Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/d2bb68-9bc7-4791-8528-0c495477ca10/1/tUJ-pJ-XLRnFY5OmiefL65kNXXo.mft
File: tUJ-pJ-XLRnFY5OmiefL65kNXXo.mft (raw, json)
Hash identifier: raVabYwkfMF8391moj9V2mRrZTcmEVegkOK4cvkZb5U=
Subject key identifier: 61:D6:51:C3:44:F8:B1:3B:2E:72:BA:00:75:30:16:2E:05:F5:17:73
Authority key identifier: B5:42:7E:A4:9F:97:2D:19:C5:63:93:A6:89:E7:CB:EB:99:0D:5D:7A
Certificate issuer: /CN=b5427ea49f972d19c56393a689e7cbeb990d5d7a
Certificate serial: 0199FD6B05076E1A886A1D1C7154DD8727A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tUJ-pJ-XLRnFY5OmiefL65kNXXo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/d2bb68-9bc7-4791-8528-0c495477ca10/1/tUJ-pJ-XLRnFY5OmiefL65kNXXo.mft
Manifest number: 16E7
Signing time: Sun 19 Oct 2025 17:01:13 +0000
Manifest this update: Sun 19 Oct 2025 17:01:13 +0000
Manifest next update: Mon 20 Oct 2025 17:01:13 +0000
Files and hashes: 1: AwMEJfGD-_TNRZ72c5x-9dIRsd4.roa (hash: 6UVDM1JqxHmjbnJ4pDDIOsD2r8EQyy1bF6KNp9ocKGg=)
2: VJtvXDXYtAcS9C4LIbmlaqXh4Co.roa (hash: THcKGdc9aA5a+OjJYNnV65xxowh1d3kb8KQrHqiCPq4=)
3: fUXrv6-AqG-Sdl9xICl4cQAU7yA.roa (hash: jv2v4x0octz1D9witRg3iiWbwIrgi4wxjje3xLewI+U=)
4: tUJ-pJ-XLRnFY5OmiefL65kNXXo.crl (hash: 3dJw/NtO2tQUApF8bGwCJ8CgDVVasQy7Dldq69Qiv6M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/d2bb68-9bc7-4791-8528-0c495477ca10/1/tUJ-pJ-XLRnFY5OmiefL65kNXXo.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/d2bb68-9bc7-4791-8528-0c495477ca10/1/tUJ-pJ-XLRnFY5OmiefL65kNXXo.mft
rsync://rpki.ripe.net/repository/DEFAULT/tUJ-pJ-XLRnFY5OmiefL65kNXXo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:6b:05:07:6e:1a:88:6a:1d:1c:71:54:dd:87:27:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5427ea49f972d19c56393a689e7cbeb990d5d7a
Validity
Not Before: Oct 19 17:01:13 2025 GMT
Not After : Oct 20 17:01:13 2025 GMT
Subject: CN=61d651c344f8b13b2e72ba007530162e05f51773
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:21:39:c9:67:13:34:4e:41:6f:15:f6:a8:50:
78:22:77:56:05:31:33:7b:94:c0:fe:1c:28:26:80:
6b:6c:b8:66:df:0c:84:83:84:84:87:df:0a:3f:0f:
87:8b:1c:12:39:96:60:90:89:17:fb:b9:c0:2c:f6:
9d:c5:8e:50:8c:7f:e1:4f:fe:fa:48:07:20:99:0d:
78:af:a5:3b:58:41:04:0b:a4:52:93:d9:d6:20:81:
9f:79:0c:56:d4:c9:03:54:7d:f4:2f:57:b9:a6:c9:
28:5a:ed:2d:39:a7:ee:61:d8:e4:4b:0c:47:85:b3:
74:d3:64:9e:e8:d6:9a:3b:7d:8a:8e:b4:48:78:a1:
4b:55:28:24:f4:89:c8:95:de:f0:87:bd:7a:1a:25:
a6:90:ee:14:de:8d:ec:eb:40:3a:28:b6:63:e4:9e:
d7:cd:dc:c4:76:9c:60:64:53:1f:56:57:f8:e3:b5:
9e:28:1a:9f:37:b5:0b:37:6c:62:76:d9:c3:c9:b1:
15:4e:ba:9e:5b:07:22:bd:e0:c8:03:ea:5c:e2:4e:
50:1c:fb:14:c1:de:76:3c:96:cc:db:e1:62:88:96:
48:c4:e2:db:2f:fd:82:e9:7b:74:84:bf:c2:d1:e0:
a1:aa:d9:79:20:d5:f3:7e:cb:9d:65:68:7b:30:d1:
f8:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:D6:51:C3:44:F8:B1:3B:2E:72:BA:00:75:30:16:2E:05:F5:17:73
X509v3 Authority Key Identifier:
keyid:B5:42:7E:A4:9F:97:2D:19:C5:63:93:A6:89:E7:CB:EB:99:0D:5D:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tUJ-pJ-XLRnFY5OmiefL65kNXXo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/d2bb68-9bc7-4791-8528-0c495477ca10/1/tUJ-pJ-XLRnFY5OmiefL65kNXXo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/d2bb68-9bc7-4791-8528-0c495477ca10/1/tUJ-pJ-XLRnFY5OmiefL65kNXXo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:4c:b0:7e:e8:48:4b:de:68:e7:3b:9e:bc:c6:6b:d1:b6:78:
e0:53:d9:0f:4e:b7:e3:c1:2c:e9:12:a4:3d:bb:23:1e:bc:bd:
5c:6b:24:e7:b3:40:1c:f7:93:92:cd:9c:44:36:11:c6:ff:63:
59:80:88:b0:c5:ac:61:ce:03:8c:1b:59:e1:94:8e:f7:e7:c8:
22:37:b9:ba:8e:ba:21:1e:b1:d6:19:b1:07:7c:af:20:c6:75:
8b:d7:1e:26:97:85:e5:b7:b2:2b:98:08:be:01:24:b9:00:c9:
3d:b1:51:05:6b:fe:9b:1a:1a:72:fa:ca:f1:0e:f7:c6:af:fa:
27:eb:b9:0e:22:c2:c7:7f:01:cb:44:c7:67:52:6c:19:70:8e:
06:ea:75:e3:92:28:57:5e:43:3b:8d:75:de:e6:e2:8e:b7:4c:
c0:b7:ee:2b:bb:b5:bd:41:8e:b5:79:bb:bd:1d:69:8c:b9:1e:
31:35:bd:63:ee:8b:2d:8d:c2:3c:52:02:71:a2:04:ea:a0:25:
1a:29:7f:0c:90:0f:e3:82:68:34:25:1f:92:06:46:e4:9f:b3:
6f:82:e5:4f:e3:1a:58:c6:78:fc:98:ee:3a:a3:a1:bc:0d:ca:
59:fc:e8:ac:39:27:ec:c2:08:b7:7f:ee:5c:21:a3:35:5a:a5:
0a:1d:39:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:38:46 2025 by rpki-client