Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/1470f5-c316-4fff-9c37-8654266457c6/1/tJjJexTDdKUoM9tqQAe1S0Zixak.mft
File: tJjJexTDdKUoM9tqQAe1S0Zixak.mft (raw, json)
Hash identifier: TgOvlx7hQcOoIcjVl2R1wLwYdJE1XsnP2KybdfR9ixY=
Subject key identifier: 89:11:AA:DA:52:BA:5E:C8:4D:6A:4E:5C:DF:04:75:99:B6:BD:C5:6D
Authority key identifier: B4:98:C9:7B:14:C3:74:A5:28:33:DB:6A:40:07:B5:4B:46:62:C5:A9
Certificate issuer: /CN=b498c97b14c374a52833db6a4007b54b4662c5a9
Certificate serial: 0199FC8F7E2A564F297F54419F91907FDF7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tJjJexTDdKUoM9tqQAe1S0Zixak.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/1470f5-c316-4fff-9c37-8654266457c6/1/tJjJexTDdKUoM9tqQAe1S0Zixak.mft
Manifest number: 070B
Signing time: Sun 19 Oct 2025 13:01:26 +0000
Manifest this update: Sun 19 Oct 2025 13:01:26 +0000
Manifest next update: Mon 20 Oct 2025 13:01:26 +0000
Files and hashes: 1: CvcmVd2qiQMCtgnMEuQp7Q5S4Vg.roa (hash: 6oEqjna8oaHJiSK9+x9VxezwWYrKn62GKKSEaLSxdDU=)
2: UKY-oSMIFmmicltNFFzSJHvvmLM.roa (hash: cA262Na30QfQdhfhBPxJOrAeDIB1dyAnD2XIGiuSUOI=)
3: tJjJexTDdKUoM9tqQAe1S0Zixak.crl (hash: nxKpm4f/Oo6YOOzX03L45UUZWy9Snm8AxTUslrLBX7A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/1470f5-c316-4fff-9c37-8654266457c6/1/tJjJexTDdKUoM9tqQAe1S0Zixak.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/1470f5-c316-4fff-9c37-8654266457c6/1/tJjJexTDdKUoM9tqQAe1S0Zixak.mft
rsync://rpki.ripe.net/repository/DEFAULT/tJjJexTDdKUoM9tqQAe1S0Zixak.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:7e:2a:56:4f:29:7f:54:41:9f:91:90:7f:df:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b498c97b14c374a52833db6a4007b54b4662c5a9
Validity
Not Before: Oct 19 13:01:26 2025 GMT
Not After : Oct 20 13:01:26 2025 GMT
Subject: CN=8911aada52ba5ec84d6a4e5cdf047599b6bdc56d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:67:d0:1a:c2:3a:f6:ac:60:b0:02:b0:d1:31:
43:ff:4f:fb:49:c3:f1:6e:02:9f:f1:1a:87:c5:c2:
ff:ef:40:ff:47:a5:7e:e2:f1:76:a3:02:00:25:f2:
57:35:79:92:f3:21:e8:10:a4:f8:b2:b1:e9:f9:0b:
af:f2:a8:80:7a:1e:f3:ff:69:b3:2d:2e:09:bb:25:
d2:91:a7:5c:e6:b4:fa:86:f8:51:9a:05:be:90:45:
18:e3:86:0e:de:a1:c6:68:83:11:d2:31:47:c4:1d:
a8:91:d4:e1:c7:56:f2:3a:04:25:6f:df:2f:73:07:
21:f6:87:b2:e4:97:33:71:68:bd:1c:09:78:5f:d0:
3c:a8:41:c4:70:f4:e0:d1:28:26:e1:02:11:2c:b4:
39:5f:98:9c:dd:28:16:34:80:38:af:f9:4b:16:67:
3f:0a:af:10:49:4b:29:bc:db:1d:da:62:7f:e8:e7:
7d:7b:bb:1d:1e:e1:1c:d0:50:95:a7:62:02:19:1b:
42:62:4f:39:57:96:f2:0a:47:fb:b9:81:76:81:49:
c9:bc:f9:10:c7:bd:46:e0:08:6b:f5:cf:1f:f8:84:
d3:10:ed:65:8f:36:f4:ef:4f:d9:29:a7:5a:58:9a:
07:3f:f8:f0:11:2d:d2:48:8a:d6:78:68:8b:3f:aa:
c4:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:11:AA:DA:52:BA:5E:C8:4D:6A:4E:5C:DF:04:75:99:B6:BD:C5:6D
X509v3 Authority Key Identifier:
keyid:B4:98:C9:7B:14:C3:74:A5:28:33:DB:6A:40:07:B5:4B:46:62:C5:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tJjJexTDdKUoM9tqQAe1S0Zixak.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/1470f5-c316-4fff-9c37-8654266457c6/1/tJjJexTDdKUoM9tqQAe1S0Zixak.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/1470f5-c316-4fff-9c37-8654266457c6/1/tJjJexTDdKUoM9tqQAe1S0Zixak.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:91:0b:25:dd:1a:04:96:4c:48:bb:79:0a:a5:0e:e9:b0:8e:
d4:56:2e:c8:23:33:14:48:62:a6:9e:16:34:2e:16:ad:ca:ec:
26:43:a9:93:af:64:6e:8e:7f:b1:26:a6:b6:e5:83:2b:d3:be:
94:e1:dd:a3:f9:c6:c8:b8:db:aa:9e:d8:4c:02:f4:2f:45:17:
c3:81:87:90:b0:b4:f4:6a:96:73:0b:27:cd:aa:5e:58:1b:b2:
a2:b5:39:e5:ae:e6:ba:02:7b:df:30:60:c7:9b:98:41:f5:53:
5b:42:ee:98:1e:31:22:44:49:7c:18:15:08:0e:f3:91:2d:16:
ec:4c:b2:a9:3d:33:5e:33:69:93:7f:58:32:4a:4d:74:6d:30:
fb:b3:46:b3:57:0b:88:59:6a:0d:40:79:d4:b8:d0:39:5e:b1:
33:ca:07:c7:ed:d3:63:d4:f8:5c:4d:35:f2:8c:6f:a6:ac:9d:
b5:2c:cd:32:51:d1:3b:f2:0a:35:f6:f3:cc:93:c7:b4:d6:a0:
ec:5a:9f:83:c7:0d:7c:f8:88:8d:f6:46:92:72:5b:46:60:0a:
77:12:c2:60:41:d3:87:74:d1:dd:c1:83:dd:ab:30:e6:12:a1:
ab:f8:91:48:bc:56:31:a6:30:53:f5:23:8f:e4:95:e6:88:c6:
29:51:fd:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:55:56 2025 by rpki-client