
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/f4f244-8c0c-4564-9c42-af60fd5f06b1/1/tFrdzVeWSPw_YSTlWEee8LB_AYw.mft
File: tFrdzVeWSPw_YSTlWEee8LB_AYw.mft (raw, json)
Hash identifier: hOFIIZbmFkYkT5AavpcWUyg1WYnuWx347Z2Agzz7hZM=
Subject key identifier: 29:6D:7B:03:E7:26:E5:19:80:66:00:FB:5E:F0:D1:47:2A:47:D3:93
Authority key identifier: B4:5A:DD:CD:57:96:48:FC:3F:61:24:E5:58:47:9E:F0:B0:7F:01:8C
Certificate issuer: /CN=b45addcd579648fc3f6124e558479ef0b07f018c
Certificate serial: 0199FB7CBD04985FCF2B0FFCEC2E9F9F4764
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tFrdzVeWSPw_YSTlWEee8LB_AYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/f4f244-8c0c-4564-9c42-af60fd5f06b1/1/tFrdzVeWSPw_YSTlWEee8LB_AYw.mft
Manifest number: 045B
Signing time: Sun 19 Oct 2025 08:01:20 +0000
Manifest this update: Sun 19 Oct 2025 08:01:20 +0000
Manifest next update: Mon 20 Oct 2025 08:01:20 +0000
Files and hashes: 1: j4i_lEr0ea0rf8oMcqwCbevGHbI.roa (hash: m0Ro3O0JJKs4a9J3JyICkVruy1q5dBuVu7UD/uXkWv8=)
2: tFrdzVeWSPw_YSTlWEee8LB_AYw.crl (hash: aiSnCuo/Ec0McDk48E6HADObQNyp7S1nIkHcVTuEQDA=)
3: xw6VI0SfTqgX1Ykal0pt0rqVfPs.roa (hash: +mo5fxF621tUv4Tlvitq33EyXbo2V/p/J1JdJ2mFmTo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/f4f244-8c0c-4564-9c42-af60fd5f06b1/1/tFrdzVeWSPw_YSTlWEee8LB_AYw.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/f4f244-8c0c-4564-9c42-af60fd5f06b1/1/tFrdzVeWSPw_YSTlWEee8LB_AYw.mft
rsync://rpki.ripe.net/repository/DEFAULT/tFrdzVeWSPw_YSTlWEee8LB_AYw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:7c:bd:04:98:5f:cf:2b:0f:fc:ec:2e:9f:9f:47:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b45addcd579648fc3f6124e558479ef0b07f018c
Validity
Not Before: Oct 19 08:01:20 2025 GMT
Not After : Oct 20 08:01:20 2025 GMT
Subject: CN=296d7b03e726e519806600fb5ef0d1472a47d393
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:8f:86:ef:4c:4f:bb:08:a4:69:72:36:86:ed:
c9:36:58:13:9a:b0:44:3e:93:72:26:c4:78:cb:4b:
31:8f:a6:21:d0:30:9f:ba:f1:aa:52:ed:59:01:e8:
ea:b1:4c:08:37:03:31:c5:12:73:9b:be:7a:dd:82:
67:f7:98:7a:d0:ba:2c:92:83:ca:93:95:df:93:db:
8f:0e:50:62:78:51:53:03:6f:23:10:6a:57:9f:54:
46:62:c8:2a:cb:57:84:52:3c:1c:bc:d3:3a:59:e6:
a7:b9:f9:44:ab:4e:84:0a:8a:48:80:ce:bb:65:b2:
d1:ec:db:b3:9a:c6:69:e1:59:5b:7a:5f:e8:8e:10:
df:5d:ff:d9:ef:a4:3c:33:1e:c9:03:a2:cc:29:0f:
b6:95:73:69:7c:44:2a:c4:98:33:3c:26:0a:a9:fb:
e8:12:94:c1:04:24:bc:ec:1f:9c:fb:ea:4b:4c:3b:
ee:78:ef:04:c8:53:8e:36:3d:b5:cb:aa:15:f9:aa:
b0:28:b6:86:28:b4:7b:e7:6f:0a:19:06:17:ca:55:
f0:b5:79:10:62:13:49:83:17:64:43:54:27:e8:bd:
45:e7:29:9a:47:4d:b9:cc:19:0a:d7:b4:52:b6:88:
47:eb:a8:d1:48:a5:ef:72:22:b6:a9:62:1f:d2:5e:
b3:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:6D:7B:03:E7:26:E5:19:80:66:00:FB:5E:F0:D1:47:2A:47:D3:93
X509v3 Authority Key Identifier:
keyid:B4:5A:DD:CD:57:96:48:FC:3F:61:24:E5:58:47:9E:F0:B0:7F:01:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tFrdzVeWSPw_YSTlWEee8LB_AYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/f4f244-8c0c-4564-9c42-af60fd5f06b1/1/tFrdzVeWSPw_YSTlWEee8LB_AYw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/f4f244-8c0c-4564-9c42-af60fd5f06b1/1/tFrdzVeWSPw_YSTlWEee8LB_AYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:25:e8:02:86:46:20:9f:97:6c:0c:2d:67:dd:9e:83:d9:15:
f7:54:83:5e:90:5e:35:92:48:96:83:84:f8:be:7c:55:73:95:
5f:d0:01:c2:70:2c:05:fd:50:93:2c:ed:11:93:7a:07:38:10:
c8:d6:c2:1c:9d:c9:fc:49:22:47:1f:e9:04:1c:5d:85:17:95:
97:39:91:42:69:26:13:5b:b6:63:38:f8:33:05:b5:9e:72:f4:
33:ac:d2:33:b5:7c:09:94:11:be:a6:db:ff:6d:f7:14:f1:bc:
b4:06:bd:6c:17:de:e2:1d:56:52:e8:fc:26:10:11:7c:b0:90:
95:e3:47:e6:de:07:b8:36:68:33:2c:18:48:a9:be:db:80:8c:
08:37:e6:8c:6a:d3:39:83:c3:01:54:10:d2:37:e7:8d:5c:42:
b0:4e:d8:58:64:70:c7:75:f2:c0:bc:92:1e:27:49:02:19:1d:
50:a3:02:98:63:01:24:53:42:e8:51:3c:94:ee:41:f4:1c:85:
72:10:e7:9d:ac:da:cd:44:b3:9b:6a:92:9c:6b:86:7e:2d:be:
fe:72:5e:6b:c9:a1:e0:92:3e:63:8a:e7:84:63:7c:ce:21:4d:
4b:c8:75:de:7b:59:82:53:d3:f6:74:7d:8d:55:a3:14:f6:be:
a7:92:32:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:38:02 2025 by rpki-client