Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/d5e3cc-c1cd-4d68-bec3-1b08f7f5015d/1/Tg854squjizxS8xBsj88huGnIPg.mft
File: Tg854squjizxS8xBsj88huGnIPg.mft (raw, json)
Hash identifier: 8pP+Br4z+uT6tDpF6Qj/r0XQM7OiRfknXZCfHHAUxvY=
Subject key identifier: 2D:B6:05:7B:A0:9B:B8:86:D5:86:7A:87:B0:5F:D6:AA:19:FF:E3:76
Authority key identifier: 4E:0F:39:E2:CA:AE:8E:2C:F1:4B:CC:41:B2:3F:3C:86:E1:A7:20:F8
Certificate issuer: /CN=4e0f39e2caae8e2cf14bcc41b23f3c86e1a720f8
Certificate serial: 0199FE473A170591FBA383723494F7C9F1BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tg854squjizxS8xBsj88huGnIPg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/d5e3cc-c1cd-4d68-bec3-1b08f7f5015d/1/Tg854squjizxS8xBsj88huGnIPg.mft
Manifest number: 16E6
Signing time: Sun 19 Oct 2025 21:01:44 +0000
Manifest this update: Sun 19 Oct 2025 21:01:44 +0000
Manifest next update: Mon 20 Oct 2025 21:01:44 +0000
Files and hashes: 1: 3NL0_43JO4ViZMUt6FOGd4wRJes.roa (hash: iMUE0vTHXLYCmLZqj0qdPBpz5FgK9qmOUf7yFoe48OI=)
2: 4pgipsDtjzVZOnA4qzWqk83-xSA.roa (hash: nd8vlth0pBWJ/Is/avNVqT3xb/Gc3yDSmhppSZMRqxM=)
3: Tg854squjizxS8xBsj88huGnIPg.crl (hash: +zlb+OGO3JbxTfm+jG1oJBCtyaKNXc1eK2yDF6XOwzo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/d5e3cc-c1cd-4d68-bec3-1b08f7f5015d/1/Tg854squjizxS8xBsj88huGnIPg.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/d5e3cc-c1cd-4d68-bec3-1b08f7f5015d/1/Tg854squjizxS8xBsj88huGnIPg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Tg854squjizxS8xBsj88huGnIPg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:47:3a:17:05:91:fb:a3:83:72:34:94:f7:c9:f1:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e0f39e2caae8e2cf14bcc41b23f3c86e1a720f8
Validity
Not Before: Oct 19 21:01:44 2025 GMT
Not After : Oct 20 21:01:44 2025 GMT
Subject: CN=2db6057ba09bb886d5867a87b05fd6aa19ffe376
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:87:9b:f9:c0:f0:06:7c:e6:35:36:3d:82:0e:
cf:f9:83:50:28:06:11:e6:db:69:c4:84:3e:42:f5:
70:da:de:c4:51:39:ae:a3:4e:c8:55:cd:43:b6:8a:
31:7b:f5:10:fc:c0:c4:b6:33:f5:8d:bc:1a:ae:b7:
df:2a:c5:33:fd:25:70:0f:85:15:6b:1e:c6:b0:fa:
26:a1:67:88:f0:35:78:f4:4f:aa:03:4b:b2:43:ee:
0c:02:90:1c:86:cf:e7:b9:f4:5a:78:4d:e6:0c:fb:
cb:dd:d1:66:22:c4:c7:93:fa:42:2c:4b:64:38:58:
6b:8d:de:de:51:ec:ee:ea:b6:8b:ec:c7:7b:93:2b:
a3:15:b4:e7:37:97:bb:7c:3b:be:6b:d9:f2:69:73:
48:67:43:19:6d:6d:eb:76:b0:5f:fb:ff:d8:07:a1:
3c:cb:91:09:9c:cf:64:e9:c3:d5:20:53:25:22:60:
3c:bc:1e:03:b7:e5:a1:09:84:4a:39:4c:f6:4b:4c:
64:7b:c3:10:6d:6f:0a:b1:b2:17:af:af:e0:94:f6:
5f:fd:ea:43:4a:b1:74:dd:a9:74:27:20:f3:66:b6:
bf:0a:b5:3d:d2:42:ac:01:b4:fa:29:57:53:36:07:
41:32:46:37:fd:25:3f:2c:26:47:ac:13:81:fe:fc:
f8:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:B6:05:7B:A0:9B:B8:86:D5:86:7A:87:B0:5F:D6:AA:19:FF:E3:76
X509v3 Authority Key Identifier:
keyid:4E:0F:39:E2:CA:AE:8E:2C:F1:4B:CC:41:B2:3F:3C:86:E1:A7:20:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tg854squjizxS8xBsj88huGnIPg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/d5e3cc-c1cd-4d68-bec3-1b08f7f5015d/1/Tg854squjizxS8xBsj88huGnIPg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/d5e3cc-c1cd-4d68-bec3-1b08f7f5015d/1/Tg854squjizxS8xBsj88huGnIPg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:74:df:4e:74:de:6e:02:60:57:bb:43:3d:51:e9:16:7f:b3:
e9:dd:3f:14:6c:a5:98:70:9a:ad:f1:b8:82:8f:77:e7:0a:6c:
f8:ed:79:25:dd:ae:61:72:81:66:40:7c:19:4f:54:6a:c9:28:
ae:2d:2c:3a:bc:56:76:9d:e5:41:53:33:30:ca:93:1d:e3:61:
80:d4:a5:84:f4:d2:04:90:bd:1c:84:13:15:52:60:46:94:57:
58:6b:2d:09:88:ec:dd:2f:c2:23:1b:e5:54:57:3e:0d:7b:2c:
d3:8f:35:79:0f:94:f6:20:52:67:28:54:11:93:a1:7c:c8:02:
13:cd:66:5a:53:42:43:73:9e:9c:6d:b2:14:24:85:6a:0f:1a:
41:e8:45:0d:ca:84:6e:9b:69:ce:5d:f4:57:d0:95:d0:cc:79:
42:46:5d:02:57:86:26:cb:63:ee:4b:18:60:1d:bd:77:56:f2:
07:67:18:6e:ac:3d:67:11:14:56:e3:83:76:72:e7:da:77:91:
1a:e2:ed:d9:9d:33:38:6b:45:a6:bf:c3:38:97:e9:fe:d1:5b:
45:07:c8:d6:e1:a7:4e:ac:e9:44:3f:88:22:6a:61:c1:e4:18:
98:66:ef:09:db:d1:7f:af:80:e0:30:7f:37:08:1c:fb:bd:e8:
ce:4e:ca:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 05:55:41 2025 by rpki-client