Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/ac82ec-0e31-461e-a205-1f6010a30ebb/1/tQ32Wi_LmxF6hTprVoVLBxjsM0M.mft
File: tQ32Wi_LmxF6hTprVoVLBxjsM0M.mft (raw, json)
Hash identifier: b6IuSaEDgV92ghXgNED43euC+Hcqe3BivlpMz+ZaBGA=
Subject key identifier: 57:72:13:20:1B:6C:26:05:86:18:B8:EF:CA:AA:2B:BD:1A:DD:75:97
Authority key identifier: B5:0D:F6:5A:2F:CB:9B:11:7A:85:3A:6B:56:85:4B:07:18:EC:33:43
Certificate issuer: /CN=b50df65a2fcb9b117a853a6b56854b0718ec3343
Certificate serial: 0199FBB368E9B74C9E97216FEEC592010A3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tQ32Wi_LmxF6hTprVoVLBxjsM0M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/ac82ec-0e31-461e-a205-1f6010a30ebb/1/tQ32Wi_LmxF6hTprVoVLBxjsM0M.mft
Manifest number: 09D5
Signing time: Sun 19 Oct 2025 09:01:02 +0000
Manifest this update: Sun 19 Oct 2025 09:01:02 +0000
Manifest next update: Mon 20 Oct 2025 09:01:02 +0000
Files and hashes: 1: tQ32Wi_LmxF6hTprVoVLBxjsM0M.crl (hash: 4WyRu0LHoetHciw3SLWlJiw1ohWYxq/uNCtWotyDS1E=)
2: zBqyJEl1ZTI7fL6gM2motFXrSRM.roa (hash: OkJW2+OnAMScP2GdhvLfFrfdk7h2e43pg36iU6eHej4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/ac82ec-0e31-461e-a205-1f6010a30ebb/1/tQ32Wi_LmxF6hTprVoVLBxjsM0M.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/ac82ec-0e31-461e-a205-1f6010a30ebb/1/tQ32Wi_LmxF6hTprVoVLBxjsM0M.mft
rsync://rpki.ripe.net/repository/DEFAULT/tQ32Wi_LmxF6hTprVoVLBxjsM0M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:b3:68:e9:b7:4c:9e:97:21:6f:ee:c5:92:01:0a:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b50df65a2fcb9b117a853a6b56854b0718ec3343
Validity
Not Before: Oct 19 09:01:02 2025 GMT
Not After : Oct 20 09:01:02 2025 GMT
Subject: CN=577213201b6c26058618b8efcaaa2bbd1add7597
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:32:5a:af:ad:de:6e:08:c4:3a:9f:3c:57:80:
8a:49:37:56:e9:ee:2a:90:19:d1:d2:d8:7f:24:88:
39:7c:87:43:60:65:2a:e7:2a:e6:75:8f:8b:88:88:
2e:1c:26:de:f6:55:85:60:67:56:e4:87:5d:ae:ed:
7b:d7:96:34:da:ab:eb:81:cf:e2:8c:1c:a3:9e:d6:
b5:f0:11:e2:dd:fc:9e:c7:4d:45:53:16:32:d7:1c:
8f:60:a5:e5:1f:f4:09:a4:d4:e7:88:7d:ad:8a:bc:
06:28:83:7f:36:8f:d6:60:c5:5b:ac:13:bc:e2:9d:
67:e2:21:b8:35:c7:0b:7c:7d:9d:b0:cc:23:9a:84:
96:6d:a0:03:73:5e:ce:2d:62:3e:87:43:05:5b:f0:
74:84:21:eb:34:dd:ec:31:8d:15:26:79:ae:d0:c8:
ed:d7:67:05:a5:28:a6:e0:7b:de:c0:44:84:db:11:
43:32:c5:06:f6:96:b3:e1:18:3a:ce:e1:76:2e:64:
a1:f8:f2:c6:4d:d2:6e:71:75:08:5f:ec:74:d3:15:
50:14:6f:21:f8:a2:cd:1c:e0:04:5a:d0:f2:99:42:
ba:1c:93:28:1f:16:13:75:55:6c:ba:f1:d7:27:3d:
70:9f:b0:96:00:e8:e8:43:f3:81:0e:1c:4a:41:96:
8b:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:72:13:20:1B:6C:26:05:86:18:B8:EF:CA:AA:2B:BD:1A:DD:75:97
X509v3 Authority Key Identifier:
keyid:B5:0D:F6:5A:2F:CB:9B:11:7A:85:3A:6B:56:85:4B:07:18:EC:33:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tQ32Wi_LmxF6hTprVoVLBxjsM0M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/ac82ec-0e31-461e-a205-1f6010a30ebb/1/tQ32Wi_LmxF6hTprVoVLBxjsM0M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/ac82ec-0e31-461e-a205-1f6010a30ebb/1/tQ32Wi_LmxF6hTprVoVLBxjsM0M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:92:67:85:b9:09:d8:1b:97:0e:38:35:b1:68:67:b6:b0:5d:
5a:81:20:9a:b4:36:ec:2f:d6:a7:27:79:18:f0:d8:7b:cc:3b:
07:35:54:17:c7:6f:cf:30:b4:41:6b:08:69:39:2d:a2:05:86:
5c:a0:75:4a:da:66:18:25:d7:51:02:cc:f4:8e:41:79:6c:58:
47:f3:56:56:0d:3a:fb:22:a8:68:7f:f4:9e:05:25:1e:af:f2:
19:38:a0:7f:d6:a3:75:1b:db:b4:0e:f9:4b:9f:fa:f6:a4:9f:
a3:9b:5c:2e:70:a8:7a:7c:21:23:99:e9:98:08:eb:c3:9c:9f:
3a:70:bc:c9:15:67:2c:ec:9a:13:07:80:3d:30:78:24:d2:e9:
d3:ae:72:ec:30:fa:0c:c3:77:92:a4:26:19:78:e9:e9:c5:49:
83:b6:b8:74:17:5b:29:e9:76:36:d3:cf:09:48:57:7c:86:a8:
ff:f3:fe:dd:56:5b:0c:bc:27:54:ab:c1:21:1a:cc:b8:e3:44:
a3:6b:f7:81:31:d1:b4:69:a0:d3:0f:b0:b5:d2:76:72:63:3a:
f2:a1:1e:4c:53:f4:bc:f7:55:9d:5d:7f:0c:5d:49:46:99:fc:
26:b3:d7:bb:f5:1b:34:22:1c:98:64:e3:70:74:b7:6d:97:cb:
ca:44:48:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:26:15 2025 by rpki-client