Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/d6513d-2d53-4022-8360-3117989601ad/1/tKIIXH3jtZgha4n7Dysdkw3mbBk.mft
File: tKIIXH3jtZgha4n7Dysdkw3mbBk.mft (raw, json)
Hash identifier: 7xKMIoIK8waP4trmgRgDZ0tjt2HR8vOA8cctXRUOW8s=
Subject key identifier: 05:5D:8D:9A:5A:3E:F0:FE:0F:75:27:45:F8:A2:6E:FD:A9:88:23:9B
Authority key identifier: B4:A2:08:5C:7D:E3:B5:98:21:6B:89:FB:0F:2B:1D:93:0D:E6:6C:19
Certificate issuer: /CN=b4a2085c7de3b598216b89fb0f2b1d930de66c19
Certificate serial: 0199FF5983A6EE278493BF17A503E20FFF81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tKIIXH3jtZgha4n7Dysdkw3mbBk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/d6513d-2d53-4022-8360-3117989601ad/1/tKIIXH3jtZgha4n7Dysdkw3mbBk.mft
Manifest number: 16B9
Signing time: Mon 20 Oct 2025 02:01:20 +0000
Manifest this update: Mon 20 Oct 2025 02:01:20 +0000
Manifest next update: Tue 21 Oct 2025 02:01:20 +0000
Files and hashes: 1: Bm5UACtbnF-zdFYjA8vPOBqvgzc.roa (hash: TLMH3v0yPGvBQf4sp02A0ciC7nkIzxuyV+cC5oHQvcg=)
2: KygTuxQFGUD5ATwC-VI56P0_KW8.roa (hash: +kPqhnKnrFZGjWfktqCyP4orZXjdv9+6M6sRVLgaUrA=)
3: kH7H7auuv6q7VTDiT7be_vcY-1Q.roa (hash: M4+McdjIhgE1/SI8bKbvFu1HsdzjwaQszRqVGjqa+wM=)
4: tKIIXH3jtZgha4n7Dysdkw3mbBk.crl (hash: tL8F5zdXHEyflZ8h2CWtkgVZOHmhxfP0BrnNzvYk9wE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/d6513d-2d53-4022-8360-3117989601ad/1/tKIIXH3jtZgha4n7Dysdkw3mbBk.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/d6513d-2d53-4022-8360-3117989601ad/1/tKIIXH3jtZgha4n7Dysdkw3mbBk.mft
rsync://rpki.ripe.net/repository/DEFAULT/tKIIXH3jtZgha4n7Dysdkw3mbBk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:59:83:a6:ee:27:84:93:bf:17:a5:03:e2:0f:ff:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4a2085c7de3b598216b89fb0f2b1d930de66c19
Validity
Not Before: Oct 20 02:01:20 2025 GMT
Not After : Oct 21 02:01:20 2025 GMT
Subject: CN=055d8d9a5a3ef0fe0f752745f8a26efda988239b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:e7:b8:8a:67:66:2a:73:d5:84:ab:7a:7c:eb:
7d:a4:7a:a7:6e:45:55:d8:06:67:09:40:fa:94:13:
b6:cf:2f:71:2e:18:02:24:d5:95:fc:f9:1a:83:f4:
26:3d:fd:41:6b:d4:9a:90:31:25:32:f1:7f:15:4f:
88:be:07:25:e0:cf:c6:cb:b6:f4:40:f6:8f:ae:d3:
59:3f:f9:c8:c1:2d:50:2a:39:1b:55:5b:75:fd:5c:
93:72:a7:85:e8:57:ac:86:92:df:17:57:a6:cb:4d:
6a:06:30:bb:e6:af:44:bc:8a:92:fb:ef:05:23:d3:
64:a5:3a:6f:e2:9b:ec:4b:ac:31:e0:53:f8:08:01:
28:d6:f5:95:1c:92:0d:52:fa:9c:28:23:82:c0:db:
a7:32:9d:d6:f7:d4:73:da:f9:70:52:e0:0a:1b:da:
82:b4:68:34:82:bb:b6:7c:39:26:5c:9a:74:04:d4:
fd:8b:fc:4d:9e:f3:ca:2c:15:69:ac:1e:4e:e3:b3:
c3:be:28:d7:1f:ed:63:cf:5a:8d:c9:78:a0:80:c7:
2a:7e:dd:37:ba:30:74:65:ce:e8:91:d6:75:bd:c3:
5b:e4:69:43:04:92:1e:b2:f6:6a:52:2f:2e:80:02:
5a:0c:ae:d5:ff:3a:55:a6:cc:b6:7b:6c:b4:e3:8d:
1f:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:5D:8D:9A:5A:3E:F0:FE:0F:75:27:45:F8:A2:6E:FD:A9:88:23:9B
X509v3 Authority Key Identifier:
keyid:B4:A2:08:5C:7D:E3:B5:98:21:6B:89:FB:0F:2B:1D:93:0D:E6:6C:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tKIIXH3jtZgha4n7Dysdkw3mbBk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/d6513d-2d53-4022-8360-3117989601ad/1/tKIIXH3jtZgha4n7Dysdkw3mbBk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/d6513d-2d53-4022-8360-3117989601ad/1/tKIIXH3jtZgha4n7Dysdkw3mbBk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:32:17:f3:a2:ed:61:64:5f:46:bf:62:b1:f8:f9:23:02:5b:
50:89:cd:98:da:75:48:08:1a:1e:ef:f0:fb:0b:1b:3c:bd:3b:
2f:68:1d:ed:78:a6:e5:25:65:41:1a:43:33:e2:a0:ab:94:01:
15:c5:3c:31:c5:59:c0:71:f6:b8:40:d1:dc:61:2f:ec:50:fd:
65:67:5e:72:b4:76:27:1f:f3:65:2e:a3:f7:f2:c6:f4:54:50:
32:da:b5:9a:56:b4:66:90:9d:a6:85:ce:b1:c9:ca:b9:44:c5:
44:93:70:6f:a1:22:56:f8:2d:b8:3c:eb:1e:d5:3d:18:0e:ae:
88:32:35:4e:a0:cc:5d:47:ed:5e:eb:80:93:cc:9c:1f:40:ae:
d4:1b:4c:38:9a:68:48:da:76:ad:4f:b9:4f:04:5a:4d:8d:cb:
dd:b2:a1:ac:56:11:9c:fd:18:4d:ae:e3:70:a8:29:66:e9:41:
e4:47:a5:9c:c0:67:31:5a:97:89:b9:0e:85:cd:79:98:fc:95:
71:40:0d:93:7b:af:12:f0:b5:12:d6:18:18:25:5d:05:e1:a7:
9e:f0:2f:50:a2:5f:13:28:43:c0:dc:48:8b:2b:d2:5f:ba:e4:
55:e3:21:0d:a5:62:fb:96:a8:4c:e5:32:be:48:53:de:d1:a9:
52:2f:25:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 05:25:49 2025 by rpki-client