Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/1e1ac6-fcd6-4ae8-ad77-51e4bba6bf5b/1/Ty87yZp5UD4JdXR36O9kPhGIbIs.mft
File: Ty87yZp5UD4JdXR36O9kPhGIbIs.mft (raw, json)
Hash identifier: /yvB8mWgvJsKbW3GHJyPla6IMEihVWCD5cHJfdlivP8=
Subject key identifier: E1:55:7F:19:17:33:46:84:21:D8:CF:E9:0A:F2:97:55:DE:25:DD:D8
Authority key identifier: 4F:2F:3B:C9:9A:79:50:3E:09:75:74:77:E8:EF:64:3E:11:88:6C:8B
Certificate issuer: /CN=4f2f3bc99a79503e09757477e8ef643e11886c8b
Certificate serial: 0199FBEA7D1B695F174BEDC8215D1982C574
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ty87yZp5UD4JdXR36O9kPhGIbIs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/1e1ac6-fcd6-4ae8-ad77-51e4bba6bf5b/1/Ty87yZp5UD4JdXR36O9kPhGIbIs.mft
Manifest number: 1593
Signing time: Sun 19 Oct 2025 10:01:12 +0000
Manifest this update: Sun 19 Oct 2025 10:01:12 +0000
Manifest next update: Mon 20 Oct 2025 10:01:12 +0000
Files and hashes: 1: DmY4OlpSGtRwQGNkVI6pwwKmQOM.roa (hash: QsmPHxvFnUbBb8Hdz5mPLnRJfO8cxjGYjuC9mmKC/hY=)
2: Ty87yZp5UD4JdXR36O9kPhGIbIs.crl (hash: b5C8BGGiWdupvc9BLjy6CyiFR0deT7Wg4kcsucNOILc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/1e1ac6-fcd6-4ae8-ad77-51e4bba6bf5b/1/Ty87yZp5UD4JdXR36O9kPhGIbIs.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/1e1ac6-fcd6-4ae8-ad77-51e4bba6bf5b/1/Ty87yZp5UD4JdXR36O9kPhGIbIs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ty87yZp5UD4JdXR36O9kPhGIbIs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ea:7d:1b:69:5f:17:4b:ed:c8:21:5d:19:82:c5:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f2f3bc99a79503e09757477e8ef643e11886c8b
Validity
Not Before: Oct 19 10:01:12 2025 GMT
Not After : Oct 20 10:01:12 2025 GMT
Subject: CN=e1557f191733468421d8cfe90af29755de25ddd8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:28:05:fe:7c:45:46:a4:f1:1e:d6:a6:c2:c4:
12:31:0f:b3:d5:d4:87:29:3f:25:7a:ee:b9:3e:a6:
d5:33:76:5b:5b:88:2e:31:24:2e:d5:ef:6e:93:02:
b8:4b:9f:c9:0c:d7:2c:ff:25:40:35:cf:f8:f4:81:
27:eb:ad:c8:f4:41:86:fa:a1:5e:b2:8e:33:c7:74:
df:d2:30:e8:94:d4:77:26:d2:83:fb:b6:0e:f8:f6:
58:40:00:83:d6:07:aa:fa:ef:5e:33:00:89:73:21:
f3:0c:d7:ef:ad:dc:0b:e8:82:84:36:40:0a:ee:ce:
4d:e1:9c:1c:16:e4:1d:32:4a:89:6e:6d:41:ce:b4:
35:f6:a6:58:04:bd:40:1d:66:ed:c1:fc:40:e5:c8:
09:04:41:02:48:72:47:c4:54:84:77:2f:3b:76:7b:
f6:90:93:73:53:76:fa:fe:65:8b:66:28:02:f4:1c:
03:8d:9b:2a:8e:7e:12:00:2d:9c:38:4d:13:e9:03:
d1:a4:3c:6d:17:0a:31:6e:3a:e1:17:82:18:31:43:
22:1a:ac:bc:2e:32:46:f8:61:02:df:c4:ff:0c:3b:
84:9d:7e:52:31:2b:cc:e2:f6:a1:65:2e:72:bb:7c:
c1:c2:e5:7b:d4:3b:ec:c7:dd:13:c7:78:b6:c9:96:
6d:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:55:7F:19:17:33:46:84:21:D8:CF:E9:0A:F2:97:55:DE:25:DD:D8
X509v3 Authority Key Identifier:
keyid:4F:2F:3B:C9:9A:79:50:3E:09:75:74:77:E8:EF:64:3E:11:88:6C:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ty87yZp5UD4JdXR36O9kPhGIbIs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/1e1ac6-fcd6-4ae8-ad77-51e4bba6bf5b/1/Ty87yZp5UD4JdXR36O9kPhGIbIs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/1e1ac6-fcd6-4ae8-ad77-51e4bba6bf5b/1/Ty87yZp5UD4JdXR36O9kPhGIbIs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:68:1d:ff:66:b8:ab:d8:35:5b:b2:32:8e:10:72:c6:a8:66:
8b:72:7b:2d:af:f8:fe:83:31:68:94:2b:aa:e7:d8:d6:27:f5:
25:bb:21:a3:e7:70:c7:11:1b:8f:29:8e:c9:fd:5b:c3:56:ec:
65:d5:79:d0:90:c6:84:9e:db:57:47:fc:bf:05:e0:7c:ce:2d:
d9:21:f7:ec:44:69:19:ab:9a:d3:ba:15:43:4c:25:f5:cc:b3:
a1:49:e0:2a:96:bc:77:24:b9:11:6d:a1:ec:5b:a8:89:08:d5:
9e:fa:e6:35:30:58:7c:d5:13:c1:9e:e8:1a:4a:02:c7:6f:14:
ff:1e:5a:cb:93:18:3e:a4:c7:89:89:18:64:76:2c:6d:96:88:
eb:1b:d5:bc:f4:e6:a2:70:b2:92:b4:79:1b:c5:7a:bc:03:5c:
cf:02:5b:44:a3:c0:2e:4c:63:f3:94:5e:b4:63:55:ab:64:a2:
cd:71:70:ba:11:82:f9:f1:0f:0d:ce:e9:5d:db:3d:8e:42:d6:
f8:f1:a0:35:92:11:d1:1c:ee:2f:76:15:4c:fa:a8:b4:b3:28:
37:7c:fc:b2:68:c3:aa:f4:57:44:70:d5:fd:e9:9b:45:92:f2:
be:26:b8:98:3b:ed:cc:4e:34:a8:6a:5c:42:84:61:ea:7b:ee:
f8:2e:8d:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:47:57 2025 by rpki-client