Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/262f40-48c7-43c6-9d83-1548ac1356be/1/tDqirb6dQEE3M58g_VhiPIo58TA.mft
File: tDqirb6dQEE3M58g_VhiPIo58TA.mft (raw, json)
Hash identifier: U2k1G6VJiMwfUihaIf5qVLANbd7nzQFWnq3h1QimcmM=
Subject key identifier: 8C:2C:D8:B0:00:7B:D9:46:CA:24:28:8D:DF:B5:AE:51:5D:29:DC:37
Authority key identifier: B4:3A:A2:AD:BE:9D:40:41:37:33:9F:20:FD:58:62:3C:8A:39:F1:30
Certificate issuer: /CN=b43aa2adbe9d404137339f20fd58623c8a39f130
Certificate serial: 0199FD6AE8D2CAA89F209C1DBB1C96B5C812
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDqirb6dQEE3M58g_VhiPIo58TA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/262f40-48c7-43c6-9d83-1548ac1356be/1/tDqirb6dQEE3M58g_VhiPIo58TA.mft
Manifest number: 068F
Signing time: Sun 19 Oct 2025 17:01:05 +0000
Manifest this update: Sun 19 Oct 2025 17:01:05 +0000
Manifest next update: Mon 20 Oct 2025 17:01:05 +0000
Files and hashes: 1: DR42yKGsjL2cx3Lp0nYZ2-J6QjI.roa (hash: SNpq+XJB/gPAUUzDmYBdIDihlauDEu/Coqako/V/GUw=)
2: tDqirb6dQEE3M58g_VhiPIo58TA.crl (hash: A2oh50Sdn0ytx9GhiXr+3wVB2b/TevsqQ/wqL7woXKA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/262f40-48c7-43c6-9d83-1548ac1356be/1/tDqirb6dQEE3M58g_VhiPIo58TA.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/262f40-48c7-43c6-9d83-1548ac1356be/1/tDqirb6dQEE3M58g_VhiPIo58TA.mft
rsync://rpki.ripe.net/repository/DEFAULT/tDqirb6dQEE3M58g_VhiPIo58TA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:6a:e8:d2:ca:a8:9f:20:9c:1d:bb:1c:96:b5:c8:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b43aa2adbe9d404137339f20fd58623c8a39f130
Validity
Not Before: Oct 19 17:01:05 2025 GMT
Not After : Oct 20 17:01:05 2025 GMT
Subject: CN=8c2cd8b0007bd946ca24288ddfb5ae515d29dc37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:16:27:ce:06:93:49:d4:09:46:fe:e0:bd:11:
d0:26:09:fe:0e:01:98:3e:e8:6f:54:86:8e:d7:32:
9d:05:7d:cc:50:ef:d8:4e:a2:2d:d4:8a:78:63:8c:
34:9e:51:bd:17:4a:97:7c:a2:34:a3:21:26:a8:34:
4f:a9:35:fb:cc:1a:1a:75:de:1a:41:ae:08:e8:ff:
60:54:dd:aa:8a:62:05:c2:6c:32:39:2b:8f:36:e9:
21:4a:aa:4d:a5:91:f7:fa:21:7e:c8:35:b0:05:89:
7b:fa:70:41:6e:eb:85:77:e9:0b:b0:20:2e:bf:60:
cd:52:33:39:c8:65:61:ae:8a:61:ef:4d:0a:d4:f5:
4c:71:03:e2:a2:bd:2d:10:68:ae:76:a3:b2:ea:3e:
5f:6d:42:51:13:c9:bd:d2:f7:49:83:96:9f:2a:00:
f1:7b:67:30:8b:0c:78:10:8f:67:ca:33:15:0f:52:
e3:93:c4:52:1d:b1:58:51:d4:5a:2f:72:98:36:59:
25:a8:98:4f:23:a0:a8:c8:5e:8c:8b:94:7d:6e:07:
a2:9f:1b:7b:c8:12:64:d3:e6:97:9c:90:04:5a:22:
2f:79:00:87:9b:ae:ea:e7:18:ef:ad:d6:11:0a:1a:
a1:d7:38:ab:39:c7:ef:d3:12:37:f5:a8:68:da:1e:
03:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:2C:D8:B0:00:7B:D9:46:CA:24:28:8D:DF:B5:AE:51:5D:29:DC:37
X509v3 Authority Key Identifier:
keyid:B4:3A:A2:AD:BE:9D:40:41:37:33:9F:20:FD:58:62:3C:8A:39:F1:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDqirb6dQEE3M58g_VhiPIo58TA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/262f40-48c7-43c6-9d83-1548ac1356be/1/tDqirb6dQEE3M58g_VhiPIo58TA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/262f40-48c7-43c6-9d83-1548ac1356be/1/tDqirb6dQEE3M58g_VhiPIo58TA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:69:1a:65:c6:ab:78:be:68:89:62:09:a3:0c:8c:c8:92:f4:
de:eb:07:31:ba:c8:2c:24:20:42:94:d7:f6:5c:32:dd:6d:ab:
f0:b4:7f:7d:41:d2:a1:ce:a4:df:26:e6:13:48:ee:27:d7:b8:
ff:62:70:93:25:75:4e:d2:f0:e2:4e:61:58:c6:9b:b1:c8:9f:
7a:09:20:6d:60:29:49:74:b9:92:3a:6d:f1:33:ac:fb:8d:b3:
0c:7e:8d:30:d9:a2:c2:fc:35:64:80:c4:fe:e8:3e:72:02:2e:
b6:d2:9c:1e:e4:41:fb:4e:cb:01:76:19:5b:1a:c0:83:20:6a:
0f:96:c7:b4:de:95:60:5c:1f:59:93:a3:9d:ce:96:e0:a4:aa:
b6:ba:36:29:06:c6:4e:17:73:4f:30:c5:f2:0b:60:6e:01:9c:
0d:af:b9:51:96:eb:3f:7e:13:67:c8:07:78:c4:21:79:6f:12:
a2:19:f6:41:f6:63:36:5a:96:c5:a7:f7:f3:53:8a:3b:db:b6:
f1:51:7d:da:6e:82:89:51:ff:fc:1f:ec:f7:06:c8:da:1a:a4:
9a:59:69:1d:30:f8:26:da:ba:1f:cf:44:7b:46:42:81:74:87:
3e:1e:fc:b5:c6:06:c4:9e:25:f5:a4:f2:4d:0f:89:28:a1:f0:
e7:43:d6:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:47:08 2025 by rpki-client