Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/90a5cf-e484-4bb2-a285-6a49b5a31294/1/tPM_b9KbrwPMTUha9fa3DaawCZ8.mft
File: tPM_b9KbrwPMTUha9fa3DaawCZ8.mft (raw, json)
Hash identifier: s4s7IL5G9Qodu5SIwMnvtl5ut8PpL3GYCAqXs3adZlM=
Subject key identifier: A8:AA:7E:AE:35:CD:48:B4:6C:35:97:D1:2C:F0:DD:CB:58:49:0E:44
Authority key identifier: B4:F3:3F:6F:D2:9B:AF:03:CC:4D:48:5A:F5:F6:B7:0D:A6:B0:09:9F
Certificate issuer: /CN=b4f33f6fd29baf03cc4d485af5f6b70da6b0099f
Certificate serial: 0199FC8F443B09F568813BCE94B4620969CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tPM_b9KbrwPMTUha9fa3DaawCZ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/90a5cf-e484-4bb2-a285-6a49b5a31294/1/tPM_b9KbrwPMTUha9fa3DaawCZ8.mft
Manifest number: 0FBB
Signing time: Sun 19 Oct 2025 13:01:11 +0000
Manifest this update: Sun 19 Oct 2025 13:01:11 +0000
Manifest next update: Mon 20 Oct 2025 13:01:11 +0000
Files and hashes: 1: tPM_b9KbrwPMTUha9fa3DaawCZ8.crl (hash: hbERMw663v1hNnHIjPoioLpKqE7+JGrtk1TfPQRc0U8=)
2: tYPVw8LB8i24cvigRIjHBmA1vkA.roa (hash: PLxJfAKIcmuKybJlU2Vop9ZELJyvcamyBgkEBw419jw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/90a5cf-e484-4bb2-a285-6a49b5a31294/1/tPM_b9KbrwPMTUha9fa3DaawCZ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/90a5cf-e484-4bb2-a285-6a49b5a31294/1/tPM_b9KbrwPMTUha9fa3DaawCZ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/tPM_b9KbrwPMTUha9fa3DaawCZ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:44:3b:09:f5:68:81:3b:ce:94:b4:62:09:69:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4f33f6fd29baf03cc4d485af5f6b70da6b0099f
Validity
Not Before: Oct 19 13:01:11 2025 GMT
Not After : Oct 20 13:01:11 2025 GMT
Subject: CN=a8aa7eae35cd48b46c3597d12cf0ddcb58490e44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:30:dc:78:be:ab:a5:83:01:63:fa:7c:f0:21:
b6:33:e3:4c:99:f0:ff:f5:3d:34:4f:19:1c:0f:1a:
1b:3f:ba:3d:55:4f:7c:25:f3:0a:3d:f7:f6:4e:ca:
94:d6:a3:66:43:05:d1:f9:ff:26:bb:a2:dd:ca:1b:
e8:f6:56:54:a4:c9:20:99:4b:07:ce:80:a8:0f:60:
0d:d2:7c:93:4b:a0:23:c0:8a:06:ba:4d:c2:9a:6d:
35:6d:38:1a:5f:a3:bc:1f:a2:51:b7:0c:42:c5:ab:
ab:b1:63:09:4c:ce:54:ce:ad:41:a5:f9:41:8f:b3:
e0:f2:59:35:f5:d2:5f:c4:59:a2:69:06:b6:75:87:
90:9a:a8:7e:93:93:1d:c0:37:38:0f:b4:32:c5:d0:
65:ee:14:48:d0:d7:e3:c8:c8:53:3f:a7:05:55:46:
94:1c:bc:5a:28:f8:fc:3b:bc:8d:df:43:47:4f:b0:
82:d5:95:9a:9a:6d:61:a6:75:a0:d6:98:ae:c7:0b:
84:c1:3a:37:ac:fe:24:d7:ff:6c:e7:72:ec:a6:b7:
7a:14:33:26:3b:e6:5e:d4:75:f7:8d:ca:28:22:fc:
7d:f9:19:9b:8f:a3:35:1f:8c:53:88:b0:15:1c:2d:
d5:59:51:97:67:1a:22:ca:db:8f:11:14:7a:ed:c8:
d4:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:AA:7E:AE:35:CD:48:B4:6C:35:97:D1:2C:F0:DD:CB:58:49:0E:44
X509v3 Authority Key Identifier:
keyid:B4:F3:3F:6F:D2:9B:AF:03:CC:4D:48:5A:F5:F6:B7:0D:A6:B0:09:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tPM_b9KbrwPMTUha9fa3DaawCZ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/90a5cf-e484-4bb2-a285-6a49b5a31294/1/tPM_b9KbrwPMTUha9fa3DaawCZ8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/90a5cf-e484-4bb2-a285-6a49b5a31294/1/tPM_b9KbrwPMTUha9fa3DaawCZ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:cf:90:4a:22:f1:8c:d1:2d:a1:6f:d0:e9:7c:6d:74:76:11:
d7:a8:fe:94:6f:19:c7:88:89:fc:86:17:3e:03:99:95:86:53:
5c:4c:91:4e:05:e6:6b:db:1e:f1:c3:29:37:d7:83:55:9a:a4:
a0:13:76:4a:b5:5d:da:3c:b2:9e:66:4c:56:ef:3b:cf:31:84:
6c:90:90:8f:8f:98:22:b5:bd:b5:a0:e3:45:39:20:e3:50:05:
de:1f:4d:dd:18:3d:0f:f7:e5:34:96:cc:3a:b1:e2:80:23:20:
70:03:63:e8:30:3e:fd:11:d6:71:6f:21:c4:f5:c8:b5:97:5f:
9f:f2:2f:b6:e8:7d:3d:b2:ae:eb:71:45:fe:9f:1a:43:97:a3:
5e:fb:6a:d6:80:bf:5d:3f:b1:8d:db:02:94:a8:0d:c4:c5:21:
3d:d9:c2:c4:cb:e1:07:94:40:f6:16:c1:d0:c0:04:a0:24:b0:
66:28:b8:7e:1c:63:d0:ad:5a:79:88:e4:36:c5:16:fb:c7:bd:
4c:f4:54:d8:ff:71:d2:36:dc:47:3a:27:04:ca:77:9f:fe:cd:
d4:f6:ad:17:bc:57:72:c8:23:79:10:2d:1e:01:47:d8:44:ec:
b0:d2:86:18:7d:78:62:73:1c:b2:98:5a:ce:5d:b3:2d:28:ec:
d0:7b:53:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:52:15 2025 by rpki-client