Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/f89685-1174-45d5-a5dc-09db57469bb8/1/TlyvXlSV9UsDnx0PJHERJGfJeRw.mft
File: TlyvXlSV9UsDnx0PJHERJGfJeRw.mft (raw, json)
Hash identifier: xodWHYuB+b11+Z/qNbj36pVxX0CK4fT4aO5wXjHWot4=
Subject key identifier: 95:0E:A7:A7:DD:B9:70:58:6B:87:CA:07:8F:C2:A4:44:94:BE:C9:C3
Authority key identifier: 4E:5C:AF:5E:54:95:F5:4B:03:9F:1D:0F:24:71:11:24:67:C9:79:1C
Certificate issuer: /CN=4e5caf5e5495f54b039f1d0f2471112467c9791c
Certificate serial: 0199FD6AE44B6DB0AB774942ADB4567B186F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TlyvXlSV9UsDnx0PJHERJGfJeRw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/f89685-1174-45d5-a5dc-09db57469bb8/1/TlyvXlSV9UsDnx0PJHERJGfJeRw.mft
Manifest number: 16E5
Signing time: Sun 19 Oct 2025 17:01:04 +0000
Manifest this update: Sun 19 Oct 2025 17:01:04 +0000
Manifest next update: Mon 20 Oct 2025 17:01:04 +0000
Files and hashes: 1: Sjk-hMVz5Yq15653m82LHzN2q2c.roa (hash: v2IafRkq9Sg922Tj4NY8dbGZtPOD35/xpm6wAYKPODI=)
2: TlyvXlSV9UsDnx0PJHERJGfJeRw.crl (hash: heijmLH9buP8oAShoms671uk4zQlPb9U4/kcCmt6ASE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/f89685-1174-45d5-a5dc-09db57469bb8/1/TlyvXlSV9UsDnx0PJHERJGfJeRw.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/f89685-1174-45d5-a5dc-09db57469bb8/1/TlyvXlSV9UsDnx0PJHERJGfJeRw.mft
rsync://rpki.ripe.net/repository/DEFAULT/TlyvXlSV9UsDnx0PJHERJGfJeRw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:6a:e4:4b:6d:b0:ab:77:49:42:ad:b4:56:7b:18:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e5caf5e5495f54b039f1d0f2471112467c9791c
Validity
Not Before: Oct 19 17:01:04 2025 GMT
Not After : Oct 20 17:01:04 2025 GMT
Subject: CN=950ea7a7ddb970586b87ca078fc2a44494bec9c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:cd:0f:aa:36:2b:db:4b:00:43:99:c8:c3:65:
08:12:e6:7c:ea:d9:ba:54:89:f1:56:2c:42:dc:e0:
2e:8d:8a:84:05:eb:32:e8:b6:ba:61:ce:55:e0:ca:
4a:fb:1f:7c:4a:f3:4d:81:a8:f7:ab:75:16:3a:e1:
aa:61:91:10:c2:ed:6c:8f:a0:00:a8:61:e8:46:17:
ac:43:2f:27:dd:1b:cb:e0:08:85:72:9e:9c:c2:85:
6f:1c:c4:23:cb:72:09:ca:cd:d4:7a:c7:67:0e:79:
28:d6:eb:ce:ad:df:9b:69:91:ed:eb:30:9c:8a:b6:
92:48:82:75:b3:f6:40:d1:9f:88:d9:ad:aa:fd:e3:
77:a2:86:5e:db:ed:46:fb:c1:b0:ee:84:fa:32:91:
62:e4:47:51:69:72:3e:2b:ff:12:f7:36:d4:70:97:
81:2f:3e:ee:92:9a:a0:da:1e:3b:13:2f:70:b8:6d:
20:f7:84:92:c4:be:2d:7d:d8:82:61:0d:25:7d:16:
50:1f:e2:5d:58:85:51:9b:e0:24:8b:8f:a2:f6:cf:
7f:d1:58:f7:40:e3:91:a1:74:06:86:c4:d4:2b:30:
29:49:0a:03:c3:4a:3b:32:b5:a1:09:f7:f4:c2:05:
c9:04:94:80:ac:ae:61:d7:c4:ca:c6:3f:a5:6b:44:
73:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:0E:A7:A7:DD:B9:70:58:6B:87:CA:07:8F:C2:A4:44:94:BE:C9:C3
X509v3 Authority Key Identifier:
keyid:4E:5C:AF:5E:54:95:F5:4B:03:9F:1D:0F:24:71:11:24:67:C9:79:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TlyvXlSV9UsDnx0PJHERJGfJeRw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/f89685-1174-45d5-a5dc-09db57469bb8/1/TlyvXlSV9UsDnx0PJHERJGfJeRw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/f89685-1174-45d5-a5dc-09db57469bb8/1/TlyvXlSV9UsDnx0PJHERJGfJeRw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:e3:68:4e:d2:6b:26:d4:9c:4d:ad:4a:50:57:b2:f4:41:b4:
16:96:44:2b:62:84:7f:51:ea:b3:a0:2a:da:bd:3c:1f:4a:8b:
fd:b5:14:71:71:eb:ac:25:23:70:8d:7f:1a:9e:aa:93:62:81:
17:09:00:10:d6:4a:6b:5f:5e:ad:6f:a3:f0:59:c0:29:6a:b5:
cd:20:e9:87:36:d0:b8:74:97:22:46:be:d0:c7:9a:9b:47:f0:
21:85:74:cc:13:ac:17:14:f7:99:ec:6f:93:5a:5b:21:c4:23:
7d:95:c8:5e:26:4e:d5:39:e7:d6:1f:5a:be:94:4f:cc:49:5d:
84:77:c8:3d:f9:48:36:f0:cc:80:bb:99:89:f3:06:c7:42:2c:
ea:a2:00:7f:18:6b:95:36:0c:d3:91:be:e9:16:c0:f9:f5:01:
24:61:9c:aa:13:d5:1f:b8:5c:76:c0:82:75:63:39:8b:86:ad:
3b:f7:f0:a3:c3:59:a7:82:78:0e:04:8e:c4:1f:29:e3:4b:5f:
b1:f3:81:2e:0e:d2:b0:2f:12:2d:53:12:80:9c:7d:5e:e8:8b:
11:2e:b2:51:db:94:a8:7a:5f:a4:3c:10:df:01:a1:b4:bb:f8:
02:14:95:69:37:39:fd:93:3c:8b:95:0b:b7:0a:5d:52:89:bf:
9c:34:31:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:41:31 2025 by rpki-client