Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/b1e0ff-9696-4b61-bd5e-7f6e4930f25a/1/tUK8DYzCj1WGFe0_rlPKzkpu8IE.mft
File: tUK8DYzCj1WGFe0_rlPKzkpu8IE.mft (raw, json)
Hash identifier: 9tM3uJqf3nyLLwn2kqsCBqJ4c+PBL67UUevx3GSTuxs=
Subject key identifier: 80:0C:07:57:71:70:52:3A:C8:EF:FE:0D:1D:B4:91:E6:D6:5D:4F:B0
Authority key identifier: B5:42:BC:0D:8C:C2:8F:55:86:15:ED:3F:AE:53:CA:CE:4A:6E:F0:81
Certificate issuer: /CN=b542bc0d8cc28f558615ed3fae53cace4a6ef081
Certificate serial: 0199FD349AD1C46770E5D6B9EAC271FC6BD7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tUK8DYzCj1WGFe0_rlPKzkpu8IE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/b1e0ff-9696-4b61-bd5e-7f6e4930f25a/1/tUK8DYzCj1WGFe0_rlPKzkpu8IE.mft
Manifest number: 0CCF
Signing time: Sun 19 Oct 2025 16:01:47 +0000
Manifest this update: Sun 19 Oct 2025 16:01:47 +0000
Manifest next update: Mon 20 Oct 2025 16:01:47 +0000
Files and hashes: 1: Y7rbDno7w__NNU8_Y1vybLh8QhU.roa (hash: JcJWoK6XwWQ+PAZZ9rS/dpHArel2kscu87IT6w7P4BM=)
2: tUK8DYzCj1WGFe0_rlPKzkpu8IE.crl (hash: iF+xTeVRni/6DLJ0BZIK64eAZ7xeLKg3yNs34BnPYh0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/b1e0ff-9696-4b61-bd5e-7f6e4930f25a/1/tUK8DYzCj1WGFe0_rlPKzkpu8IE.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/b1e0ff-9696-4b61-bd5e-7f6e4930f25a/1/tUK8DYzCj1WGFe0_rlPKzkpu8IE.mft
rsync://rpki.ripe.net/repository/DEFAULT/tUK8DYzCj1WGFe0_rlPKzkpu8IE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:34:9a:d1:c4:67:70:e5:d6:b9:ea:c2:71:fc:6b:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b542bc0d8cc28f558615ed3fae53cace4a6ef081
Validity
Not Before: Oct 19 16:01:47 2025 GMT
Not After : Oct 20 16:01:47 2025 GMT
Subject: CN=800c07577170523ac8effe0d1db491e6d65d4fb0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:e0:e1:d8:1b:86:4b:82:eb:12:c3:9a:8d:b2:
83:c7:a7:71:f4:dd:5b:35:ad:a7:06:7e:9e:c0:f5:
00:85:52:f7:64:3b:ac:33:dc:ee:1d:eb:3a:11:0e:
de:c6:95:54:04:ec:ff:2e:76:f2:25:18:1d:c5:04:
3e:d4:f3:57:a5:d3:1d:07:23:69:3d:90:d9:c6:a5:
2c:72:ac:de:48:fd:51:cd:02:a7:ec:33:de:bf:06:
11:1f:43:5c:22:d1:24:a6:df:52:13:c9:87:26:26:
03:9c:be:a7:a9:ca:f9:7e:8a:8e:01:26:0a:9b:df:
8c:de:52:a8:eb:69:a2:76:eb:1e:e0:af:05:91:61:
b5:00:8d:85:cd:c3:7a:a6:17:28:33:6c:d3:00:70:
ce:f5:1b:83:be:ca:4a:96:0c:00:48:0a:7e:06:5b:
ce:26:e1:13:54:b2:91:a5:6b:f1:56:bc:5d:2e:ef:
aa:ce:a5:88:96:05:d2:82:7a:5d:1f:67:85:64:18:
77:65:9e:8c:a8:d4:e3:f6:50:bf:33:2b:2a:fb:d4:
50:4f:bb:db:2c:66:0e:63:9e:8a:8a:f2:01:ec:a3:
f3:82:43:eb:7e:ee:08:d0:9e:a4:73:f4:24:fd:1e:
b4:a0:41:2f:49:ba:1f:62:05:19:98:85:f2:2c:b5:
c0:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:0C:07:57:71:70:52:3A:C8:EF:FE:0D:1D:B4:91:E6:D6:5D:4F:B0
X509v3 Authority Key Identifier:
keyid:B5:42:BC:0D:8C:C2:8F:55:86:15:ED:3F:AE:53:CA:CE:4A:6E:F0:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tUK8DYzCj1WGFe0_rlPKzkpu8IE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/b1e0ff-9696-4b61-bd5e-7f6e4930f25a/1/tUK8DYzCj1WGFe0_rlPKzkpu8IE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/b1e0ff-9696-4b61-bd5e-7f6e4930f25a/1/tUK8DYzCj1WGFe0_rlPKzkpu8IE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:8d:b9:b2:0c:ba:64:6c:17:fb:ec:20:8d:66:23:fd:fe:77:
c1:09:58:82:6b:af:df:39:20:c5:a9:73:c8:ed:00:17:ea:7a:
48:77:9e:5c:3a:b6:20:de:92:a0:7c:f4:ed:b4:ce:68:39:8f:
fa:cf:a3:d7:fc:a1:a1:f5:02:98:18:56:3f:06:45:f7:a8:bd:
f1:ad:89:1e:00:63:76:0b:7c:ed:74:e4:a8:b2:77:cf:99:d5:
24:18:fb:49:a1:5f:9e:dc:26:38:77:29:b6:05:f1:d9:d5:d5:
61:63:c7:e2:bd:da:32:b4:43:c1:62:26:fc:06:02:38:4e:58:
2e:cb:00:c6:d6:3d:5b:6a:6c:51:03:bb:16:3d:61:62:24:59:
96:1b:26:30:90:a8:25:07:cd:fe:f0:96:60:22:cf:e5:6d:6b:
89:1d:43:35:9f:14:46:ab:a0:60:3c:f7:38:d1:bb:61:69:25:
46:ca:cf:cd:fd:e0:6f:59:34:43:81:b5:77:de:58:37:ff:98:
5b:f1:ea:44:8e:e3:43:1c:52:6c:ab:44:65:23:c2:2d:14:10:
46:5b:8a:c9:81:4c:0e:b5:de:44:9b:8b:f0:8d:8a:cb:07:51:
04:8c:04:67:14:cf:d1:47:08:ab:50:02:86:d7:41:40:3d:55:
8f:0c:23:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:01:30 2025 by rpki-client