Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/8c02ff-a9c5-4788-ae8b-18b9a8510539/1/tXwPr6ZQ3ZSjtVgXOfY9iO-kFPM.mft
File: tXwPr6ZQ3ZSjtVgXOfY9iO-kFPM.mft (raw, json)
Hash identifier: ZXBTI25l7fEMt2LnCFHJsJ/UPPDAHGrhhV7oM8OtXxY=
Subject key identifier: 38:36:B1:5B:AF:AA:2C:C8:9F:D3:CE:4F:7E:A4:BA:8D:CE:4A:E3:B9
Authority key identifier: B5:7C:0F:AF:A6:50:DD:94:A3:B5:58:17:39:F6:3D:88:EF:A4:14:F3
Certificate issuer: /CN=b57c0fafa650dd94a3b5581739f63d88efa414f3
Certificate serial: 019A0259A06379383791D2F5A70045CD9E13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tXwPr6ZQ3ZSjtVgXOfY9iO-kFPM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/8c02ff-a9c5-4788-ae8b-18b9a8510539/1/tXwPr6ZQ3ZSjtVgXOfY9iO-kFPM.mft
Manifest number: 0E03
Signing time: Mon 20 Oct 2025 16:00:19 +0000
Manifest this update: Mon 20 Oct 2025 16:00:19 +0000
Manifest next update: Tue 21 Oct 2025 16:00:19 +0000
Files and hashes: 1: WKXMRCbOe7azjRi4M3txfig4AbQ.roa (hash: misoRXqMC74XUm7CVVuJWe90Pkw4I/1hXuzduVdNB/4=)
2: tXwPr6ZQ3ZSjtVgXOfY9iO-kFPM.crl (hash: OnIKazgiP6rEVZMfJsIOwjLO2/T7G7WKyGEDBsFdS5M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/8c02ff-a9c5-4788-ae8b-18b9a8510539/1/tXwPr6ZQ3ZSjtVgXOfY9iO-kFPM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/8c02ff-a9c5-4788-ae8b-18b9a8510539/1/tXwPr6ZQ3ZSjtVgXOfY9iO-kFPM.mft
rsync://rpki.ripe.net/repository/DEFAULT/tXwPr6ZQ3ZSjtVgXOfY9iO-kFPM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 16:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:02:59:a0:63:79:38:37:91:d2:f5:a7:00:45:cd:9e:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b57c0fafa650dd94a3b5581739f63d88efa414f3
Validity
Not Before: Oct 20 16:00:19 2025 GMT
Not After : Oct 21 16:00:19 2025 GMT
Subject: CN=3836b15bafaa2cc89fd3ce4f7ea4ba8dce4ae3b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:ca:c4:e6:9c:ae:22:73:48:d5:7a:63:81:45:
f6:e8:14:51:40:f9:62:c9:ea:5b:db:55:45:56:26:
3c:a3:02:c5:f7:70:9c:b9:06:c2:4c:34:a2:38:53:
09:ea:79:53:f2:b9:9c:f6:72:49:40:54:72:c6:50:
c6:27:41:a2:73:fa:71:d8:6a:fa:07:c7:96:24:fa:
67:b3:24:dc:64:21:8d:e6:38:bb:0a:ed:fd:0a:9f:
0b:ed:d0:bb:88:58:d2:85:cf:0d:98:df:bb:66:55:
cc:79:85:25:42:7e:6a:db:7f:6e:80:95:83:62:f8:
1f:e5:ce:c6:56:0f:71:d0:dd:3d:92:65:11:64:6a:
f9:fe:26:05:08:38:f6:bf:21:82:fa:c4:7e:52:a2:
0f:bc:f3:e8:c5:87:ea:89:47:bc:98:7b:12:ba:ba:
0a:3e:67:87:a7:f4:e9:90:be:20:1d:3f:bb:9f:a8:
ac:1b:14:68:5d:2b:d7:f5:e4:43:6c:f6:04:1d:b5:
60:c5:bb:fb:e6:82:4d:70:36:d8:1f:cc:d1:0c:39:
8d:99:80:16:96:71:47:3d:fa:fd:97:7e:a8:45:df:
a5:0b:89:7e:fc:37:be:b6:c0:b0:c6:61:91:af:ce:
28:c6:21:0f:6e:36:90:c0:fe:b4:78:2e:90:a5:15:
67:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:36:B1:5B:AF:AA:2C:C8:9F:D3:CE:4F:7E:A4:BA:8D:CE:4A:E3:B9
X509v3 Authority Key Identifier:
keyid:B5:7C:0F:AF:A6:50:DD:94:A3:B5:58:17:39:F6:3D:88:EF:A4:14:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tXwPr6ZQ3ZSjtVgXOfY9iO-kFPM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/8c02ff-a9c5-4788-ae8b-18b9a8510539/1/tXwPr6ZQ3ZSjtVgXOfY9iO-kFPM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/8c02ff-a9c5-4788-ae8b-18b9a8510539/1/tXwPr6ZQ3ZSjtVgXOfY9iO-kFPM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:3b:b0:45:67:b7:2d:6a:30:01:31:8a:0f:d5:d0:7d:6b:e9:
f7:e5:6c:61:72:30:1c:df:20:6c:ba:86:98:7e:2d:87:c8:2f:
16:be:c8:50:13:1b:d3:7b:4c:bc:3e:9b:d6:5d:d0:d1:aa:76:
87:dd:3e:e5:6c:cf:b1:e7:42:9e:e0:83:20:ab:48:32:c7:2b:
c7:24:b2:e2:d8:9f:6f:d4:1c:6a:d5:06:fe:c7:bd:f7:32:9c:
d3:32:81:14:bb:8d:96:73:1a:a5:a9:ea:20:61:64:e2:f9:c2:
f6:e0:d2:d0:7b:84:f5:6d:09:47:e7:c3:0a:e9:e7:0a:90:6d:
a6:53:a0:d5:9d:31:f8:8a:41:43:92:b8:46:d7:b8:d7:93:2a:
26:8e:43:e2:12:57:0d:10:2b:c0:1d:84:b7:bf:8c:fb:2f:01:
d2:00:07:11:33:85:ee:1a:7a:b5:75:63:e8:7f:e9:38:42:29:
a1:f7:e4:17:f7:26:af:d5:fb:cc:35:0e:59:a3:98:b5:a1:2b:
54:56:d9:0b:9f:af:15:c2:f6:65:2d:48:dd:5a:cb:f6:30:2d:
78:17:ea:3f:78:cc:cd:c1:91:25:a5:98:1f:ab:4a:cc:10:45:
37:84:1c:c0:91:be:01:b8:e3:07:5d:87:6c:a0:aa:d1:aa:78:
a8:a5:01:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 02:11:27 2025 by rpki-client