Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/033e8b-bde1-4f90-baf5-23847a40d9e4/1/tg1sqV4ncPVTQNkJ7HyX7so_4g4.mft
File: tg1sqV4ncPVTQNkJ7HyX7so_4g4.mft (raw, json)
Hash identifier: oJLM8rxNCO4nb3xgQokwkQ0bqRmU6GuDjqERkt5q8kA=
Subject key identifier: 58:C9:51:0F:19:AB:9F:F1:84:56:77:A9:63:C1:9B:9B:88:6D:4F:CA
Authority key identifier: B6:0D:6C:A9:5E:27:70:F5:53:40:D9:09:EC:7C:97:EE:CA:3F:E2:0E
Certificate issuer: /CN=b60d6ca95e2770f55340d909ec7c97eeca3fe20e
Certificate serial: 0199FCC65D8DE51945185E57E76C12D9DF50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tg1sqV4ncPVTQNkJ7HyX7so_4g4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/033e8b-bde1-4f90-baf5-23847a40d9e4/1/tg1sqV4ncPVTQNkJ7HyX7so_4g4.mft
Manifest number: 16E2
Signing time: Sun 19 Oct 2025 14:01:22 +0000
Manifest this update: Sun 19 Oct 2025 14:01:22 +0000
Manifest next update: Mon 20 Oct 2025 14:01:22 +0000
Files and hashes: 1: 3wD7YASUrL3NpA7N1DKGwyMvpW8.roa (hash: E3LCGPj2WzMDsMMPMtvTWx8+o6rGMeVTiLG80T025To=)
2: tCxsttlDEYs9pRw5Gm9iTgZyCBc.roa (hash: 0ZbwaGE5XpT8151KuGcEKOSEkVLV60MXa5tXdHShvII=)
3: tg1sqV4ncPVTQNkJ7HyX7so_4g4.crl (hash: ay7t5ouI6HWBhBiD3flmfu/UzhjuRf+qOGY7GDoLFJ4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/033e8b-bde1-4f90-baf5-23847a40d9e4/1/tg1sqV4ncPVTQNkJ7HyX7so_4g4.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/033e8b-bde1-4f90-baf5-23847a40d9e4/1/tg1sqV4ncPVTQNkJ7HyX7so_4g4.mft
rsync://rpki.ripe.net/repository/DEFAULT/tg1sqV4ncPVTQNkJ7HyX7so_4g4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:5d:8d:e5:19:45:18:5e:57:e7:6c:12:d9:df:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b60d6ca95e2770f55340d909ec7c97eeca3fe20e
Validity
Not Before: Oct 19 14:01:22 2025 GMT
Not After : Oct 20 14:01:22 2025 GMT
Subject: CN=58c9510f19ab9ff1845677a963c19b9b886d4fca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:26:09:90:0b:c9:4a:57:c6:73:32:d3:27:c0:
f0:62:1a:ca:25:e3:5a:f0:0f:bd:2c:33:9f:13:24:
8a:bc:69:54:83:c9:6a:5e:1f:40:98:06:8b:35:9e:
c1:ab:ef:b9:61:53:7a:87:4b:3e:78:84:b6:f8:cb:
4f:06:19:80:08:69:cf:d6:56:43:bf:dc:14:08:51:
b3:71:e5:3d:e3:a2:b2:fd:27:13:2d:d1:48:14:bd:
10:2f:28:e3:be:e5:4a:6b:81:90:7b:28:0c:c1:66:
bb:ff:7f:4b:bd:b9:64:35:49:39:d8:46:67:68:47:
e5:09:b7:b5:85:d8:10:af:1b:ba:1c:a4:0c:91:0a:
39:ce:92:87:50:92:3e:a4:56:09:0e:ea:60:52:6f:
ee:92:39:f4:01:5e:f9:26:ac:f0:50:e3:fa:e8:49:
9e:e4:51:17:32:1b:28:85:f1:b9:47:f3:51:31:98:
fa:88:51:21:5a:66:9c:df:4f:85:1c:b6:17:5f:6a:
db:cd:d8:2b:dd:ee:10:28:f4:32:2c:e3:09:e8:d1:
6e:d2:0d:1a:4e:f3:2c:1d:23:45:79:79:7b:3e:6c:
18:34:04:a1:b8:70:21:b1:25:ff:ba:e7:3f:2c:a3:
ae:96:ce:c9:dd:42:87:27:fc:d9:73:bd:8d:d2:1d:
ec:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:C9:51:0F:19:AB:9F:F1:84:56:77:A9:63:C1:9B:9B:88:6D:4F:CA
X509v3 Authority Key Identifier:
keyid:B6:0D:6C:A9:5E:27:70:F5:53:40:D9:09:EC:7C:97:EE:CA:3F:E2:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tg1sqV4ncPVTQNkJ7HyX7so_4g4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/033e8b-bde1-4f90-baf5-23847a40d9e4/1/tg1sqV4ncPVTQNkJ7HyX7so_4g4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/033e8b-bde1-4f90-baf5-23847a40d9e4/1/tg1sqV4ncPVTQNkJ7HyX7so_4g4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:eb:7f:32:da:f5:ec:a2:34:81:e5:e4:96:d3:e1:04:c8:2c:
d5:22:27:0b:35:af:0d:bd:30:5c:7e:1e:a7:5c:ed:3f:29:af:
3a:43:35:8e:dd:22:ea:43:f4:e7:8e:e9:91:33:e0:97:78:2b:
4f:5b:bc:44:31:fe:76:e6:25:7e:a0:9a:e6:66:31:43:d3:a6:
6c:0d:12:b5:f9:98:04:12:fb:3e:c4:dd:f1:48:c1:2f:7d:fd:
3d:5e:a8:ab:b9:d8:57:41:48:21:da:3e:41:dd:e7:85:4f:3f:
47:37:ea:09:fc:fa:5f:d1:c4:5d:81:26:20:f8:41:1e:5d:91:
22:d6:30:dc:08:48:1c:b8:39:86:85:da:f2:d7:8a:8b:26:92:
6d:53:31:f4:e0:ab:f5:13:dd:a1:e6:31:89:8e:55:12:c0:cf:
df:53:b1:34:ca:72:bf:76:ee:f3:48:0a:fa:53:72:70:ef:d9:
fe:b3:4a:dc:1d:7a:e8:50:26:06:c9:f6:f5:b2:65:7a:e4:61:
63:a1:29:78:58:a6:fc:5d:7b:6f:7e:0f:c9:17:8e:59:bc:93:
0b:82:11:6d:8f:86:2d:29:f6:2d:c5:cf:2f:e2:b4:7b:bc:0b:
be:3e:0d:f5:0f:ce:7e:88:7a:19:93:ce:c7:fb:21:b0:b3:78:
95:b4:92:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:02:04 2025 by rpki-client