Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/7edbcf-b90f-4707-b289-a3d377c6feef/1/tv5j7ooj9JFuQFNTHmlQ22wx6AU.mft
File: tv5j7ooj9JFuQFNTHmlQ22wx6AU.mft (raw, json)
Hash identifier: MnyqrPQ0TLpSulegiS5zQX6PIXY6BQChApTqgYxXG9U=
Subject key identifier: CE:B1:A0:B6:60:9C:3E:A7:C4:97:33:BD:11:E3:B1:26:62:F9:75:AF
Authority key identifier: B6:FE:63:EE:8A:23:F4:91:6E:40:53:53:1E:69:50:DB:6C:31:E8:05
Certificate issuer: /CN=b6fe63ee8a23f4916e4053531e6950db6c31e805
Certificate serial: 0199FEB4CBD4424F061032E3544722D09429
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tv5j7ooj9JFuQFNTHmlQ22wx6AU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/7edbcf-b90f-4707-b289-a3d377c6feef/1/tv5j7ooj9JFuQFNTHmlQ22wx6AU.mft
Manifest number: 16E2
Signing time: Sun 19 Oct 2025 23:01:25 +0000
Manifest this update: Sun 19 Oct 2025 23:01:25 +0000
Manifest next update: Mon 20 Oct 2025 23:01:25 +0000
Files and hashes: 1: TDDnhsWgxkGdG7BfGlC4CIB8hXc.roa (hash: mAFWPEFNFtu12Nez2hG2dDFI+Ij+KVUdoJCzsE5w8Wg=)
2: tv5j7ooj9JFuQFNTHmlQ22wx6AU.crl (hash: IhmaX0bgRNbRxxcySPphhZIU5ixrcQE1tZVmSn5WUog=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/7edbcf-b90f-4707-b289-a3d377c6feef/1/tv5j7ooj9JFuQFNTHmlQ22wx6AU.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/7edbcf-b90f-4707-b289-a3d377c6feef/1/tv5j7ooj9JFuQFNTHmlQ22wx6AU.mft
rsync://rpki.ripe.net/repository/DEFAULT/tv5j7ooj9JFuQFNTHmlQ22wx6AU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 23:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:b4:cb:d4:42:4f:06:10:32:e3:54:47:22:d0:94:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b6fe63ee8a23f4916e4053531e6950db6c31e805
Validity
Not Before: Oct 19 23:01:25 2025 GMT
Not After : Oct 20 23:01:25 2025 GMT
Subject: CN=ceb1a0b6609c3ea7c49733bd11e3b12662f975af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:ed:61:b2:e2:ab:e5:ab:1c:88:0d:2a:93:56:
30:5d:ec:e2:77:70:20:a7:35:09:43:83:c4:0b:f2:
cc:6c:d2:bb:67:12:f3:40:0f:b0:19:e3:d9:85:90:
bc:1f:3d:98:75:02:bd:80:98:ba:c5:ca:b1:e6:30:
1a:99:b7:8a:8e:3d:62:14:a1:fd:9b:81:22:de:de:
cf:e1:f2:43:c5:d5:0b:05:72:50:c0:e7:e4:91:cf:
c9:8e:78:3d:28:12:c8:57:c0:ce:e2:c8:b9:c1:e0:
72:69:8e:64:c4:f6:72:17:cf:7a:39:30:09:36:ae:
f1:a4:2b:3a:ea:74:11:45:17:01:48:c1:47:0b:36:
90:8d:c2:0c:5c:b0:71:5d:5f:f7:dd:28:44:ac:d0:
36:1c:ba:81:f5:3d:d7:0d:0a:68:63:b2:eb:3b:9c:
27:45:51:03:39:44:a3:3a:5d:41:fc:14:c8:e9:87:
b8:6b:12:4f:43:27:b3:00:e3:46:41:2b:1d:06:39:
4c:3a:f0:e4:85:9e:7a:23:3b:29:1d:6f:c3:6c:1f:
9d:7f:f9:cc:58:7f:6c:8d:d2:21:94:64:f3:6e:6b:
43:c3:c6:47:cb:c6:81:5f:51:d6:aa:c9:85:41:a1:
35:84:25:44:1c:a2:57:a3:aa:2d:a4:eb:35:0a:b1:
97:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:B1:A0:B6:60:9C:3E:A7:C4:97:33:BD:11:E3:B1:26:62:F9:75:AF
X509v3 Authority Key Identifier:
keyid:B6:FE:63:EE:8A:23:F4:91:6E:40:53:53:1E:69:50:DB:6C:31:E8:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tv5j7ooj9JFuQFNTHmlQ22wx6AU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/7edbcf-b90f-4707-b289-a3d377c6feef/1/tv5j7ooj9JFuQFNTHmlQ22wx6AU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/7edbcf-b90f-4707-b289-a3d377c6feef/1/tv5j7ooj9JFuQFNTHmlQ22wx6AU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:82:71:7a:82:b6:8a:a3:a8:1d:ed:c2:c8:27:3e:75:cd:0b:
dd:7e:aa:9a:57:c9:7e:8d:6c:9c:54:58:dd:3b:8b:6c:84:c1:
f7:f5:a8:58:b3:c3:08:6a:f2:f1:20:26:95:32:ba:fb:f7:02:
02:96:f3:56:12:8f:48:d1:7f:fb:17:1b:61:f3:ec:2d:31:93:
35:ba:90:d2:38:d6:4f:76:58:64:a4:41:d9:26:53:ff:e0:16:
5b:f2:bd:a8:24:0f:17:93:72:42:b0:c9:16:0b:62:79:f3:bf:
84:22:48:48:1d:f9:b5:ff:4f:a8:ca:7a:0e:12:08:70:62:aa:
f6:f6:34:ba:bf:65:50:d0:a9:65:e0:33:dc:94:e9:2e:88:ff:
2c:79:15:68:6a:1c:d1:54:43:68:cc:e6:cf:a0:1f:e6:e6:bc:
c8:93:59:e6:b8:b4:2f:39:6a:ec:4e:cb:88:34:34:c5:08:75:
ce:62:d9:df:ef:0c:1a:33:c7:aa:f3:a4:b2:a8:5a:df:37:d9:
0e:ce:4e:ac:ff:c8:d0:f3:77:b2:bd:ce:ea:ab:cc:c5:c4:ce:
8e:93:9d:0d:c9:fa:aa:ea:7f:ac:b5:28:76:a7:0f:cc:13:4f:
d1:9e:17:3a:7a:21:d9:7f:f0:69:12:9f:2e:77:a4:55:b8:11:
b8:b4:c7:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 08:55:47 2025 by rpki-client