Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/608fdb-a406-4b85-b14a-d2441e8f6c7a/1/tPgsjv3jS9meROrwcxtsUltFShk.mft
File: tPgsjv3jS9meROrwcxtsUltFShk.mft (raw, json)
Hash identifier: nNmjr/veR39KQPSbHtmhDurwAhy4A/cTpuz47thIX6c=
Subject key identifier: D1:F4:19:02:BF:E8:9C:FC:89:7A:87:78:3F:5E:FA:33:BA:9D:67:22
Authority key identifier: B4:F8:2C:8E:FD:E3:4B:D9:9E:44:EA:F0:73:1B:6C:52:5B:45:4A:19
Certificate issuer: /CN=b4f82c8efde34bd99e44eaf0731b6c525b454a19
Certificate serial: 019A003549FA783DB2FCE0CC2DC45E992D06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tPgsjv3jS9meROrwcxtsUltFShk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/608fdb-a406-4b85-b14a-d2441e8f6c7a/1/tPgsjv3jS9meROrwcxtsUltFShk.mft
Manifest number: 16E3
Signing time: Mon 20 Oct 2025 06:01:23 +0000
Manifest this update: Mon 20 Oct 2025 06:01:23 +0000
Manifest next update: Tue 21 Oct 2025 06:01:23 +0000
Files and hashes: 1: qLkt693aVmyKYJQGNdNxcAXdJ9w.roa (hash: D8tW4gMgnbvNPYFRk3OMpyQUNWmp5AcbpxituaqMb+A=)
2: tPgsjv3jS9meROrwcxtsUltFShk.crl (hash: OMYubi6CPeJvhhXZTWqQ/HTMC2mvwLn02XjH2D6hOdg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/608fdb-a406-4b85-b14a-d2441e8f6c7a/1/tPgsjv3jS9meROrwcxtsUltFShk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/608fdb-a406-4b85-b14a-d2441e8f6c7a/1/tPgsjv3jS9meROrwcxtsUltFShk.mft
rsync://rpki.ripe.net/repository/DEFAULT/tPgsjv3jS9meROrwcxtsUltFShk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 06:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:00:35:49:fa:78:3d:b2:fc:e0:cc:2d:c4:5e:99:2d:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4f82c8efde34bd99e44eaf0731b6c525b454a19
Validity
Not Before: Oct 20 06:01:23 2025 GMT
Not After : Oct 21 06:01:23 2025 GMT
Subject: CN=d1f41902bfe89cfc897a87783f5efa33ba9d6722
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:47:1a:e2:ed:cf:ba:fb:64:70:1a:a8:33:37:
4f:d1:87:5a:d9:22:1c:5e:6d:df:4a:f5:dc:aa:a8:
76:08:1a:f9:98:c2:a9:e3:20:91:09:97:cb:dc:fe:
2e:5a:b8:92:27:7f:95:69:cb:01:a2:43:d5:41:83:
43:8e:1f:6a:a2:c8:0d:8f:00:f9:98:cc:36:75:b1:
16:71:69:f4:21:d7:4c:4d:4d:a3:f2:8d:31:83:47:
fe:5e:34:78:09:0f:d3:43:e3:1a:0d:9f:17:c2:f0:
f1:ba:2f:28:51:fd:e6:f1:e5:88:4d:3e:25:cb:42:
f3:f5:f0:2a:17:9d:96:e9:71:9b:68:af:5a:41:70:
4f:f5:75:a9:a3:56:d6:d1:21:4c:9c:0e:90:42:82:
68:0d:6e:26:7e:7d:24:b9:2f:8f:7b:0c:4d:ee:5b:
bc:fa:7f:03:19:05:05:e7:6a:1c:3b:d8:ca:18:53:
48:86:8a:c2:38:e4:a2:27:fd:7a:e3:09:a4:00:bb:
d1:77:d1:77:65:21:65:ae:18:30:b0:96:9f:16:1a:
22:ab:bf:ba:6f:97:8a:39:d9:dc:bb:5f:30:61:a7:
56:1b:1c:65:a3:4c:20:cb:bb:e7:77:d0:2d:94:88:
78:ed:ac:72:bb:dd:0a:ca:32:42:d4:bd:c8:e0:cf:
59:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:F4:19:02:BF:E8:9C:FC:89:7A:87:78:3F:5E:FA:33:BA:9D:67:22
X509v3 Authority Key Identifier:
keyid:B4:F8:2C:8E:FD:E3:4B:D9:9E:44:EA:F0:73:1B:6C:52:5B:45:4A:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tPgsjv3jS9meROrwcxtsUltFShk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/608fdb-a406-4b85-b14a-d2441e8f6c7a/1/tPgsjv3jS9meROrwcxtsUltFShk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/608fdb-a406-4b85-b14a-d2441e8f6c7a/1/tPgsjv3jS9meROrwcxtsUltFShk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:49:66:59:8a:e7:15:b0:9a:be:1a:c0:8f:0c:b6:c3:c0:3c:
42:6d:12:61:8c:c6:2f:76:59:bf:8d:2c:e1:07:f4:95:94:11:
44:ab:e4:4c:40:16:33:d9:71:a4:e9:e1:b9:82:5f:52:b4:93:
cc:a4:c0:02:6d:fa:ec:c2:76:8d:26:a5:75:d5:1b:b3:e2:7d:
29:51:1b:e7:94:84:a0:9e:fc:d3:8d:ec:68:1f:3e:04:75:21:
16:f2:f2:a6:7b:36:01:a1:a7:19:34:99:9f:3f:05:f6:b0:0c:
2b:33:85:e0:f7:93:b7:f2:18:dd:70:1b:a8:c7:44:71:5d:b6:
e2:73:4a:0d:23:4e:b5:19:f4:ba:de:39:fa:65:ac:7b:b0:7d:
48:d5:27:56:50:c5:30:bd:03:ef:60:53:9d:ee:6d:75:31:13:
ca:57:f7:2d:66:14:0e:7d:30:4a:c7:32:88:a6:26:de:c6:f9:
fc:cd:3d:4c:93:ca:df:49:b3:12:96:19:6a:f8:10:45:d1:b4:
73:fb:0c:fc:73:44:c1:44:d2:41:e2:c0:3b:1a:f6:af:6f:9e:
bd:8f:8b:fb:16:b0:a6:f5:0b:66:6b:e0:5e:f1:b6:22:62:cb:
d9:1b:fd:30:1b:62:2e:0b:9e:27:a9:e6:17:11:73:41:9b:28:
5c:a9:59:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 14:33:35 2025 by rpki-client