Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/e4d20f-6dc8-497d-a8d6-9dddd6802088/1/tjowlEOcrA9VVwEobNVDc7zmy1A.mft
File: tjowlEOcrA9VVwEobNVDc7zmy1A.mft (raw, json)
Hash identifier: 7tmaOPW0lXsQIcx5BwnvZH7u3phU/Z80K/AeKqJecRI=
Subject key identifier: F5:42:2B:4D:00:C3:EA:56:FD:0C:C1:E8:18:22:9E:8C:F2:49:99:E7
Authority key identifier: B6:3A:30:94:43:9C:AC:0F:55:57:01:28:6C:D5:43:73:BC:E6:CB:50
Certificate issuer: /CN=b63a3094439cac0f555701286cd54373bce6cb50
Certificate serial: 0199FD3429DBAE46E2BCD38CE2011DF2A736
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tjowlEOcrA9VVwEobNVDc7zmy1A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/e4d20f-6dc8-497d-a8d6-9dddd6802088/1/tjowlEOcrA9VVwEobNVDc7zmy1A.mft
Manifest number: 0486
Signing time: Sun 19 Oct 2025 16:01:18 +0000
Manifest this update: Sun 19 Oct 2025 16:01:18 +0000
Manifest next update: Mon 20 Oct 2025 16:01:18 +0000
Files and hashes: 1: 3NvNrWEVmChu4DMSl71yUBOUL1E.roa (hash: GasLqu+d7ICCgXWrZURm0ppqSwFCpgX0/TSR8hCVtjo=)
2: 7PrThjlXTdWomtXWwr_eOJDlAFY.roa (hash: 2SgrElvVXtH7x+BnWs8QSmeq0QSew6wcOvgzJlh8YyA=)
3: tjowlEOcrA9VVwEobNVDc7zmy1A.crl (hash: Vx9mXssl8N4eJC6y/RpWT9NItbEw0yFgy58cbkupfxw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/e4d20f-6dc8-497d-a8d6-9dddd6802088/1/tjowlEOcrA9VVwEobNVDc7zmy1A.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/e4d20f-6dc8-497d-a8d6-9dddd6802088/1/tjowlEOcrA9VVwEobNVDc7zmy1A.mft
rsync://rpki.ripe.net/repository/DEFAULT/tjowlEOcrA9VVwEobNVDc7zmy1A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:34:29:db:ae:46:e2:bc:d3:8c:e2:01:1d:f2:a7:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b63a3094439cac0f555701286cd54373bce6cb50
Validity
Not Before: Oct 19 16:01:18 2025 GMT
Not After : Oct 20 16:01:18 2025 GMT
Subject: CN=f5422b4d00c3ea56fd0cc1e818229e8cf24999e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:32:c1:c9:84:5d:aa:01:93:e1:77:38:0a:b1:
88:97:19:24:06:7b:59:63:a3:37:86:74:7b:7b:3b:
35:18:a6:11:82:76:60:0a:50:64:94:6a:15:db:d6:
83:13:3f:4b:3b:71:b8:fd:64:81:df:ca:1c:7f:dc:
19:e9:8a:6e:e4:34:20:2c:3b:fd:df:08:b2:d3:c5:
02:45:9d:23:b0:17:9d:e1:54:96:0a:b4:e7:67:63:
44:2b:c8:ff:a1:24:a0:ff:27:c0:32:ff:b3:75:5e:
eb:e2:15:84:6f:7c:48:ae:bc:bf:2e:bb:bc:b3:06:
2e:02:fc:63:a5:e5:86:4f:80:68:9f:83:0f:d4:cb:
39:f9:80:51:f6:ab:28:bb:61:10:c6:bf:73:f3:f0:
e7:f6:9b:7e:6b:48:6f:c1:24:f6:6d:d4:bd:44:b9:
81:85:39:ae:f5:b8:6b:5d:79:81:1d:13:ad:81:94:
01:35:0f:95:dd:d9:ee:df:0b:f3:70:64:a9:eb:24:
5f:d5:36:c0:69:08:fe:ea:85:96:b1:c3:b8:f2:c2:
aa:c0:03:8a:7f:c2:2b:9c:97:52:93:68:1a:b7:b5:
9f:5e:70:b8:e1:31:a6:38:9c:f6:72:d0:9f:de:21:
05:65:1f:3b:0a:23:83:96:a4:06:2d:0b:28:76:a2:
95:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:42:2B:4D:00:C3:EA:56:FD:0C:C1:E8:18:22:9E:8C:F2:49:99:E7
X509v3 Authority Key Identifier:
keyid:B6:3A:30:94:43:9C:AC:0F:55:57:01:28:6C:D5:43:73:BC:E6:CB:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tjowlEOcrA9VVwEobNVDc7zmy1A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/e4d20f-6dc8-497d-a8d6-9dddd6802088/1/tjowlEOcrA9VVwEobNVDc7zmy1A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/e4d20f-6dc8-497d-a8d6-9dddd6802088/1/tjowlEOcrA9VVwEobNVDc7zmy1A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:26:eb:5c:34:2d:0e:d8:f1:cf:43:d4:23:97:6d:ff:66:9b:
56:fd:d7:18:ea:7f:a4:3b:54:a7:97:e2:d1:f9:2b:30:b1:10:
91:e6:f3:1a:0e:ce:4d:f9:60:b1:8e:28:21:d7:cf:d6:08:f3:
37:23:ea:58:87:c0:c8:83:5d:ae:94:6e:d6:36:77:0c:97:07:
4f:bb:82:40:21:b4:e5:49:6b:54:ff:df:76:91:e0:94:47:65:
27:f8:9d:0c:18:7b:79:c0:9a:b8:1b:06:b1:ac:5c:92:87:18:
29:90:a1:1a:98:9a:52:a6:a3:bc:f9:52:af:bc:60:4a:83:6d:
d4:8f:56:b7:5e:2c:c5:95:a2:b0:67:08:2b:1c:df:c8:22:93:
c9:ae:b0:a4:0e:99:ea:71:d3:fe:16:ba:44:8e:b4:71:9c:c0:
1b:9c:e9:1c:a9:f5:67:b8:06:0f:2d:c2:ba:56:36:8f:51:bb:
19:94:25:24:38:5e:bd:5a:de:e0:03:3f:c9:a3:cb:35:5b:ae:
23:9d:87:ea:9d:61:2a:47:1d:37:8f:02:9c:74:82:0d:92:1e:
ff:37:fd:28:14:61:b8:68:d3:1b:84:7a:68:1c:2f:0b:2b:ce:
78:d7:be:97:82:24:a4:3b:be:20:7a:d4:64:72:f6:42:d9:00:
ba:41:2c:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 22:36:09 2025 by rpki-client