Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/91b31e-0711-43fa-bc29-932b4ac0aafd/1/tTVrOmd4voxhFK2H2q_NB8pV2AA.mft
File: tTVrOmd4voxhFK2H2q_NB8pV2AA.mft (raw, json)
Hash identifier: Lb5ScFNvSGQJ0XpK6iXegWXXYSiIJFsQ5LMxcRcRGFY=
Subject key identifier: D8:3B:A5:E7:FB:99:72:09:01:65:81:E7:DA:06:0A:47:5F:97:5A:3D
Authority key identifier: B5:35:6B:3A:67:78:BE:8C:61:14:AD:87:DA:AF:CD:07:CA:55:D8:00
Certificate issuer: /CN=b5356b3a6778be8c6114ad87daafcd07ca55d800
Certificate serial: 0199FD341EAF0663E4359F04662D37415D66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tTVrOmd4voxhFK2H2q_NB8pV2AA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/91b31e-0711-43fa-bc29-932b4ac0aafd/1/tTVrOmd4voxhFK2H2q_NB8pV2AA.mft
Manifest number: 16E3
Signing time: Sun 19 Oct 2025 16:01:15 +0000
Manifest this update: Sun 19 Oct 2025 16:01:15 +0000
Manifest next update: Mon 20 Oct 2025 16:01:15 +0000
Files and hashes: 1: NQNYc6fmHLA_NSQLy1429x1Q7Rs.roa (hash: 9fkXQ4KSWlEupj10JS2rCXdqinSmRcwnxokumXbhroc=)
2: QbjMGccKG5d5ZKbesdYHgP5_B94.roa (hash: 4D93Q+Whu8oYfv+HOP7uP002kldwgOYc75DA0DhrTb4=)
3: tTVrOmd4voxhFK2H2q_NB8pV2AA.crl (hash: 9FpbGV+pZtWVQIdzbVtC6XukCHEFRACwN2MRhRk0h1U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/91b31e-0711-43fa-bc29-932b4ac0aafd/1/tTVrOmd4voxhFK2H2q_NB8pV2AA.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/91b31e-0711-43fa-bc29-932b4ac0aafd/1/tTVrOmd4voxhFK2H2q_NB8pV2AA.mft
rsync://rpki.ripe.net/repository/DEFAULT/tTVrOmd4voxhFK2H2q_NB8pV2AA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:34:1e:af:06:63:e4:35:9f:04:66:2d:37:41:5d:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5356b3a6778be8c6114ad87daafcd07ca55d800
Validity
Not Before: Oct 19 16:01:15 2025 GMT
Not After : Oct 20 16:01:15 2025 GMT
Subject: CN=d83ba5e7fb997209016581e7da060a475f975a3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:18:fe:d1:f0:14:83:b0:93:1f:99:f3:80:d6:
8c:8b:50:ac:5e:f8:23:7c:99:72:58:0a:ba:3c:79:
3c:31:78:70:45:fc:8a:4c:c7:0e:db:29:0a:26:6a:
4d:08:a1:35:92:1e:eb:19:10:25:51:52:9b:25:2e:
ad:0e:bb:eb:32:43:f6:eb:a1:96:fe:9f:38:ae:48:
71:57:b8:82:d7:85:c1:a6:43:6d:49:9b:bd:eb:0c:
90:af:73:5f:47:a2:aa:22:2c:b7:aa:4b:60:b1:28:
f0:e6:43:55:e4:72:21:ba:01:fa:6d:68:ea:50:bc:
e6:4b:1b:e8:98:1e:07:f7:12:5d:41:91:f1:06:16:
95:c2:c0:ac:f3:03:44:0a:7c:aa:72:4b:45:1a:da:
98:b3:f8:02:63:ba:55:0e:bf:c2:6f:68:55:90:3c:
9d:cd:22:c9:d3:bb:85:39:d6:ff:f9:0a:ef:5d:c5:
11:c1:e1:a3:57:09:7f:ee:62:85:71:a2:3b:01:83:
bc:ab:b5:be:14:44:4b:20:95:bc:2d:10:e4:5e:95:
7c:5b:df:fe:7b:a7:71:99:44:eb:55:a1:cd:27:e6:
d2:27:94:12:45:3a:83:c4:fe:2d:29:dd:ca:44:59:
2d:3b:28:40:87:fa:70:54:94:a6:3b:5f:93:10:dc:
29:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:3B:A5:E7:FB:99:72:09:01:65:81:E7:DA:06:0A:47:5F:97:5A:3D
X509v3 Authority Key Identifier:
keyid:B5:35:6B:3A:67:78:BE:8C:61:14:AD:87:DA:AF:CD:07:CA:55:D8:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tTVrOmd4voxhFK2H2q_NB8pV2AA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/91b31e-0711-43fa-bc29-932b4ac0aafd/1/tTVrOmd4voxhFK2H2q_NB8pV2AA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/91b31e-0711-43fa-bc29-932b4ac0aafd/1/tTVrOmd4voxhFK2H2q_NB8pV2AA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:1c:f9:d7:ea:47:ae:54:68:b6:41:f8:36:32:5b:73:08:41:
1a:0a:71:d7:91:0f:d2:45:66:5e:bb:ee:b6:7a:ce:2c:c8:8b:
42:ff:46:bc:39:cb:16:6f:b9:9f:ae:22:11:6f:38:ee:2b:9b:
95:02:dd:19:e4:ac:e3:0f:32:e3:f7:69:f8:32:87:68:af:85:
02:38:3a:f4:df:94:4e:14:ee:35:cf:12:65:d3:dc:b1:2e:4b:
0e:50:bf:d9:a7:13:62:44:4d:6f:23:99:c9:54:90:eb:41:27:
34:ed:b2:4d:9f:2d:16:2d:12:e0:ed:03:b2:47:f2:4e:bc:9c:
75:c8:69:0a:3b:50:d0:54:fc:3d:2b:f2:8c:15:85:6c:c5:91:
0e:35:59:3f:7a:34:b1:44:28:10:74:52:67:42:e9:91:90:0a:
50:85:49:fd:b7:31:6c:db:e2:71:38:3a:b3:b6:18:03:64:7c:
59:ed:b9:59:5c:66:d1:e2:11:15:eb:a8:2e:bf:6a:ad:6c:3b:
ad:86:b7:d9:2d:36:e4:3d:08:ac:e8:8c:6e:9a:2a:81:51:ba:
b7:4e:d6:db:11:3a:c0:21:bc:0b:64:12:dc:66:5c:71:f2:37:
a8:d9:25:a5:64:27:f7:6f:f9:e0:14:cf:41:74:dd:17:23:06:
7f:83:47:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:12:26 2025 by rpki-client