc:8c:57:d1:46:0f:d1:f1:67:8d:4a:01:
b1:3c:cd:da:6d:ca:ac:f6:18:17:8a:11:4d:14:83:aa:49:90:
a4:c6:9d:49:14:af:45:23:09:e5:e5:c4:31:25:b0:13:ca:7f:
33:de:5e:ec:6d:54:bb:de:97:12:d9:87:f6:1a:be:11:6e:26:
59:ec:4f:12:03:3a:ac:bd:41:2d:1e:b8:e6:a3:4a:5e:67:d0:
19:05:d8:91:cb:94:c0:f7:1b:d4:1d:a4:9b:3f:ba:df:f7:a2:
2c:4b:10:e2:18:90:26:39:13:f6:1d:53:2f:ac:5d:3e:03:fc:
15:e8:54:35:b6:25:0f:19:d5:71:dd:78:d4:06:7c:b9:12:b6:
c6:aa:a2:9a:37:fc:be:a3:40:25:eb:1d:49:be:95:e1:f9:84:
cc:49:70:28:89:d2:61:26:f0:33:a1:03:12:5d:2b:33:78:3a:
e4:81:bb:be:4e:81:ee:2e:12:7c:4a:86:84:6b:4c:32:8c:e2:
74:50:1b:56:77:3c:f1:7d:a2:a8:af:de:e3:5c:9c:8d:2a:d0:
2f:25:8a:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:09:42 2025 by rpki-client