Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/67d57e-f3de-4d10-bd9d-87a10bc68a37/1/tBErtZsGJ9ojr5DA8FhLcbUPd48.mft
File: tBErtZsGJ9ojr5DA8FhLcbUPd48.mft (raw, json)
Hash identifier: yAN/yOxZeHihaUSIzTsJTl3mNKmtXnDD4PAo5Gv/up4=
Subject key identifier: 5D:12:4C:52:78:6F:EB:A0:ED:C6:F3:DA:F9:4C:B7:87:C0:15:B8:49
Authority key identifier: B4:11:2B:B5:9B:06:27:DA:23:AF:90:C0:F0:58:4B:71:B5:0F:77:8F
Certificate issuer: /CN=b4112bb59b0627da23af90c0f0584b71b50f778f
Certificate serial: 0199FD6AE8481205B579BC51940F27838BC0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tBErtZsGJ9ojr5DA8FhLcbUPd48.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/67d57e-f3de-4d10-bd9d-87a10bc68a37/1/tBErtZsGJ9ojr5DA8FhLcbUPd48.mft
Manifest number: 1674
Signing time: Sun 19 Oct 2025 17:01:05 +0000
Manifest this update: Sun 19 Oct 2025 17:01:05 +0000
Manifest next update: Mon 20 Oct 2025 17:01:05 +0000
Files and hashes: 1: RRFPoj_D2514uvr1pJ51Asozslw.roa (hash: EUwe8zILfT5h0ET/pLOGX/O1GKfRNQcxkScAvJ+rEAs=)
2: tBErtZsGJ9ojr5DA8FhLcbUPd48.crl (hash: JfYRIm6N+LE8hQPSNJTsvGoB7rJLPqqkgRRirRhwj34=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/67d57e-f3de-4d10-bd9d-87a10bc68a37/1/tBErtZsGJ9ojr5DA8FhLcbUPd48.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/67d57e-f3de-4d10-bd9d-87a10bc68a37/1/tBErtZsGJ9ojr5DA8FhLcbUPd48.mft
rsync://rpki.ripe.net/repository/DEFAULT/tBErtZsGJ9ojr5DA8FhLcbUPd48.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:6a:e8:48:12:05:b5:79:bc:51:94:0f:27:83:8b:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4112bb59b0627da23af90c0f0584b71b50f778f
Validity
Not Before: Oct 19 17:01:05 2025 GMT
Not After : Oct 20 17:01:05 2025 GMT
Subject: CN=5d124c52786feba0edc6f3daf94cb787c015b849
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:9d:db:bf:ec:7d:65:52:b9:1b:82:b9:ab:49:
3b:a9:fc:5c:ff:42:1b:39:79:ec:09:ea:b9:7a:b4:
fd:fa:4c:74:28:6c:3b:e2:f7:93:fc:83:1c:a3:e1:
8d:b6:71:e1:b3:bb:06:e1:8d:d2:82:c8:08:be:54:
fe:5a:8a:d4:5e:8a:54:a5:d9:71:6b:47:dd:e4:9b:
da:a4:3a:56:ad:3d:e9:09:67:9a:aa:e8:f6:b8:47:
87:eb:e7:e2:86:b2:07:c6:57:21:58:3d:67:c1:71:
5b:7b:7c:11:ba:ec:93:ef:04:f3:8e:52:eb:1d:d7:
bb:e2:48:37:50:c5:6d:0a:68:fa:28:d4:2e:5a:e4:
7b:13:c8:b7:d2:34:c5:41:9f:92:99:14:30:be:99:
1f:e1:4e:ce:85:88:6a:78:ba:b1:19:ae:15:54:a7:
a9:dc:ab:fe:53:7a:82:30:5a:53:41:51:88:46:47:
28:fb:de:33:17:d3:11:3a:c3:1e:02:36:e5:25:1c:
4a:43:7d:70:d5:86:93:b8:13:c9:53:c5:4a:a0:0d:
b7:96:0b:4a:74:95:a1:9a:da:ca:11:bc:7b:d2:64:
01:14:9a:84:79:82:be:7b:7b:1e:26:21:d5:fc:1b:
45:3e:a1:bb:aa:63:73:03:1f:68:7a:a5:04:3a:2f:
c1:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:12:4C:52:78:6F:EB:A0:ED:C6:F3:DA:F9:4C:B7:87:C0:15:B8:49
X509v3 Authority Key Identifier:
keyid:B4:11:2B:B5:9B:06:27:DA:23:AF:90:C0:F0:58:4B:71:B5:0F:77:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tBErtZsGJ9ojr5DA8FhLcbUPd48.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/67d57e-f3de-4d10-bd9d-87a10bc68a37/1/tBErtZsGJ9ojr5DA8FhLcbUPd48.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/67d57e-f3de-4d10-bd9d-87a10bc68a37/1/tBErtZsGJ9ojr5DA8FhLcbUPd48.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:c1:c5:ad:15:0a:a2:83:5f:9e:4d:e2:af:63:ab:ba:73:82:
70:0b:d6:8b:66:70:59:9d:49:0a:e6:38:7a:68:e9:92:9c:87:
38:35:82:74:27:48:1d:ef:75:81:bf:53:7d:d1:5f:b9:ac:b3:
c5:00:63:43:6f:1a:73:77:d7:e4:3b:63:27:f4:c1:c0:ab:98:
2c:45:38:50:f4:ea:40:ab:d7:65:70:da:5d:f4:5f:3b:a0:49:
eb:b8:cc:9c:07:24:90:2f:5f:4e:92:10:0f:08:2f:7c:00:72:
b3:8a:52:1e:8f:8b:06:bf:f6:ff:f3:32:a5:22:85:98:60:d6:
12:eb:a3:68:d7:0a:d2:5a:ab:a6:f2:79:6f:e0:7f:b4:9c:9e:
2d:88:64:63:bb:c2:a9:1f:6b:0d:9d:9c:78:1f:c7:74:e0:4d:
8a:d5:be:58:d7:60:bd:50:dd:ae:6a:1b:7f:46:ab:ab:5a:ff:
c5:ab:a8:8b:78:75:f8:f2:a5:fd:98:a8:7e:53:6d:c0:f7:1a:
4d:0f:c4:71:d3:8d:4d:e1:62:1b:2b:cf:8d:55:97:6d:2b:18:
db:56:4c:91:a3:72:c9:34:00:c4:08:09:60:d1:82:64:76:f5:
d9:07:b7:2e:a5:67:11:da:19:9f:d9:c0:fc:6e:1b:ac:46:26:
1b:07:d5:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:07:18 2025 by rpki-client