Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/d6ba8d-150e-450e-849c-f38fa0e71d99/1/Tp9S_VUGkr5-7Bkvw-0jJ_Wi-as.mft
File: Tp9S_VUGkr5-7Bkvw-0jJ_Wi-as.mft (raw, json)
Hash identifier: LQuno+SwKVlTVaiHOfmxYlDXuYmUuLXXbqlRD9OqWpg=
Subject key identifier: D7:C8:76:FA:02:FD:14:C7:16:36:14:84:40:D0:17:FC:EE:EF:E4:34
Authority key identifier: 4E:9F:52:FD:55:06:92:BE:7E:EC:19:2F:C3:ED:23:27:F5:A2:F9:AB
Certificate issuer: /CN=4e9f52fd550692be7eec192fc3ed2327f5a2f9ab
Certificate serial: 0199FD6B3A2D03AB766B5F2C43BA7DA011BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tp9S_VUGkr5-7Bkvw-0jJ_Wi-as.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/d6ba8d-150e-450e-849c-f38fa0e71d99/1/Tp9S_VUGkr5-7Bkvw-0jJ_Wi-as.mft
Manifest number: 039E
Signing time: Sun 19 Oct 2025 17:01:26 +0000
Manifest this update: Sun 19 Oct 2025 17:01:26 +0000
Manifest next update: Mon 20 Oct 2025 17:01:26 +0000
Files and hashes: 1: 1-KGFkp6-58CAfMM59AAzTBwEK5A.roa (hash: LpeybfjrfgjM/OjVBSR68hbsEhIa7z+y+IoR5F/Kfmc=)
2: Tp9S_VUGkr5-7Bkvw-0jJ_Wi-as.crl (hash: pzXiVXH5FMJDpXNLUr/LEIRK0n4xiwgP9s6beQ80D44=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/d6ba8d-150e-450e-849c-f38fa0e71d99/1/Tp9S_VUGkr5-7Bkvw-0jJ_Wi-as.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/d6ba8d-150e-450e-849c-f38fa0e71d99/1/Tp9S_VUGkr5-7Bkvw-0jJ_Wi-as.mft
rsync://rpki.ripe.net/repository/DEFAULT/Tp9S_VUGkr5-7Bkvw-0jJ_Wi-as.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:6b:3a:2d:03:ab:76:6b:5f:2c:43:ba:7d:a0:11:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e9f52fd550692be7eec192fc3ed2327f5a2f9ab
Validity
Not Before: Oct 19 17:01:26 2025 GMT
Not After : Oct 20 17:01:26 2025 GMT
Subject: CN=d7c876fa02fd14c71636148440d017fceeefe434
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:98:d0:2b:00:60:82:70:2d:c6:33:10:07:7a:
8f:80:20:c2:31:5b:69:f3:2f:67:18:d7:a2:3e:c4:
5a:75:e2:b2:6a:27:48:8c:f0:a5:2a:00:2c:ae:2f:
1d:26:3c:ce:b0:10:a1:23:61:ed:e6:f1:dc:9e:d4:
bf:93:ad:d0:51:42:cc:13:01:44:7e:84:b1:7f:9e:
da:1e:9e:2a:ec:dd:a8:4a:9a:f0:2f:1c:64:57:06:
b6:81:95:47:9f:09:bd:6a:8a:ea:46:a2:f5:5d:d0:
90:66:4a:fa:ff:31:c1:ec:b7:70:60:0d:09:0d:11:
d6:4d:80:96:6d:35:11:2a:e1:ae:b8:85:f7:92:1b:
14:a4:19:9c:43:90:17:00:fc:ce:f1:db:10:f8:95:
06:3f:af:42:99:99:92:70:2e:35:a8:f5:60:a1:b6:
ac:86:9e:09:6c:c7:cb:5c:79:8c:4a:d6:c0:08:9e:
34:10:70:ad:db:97:3d:27:c8:44:de:9a:8f:cb:f5:
99:fd:cd:d0:7e:16:32:1d:fd:6d:ae:7e:9c:05:01:
8c:51:f7:23:7a:af:87:39:12:f6:07:cb:81:ae:85:
48:69:f2:96:0e:2a:59:c5:2b:b9:16:5c:56:58:ae:
a9:8e:a5:4b:4e:91:86:0f:0b:aa:c4:ba:86:80:d6:
23:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:C8:76:FA:02:FD:14:C7:16:36:14:84:40:D0:17:FC:EE:EF:E4:34
X509v3 Authority Key Identifier:
keyid:4E:9F:52:FD:55:06:92:BE:7E:EC:19:2F:C3:ED:23:27:F5:A2:F9:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tp9S_VUGkr5-7Bkvw-0jJ_Wi-as.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/d6ba8d-150e-450e-849c-f38fa0e71d99/1/Tp9S_VUGkr5-7Bkvw-0jJ_Wi-as.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/d6ba8d-150e-450e-849c-f38fa0e71d99/1/Tp9S_VUGkr5-7Bkvw-0jJ_Wi-as.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:3b:08:c6:cb:cc:51:8c:54:28:65:34:36:b0:60:46:b9:70:
a4:65:e4:cc:ab:52:20:9e:ff:d7:5b:8d:54:c0:fd:13:98:ca:
0a:c2:e9:40:7c:32:77:25:c6:d4:fb:00:fa:b7:ee:90:5c:0c:
84:0a:eb:27:3f:43:b5:19:96:ed:2b:e9:4e:5d:44:b2:05:dd:
b2:30:4a:12:13:c8:a4:f0:ce:e1:3b:f9:f2:e6:7e:9e:c3:c1:
d3:56:a7:45:81:b8:b4:3b:c6:11:19:20:f3:b3:07:ba:30:5d:
12:2c:99:cd:17:2a:65:90:1c:34:a4:b8:97:a8:30:46:9b:9f:
b8:cd:73:6b:4a:6e:d8:de:e4:a7:75:71:ec:1f:1c:f4:67:aa:
47:8f:99:76:ec:19:85:aa:58:a1:6c:f7:87:57:d2:96:29:15:
0f:31:9d:42:ae:55:86:84:0b:e7:2a:bf:21:67:7a:3b:dc:9f:
a3:6d:72:cc:8b:7f:d4:fd:3c:4a:52:2c:33:a6:86:eb:f2:d2:
09:f3:d1:f7:62:35:05:d3:92:b7:57:ae:10:18:e5:b2:7d:4d:
e3:4b:d9:14:ab:02:a0:70:62:a0:56:d2:e5:65:d9:0f:3a:4f:
72:be:4c:93:87:48:37:0c:ce:78:1d:8d:c9:5f:99:e3:59:38:
9d:80:81:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 22:31:18 2025 by rpki-client