Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/2a6eaa-e437-43bc-972e-3e3bfaa190df/1/TcvvBq0F_W5ufnsQhMsdfWXmQm8.mft
File: TcvvBq0F_W5ufnsQhMsdfWXmQm8.mft (raw, json)
Hash identifier: eu59IdhOdGbF5M3tFri8Ga7DyS+sNGNd0h6QXB1zon8=
Subject key identifier: 68:0D:8E:13:EB:6B:00:F1:64:96:D3:B1:13:B4:33:7A:CF:4B:30:D0
Authority key identifier: 4D:CB:EF:06:AD:05:FD:6E:6E:7E:7B:10:84:CB:1D:7D:65:E6:42:6F
Certificate issuer: /CN=4dcbef06ad05fd6e6e7e7b1084cb1d7d65e6426f
Certificate serial: 0199FF595D84716CCF07EC15650DEA12E3F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TcvvBq0F_W5ufnsQhMsdfWXmQm8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/2a6eaa-e437-43bc-972e-3e3bfaa190df/1/TcvvBq0F_W5ufnsQhMsdfWXmQm8.mft
Manifest number: 10FE
Signing time: Mon 20 Oct 2025 02:01:10 +0000
Manifest this update: Mon 20 Oct 2025 02:01:10 +0000
Manifest next update: Tue 21 Oct 2025 02:01:10 +0000
Files and hashes: 1: TcvvBq0F_W5ufnsQhMsdfWXmQm8.crl (hash: 9jewjRvCXWt3RHob3TmGvmo6Y5k6lII4z9vYrh+fzb8=)
2: WDEZ3ZaDac1rHXOITo0Y0_gA1WA.roa (hash: 2eqZynI8QAeqviBK64M0ctiXcb1WfCdmlsqvsre2oAM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/2a6eaa-e437-43bc-972e-3e3bfaa190df/1/TcvvBq0F_W5ufnsQhMsdfWXmQm8.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/2a6eaa-e437-43bc-972e-3e3bfaa190df/1/TcvvBq0F_W5ufnsQhMsdfWXmQm8.mft
rsync://rpki.ripe.net/repository/DEFAULT/TcvvBq0F_W5ufnsQhMsdfWXmQm8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:59:5d:84:71:6c:cf:07:ec:15:65:0d:ea:12:e3:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4dcbef06ad05fd6e6e7e7b1084cb1d7d65e6426f
Validity
Not Before: Oct 20 02:01:10 2025 GMT
Not After : Oct 21 02:01:10 2025 GMT
Subject: CN=680d8e13eb6b00f16496d3b113b4337acf4b30d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:73:20:ca:c0:bc:d0:b8:cf:d0:39:03:d5:ae:
70:00:b3:b5:57:42:5c:14:29:74:04:87:75:c6:c6:
ce:c7:0f:bd:2e:53:dd:10:4b:5b:2c:89:71:db:a1:
ee:85:ff:86:47:82:7a:4c:21:5d:d8:2b:d5:df:d7:
b0:72:b3:02:1f:ab:14:9d:88:31:c2:29:98:a7:06:
da:bf:85:66:1e:15:dd:ae:df:78:d4:3c:5f:fa:e4:
d3:d7:94:5c:7f:eb:70:6d:93:66:8d:89:1b:06:fb:
5d:aa:bb:0f:ed:6d:dd:a1:51:db:21:87:a9:1f:32:
32:fa:20:81:ac:4e:5d:1d:75:8a:56:64:dc:cb:c7:
94:a4:77:cf:58:17:80:48:05:44:55:a3:99:56:5b:
ca:33:b6:e4:aa:08:18:13:64:fe:fa:25:a4:71:2a:
b3:9c:47:87:c9:c3:2d:3c:58:83:1c:01:c9:a9:ad:
f4:5b:9d:9f:de:6b:c7:0b:90:c7:a2:02:b1:f4:81:
ff:5d:0c:2b:e4:83:fb:0d:c9:64:91:12:2d:9c:6a:
bf:b2:9e:72:93:a9:df:66:9e:00:1e:f3:43:41:4b:
9b:05:d3:6a:70:3a:22:9b:09:14:52:8d:98:6c:88:
a2:96:62:55:0c:b1:dc:c7:60:87:f1:f8:7d:68:3f:
47:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:0D:8E:13:EB:6B:00:F1:64:96:D3:B1:13:B4:33:7A:CF:4B:30:D0
X509v3 Authority Key Identifier:
keyid:4D:CB:EF:06:AD:05:FD:6E:6E:7E:7B:10:84:CB:1D:7D:65:E6:42:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TcvvBq0F_W5ufnsQhMsdfWXmQm8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/2a6eaa-e437-43bc-972e-3e3bfaa190df/1/TcvvBq0F_W5ufnsQhMsdfWXmQm8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/2a6eaa-e437-43bc-972e-3e3bfaa190df/1/TcvvBq0F_W5ufnsQhMsdfWXmQm8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:b0:97:92:f5:13:78:44:3a:38:62:a1:53:cf:49:3f:4b:40:
5e:5d:94:45:0b:30:0c:07:52:b0:80:62:e7:95:23:35:d1:d4:
42:73:29:a8:0b:26:f4:80:6f:68:50:82:08:d8:9e:2c:68:58:
1f:8a:09:86:eb:c1:af:1a:a8:8a:18:63:e6:e1:30:17:f5:96:
bd:c7:8f:80:0f:f5:c9:8e:0c:30:23:51:44:c8:2e:1f:25:cd:
f7:83:99:21:1c:7c:fa:32:72:23:61:65:b3:f4:bc:2e:5f:bc:
15:ab:e7:ea:0f:a8:ef:60:75:4a:c5:fa:78:0a:69:ca:fe:2a:
c7:09:0b:3a:a4:bb:1e:e7:b4:6e:bd:94:73:7a:48:f7:59:a2:
a7:69:7f:a8:5b:b9:8e:d6:e7:dc:e4:74:74:d8:bb:04:e0:b9:
28:93:2d:d8:e0:f4:9d:60:ae:1a:e1:a3:f3:da:c2:d2:6d:4f:
1b:7f:91:23:b8:a4:b2:ec:b7:c4:44:8f:8f:29:24:e0:a6:e5:
9b:9c:f9:69:e7:6f:f9:51:be:58:df:16:7a:de:af:c6:93:cd:
30:6e:a3:22:4d:c8:42:db:c1:68:90:42:da:af:5d:3e:4b:c3:
f9:35:fe:d8:67:f9:fd:10:64:ec:04:f2:a4:c7:55:0f:b3:e9:
d8:4a:f8:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 04:47:37 2025 by rpki-client