Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/7486fd-3f81-4540-aaaa-0b3ed25f66e9/1/tbU3kY3ZAlHrNlOOcYHOkzx--EU.mft
File: tbU3kY3ZAlHrNlOOcYHOkzx--EU.mft (raw, json)
Hash identifier: EiUaoVqCA3brYP6FCi5OR45b76Uno71JE/Dm6eubwZE=
Subject key identifier: 11:BE:73:3D:39:C0:16:C6:66:A1:73:F8:11:CE:E5:7B:7C:C3:2E:03
Authority key identifier: B5:B5:37:91:8D:D9:02:51:EB:36:53:8E:71:81:CE:93:3C:7E:F8:45
Certificate issuer: /CN=b5b537918dd90251eb36538e7181ce933c7ef845
Certificate serial: 0199FA6A912B3E01BBD06193213F43346F06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tbU3kY3ZAlHrNlOOcYHOkzx--EU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/7486fd-3f81-4540-aaaa-0b3ed25f66e9/1/tbU3kY3ZAlHrNlOOcYHOkzx--EU.mft
Manifest number: 16E3
Signing time: Sun 19 Oct 2025 03:01:51 +0000
Manifest this update: Sun 19 Oct 2025 03:01:51 +0000
Manifest next update: Mon 20 Oct 2025 03:01:51 +0000
Files and hashes: 1: tbU3kY3ZAlHrNlOOcYHOkzx--EU.crl (hash: fs3/M8vDbKpkpUFtbnhkAw3Ta53YtnhQ9v+31UAoivg=)
2: y75cXyuDLpcYexdmkwYwYU3Mg-w.roa (hash: x/UMSX0QI4HQrUWQqpp/rIJY0lp7ztidnsmz2QLBnXs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/7486fd-3f81-4540-aaaa-0b3ed25f66e9/1/tbU3kY3ZAlHrNlOOcYHOkzx--EU.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/7486fd-3f81-4540-aaaa-0b3ed25f66e9/1/tbU3kY3ZAlHrNlOOcYHOkzx--EU.mft
rsync://rpki.ripe.net/repository/DEFAULT/tbU3kY3ZAlHrNlOOcYHOkzx--EU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 03:01:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fa:6a:91:2b:3e:01:bb:d0:61:93:21:3f:43:34:6f:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5b537918dd90251eb36538e7181ce933c7ef845
Validity
Not Before: Oct 19 03:01:51 2025 GMT
Not After : Oct 20 03:01:51 2025 GMT
Subject: CN=11be733d39c016c666a173f811cee57b7cc32e03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:95:d1:53:be:b4:fe:db:48:6d:31:72:38:9c:
31:48:8d:d4:8b:f9:45:9d:63:4e:22:3b:01:8a:fd:
c2:70:54:3d:4a:12:02:ef:97:f0:fe:df:b3:9d:16:
ef:b2:82:df:c4:b4:cf:1d:63:c6:54:fe:d8:0f:c4:
f4:f2:23:97:fc:33:a4:8b:0c:00:f9:2f:d2:e2:68:
03:a0:38:e8:9b:6b:9d:c5:4e:bc:99:92:0c:2e:26:
ee:91:48:d5:96:ae:5d:e4:01:61:91:6e:75:5a:d7:
67:e8:b6:c3:1c:89:91:a9:81:4b:56:08:a1:41:01:
b8:87:ae:e0:2f:4b:bf:01:f9:1b:2d:56:94:f8:62:
73:05:74:aa:e5:80:c0:97:48:9e:4b:83:64:cb:26:
3d:e1:4a:bc:ca:c6:e0:24:bd:ac:e0:a7:25:a6:26:
bc:34:65:f4:e3:29:6e:6a:f7:ae:2d:2c:f2:36:4e:
f0:f3:65:6a:da:e2:ad:35:17:85:f8:2d:88:1c:f1:
71:21:dd:52:44:42:cc:19:38:39:33:f9:fc:bc:dc:
d2:f3:72:8d:e3:77:4d:d1:52:de:a1:59:67:7c:9e:
66:9a:0a:69:34:f0:30:36:50:b9:c8:d3:1f:82:a6:
40:21:3a:1e:72:e6:12:9d:44:47:f7:49:d1:0f:93:
8a:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:BE:73:3D:39:C0:16:C6:66:A1:73:F8:11:CE:E5:7B:7C:C3:2E:03
X509v3 Authority Key Identifier:
keyid:B5:B5:37:91:8D:D9:02:51:EB:36:53:8E:71:81:CE:93:3C:7E:F8:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tbU3kY3ZAlHrNlOOcYHOkzx--EU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/7486fd-3f81-4540-aaaa-0b3ed25f66e9/1/tbU3kY3ZAlHrNlOOcYHOkzx--EU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/7486fd-3f81-4540-aaaa-0b3ed25f66e9/1/tbU3kY3ZAlHrNlOOcYHOkzx--EU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:cf:2b:df:22:72:08:7a:6d:c3:bc:6f:e7:cb:fc:6a:fd:cc:
d0:ed:4d:b6:09:57:21:60:21:bd:5d:f5:e7:37:29:41:e4:3b:
12:fb:f1:05:71:0d:22:f5:8b:d7:1f:99:c1:d2:d0:9f:82:48:
0e:b1:fb:49:d1:94:8d:96:0a:cd:4e:06:df:34:c9:9d:a0:72:
fc:d2:91:d1:5c:65:38:27:66:3e:77:12:67:aa:0d:f4:6c:c8:
5c:25:64:55:20:29:05:95:fd:0b:49:0c:2e:3f:7d:23:3e:98:
33:db:5e:d6:0e:c9:19:54:5b:85:1c:4a:be:97:2e:56:3a:e9:
81:9a:6c:84:05:b1:28:8b:5f:f4:e9:4b:19:d2:fa:e2:da:14:
1b:f5:89:08:fd:53:02:b6:b0:b8:2a:69:7a:b0:6b:6f:ad:89:
2d:13:c7:99:1d:89:68:39:ad:e8:5e:0a:c5:dd:fa:e6:bd:14:
02:e4:b4:83:54:c0:f6:44:3b:19:24:1f:0a:ff:cd:5f:a6:58:
52:cf:c4:08:d5:ca:b4:0a:d3:6f:90:3d:93:d3:c8:98:f0:a3:
b9:c2:0c:62:37:54:e8:6b:60:f2:29:d5:b4:d2:cd:3b:c8:d8:
14:76:12:74:db:24:e5:a7:dc:f6:a0:ee:86:ac:1b:9e:5d:1e:
8d:a1:04:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:10:51 2025 by rpki-client