Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/5cfbf3-e782-4013-8eee-de7d3bbfee88/1/tHhBAiSQRJTpwPfTVlCiYOX7YZM.mft
File: tHhBAiSQRJTpwPfTVlCiYOX7YZM.mft (raw, json)
Hash identifier: Yq5t7NFZyKCM+bU3suBOfGuCsf8vDnSYGUungA4oXRw=
Subject key identifier: E8:D6:29:97:D6:24:B8:0C:0A:E8:86:86:4C:D5:61:FC:93:92:EA:40
Authority key identifier: B4:78:41:02:24:90:44:94:E9:C0:F7:D3:56:50:A2:60:E5:FB:61:93
Certificate issuer: /CN=b478410224904494e9c0f7d35650a260e5fb6193
Certificate serial: 0199FAA0DE82B8C6DF4684129106F9CCF900
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tHhBAiSQRJTpwPfTVlCiYOX7YZM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/5cfbf3-e782-4013-8eee-de7d3bbfee88/1/tHhBAiSQRJTpwPfTVlCiYOX7YZM.mft
Manifest number: 16E2
Signing time: Sun 19 Oct 2025 04:01:10 +0000
Manifest this update: Sun 19 Oct 2025 04:01:10 +0000
Manifest next update: Mon 20 Oct 2025 04:01:10 +0000
Files and hashes: 1: tHhBAiSQRJTpwPfTVlCiYOX7YZM.crl (hash: vXvC1YxASktD+A2XhBc8wd2EzDYqeKSUouoLCiz3oas=)
2: uhCkTjed1Otbl84zKJAXa3t70aA.roa (hash: cZYpuZx9ZnpX3epsbIvoPloPaPVgbUbl6mh5Fr2F3pw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/5cfbf3-e782-4013-8eee-de7d3bbfee88/1/tHhBAiSQRJTpwPfTVlCiYOX7YZM.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/5cfbf3-e782-4013-8eee-de7d3bbfee88/1/tHhBAiSQRJTpwPfTVlCiYOX7YZM.mft
rsync://rpki.ripe.net/repository/DEFAULT/tHhBAiSQRJTpwPfTVlCiYOX7YZM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 04:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fa:a0:de:82:b8:c6:df:46:84:12:91:06:f9:cc:f9:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b478410224904494e9c0f7d35650a260e5fb6193
Validity
Not Before: Oct 19 04:01:10 2025 GMT
Not After : Oct 20 04:01:10 2025 GMT
Subject: CN=e8d62997d624b80c0ae886864cd561fc9392ea40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:5d:24:8f:ad:d2:6b:b5:e9:c6:b1:cd:c1:e8:
7d:21:f3:a6:db:3f:21:da:b8:90:59:36:9b:49:33:
a0:35:be:2e:05:d6:03:ce:f6:9f:ac:ac:bc:59:8e:
ab:6c:1d:86:07:f1:00:c7:33:a7:6e:39:e8:a9:a3:
92:0a:f2:36:53:17:d9:76:5a:93:da:74:eb:1b:e7:
17:1a:85:03:b0:2c:15:54:cc:66:7c:14:43:6f:a3:
59:fd:57:1b:ae:6b:91:37:98:3e:ce:e1:51:b8:fe:
9a:14:a0:b6:9a:c7:59:25:af:8c:1a:b9:32:4d:5b:
d2:06:bd:89:fd:25:e8:bd:a3:3e:54:12:0b:57:de:
42:f0:68:b6:5f:8d:da:94:72:56:a4:ff:23:4d:21:
43:aa:10:42:0c:fc:d7:17:34:83:ff:27:67:b2:6d:
5b:16:40:c2:26:0e:ea:40:05:f0:9f:51:65:37:3f:
b5:3f:f4:6d:75:ca:b8:f0:e3:1c:98:8f:eb:0f:d2:
73:f1:53:89:41:17:83:88:90:ac:4f:66:41:ab:ca:
1b:f7:9f:7d:29:e6:cb:7c:e1:a9:ea:1a:37:15:6c:
0e:7d:c1:a7:ed:45:c8:67:f0:1f:6c:16:da:a0:69:
e9:5c:41:98:ec:71:d6:4c:10:75:8f:a4:64:99:0e:
c2:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:D6:29:97:D6:24:B8:0C:0A:E8:86:86:4C:D5:61:FC:93:92:EA:40
X509v3 Authority Key Identifier:
keyid:B4:78:41:02:24:90:44:94:E9:C0:F7:D3:56:50:A2:60:E5:FB:61:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tHhBAiSQRJTpwPfTVlCiYOX7YZM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5cfbf3-e782-4013-8eee-de7d3bbfee88/1/tHhBAiSQRJTpwPfTVlCiYOX7YZM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5cfbf3-e782-4013-8eee-de7d3bbfee88/1/tHhBAiSQRJTpwPfTVlCiYOX7YZM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:d3:9b:46:c7:f7:61:36:00:e7:60:e7:12:36:1e:8e:94:65:
19:6a:eb:3d:0f:80:d7:79:71:16:6c:7b:df:35:83:54:c2:bc:
ee:93:9e:1d:d6:c3:68:ff:33:91:96:06:3f:8d:2b:d4:78:c8:
6f:14:ef:91:f4:40:2d:bb:36:38:f7:b5:53:ba:89:93:27:32:
51:b1:db:bb:64:e8:c3:c4:1c:b9:c5:68:ce:12:1c:49:60:6a:
e9:78:9f:a4:03:dd:41:f9:5b:81:ea:7d:09:38:de:bd:bc:4b:
36:7f:7f:14:4f:dc:d5:5c:8a:df:7f:5e:8a:38:81:34:fa:4e:
05:cf:1b:9c:50:c8:b2:8d:ca:65:72:a8:43:47:ec:f8:86:ca:
e4:fc:e8:cc:ac:55:05:4a:cd:d8:f8:2c:e0:60:3e:20:57:63:
06:0c:81:09:d6:00:1e:a5:9c:c7:2e:df:e7:57:47:86:54:aa:
c2:92:0f:53:fc:b7:81:4b:c5:f3:52:75:00:7c:d6:08:05:92:
ec:ae:e8:97:07:48:f0:e6:d8:c9:88:12:65:91:77:05:4e:f7:
20:92:00:7b:c3:35:c9:c7:19:25:6a:53:24:c7:1e:7b:38:7a:
30:d2:4b:a5:dd:a8:8e:0b:36:6e:6f:9d:6b:22:48:00:29:6f:
77:0b:d8:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:09:46 2025 by rpki-client