Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/ba1be3-796e-45c8-8b76-c700ea03c227/1/tXq3GLSss6Z5xduPzucpTta-K9A.mft
File: tXq3GLSss6Z5xduPzucpTta-K9A.mft (raw, json)
Hash identifier: qfl5gLh9pUmOE+2MBzfDlKDBnZtRr84NHkvZH7UvMFw=
Subject key identifier: CD:51:D2:EA:CE:7B:AE:C6:E7:C5:DD:2A:49:A3:C4:CC:6D:01:9E:A7
Authority key identifier: B5:7A:B7:18:B4:AC:B3:A6:79:C5:DB:8F:CE:E7:29:4E:D6:BE:2B:D0
Certificate issuer: /CN=b57ab718b4acb3a679c5db8fcee7294ed6be2bd0
Certificate serial: 0199FD6B316145AF50A6272826F42507D5D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tXq3GLSss6Z5xduPzucpTta-K9A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/ba1be3-796e-45c8-8b76-c700ea03c227/1/tXq3GLSss6Z5xduPzucpTta-K9A.mft
Manifest number: 16E3
Signing time: Sun 19 Oct 2025 17:01:24 +0000
Manifest this update: Sun 19 Oct 2025 17:01:24 +0000
Manifest next update: Mon 20 Oct 2025 17:01:24 +0000
Files and hashes: 1: 7kCB1J_rNDVtgNFDQBz-ZFXo6aA.roa (hash: j6xn4MHIGZVJXA81hfabdadaay1xFRv4GfnwCa5VtAQ=)
2: tXq3GLSss6Z5xduPzucpTta-K9A.crl (hash: qFi5GfNQ7kYpeWTAVbR08Xz4Im8y6WE144xusih5AbQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/ba1be3-796e-45c8-8b76-c700ea03c227/1/tXq3GLSss6Z5xduPzucpTta-K9A.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/ba1be3-796e-45c8-8b76-c700ea03c227/1/tXq3GLSss6Z5xduPzucpTta-K9A.mft
rsync://rpki.ripe.net/repository/DEFAULT/tXq3GLSss6Z5xduPzucpTta-K9A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 17:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:6b:31:61:45:af:50:a6:27:28:26:f4:25:07:d5:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b57ab718b4acb3a679c5db8fcee7294ed6be2bd0
Validity
Not Before: Oct 19 17:01:24 2025 GMT
Not After : Oct 20 17:01:24 2025 GMT
Subject: CN=cd51d2eace7baec6e7c5dd2a49a3c4cc6d019ea7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:34:19:b1:d3:45:26:5d:02:ac:ec:5d:e8:06:
5b:28:a2:b7:e6:37:9a:1c:b6:78:9a:83:d7:9c:ee:
0b:c4:14:97:ce:fd:4a:57:27:2d:19:69:df:c5:43:
d2:a0:ea:34:18:42:8d:63:0d:13:b8:ad:5d:2b:ea:
b2:ec:d4:9c:2f:7e:a5:5a:cd:99:c4:db:86:91:0d:
42:95:f3:cc:ce:34:3c:93:0e:87:04:94:ed:b0:8f:
8c:f8:34:01:eb:64:ee:84:c8:39:a8:cd:58:58:c2:
13:37:e7:99:4f:14:5b:21:99:0a:a2:a1:19:6e:90:
7d:da:61:8f:03:60:48:6c:be:50:0e:32:a9:e4:4c:
9e:18:b8:ce:0b:9a:d8:18:34:85:4a:6f:cc:1d:16:
62:a8:8e:25:80:39:32:f6:d9:ef:71:b4:2c:f2:09:
5d:c1:cd:6a:ad:95:a3:6e:0e:f3:a9:cd:d8:20:33:
af:e9:8c:74:ff:64:66:c9:ad:fb:e4:05:f2:7c:5b:
bf:ef:32:72:6a:67:77:ca:6c:dc:50:b7:5e:8c:6f:
3f:0b:d6:6c:46:c9:31:f5:3e:37:3c:57:13:b2:9a:
5c:14:5d:fa:9b:9e:18:79:96:23:0e:b0:1f:82:b6:
c3:61:2b:16:d3:6a:39:a7:d3:72:95:f3:a7:9a:b9:
15:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:51:D2:EA:CE:7B:AE:C6:E7:C5:DD:2A:49:A3:C4:CC:6D:01:9E:A7
X509v3 Authority Key Identifier:
keyid:B5:7A:B7:18:B4:AC:B3:A6:79:C5:DB:8F:CE:E7:29:4E:D6:BE:2B:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tXq3GLSss6Z5xduPzucpTta-K9A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/ba1be3-796e-45c8-8b76-c700ea03c227/1/tXq3GLSss6Z5xduPzucpTta-K9A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/ba1be3-796e-45c8-8b76-c700ea03c227/1/tXq3GLSss6Z5xduPzucpTta-K9A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:d3:d5:5c:2a:47:30:a8:04:63:f9:c6:1e:3f:ff:d9:4c:a6:
1a:45:97:e6:db:92:e9:64:a3:b2:26:6f:24:49:90:e2:2a:c7:
34:f4:7f:7d:89:be:a8:ce:82:1f:c2:e9:00:20:9f:6f:05:9a:
5f:bd:28:86:50:00:11:e2:ae:b4:aa:21:78:6a:8d:35:d9:03:
2e:7e:96:ef:83:24:bc:92:aa:8c:de:d3:76:72:b5:7f:50:2d:
47:be:bf:e1:83:65:f6:89:cb:93:7f:12:0c:8c:96:45:c0:6f:
81:52:88:7b:98:95:a3:fa:48:8a:75:4a:56:6a:d7:3e:7f:4a:
08:5c:f0:77:19:5d:7c:60:70:8c:c4:0b:e5:84:b7:6c:f9:be:
3a:dc:02:35:dd:d6:c2:43:e2:b7:96:06:47:00:65:36:48:68:
c2:89:b6:7b:48:ff:7a:a5:b0:00:41:13:66:1e:4a:6e:11:d4:
e1:9b:da:e7:23:9c:2b:9b:08:a5:18:95:a5:1f:9d:2d:99:28:
38:94:d1:e7:fc:41:23:ca:4d:1d:e5:98:91:0e:7a:de:a4:bf:
e9:fa:8a:f9:86:94:b5:ff:b3:1b:6f:50:57:9f:0e:ec:ee:ea:
fa:8b:b1:04:09:c3:c9:ea:33:f4:29:c8:e9:db:9c:ee:1e:f8:
5e:81:de:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:37:19 2025 by rpki-client