Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/b8e5c4-38eb-445f-b036-c37790e6d482/1/Tu9qrm-6XGGmFzmvyrVaYiZuie4.mft
File: Tu9qrm-6XGGmFzmvyrVaYiZuie4.mft (raw, json)
Hash identifier: W7TA5DoBsloLN5Ky6xzIeNcUkpTbBVNcENSCrERiXxE=
Subject key identifier: 49:05:95:6A:82:EA:5D:1F:BF:78:72:4E:C9:80:C4:E7:02:EE:C5:53
Authority key identifier: 4E:EF:6A:AE:6F:BA:5C:61:A6:17:39:AF:CA:B5:5A:62:26:6E:89:EE
Certificate issuer: /CN=4eef6aae6fba5c61a61739afcab55a62266e89ee
Certificate serial: 0199FCC6202E4E5649F0A1BD0891DF1EB841
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tu9qrm-6XGGmFzmvyrVaYiZuie4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/b8e5c4-38eb-445f-b036-c37790e6d482/1/Tu9qrm-6XGGmFzmvyrVaYiZuie4.mft
Manifest number: 16DB
Signing time: Sun 19 Oct 2025 14:01:06 +0000
Manifest this update: Sun 19 Oct 2025 14:01:06 +0000
Manifest next update: Mon 20 Oct 2025 14:01:06 +0000
Files and hashes: 1: EsNde2nZ0dUcA8Xoq5-tHg_EXc8.roa (hash: EuB6IqBcAAWKbULQ1dsjzb0/Ucv72mc0J9mJsdHmCGA=)
2: Tu9qrm-6XGGmFzmvyrVaYiZuie4.crl (hash: ANBD2JCKq+UYhOGnMAKk3OAECFBAzgOEOvEc4dN41OI=)
3: eUaNjbQ13AL_bdj9OsodbJhievk.roa (hash: vqTtUX/Z4j6GrRJo/zNXECftqpV9YIa2rqV3Ge4NXvs=)
4: occ86qiOIs73r7C894le5tLORUc.roa (hash: vjqBb3FygjXd34w4UXc66ToikB55Yx9gYxFBgH7Uvw4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/b8e5c4-38eb-445f-b036-c37790e6d482/1/Tu9qrm-6XGGmFzmvyrVaYiZuie4.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/b8e5c4-38eb-445f-b036-c37790e6d482/1/Tu9qrm-6XGGmFzmvyrVaYiZuie4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Tu9qrm-6XGGmFzmvyrVaYiZuie4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:20:2e:4e:56:49:f0:a1:bd:08:91:df:1e:b8:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4eef6aae6fba5c61a61739afcab55a62266e89ee
Validity
Not Before: Oct 19 14:01:06 2025 GMT
Not After : Oct 20 14:01:06 2025 GMT
Subject: CN=4905956a82ea5d1fbf78724ec980c4e702eec553
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:f8:77:02:68:64:cf:2f:36:0a:ba:6d:2f:29:
f2:42:30:01:f8:bd:1b:5e:39:d1:82:29:47:8b:8d:
95:8c:76:d6:63:ca:ab:ab:c2:0b:99:c2:ff:42:13:
b2:d2:1b:61:9e:9a:b7:49:fa:9c:77:87:0b:a9:d6:
80:c4:f1:80:ab:05:2e:c8:9b:c5:be:80:88:37:a1:
b3:4d:0d:1b:c3:44:ff:df:1e:2a:27:67:bb:86:6b:
6f:6c:b3:f0:15:c2:04:20:40:ca:a4:67:74:4d:30:
c7:75:be:97:b1:7a:b7:cb:70:dc:c2:28:79:5c:c2:
94:5e:cb:84:42:ca:ef:a6:a5:f2:c1:38:70:7c:c6:
a5:41:ac:94:37:74:cc:b2:fd:13:14:a5:35:77:d0:
34:5d:9f:7e:00:59:3b:c4:3b:3f:2c:c4:f6:56:dc:
93:16:d8:67:82:ea:d4:3a:c4:5d:40:e5:85:f2:69:
45:a4:2c:a0:73:3b:a1:bb:8a:d8:72:08:3a:3b:68:
b5:d1:0b:7b:a8:c0:95:bf:b9:0f:fb:16:a4:96:df:
39:0a:71:06:bd:dc:35:38:39:58:d8:97:24:38:fe:
0b:8a:43:9f:56:37:dc:e6:3e:59:0e:f4:8a:b0:6d:
13:82:4e:15:c1:ed:66:21:d8:bd:4a:0b:aa:5e:cc:
8c:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:05:95:6A:82:EA:5D:1F:BF:78:72:4E:C9:80:C4:E7:02:EE:C5:53
X509v3 Authority Key Identifier:
keyid:4E:EF:6A:AE:6F:BA:5C:61:A6:17:39:AF:CA:B5:5A:62:26:6E:89:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tu9qrm-6XGGmFzmvyrVaYiZuie4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/b8e5c4-38eb-445f-b036-c37790e6d482/1/Tu9qrm-6XGGmFzmvyrVaYiZuie4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/b8e5c4-38eb-445f-b036-c37790e6d482/1/Tu9qrm-6XGGmFzmvyrVaYiZuie4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:95:f4:9f:14:c9:59:e6:4d:85:ee:93:a9:16:63:ce:63:f3:
d4:a5:dd:f4:6e:a8:36:c8:be:49:e4:a7:30:4e:fc:4e:bd:4c:
65:eb:97:b1:df:66:91:3c:42:0f:55:c6:e7:a6:c2:8d:90:43:
1f:93:21:4f:f8:f0:db:80:75:bb:e0:be:fa:fc:d2:e5:54:d4:
eb:7e:3b:80:3f:fe:ce:94:d5:81:a7:96:2b:e0:95:38:cb:44:
27:dd:2a:3c:25:39:82:09:0e:61:27:25:03:88:87:d7:f6:87:
82:92:be:b5:d9:44:e6:99:b7:d0:1b:82:b0:e3:8e:63:97:73:
83:51:28:0f:a5:4a:b9:cd:80:a9:e2:12:fa:d4:d9:c4:2d:c9:
6d:b0:01:cc:5d:b4:24:8e:6a:84:56:ae:c2:29:ab:f0:e4:6b:
0b:2b:a7:6c:78:7f:ce:bf:8f:8e:25:dc:71:78:fb:77:1c:fb:
6b:d3:8e:1c:3e:ba:d1:40:e3:c6:b2:b7:26:74:07:81:25:ce:
3e:ff:a3:4a:b6:3b:45:bb:ad:47:38:f1:22:44:1c:bf:e9:6a:
ca:84:40:69:7e:30:d1:68:a2:b0:6b:27:ec:93:c1:69:bf:5e:
81:a3:1d:00:6a:fe:a7:3e:5f:3f:ec:a6:5d:f6:2e:44:03:0b:
2f:ff:ae:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:06:12 2025 by rpki-client