Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/0caa6d-109e-45f3-a932-475c5c91f474/1/tGTgryi3VcTsiAENlCmGl9GIOTM.mft
File: tGTgryi3VcTsiAENlCmGl9GIOTM.mft (raw, json)
Hash identifier: MsdA8UmUbLZRz1uSUdKOK9dFpORltzW/ycsf0j5EOwM=
Subject key identifier: 94:7E:BB:29:29:04:19:02:EC:E9:64:A5:FC:C3:C9:C5:12:BD:E3:71
Authority key identifier: B4:64:E0:AF:28:B7:55:C4:EC:88:01:0D:94:29:86:97:D1:88:39:33
Certificate issuer: /CN=b464e0af28b755c4ec88010d94298697d1883933
Certificate serial: 0199FE7DC173EA11B1B06D326091F333D24C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tGTgryi3VcTsiAENlCmGl9GIOTM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/0caa6d-109e-45f3-a932-475c5c91f474/1/tGTgryi3VcTsiAENlCmGl9GIOTM.mft
Manifest number: 08A7
Signing time: Sun 19 Oct 2025 22:01:18 +0000
Manifest this update: Sun 19 Oct 2025 22:01:18 +0000
Manifest next update: Mon 20 Oct 2025 22:01:18 +0000
Files and hashes: 1: 4ZUimyMSrmZMeMTJpofdIprKN0Y.roa (hash: +sbrqZ7npPQY0M7RUiP5uMAuk7XGp56zDb3oxzfgBs8=)
2: D6cOOwuzIu0b1VD3IEBzEJwwwCo.roa (hash: v5PJLnM3bwyGnG1xvGzcUgGuOEM5ARi6RIpoEpY7P4s=)
3: fyoJ9a9SSU9QMOOAnopUi24XOCI.roa (hash: Oq4G4KqExdW+YSWtwOksmXAFXdtGTgedgjAZaCPW9DM=)
4: tGTgryi3VcTsiAENlCmGl9GIOTM.crl (hash: S3dvrOIITKcDZ4P4tyPo/hq1YpJhM3O/XgsfYPOlRis=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/0caa6d-109e-45f3-a932-475c5c91f474/1/tGTgryi3VcTsiAENlCmGl9GIOTM.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/0caa6d-109e-45f3-a932-475c5c91f474/1/tGTgryi3VcTsiAENlCmGl9GIOTM.mft
rsync://rpki.ripe.net/repository/DEFAULT/tGTgryi3VcTsiAENlCmGl9GIOTM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:7d:c1:73:ea:11:b1:b0:6d:32:60:91:f3:33:d2:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b464e0af28b755c4ec88010d94298697d1883933
Validity
Not Before: Oct 19 22:01:18 2025 GMT
Not After : Oct 20 22:01:18 2025 GMT
Subject: CN=947ebb2929041902ece964a5fcc3c9c512bde371
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:db:44:bd:4f:8a:4f:af:fa:1b:7e:83:77:5d:
ba:78:14:69:16:7b:3b:a4:7c:29:fb:5a:cf:c6:3e:
5e:17:07:6c:29:43:9b:c5:64:ed:f0:dc:bb:f3:5d:
05:df:fd:81:c1:bd:53:b4:4b:f9:58:2f:47:c5:0e:
26:e8:36:8f:ed:f4:ef:0c:2d:3d:e7:5d:54:98:e8:
d1:c9:88:a5:4a:39:02:96:62:02:29:ff:38:43:c7:
69:37:e1:bd:6e:d2:b7:f1:d8:75:48:3b:e9:11:b0:
f5:0d:61:6b:d7:cf:77:54:66:db:62:93:61:b9:e5:
4b:bd:35:df:05:1a:27:27:66:ec:3b:a9:39:c8:db:
c8:3b:12:bf:99:00:bc:97:85:18:a2:2e:92:f7:24:
7b:53:dd:a4:b7:6e:99:2a:8f:f2:9e:c5:72:cb:6b:
92:2b:c1:62:59:23:1f:e4:6e:11:4e:dc:a5:a4:f4:
f6:4c:f0:f4:c9:63:07:22:8b:cc:a4:be:ee:a0:7a:
8c:5f:3e:32:62:69:6e:46:d9:df:cf:31:4c:c0:8d:
ea:02:dc:38:b0:81:29:45:46:c4:11:0b:4c:77:ff:
fa:0f:f3:43:80:51:ac:ae:af:84:da:de:48:6d:0c:
d8:ee:71:94:82:a8:71:77:58:27:1d:21:d5:fb:ec:
10:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:7E:BB:29:29:04:19:02:EC:E9:64:A5:FC:C3:C9:C5:12:BD:E3:71
X509v3 Authority Key Identifier:
keyid:B4:64:E0:AF:28:B7:55:C4:EC:88:01:0D:94:29:86:97:D1:88:39:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tGTgryi3VcTsiAENlCmGl9GIOTM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/0caa6d-109e-45f3-a932-475c5c91f474/1/tGTgryi3VcTsiAENlCmGl9GIOTM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/0caa6d-109e-45f3-a932-475c5c91f474/1/tGTgryi3VcTsiAENlCmGl9GIOTM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:58:f7:07:a8:b9:67:63:1a:b7:f2:a1:be:eb:a0:a3:f1:95:
5d:47:b0:0b:8f:1e:d8:03:25:43:4b:3a:85:7a:24:6c:a7:9d:
54:75:16:bd:02:c5:97:9a:05:16:9e:97:18:85:19:af:eb:16:
21:ff:66:61:8a:50:69:8b:36:a9:ad:7a:ca:60:44:f9:18:45:
e8:71:9b:8a:50:dc:07:f6:b3:59:23:f4:79:af:aa:15:c2:67:
4b:e1:f0:35:fc:02:68:73:39:f7:e7:82:d9:5d:8b:be:cb:6c:
94:cb:e0:9a:4f:d7:dd:b5:c0:1d:11:77:56:77:40:9e:af:30:
bd:75:18:7f:a4:17:73:1f:ed:14:32:1b:9b:39:7c:e1:5a:74:
f4:03:02:5f:a3:f1:ef:4d:74:89:3f:0a:ba:74:4c:ea:61:f1:
03:c1:1e:97:43:b1:8d:6e:38:bc:bd:51:53:ff:b1:bf:96:52:
4a:fd:54:6d:2f:95:1b:a9:59:6c:2f:2b:f3:e8:ce:77:28:4d:
27:d1:0f:18:49:b8:da:a0:30:f0:e0:d3:a3:06:80:d7:ff:a4:
6b:e6:68:87:68:e3:43:c4:f6:27:c0:8a:43:95:61:07:84:aa:
a2:ff:1b:18:97:06:d2:9d:12:54:7d:35:de:2c:e5:21:37:43:
44:4a:dd:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 06:50:09 2025 by rpki-client