Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/869214-16d4-45e0-b87e-32e932d6fd0e/1/tPEVQkwYHGeWbMwkZ-3mnQYMz1M.mft
File: tPEVQkwYHGeWbMwkZ-3mnQYMz1M.mft (raw, json)
Hash identifier: hcbtx5ZY97Euf2fxbqXTgVKiB3kxyQHMMQ4i121+nKg=
Subject key identifier: E5:3C:98:B2:9E:AD:5B:88:46:14:6C:CA:D1:F5:9C:64:12:42:46:A8
Authority key identifier: B4:F1:15:42:4C:18:1C:67:96:6C:CC:24:67:ED:E6:9D:06:0C:CF:53
Certificate issuer: /CN=b4f115424c181c67966ccc2467ede69d060ccf53
Certificate serial: 0199FB45C7F5D515E5172908441B1B8FBDDD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tPEVQkwYHGeWbMwkZ-3mnQYMz1M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/869214-16d4-45e0-b87e-32e932d6fd0e/1/tPEVQkwYHGeWbMwkZ-3mnQYMz1M.mft
Manifest number: 1449
Signing time: Sun 19 Oct 2025 07:01:18 +0000
Manifest this update: Sun 19 Oct 2025 07:01:18 +0000
Manifest next update: Mon 20 Oct 2025 07:01:18 +0000
Files and hashes: 1: bqp6f9GjY5TF5wTxOeK8Ji-YrkE.roa (hash: b7SVmPCcwJQed2khWFQ0sTeZykPXeoqQG4LQy2NRwCA=)
2: tPEVQkwYHGeWbMwkZ-3mnQYMz1M.crl (hash: 4KRPEZ6wrShVjJRFlqF+i1dk+JcSpEtupYFDRnULavg=)
3: xktUIB6GDLW-h2_LFZTy4dam33Y.roa (hash: BgrfS/HN5mPWhSmcXKgkikTloXU/AxYtLSZ8SaD1EM0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/869214-16d4-45e0-b87e-32e932d6fd0e/1/tPEVQkwYHGeWbMwkZ-3mnQYMz1M.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/869214-16d4-45e0-b87e-32e932d6fd0e/1/tPEVQkwYHGeWbMwkZ-3mnQYMz1M.mft
rsync://rpki.ripe.net/repository/DEFAULT/tPEVQkwYHGeWbMwkZ-3mnQYMz1M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:45:c7:f5:d5:15:e5:17:29:08:44:1b:1b:8f:bd:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4f115424c181c67966ccc2467ede69d060ccf53
Validity
Not Before: Oct 19 07:01:18 2025 GMT
Not After : Oct 20 07:01:18 2025 GMT
Subject: CN=e53c98b29ead5b8846146ccad1f59c64124246a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:bb:8e:ae:89:20:45:ff:c0:09:06:39:7c:0c:
26:9b:fb:57:df:e5:61:c3:2d:f8:ac:8c:3d:17:02:
29:09:9b:26:8e:02:f7:56:c2:f1:65:20:f9:a3:09:
95:ae:30:d9:ab:f7:c9:7e:f9:05:59:9e:24:b3:bb:
fb:48:3e:98:56:64:cf:7c:a1:18:f9:5d:cd:d7:06:
32:e3:8e:99:93:55:e8:68:cb:90:f4:7a:77:c8:a7:
9d:4d:78:63:58:01:b8:c5:0b:8b:ae:f5:73:a1:cf:
81:18:02:2e:3a:0b:c4:1a:8d:91:b9:ba:b0:02:f0:
93:0a:74:f1:b8:cd:fa:a8:ef:c6:a0:92:ff:c3:56:
d7:d4:ed:4c:ae:54:8a:fc:05:be:60:a8:b1:9b:b3:
ec:1a:20:f8:85:d4:ff:6c:88:33:11:8a:80:3e:0d:
0a:7b:7b:25:9a:94:ba:65:5d:dd:2b:6b:aa:a6:de:
ca:83:92:87:4a:6a:f7:45:75:b6:3f:15:b2:4d:5b:
10:41:b2:17:62:33:35:a2:4f:7e:22:b9:9a:2d:40:
e4:e3:ce:85:8d:16:5e:ca:6d:41:22:37:ea:75:e6:
f8:49:9c:01:d0:db:9f:32:d8:89:b9:3d:63:0d:25:
ad:e6:da:c4:8e:8b:45:9a:7c:22:c7:ae:65:30:22:
e9:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:3C:98:B2:9E:AD:5B:88:46:14:6C:CA:D1:F5:9C:64:12:42:46:A8
X509v3 Authority Key Identifier:
keyid:B4:F1:15:42:4C:18:1C:67:96:6C:CC:24:67:ED:E6:9D:06:0C:CF:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tPEVQkwYHGeWbMwkZ-3mnQYMz1M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/869214-16d4-45e0-b87e-32e932d6fd0e/1/tPEVQkwYHGeWbMwkZ-3mnQYMz1M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/869214-16d4-45e0-b87e-32e932d6fd0e/1/tPEVQkwYHGeWbMwkZ-3mnQYMz1M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:56:db:53:ac:0a:3f:f7:0f:31:b8:d6:06:08:94:a0:6c:5e:
f8:77:00:d4:aa:4e:b0:d2:1a:b8:fe:e2:4b:f6:c4:cc:15:69:
3b:bc:00:9d:ed:0c:0f:13:17:3a:5a:4b:5c:58:a0:b8:14:60:
04:f5:9a:63:e6:4a:26:e5:c6:6b:5d:dc:0d:24:cb:08:f4:be:
46:11:96:0e:b1:fb:a3:7e:7a:85:09:e6:60:1a:b7:2c:39:51:
4d:e0:f2:b5:b3:67:ac:4c:f6:1a:c4:34:fd:17:bb:5d:1d:6b:
89:43:1a:a0:d3:87:e5:05:7d:a7:5c:1b:86:c2:29:81:e4:79:
d1:d3:74:ae:3e:94:c0:84:f5:c3:ac:ae:1a:b6:8b:4d:6b:a6:
8d:cd:be:d7:e6:9a:1f:3b:60:d7:b0:19:39:ff:b9:0d:e3:d6:
5a:f9:53:f1:fe:1a:ce:32:81:56:da:3d:63:a8:6c:83:e9:79:
ca:ae:b2:25:9d:dd:2c:44:e0:44:c0:97:dd:a2:96:dd:bd:d7:
9f:d5:ae:81:06:0f:6f:a1:bd:74:d0:c6:0a:47:d4:65:0b:52:
41:33:4c:32:40:25:64:43:cc:75:f8:9d:55:57:05:38:c9:f7:
af:e6:f4:06:10:48:bc:a2:7f:69:4a:ce:e1:83:7c:e0:cd:03:
28:e4:ee:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:31:15 2025 by rpki-client