Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/26c7ff-998e-4131-a747-3c43c3d35ef3/1/tI8GPSnpEPAzvstlbouZAfaeyXQ.mft
File: tI8GPSnpEPAzvstlbouZAfaeyXQ.mft (raw, json)
Hash identifier: l5zzVNtaY1ju1mINuCcHA8NCP8Yjx2Gxvqy7N95HOeY=
Subject key identifier: 4B:B6:1A:21:DE:A2:13:2B:EB:64:0D:70:18:25:79:A5:A2:AA:C3:24
Authority key identifier: B4:8F:06:3D:29:E9:10:F0:33:BE:CB:65:6E:8B:99:01:F6:9E:C9:74
Certificate issuer: /CN=b48f063d29e910f033becb656e8b9901f69ec974
Certificate serial: 0199FB7CC26401E6532654763316D20FA238
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tI8GPSnpEPAzvstlbouZAfaeyXQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/26c7ff-998e-4131-a747-3c43c3d35ef3/1/tI8GPSnpEPAzvstlbouZAfaeyXQ.mft
Manifest number: 0FE0
Signing time: Sun 19 Oct 2025 08:01:21 +0000
Manifest this update: Sun 19 Oct 2025 08:01:21 +0000
Manifest next update: Mon 20 Oct 2025 08:01:21 +0000
Files and hashes: 1: 7KQuRRixFRD2InAA41vDA8b46Ss.roa (hash: pqy5x79CuZKPgbD27qu8dFnC6qLbsZEYs512o7B8AtE=)
2: tI8GPSnpEPAzvstlbouZAfaeyXQ.crl (hash: tBVy/5yIhUf/ZLFWCGCjV0Cy2Mzjp89/g3nk3MtnvnY=)
3: vM1WQhwz3cRdhRzRWZYRS2EG35U.roa (hash: 6cZcrnHWZ9ymPZFFF87v+vfASbgITAqQf6OR2I+DcbM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/26c7ff-998e-4131-a747-3c43c3d35ef3/1/tI8GPSnpEPAzvstlbouZAfaeyXQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/26c7ff-998e-4131-a747-3c43c3d35ef3/1/tI8GPSnpEPAzvstlbouZAfaeyXQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/tI8GPSnpEPAzvstlbouZAfaeyXQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:7c:c2:64:01:e6:53:26:54:76:33:16:d2:0f:a2:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b48f063d29e910f033becb656e8b9901f69ec974
Validity
Not Before: Oct 19 08:01:21 2025 GMT
Not After : Oct 20 08:01:21 2025 GMT
Subject: CN=4bb61a21dea2132beb640d70182579a5a2aac324
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:52:72:60:f2:37:1d:c8:3f:41:79:63:59:26:
6f:3f:dc:95:35:2b:3d:24:7b:4f:0b:06:e8:f8:15:
ef:d7:58:45:8b:ab:0a:93:e7:32:a8:7d:8a:ea:4b:
68:d9:2c:96:f9:c9:81:53:67:fd:c5:da:38:3c:79:
97:c7:a2:cc:9a:f0:9a:bb:7a:5c:b4:f3:32:b7:bd:
1c:5c:95:d5:52:01:dd:9a:21:7e:5a:58:ed:08:fb:
db:4d:19:f3:49:c1:53:f2:ed:a5:e2:72:7c:84:40:
86:69:50:44:0c:95:37:9c:ac:f6:4d:d3:24:52:45:
34:24:3e:21:b4:24:21:27:73:56:1c:c1:bc:ab:c4:
b1:d6:50:87:e6:57:84:18:28:1d:55:9d:b6:cc:76:
c7:ad:2f:6a:55:14:16:d9:ea:f3:e5:ab:5a:bb:10:
d0:8a:86:73:99:2e:fe:06:21:a8:82:71:e6:59:e9:
cc:e9:2f:72:14:47:70:4e:67:3d:90:b9:88:68:06:
74:fa:74:bc:ef:dd:01:e1:2e:35:ff:e7:32:7f:c6:
6f:e0:99:eb:f1:41:63:ab:38:5b:7a:a6:d7:93:90:
2c:df:7d:9e:99:99:4d:d1:54:46:ab:39:73:98:94:
42:bf:b7:ee:ad:d0:3f:b1:22:a5:70:d2:0a:d7:b3:
0c:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:B6:1A:21:DE:A2:13:2B:EB:64:0D:70:18:25:79:A5:A2:AA:C3:24
X509v3 Authority Key Identifier:
keyid:B4:8F:06:3D:29:E9:10:F0:33:BE:CB:65:6E:8B:99:01:F6:9E:C9:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tI8GPSnpEPAzvstlbouZAfaeyXQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/26c7ff-998e-4131-a747-3c43c3d35ef3/1/tI8GPSnpEPAzvstlbouZAfaeyXQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/26c7ff-998e-4131-a747-3c43c3d35ef3/1/tI8GPSnpEPAzvstlbouZAfaeyXQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:12:ef:0d:c0:f0:ff:be:09:d3:65:47:09:42:f0:07:ef:98:
e6:ef:6f:1c:96:45:5d:07:4f:e6:a5:0c:14:ac:b3:2e:a5:27:
05:d3:65:06:e5:c3:61:1c:7d:12:06:fb:93:ee:f7:91:31:fc:
55:1a:b7:6f:b8:ce:84:de:80:31:21:3d:45:c0:91:68:64:cb:
ff:81:a3:fd:16:94:ec:80:51:d5:d0:b1:21:85:45:b1:dc:11:
a2:9b:f6:40:2d:e5:97:38:4d:c5:80:28:e2:7f:e1:07:cd:d0:
62:51:35:91:ec:3b:ce:5b:26:c8:b7:99:5b:48:fd:24:e3:1a:
6f:ee:5d:6e:46:0d:5b:eb:fa:4e:65:71:10:b0:8f:09:55:1e:
44:d8:5f:ee:3d:78:e9:e1:24:8f:31:c9:2a:61:24:0e:39:23:
6e:ef:a1:b9:20:5b:4d:0b:df:81:51:81:44:10:77:50:05:48:
a9:fb:de:ef:b6:04:85:8e:1c:49:b6:36:7d:85:27:2d:0c:35:
bc:c4:55:9d:82:df:82:74:da:87:bd:85:97:d1:54:d3:c7:f9:
82:e7:d8:9f:f8:25:4f:6a:3a:a6:da:69:ef:35:7b:4a:07:e6:
eb:52:1f:37:5e:69:f0:19:24:19:9e:4e:11:0c:d7:d2:0f:53:
29:bc:c7:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:28:03 2025 by rpki-client