Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/b8e773-4e71-4d09-b74a-b27f552672e0/1/TjwBugxcvyCuPpPKPTeeYt9clZo.mft
File: TjwBugxcvyCuPpPKPTeeYt9clZo.mft (raw, json)
Hash identifier: Lif2mzP/OAyk+drkfrpd9M4UfC5YRGkJLqKk1rGNiLA=
Subject key identifier: BB:29:A0:16:0C:92:03:1A:92:BE:89:F6:35:F1:54:26:4B:B8:E2:1C
Authority key identifier: 4E:3C:01:BA:0C:5C:BF:20:AE:3E:93:CA:3D:37:9E:62:DF:5C:95:9A
Certificate issuer: /CN=4e3c01ba0c5cbf20ae3e93ca3d379e62df5c959a
Certificate serial: 0199FC8F7D71188EF6D7A4A81D8B21DC5307
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TjwBugxcvyCuPpPKPTeeYt9clZo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/b8e773-4e71-4d09-b74a-b27f552672e0/1/TjwBugxcvyCuPpPKPTeeYt9clZo.mft
Manifest number: 16E2
Signing time: Sun 19 Oct 2025 13:01:26 +0000
Manifest this update: Sun 19 Oct 2025 13:01:26 +0000
Manifest next update: Mon 20 Oct 2025 13:01:26 +0000
Files and hashes: 1: NYiqXRmP7nBBaBEa9iT79WYJ0gs.roa (hash: UqGys13kNv1mtJhLUKGkAEs9pExc7CtEz6E2KnEqZvM=)
2: TjwBugxcvyCuPpPKPTeeYt9clZo.crl (hash: 7tRERycXttuaSMIPGimY6/m/eZikKK3cwyb/rVVETp8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/b8e773-4e71-4d09-b74a-b27f552672e0/1/TjwBugxcvyCuPpPKPTeeYt9clZo.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/b8e773-4e71-4d09-b74a-b27f552672e0/1/TjwBugxcvyCuPpPKPTeeYt9clZo.mft
rsync://rpki.ripe.net/repository/DEFAULT/TjwBugxcvyCuPpPKPTeeYt9clZo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:7d:71:18:8e:f6:d7:a4:a8:1d:8b:21:dc:53:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e3c01ba0c5cbf20ae3e93ca3d379e62df5c959a
Validity
Not Before: Oct 19 13:01:26 2025 GMT
Not After : Oct 20 13:01:26 2025 GMT
Subject: CN=bb29a0160c92031a92be89f635f154264bb8e21c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:67:7e:b1:85:02:47:20:2a:7c:0e:17:3e:fb:
2b:54:85:7b:8e:ef:b3:01:d1:5a:9b:47:66:d2:9c:
7f:6a:56:76:48:1c:5a:38:8c:51:a6:cf:a0:1b:b1:
de:f9:17:88:9d:da:ed:2f:c6:e8:9a:26:ea:89:99:
a1:e6:d5:05:e1:83:7e:ac:9b:06:77:e1:bd:22:80:
59:d3:0b:16:51:d7:fb:a6:61:dc:9b:42:74:a8:be:
af:18:7a:cf:da:83:f6:3b:90:2b:d4:b9:59:dd:b9:
79:e3:5b:5d:21:4e:fd:38:55:9d:83:8a:04:59:fe:
88:0e:52:16:5d:d5:39:3a:92:a7:51:ef:9f:b4:ba:
b3:c2:af:b5:33:76:07:2d:68:e8:9e:16:92:fb:43:
e3:eb:d8:86:c8:73:5b:07:f5:52:6c:6f:6b:84:70:
6f:cc:fb:2f:95:52:6b:c5:4a:11:f3:7b:cb:da:1b:
fb:ba:d4:9b:80:d2:a7:e3:4a:34:71:25:a8:c1:38:
de:3b:89:14:1c:a7:8e:cf:f6:72:be:be:38:89:e3:
2a:41:2c:3a:03:f0:f5:08:ac:70:c3:59:4d:5f:c4:
eb:83:3a:02:49:63:43:d2:d6:4c:3f:e2:8b:04:97:
12:bf:aa:f4:3f:f8:68:5a:f2:a7:69:fe:f6:2f:55:
68:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:29:A0:16:0C:92:03:1A:92:BE:89:F6:35:F1:54:26:4B:B8:E2:1C
X509v3 Authority Key Identifier:
keyid:4E:3C:01:BA:0C:5C:BF:20:AE:3E:93:CA:3D:37:9E:62:DF:5C:95:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TjwBugxcvyCuPpPKPTeeYt9clZo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/b8e773-4e71-4d09-b74a-b27f552672e0/1/TjwBugxcvyCuPpPKPTeeYt9clZo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/b8e773-4e71-4d09-b74a-b27f552672e0/1/TjwBugxcvyCuPpPKPTeeYt9clZo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:d4:c4:1c:7b:4b:8e:60:e3:9b:9d:21:16:ba:90:83:33:03:
83:94:a3:ae:37:1e:30:f2:ef:81:88:71:18:55:42:25:52:9c:
69:a2:80:21:2f:4d:3a:25:e8:67:a5:da:37:3a:03:6d:c0:bb:
4c:55:ab:09:a1:58:cb:09:bc:62:c4:9f:93:15:38:2c:d3:c5:
00:07:d0:79:e2:b6:eb:df:2d:d9:0b:04:f3:3f:6d:23:5a:5b:
43:2c:0a:06:3c:7d:03:b8:1a:df:57:c2:b3:d0:40:6c:93:ae:
6e:01:ce:1e:7c:d8:85:0c:70:e2:47:13:6a:c9:7c:bd:ce:4e:
e4:b1:6c:6c:e4:1a:5f:04:66:4c:55:fe:7f:61:4c:b6:c9:00:
3d:0e:cc:29:42:8b:92:1f:50:8a:0a:16:6e:2f:6a:80:f2:7c:
03:56:33:91:dc:c9:f8:89:e1:8e:bb:15:97:7f:72:2e:48:9e:
96:77:08:9a:c6:14:67:cb:88:8a:c3:fe:2b:8c:58:49:01:e5:
d8:f0:a4:e9:f6:86:46:52:31:0f:53:9f:d6:5e:17:0f:f9:ff:
85:54:42:7b:93:19:f4:32:a9:47:e0:4a:7e:33:18:85:04:51:
8b:eb:48:6f:32:ac:5e:f8:84:af:05:0d:d6:1a:66:27:8a:e0:
57:3d:1a:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:08:13 2025 by rpki-client