Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/d282be-7ca5-400f-be84-cfab10d30693/1/tTRCGKSIC1AMAzMh52vXi088Flg.mft
File: tTRCGKSIC1AMAzMh52vXi088Flg.mft (raw, json)
Hash identifier: Vt+JNJa0X7TheXk64WONehmvNW6KtIyvT7O4QMOJ2BQ=
Subject key identifier: AC:64:86:52:71:E7:19:85:EE:15:A5:07:9D:B6:87:5F:4B:90:69:B9
Authority key identifier: B5:34:42:18:A4:88:0B:50:0C:03:33:21:E7:6B:D7:8B:4F:3C:16:58
Certificate issuer: /CN=b5344218a4880b500c033321e76bd78b4f3c1658
Certificate serial: 0199FDD9B78AB1F1C9CAB5AC6AB2A0295368
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tTRCGKSIC1AMAzMh52vXi088Flg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/d282be-7ca5-400f-be84-cfab10d30693/1/tTRCGKSIC1AMAzMh52vXi088Flg.mft
Manifest number: 16E8
Signing time: Sun 19 Oct 2025 19:02:07 +0000
Manifest this update: Sun 19 Oct 2025 19:02:07 +0000
Manifest next update: Mon 20 Oct 2025 19:02:07 +0000
Files and hashes: 1: 8Pm542mxmtNx79Ipw8aJ3MUUUlw.roa (hash: wUyn8TfNac0yPrEyoAGwGRLxadfovmjunsKwqoO4Tic=)
2: MK5kvHBNAAlnKRq0I1CvZhVF9Ng.roa (hash: ku7EY/yVBZoDpf18kdWwR04OCaLbQDYij0LYSvbt0Ho=)
3: tTRCGKSIC1AMAzMh52vXi088Flg.crl (hash: fmfpcOG7oq4lP3awQKswcDYafM4Vhhob13e5qVcGcpM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/d282be-7ca5-400f-be84-cfab10d30693/1/tTRCGKSIC1AMAzMh52vXi088Flg.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/d282be-7ca5-400f-be84-cfab10d30693/1/tTRCGKSIC1AMAzMh52vXi088Flg.mft
rsync://rpki.ripe.net/repository/DEFAULT/tTRCGKSIC1AMAzMh52vXi088Flg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d9:b7:8a:b1:f1:c9:ca:b5:ac:6a:b2:a0:29:53:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5344218a4880b500c033321e76bd78b4f3c1658
Validity
Not Before: Oct 19 19:02:07 2025 GMT
Not After : Oct 20 19:02:07 2025 GMT
Subject: CN=ac64865271e71985ee15a5079db6875f4b9069b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:36:2b:b6:02:09:bc:5f:95:50:20:dd:6f:cd:
3f:27:55:da:c8:8d:56:a9:88:ed:a3:24:23:99:5b:
bb:7a:8e:fb:30:bf:33:e8:36:22:c8:c5:43:1b:4c:
fc:58:2b:1f:bb:29:cb:aa:99:97:99:39:e6:d2:5c:
02:f3:5d:ff:9f:a8:e4:2a:f9:fd:cf:21:0f:4d:5e:
f4:f9:0d:cf:ba:83:a5:fc:f6:cd:a4:14:6e:e5:b2:
ff:be:00:25:51:4f:3b:d6:7a:62:50:6b:df:0a:ce:
c3:1d:d4:75:6c:d4:18:c1:6b:9d:61:aa:33:c5:f5:
da:1a:02:c7:af:15:e8:e1:39:90:1e:93:ff:7f:92:
a6:83:4d:ee:ed:05:7d:4d:6b:2d:52:13:ed:8b:a9:
16:11:fa:32:d0:f1:1e:a1:58:d3:7b:30:94:87:58:
ae:c2:47:6a:4d:8e:27:2f:ac:47:6d:50:82:d2:7c:
c5:85:92:c4:ed:50:e0:c6:45:db:a8:b4:dc:7f:50:
f6:33:5a:8b:17:b8:6f:d4:7e:f5:02:d6:83:2b:e1:
b1:78:8a:ca:1b:12:76:a6:b8:4a:90:b0:0a:99:95:
1c:69:01:8b:f0:e2:33:12:98:31:dc:76:96:e0:ba:
b8:8b:74:db:79:cb:3d:91:43:11:51:19:9b:89:f1:
57:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:64:86:52:71:E7:19:85:EE:15:A5:07:9D:B6:87:5F:4B:90:69:B9
X509v3 Authority Key Identifier:
keyid:B5:34:42:18:A4:88:0B:50:0C:03:33:21:E7:6B:D7:8B:4F:3C:16:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tTRCGKSIC1AMAzMh52vXi088Flg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/d282be-7ca5-400f-be84-cfab10d30693/1/tTRCGKSIC1AMAzMh52vXi088Flg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/d282be-7ca5-400f-be84-cfab10d30693/1/tTRCGKSIC1AMAzMh52vXi088Flg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:8b:e9:8b:fa:70:d7:de:06:f9:22:9e:d1:59:6e:c8:82:49:
ea:7c:45:c7:0e:c5:08:c4:69:0b:ea:ef:aa:2a:44:e1:7c:c2:
b9:ae:85:fb:4d:38:3b:23:ad:a6:f7:60:0c:eb:6a:ad:d3:02:
33:6c:cc:47:b3:20:9f:cd:e4:bf:60:c7:8b:a2:48:3f:05:ce:
99:b8:e2:c3:c3:92:e2:f8:64:4e:cd:65:38:ed:17:1a:58:ea:
77:71:ff:01:d8:4c:59:07:ad:4e:a3:eb:60:cc:9a:ee:ce:be:
e6:33:03:ef:ad:53:cb:9e:fa:4f:57:1a:42:5d:03:76:39:c8:
64:56:7e:0c:4a:6f:02:fe:26:f7:46:55:94:e6:66:5e:4a:d2:
1c:aa:f2:11:c5:90:13:0f:1c:18:ca:fa:7a:a7:9f:a5:63:2b:
e8:51:bd:a3:e6:01:c2:05:a4:f0:f9:9b:69:5b:43:0e:60:e3:
2f:fb:47:44:8d:ba:89:3e:e5:f3:1f:db:09:b5:84:7b:ca:74:
c3:77:b7:c9:ba:ec:b1:09:6a:ee:bf:60:af:f7:d4:0a:ad:57:
ed:5e:fb:6b:f7:a7:3e:48:90:e8:c6:1c:1e:8c:5a:d0:5c:57:
79:02:2f:77:ec:52:e5:ea:90:ff:23:d6:ef:7b:15:b2:af:a6:
f4:f8:f1:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:50:40 2025 by rpki-client