Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/2215f7-887a-4bd5-bf97-ffb709f7668c/1/TIc4nvQfGMH8yCdUNJ6nCWmAseM.mft
File: TIc4nvQfGMH8yCdUNJ6nCWmAseM.mft (raw, json)
Hash identifier: Tt0y6eINFS6ZNdwWM5yCrjbTXC/LAcv+qX7Vj0GFpko=
Subject key identifier: A4:D9:06:D1:14:23:0B:4A:8D:C2:4A:AD:02:DB:DF:DD:AD:F0:3E:7E
Authority key identifier: 4C:87:38:9E:F4:1F:18:C1:FC:C8:27:54:34:9E:A7:09:69:80:B1:E3
Certificate issuer: /CN=4c87389ef41f18c1fcc82754349ea7096980b1e3
Certificate serial: 0199FCFD75D8D0CD1AC665D75022B31355A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TIc4nvQfGMH8yCdUNJ6nCWmAseM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/2215f7-887a-4bd5-bf97-ffb709f7668c/1/TIc4nvQfGMH8yCdUNJ6nCWmAseM.mft
Manifest number: 16E9
Signing time: Sun 19 Oct 2025 15:01:33 +0000
Manifest this update: Sun 19 Oct 2025 15:01:33 +0000
Manifest next update: Mon 20 Oct 2025 15:01:33 +0000
Files and hashes: 1: TIc4nvQfGMH8yCdUNJ6nCWmAseM.crl (hash: bFAt8lbdLJAkjD6Iqb71EteBJa3/g1ln1BHV7sB1U/E=)
2: VCmh7D4aDnJ3RvUgB4_x96-F7yk.roa (hash: Fvy+64reQdJIkB2LlOhrfVK5VykM8awZbivVRRObMH8=)
3: W2TNL5im0fX66hopLKpEaeHN1Vw.roa (hash: jFMMnSyz7YrR/mDL9VXSfjnRvEdkg9GR9m7oXoI7Q1I=)
4: cC9Kn5RNwJ59ItW6IXpERzZosPw.roa (hash: Tn7jWRKA9agcVwEoCtyV/3OdfNNW+6uN3rC9ZNlnP8I=)
5: zpLViSP1mtGrcERbXmR4V_Zd6cE.roa (hash: yuKnJy9vuRLwT9M7eUlYmO+BbnE5uOEv2Od3+EfguMU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/2215f7-887a-4bd5-bf97-ffb709f7668c/1/TIc4nvQfGMH8yCdUNJ6nCWmAseM.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/2215f7-887a-4bd5-bf97-ffb709f7668c/1/TIc4nvQfGMH8yCdUNJ6nCWmAseM.mft
rsync://rpki.ripe.net/repository/DEFAULT/TIc4nvQfGMH8yCdUNJ6nCWmAseM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:fd:75:d8:d0:cd:1a:c6:65:d7:50:22:b3:13:55:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c87389ef41f18c1fcc82754349ea7096980b1e3
Validity
Not Before: Oct 19 15:01:33 2025 GMT
Not After : Oct 20 15:01:33 2025 GMT
Subject: CN=a4d906d114230b4a8dc24aad02dbdfddadf03e7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:82:1b:98:33:5c:1a:0d:d6:db:b5:f0:82:ad:
d0:a2:42:cd:eb:93:3a:94:6c:59:ed:90:fd:b8:3f:
5b:a7:8e:c0:b1:27:e4:71:71:6d:13:1b:b7:ac:2b:
83:88:08:36:f0:06:4f:17:de:7b:ca:2d:32:5e:6c:
dc:66:f3:e8:0f:3b:f3:11:0a:02:b2:5f:5b:ad:74:
ef:14:99:9d:39:ba:8e:98:79:e1:07:18:09:b8:e7:
86:e8:be:c3:97:ff:fc:d9:ee:9d:76:21:c3:39:c9:
de:43:0b:d2:91:ea:f3:1c:d7:da:ca:a2:3d:51:ca:
dd:f5:28:08:aa:2a:48:d5:c1:3b:e9:b6:50:37:ff:
94:b6:ad:57:90:05:e8:b7:0d:67:66:7a:79:e5:aa:
23:b9:6e:88:1a:f9:b7:2e:a1:2b:64:4a:f9:94:f9:
e1:96:ce:13:2d:db:c5:41:d4:1f:e0:91:e4:7b:d7:
6c:ca:9c:cf:0a:7f:6d:0c:78:35:8d:62:e0:98:4f:
c8:11:91:14:e3:9d:7a:04:75:ef:08:1d:f2:98:29:
61:9e:ed:7d:01:cf:f3:51:b9:04:66:20:99:a5:1d:
04:d0:dd:56:90:fa:61:09:e0:6c:17:a1:78:f2:6a:
af:28:f4:fe:fa:5b:51:27:0a:da:38:b3:3e:3c:fa:
13:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:D9:06:D1:14:23:0B:4A:8D:C2:4A:AD:02:DB:DF:DD:AD:F0:3E:7E
X509v3 Authority Key Identifier:
keyid:4C:87:38:9E:F4:1F:18:C1:FC:C8:27:54:34:9E:A7:09:69:80:B1:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TIc4nvQfGMH8yCdUNJ6nCWmAseM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/2215f7-887a-4bd5-bf97-ffb709f7668c/1/TIc4nvQfGMH8yCdUNJ6nCWmAseM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/2215f7-887a-4bd5-bf97-ffb709f7668c/1/TIc4nvQfGMH8yCdUNJ6nCWmAseM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:b8:90:27:45:85:46:b3:70:ac:f4:e7:f0:ee:30:e9:a0:58:
84:72:03:01:f7:54:d8:12:7c:f2:4a:5c:f5:bd:9d:4b:57:20:
ee:bd:17:40:6e:aa:94:48:60:ce:5d:22:91:80:61:29:5c:f1:
5d:11:bb:6f:d8:6b:61:58:c1:83:d6:93:d3:73:cb:af:a9:90:
35:78:50:5b:39:f1:66:f9:c9:ba:30:e7:16:fe:41:9f:e7:91:
a0:b1:4a:d7:be:2b:3c:46:86:ce:ad:db:f4:e5:5a:25:af:dd:
17:fb:b7:97:f0:77:c3:40:79:42:1c:91:68:a9:f4:2a:b2:ed:
ce:82:ea:a2:79:3e:e5:f4:35:2b:6b:2e:e2:62:ca:aa:91:9f:
51:f2:19:f2:bf:67:5c:a2:d6:a6:24:e4:3a:09:b8:99:a9:39:
0d:55:11:0d:e3:4b:fc:ef:b7:dd:63:f5:a0:cc:4e:ed:99:a9:
1b:b2:0f:62:b8:3d:55:01:7b:0e:8f:93:74:ce:fa:fe:3e:ca:
c7:50:7f:18:15:0c:ae:ae:d8:9f:8a:ee:06:79:e0:29:37:a8:
63:b3:20:2d:46:01:3e:44:05:e4:c5:38:3e:c2:ae:65:13:ed:
48:c2:e5:bc:fd:9c:ab:22:02:88:89:22:d6:47:34:5c:b5:0e:
06:c7:15:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:37:54 2025 by rpki-client