Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/0cfe3e-729f-4418-9cf4-863daecfc2e8/1/tPpNCBs2iH8-XKZTf3Rp7uIdca4.mft
File: tPpNCBs2iH8-XKZTf3Rp7uIdca4.mft (raw, json)
Hash identifier: FU0Wzee9mndekEiWrgG4SQAVtMfPL0UD4KFAzB2RPRA=
Subject key identifier: A9:8A:73:07:65:5D:C0:72:4F:C4:66:7C:9C:1B:8B:5E:36:31:32:31
Authority key identifier: B4:FA:4D:08:1B:36:88:7F:3E:5C:A6:53:7F:74:69:EE:E2:1D:71:AE
Certificate issuer: /CN=b4fa4d081b36887f3e5ca6537f7469eee21d71ae
Certificate serial: 0199FC5848F958A4EE02D65CA0CB33306CC5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tPpNCBs2iH8-XKZTf3Rp7uIdca4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/0cfe3e-729f-4418-9cf4-863daecfc2e8/1/tPpNCBs2iH8-XKZTf3Rp7uIdca4.mft
Manifest number: 16E4
Signing time: Sun 19 Oct 2025 12:01:08 +0000
Manifest this update: Sun 19 Oct 2025 12:01:08 +0000
Manifest next update: Mon 20 Oct 2025 12:01:08 +0000
Files and hashes: 1: HeDUncvNrC9DXvqHmX3LCuEEQFk.roa (hash: pkL8awVC+vif3Sv8BEo/gQroGPTBLCBBOJrEXIA/gLU=)
2: tPpNCBs2iH8-XKZTf3Rp7uIdca4.crl (hash: OfCcFBX9sR0LlGPxmUo3m+rYNvgTKCfKPHyh7UpiJnI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/0cfe3e-729f-4418-9cf4-863daecfc2e8/1/tPpNCBs2iH8-XKZTf3Rp7uIdca4.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/0cfe3e-729f-4418-9cf4-863daecfc2e8/1/tPpNCBs2iH8-XKZTf3Rp7uIdca4.mft
rsync://rpki.ripe.net/repository/DEFAULT/tPpNCBs2iH8-XKZTf3Rp7uIdca4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:48:f9:58:a4:ee:02:d6:5c:a0:cb:33:30:6c:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4fa4d081b36887f3e5ca6537f7469eee21d71ae
Validity
Not Before: Oct 19 12:01:08 2025 GMT
Not After : Oct 20 12:01:08 2025 GMT
Subject: CN=a98a7307655dc0724fc4667c9c1b8b5e36313231
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:b5:ef:48:c6:4d:47:84:1a:95:ad:f8:b7:eb:
1c:0e:cb:04:f8:fd:1a:12:3b:50:e2:07:92:6d:68:
8f:9f:6f:2f:dc:21:10:31:a6:4b:88:05:4c:eb:23:
b7:f7:02:f2:b0:49:f5:0c:07:4b:8b:22:41:52:7f:
c6:30:8f:e6:f5:6b:aa:ef:45:4f:b5:bb:d7:c1:0d:
12:fa:f5:05:72:2f:ae:50:88:a1:06:89:95:2f:07:
cd:9e:84:4f:3e:70:f0:00:50:67:3d:a2:a2:fb:2f:
cc:1e:14:26:ed:e1:2a:20:1b:e3:65:6e:7e:c5:4b:
06:df:7b:e4:52:96:44:50:33:56:4c:04:b4:d5:c6:
27:cb:43:5f:ea:62:e9:1c:80:a2:ef:af:1a:c2:b9:
6d:94:a9:66:03:9c:30:6d:b9:79:b8:8e:ec:f1:da:
3c:05:c8:4b:a1:b7:14:ca:7d:98:bd:b4:92:bf:5f:
a0:26:ed:38:d1:f3:e8:ce:9a:4e:73:94:ac:41:0c:
0f:b0:25:89:d0:51:7b:fd:e3:49:59:11:64:78:8a:
54:9e:b9:27:58:66:e9:31:63:61:fe:b1:21:20:02:
3b:50:01:44:d6:7d:f7:0f:86:09:0c:6c:59:2b:65:
23:78:b5:89:47:05:5f:2c:01:3e:e2:15:ba:ef:bc:
6a:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:8A:73:07:65:5D:C0:72:4F:C4:66:7C:9C:1B:8B:5E:36:31:32:31
X509v3 Authority Key Identifier:
keyid:B4:FA:4D:08:1B:36:88:7F:3E:5C:A6:53:7F:74:69:EE:E2:1D:71:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tPpNCBs2iH8-XKZTf3Rp7uIdca4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/0cfe3e-729f-4418-9cf4-863daecfc2e8/1/tPpNCBs2iH8-XKZTf3Rp7uIdca4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/0cfe3e-729f-4418-9cf4-863daecfc2e8/1/tPpNCBs2iH8-XKZTf3Rp7uIdca4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:f4:dc:dd:d5:00:7f:27:84:20:12:af:7f:4c:07:f0:0a:ef:
bf:82:33:68:a0:48:dc:8d:a1:4d:78:05:52:56:98:44:80:93:
9c:38:7b:89:1d:23:e8:81:5a:e5:b0:9c:bb:e1:15:69:b1:d5:
c8:bb:b3:2c:94:17:5f:8b:21:2f:a8:35:8d:d1:6d:e6:64:8b:
e9:3e:10:10:3d:3a:c0:bf:3b:2a:e0:5b:e8:e6:da:d5:6a:23:
65:ce:ec:5d:df:48:5b:34:b5:9d:30:26:a8:06:3b:f7:22:11:
89:fd:2e:af:d6:51:22:e8:01:f9:33:81:fd:ab:47:d6:1c:8d:
75:14:f3:6e:c3:f4:84:a6:15:be:d2:52:0e:e6:d6:a9:7a:86:
3f:6f:fb:8e:75:33:41:61:da:1c:94:a4:47:46:7e:83:21:f0:
20:d5:13:a0:3b:4c:58:35:c5:d3:5b:85:d7:bb:13:cf:e6:2d:
39:dd:74:dd:85:20:29:2b:31:85:5c:a9:88:0f:9a:40:9d:0b:
c3:32:5f:42:66:b3:5d:1a:b7:c2:fe:ab:db:ec:c0:1f:12:84:
d4:8e:ae:1e:04:c7:d7:80:a3:cd:81:e8:e7:26:6f:92:ad:31:
53:eb:15:f6:b0:e9:c7:84:9c:bb:3d:d7:33:d2:d8:f3:c4:86:
69:83:62:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:54:16 2025 by rpki-client