Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/d95b2c-1e02-4e4e-8438-bbcae0df1f2f/1/tgtXTwPZiBVfRLossHvH37RXzw8.mft
File: tgtXTwPZiBVfRLossHvH37RXzw8.mft (raw, json)
Hash identifier: tRHhvT7CLZTTZkbJtEvKZLj8PqStNNRkGHiqbIIrTbg=
Subject key identifier: E5:5C:6F:29:81:04:61:3A:EA:18:18:C6:A6:83:79:AA:87:31:FE:13
Authority key identifier: B6:0B:57:4F:03:D9:88:15:5F:44:BA:2C:B0:7B:C7:DF:B4:57:CF:0F
Certificate issuer: /CN=b60b574f03d988155f44ba2cb07bc7dfb457cf0f
Certificate serial: 0199FBEBB159C81BCDC00BC7F5979D547A18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tgtXTwPZiBVfRLossHvH37RXzw8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/d95b2c-1e02-4e4e-8438-bbcae0df1f2f/1/tgtXTwPZiBVfRLossHvH37RXzw8.mft
Manifest number: 1674
Signing time: Sun 19 Oct 2025 10:02:31 +0000
Manifest this update: Sun 19 Oct 2025 10:02:31 +0000
Manifest next update: Mon 20 Oct 2025 10:02:31 +0000
Files and hashes: 1: BeOIJLd8_MIXUGufXTnw_YPsJgs.roa (hash: UFekJjmZxy4vjH3dPZliRBeAZT4NRRq/0IMLKsXu0f8=)
2: tgtXTwPZiBVfRLossHvH37RXzw8.crl (hash: HnKH2oGeTWKZNP/NBGEm/UA9wkppSNAO8oSYVx5xJMw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/d95b2c-1e02-4e4e-8438-bbcae0df1f2f/1/tgtXTwPZiBVfRLossHvH37RXzw8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/d95b2c-1e02-4e4e-8438-bbcae0df1f2f/1/tgtXTwPZiBVfRLossHvH37RXzw8.mft
rsync://rpki.ripe.net/repository/DEFAULT/tgtXTwPZiBVfRLossHvH37RXzw8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:b1:59:c8:1b:cd:c0:0b:c7:f5:97:9d:54:7a:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b60b574f03d988155f44ba2cb07bc7dfb457cf0f
Validity
Not Before: Oct 19 10:02:31 2025 GMT
Not After : Oct 20 10:02:31 2025 GMT
Subject: CN=e55c6f298104613aea1818c6a68379aa8731fe13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:20:a2:12:f0:e8:ef:2c:0c:53:8a:6a:1f:dd:
fa:9b:48:bd:f5:41:21:09:ed:65:b0:b3:17:1a:86:
32:72:ae:a6:0a:95:ad:63:91:67:bb:80:64:22:c4:
a1:87:d8:ef:6b:38:ea:d6:65:ba:41:c0:6f:6b:eb:
16:7d:7b:72:ea:de:95:c0:21:09:69:81:80:0e:c1:
04:9e:b9:31:46:f9:08:8d:e8:53:16:e4:48:12:2a:
4d:6f:40:63:f7:37:8b:4a:79:32:18:a9:20:51:bd:
28:cd:6d:f2:d4:2f:d2:ed:c2:af:bd:d8:08:82:6f:
6d:9e:00:73:81:17:06:b5:e0:bb:78:b9:20:7e:15:
9f:f3:5e:6e:88:24:0e:f3:90:e0:9b:73:a6:3e:40:
33:97:c9:29:cb:a9:e4:ef:e2:ae:50:70:c3:d8:1a:
24:f7:37:36:1a:d7:81:c0:11:85:c9:07:61:c4:e7:
c3:ee:cd:18:ba:32:98:a8:c0:3f:bc:5d:94:ea:0c:
a9:98:30:d8:ba:ef:87:4d:23:37:dc:1c:f8:d9:06:
09:1f:42:78:1f:67:db:e4:6c:a0:0e:06:18:ca:e1:
96:a3:8d:8c:f0:31:ba:17:60:ee:1d:3b:73:21:6f:
04:b8:ce:43:6c:9d:62:59:7b:90:71:33:61:4e:6d:
20:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:5C:6F:29:81:04:61:3A:EA:18:18:C6:A6:83:79:AA:87:31:FE:13
X509v3 Authority Key Identifier:
keyid:B6:0B:57:4F:03:D9:88:15:5F:44:BA:2C:B0:7B:C7:DF:B4:57:CF:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tgtXTwPZiBVfRLossHvH37RXzw8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/d95b2c-1e02-4e4e-8438-bbcae0df1f2f/1/tgtXTwPZiBVfRLossHvH37RXzw8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/d95b2c-1e02-4e4e-8438-bbcae0df1f2f/1/tgtXTwPZiBVfRLossHvH37RXzw8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:a6:cb:e1:18:ff:f8:df:81:36:90:3c:72:0e:83:23:42:7f:
bd:8b:a0:40:5d:1d:e0:e4:d3:8f:02:fc:02:b8:6b:22:e2:99:
83:a9:46:ef:06:0d:b4:47:17:1c:e3:19:90:c9:66:5a:61:1c:
20:31:fd:92:38:58:c6:fb:3c:06:7d:21:63:dd:32:fa:b0:e2:
34:9d:8d:6b:30:79:e4:ad:a5:04:db:40:85:33:b5:31:51:e0:
68:8d:1d:29:6f:92:91:9d:78:12:35:8f:b9:07:f3:e3:5a:91:
8c:3f:9b:d6:68:ea:a9:cd:25:ba:67:71:16:1a:14:ba:4d:31:
7a:9f:26:9e:35:7b:86:53:77:8d:2d:cf:f1:21:27:0e:62:15:
a8:d7:73:b5:41:07:4b:37:58:f1:1d:85:81:f8:b6:9b:4d:e7:
84:16:4f:ba:2f:09:e2:c6:bb:a1:ea:23:26:22:33:a4:26:fa:
4b:1e:34:58:5e:d3:24:7f:23:3b:68:65:2a:39:44:c7:4e:d4:
b6:32:e0:f6:ca:7c:55:36:65:a8:d9:4c:37:44:1d:df:64:d2:
0d:6a:3f:36:70:53:e5:01:0d:a3:e0:11:b1:9a:8c:e7:8f:67:
5e:2b:cd:15:0c:d9:11:1e:1f:eb:df:87:e8:dc:d8:6d:50:59:
21:70:e6:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:30:59 2025 by rpki-client