Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/f63d76-2fb6-43a2-bfec-9f7aa094303b/1/tPSWmNCOjCg8DfKoLxaZfmJZurY.mft
File: tPSWmNCOjCg8DfKoLxaZfmJZurY.mft (raw, json)
Hash identifier: zJJ8e32pPoxZ8k2YoFw9X8gOE4PxhE0unqhJvrnc16M=
Subject key identifier: 3E:CE:1E:79:3C:D7:EC:59:99:FD:90:7C:08:48:D2:84:13:93:B0:46
Authority key identifier: B4:F4:96:98:D0:8E:8C:28:3C:0D:F2:A8:2F:16:99:7E:62:59:BA:B6
Certificate issuer: /CN=b4f49698d08e8c283c0df2a82f16997e6259bab6
Certificate serial: 0199FCC65764DCE9B704697E8CF4C5E4C0DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tPSWmNCOjCg8DfKoLxaZfmJZurY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/f63d76-2fb6-43a2-bfec-9f7aa094303b/1/tPSWmNCOjCg8DfKoLxaZfmJZurY.mft
Manifest number: 08AF
Signing time: Sun 19 Oct 2025 14:01:20 +0000
Manifest this update: Sun 19 Oct 2025 14:01:20 +0000
Manifest next update: Mon 20 Oct 2025 14:01:20 +0000
Files and hashes: 1: tPSWmNCOjCg8DfKoLxaZfmJZurY.crl (hash: tH3VHNiAnvFZ0Rh/+tgMk0h0gj+OZgc7/B4yCwedkUg=)
2: xzawIGSZ9gaUq6klJYybOrl_u8k.roa (hash: 1673awjNQrA/kSjVn3AcQmjZN9mvF8MpaJPKmYa0E/w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/f63d76-2fb6-43a2-bfec-9f7aa094303b/1/tPSWmNCOjCg8DfKoLxaZfmJZurY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/f63d76-2fb6-43a2-bfec-9f7aa094303b/1/tPSWmNCOjCg8DfKoLxaZfmJZurY.mft
rsync://rpki.ripe.net/repository/DEFAULT/tPSWmNCOjCg8DfKoLxaZfmJZurY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:57:64:dc:e9:b7:04:69:7e:8c:f4:c5:e4:c0:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4f49698d08e8c283c0df2a82f16997e6259bab6
Validity
Not Before: Oct 19 14:01:20 2025 GMT
Not After : Oct 20 14:01:20 2025 GMT
Subject: CN=3ece1e793cd7ec5999fd907c0848d2841393b046
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:e4:3e:14:19:dc:3b:88:10:bc:81:41:8a:ea:
11:00:4f:5d:9f:1f:94:54:da:88:25:da:2f:e4:d8:
53:4e:c1:a2:07:79:25:e4:e0:30:38:b9:24:a3:39:
24:99:72:8b:e0:d7:44:65:37:af:e1:e6:b7:aa:59:
10:cb:b1:94:6d:f0:8a:11:36:e2:8b:67:12:17:93:
79:e1:1a:dd:a6:19:10:6a:4f:c7:e7:7e:22:99:39:
a5:b1:40:ae:b2:78:8a:10:db:89:2b:41:f8:1d:d6:
1d:e0:13:ec:4d:88:c2:ba:9e:72:b0:e4:94:cc:d4:
15:57:8f:7a:0c:3f:00:0f:a9:3d:4a:3e:83:bd:cb:
76:8b:4a:18:c6:7e:58:a7:93:76:d6:25:e7:96:3d:
c8:85:24:69:5c:72:98:5d:55:65:e1:cd:71:98:2a:
6b:34:b1:e5:be:df:e1:73:af:cb:ef:60:61:60:9b:
99:7b:e3:07:0f:5c:5b:26:cc:59:3d:8e:7d:b7:37:
34:cf:2d:78:61:9f:52:bc:64:94:0a:7b:6a:5a:ac:
3f:c1:d4:4c:40:69:24:ca:3c:bc:a6:e8:48:91:39:
25:f7:57:2b:9a:47:a1:29:da:ed:b8:13:b0:9e:b8:
59:2e:db:d7:84:64:18:1a:ea:4e:d6:42:5d:7b:2d:
95:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:CE:1E:79:3C:D7:EC:59:99:FD:90:7C:08:48:D2:84:13:93:B0:46
X509v3 Authority Key Identifier:
keyid:B4:F4:96:98:D0:8E:8C:28:3C:0D:F2:A8:2F:16:99:7E:62:59:BA:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tPSWmNCOjCg8DfKoLxaZfmJZurY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/f63d76-2fb6-43a2-bfec-9f7aa094303b/1/tPSWmNCOjCg8DfKoLxaZfmJZurY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/f63d76-2fb6-43a2-bfec-9f7aa094303b/1/tPSWmNCOjCg8DfKoLxaZfmJZurY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:a7:0c:1d:d7:83:67:4e:04:3c:50:c6:49:73:a2:e3:3d:8c:
7a:54:7a:a5:c4:4e:a2:7f:bd:20:9e:34:af:e0:4c:a2:6b:3c:
2e:b8:4c:72:55:2d:23:bc:8c:2a:84:ca:20:a9:53:8f:a6:ee:
b5:66:05:b2:dd:3b:b7:8e:8b:98:78:4b:a6:43:93:85:77:64:
d0:98:9d:26:a6:b1:86:bd:2c:12:db:ae:d9:9c:78:48:25:07:
97:bc:05:bf:57:73:ab:64:e5:2f:0a:de:0a:56:ad:63:ef:78:
56:c3:07:7c:64:06:06:f1:7b:44:84:38:b0:d3:4e:b3:78:4f:
16:25:6e:21:ce:19:be:83:57:66:f5:17:a4:11:6e:ce:98:d9:
7e:d9:41:fb:24:b6:2f:e1:87:70:22:e9:8a:d0:3a:00:04:27:
2d:a1:bc:12:11:48:51:f6:16:f1:cf:a4:ef:78:86:82:60:ba:
a9:3e:ad:e5:01:a4:05:7d:02:ee:a0:97:dd:46:46:51:4c:64:
7b:1e:7d:f1:a5:d7:9d:d2:0c:c5:a9:6a:71:54:bd:20:24:a4:
94:53:2d:5b:1d:80:62:7d:dc:15:07:6f:40:88:6f:b0:8a:ed:
d5:9c:27:1d:94:06:d5:2f:a3:db:60:2d:65:2c:29:6c:e7:25:
9a:83:41:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:27:39 2025 by rpki-client