Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/179ed5-d253-4255-9017-88df125ba663/1/TOmGBryaXUQHT_jL7cvbz8NfBWI.mft
File: TOmGBryaXUQHT_jL7cvbz8NfBWI.mft (raw, json)
Hash identifier: 4ogUgElhjnE/zsKfiezNHdWgyT9OvqoL4FeJVH7M9NI=
Subject key identifier: 00:B0:B0:50:8C:75:50:80:F2:8A:5F:BC:4F:EF:70:7E:69:EB:12:B3
Authority key identifier: 4C:E9:86:06:BC:9A:5D:44:07:4F:F8:CB:ED:CB:DB:CF:C3:5F:05:62
Certificate issuer: /CN=4ce98606bc9a5d44074ff8cbedcbdbcfc35f0562
Certificate serial: 0199FB46084CB81F16FAC85D134F342145B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TOmGBryaXUQHT_jL7cvbz8NfBWI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/179ed5-d253-4255-9017-88df125ba663/1/TOmGBryaXUQHT_jL7cvbz8NfBWI.mft
Manifest number: 16E4
Signing time: Sun 19 Oct 2025 07:01:34 +0000
Manifest this update: Sun 19 Oct 2025 07:01:34 +0000
Manifest next update: Mon 20 Oct 2025 07:01:34 +0000
Files and hashes: 1: TOmGBryaXUQHT_jL7cvbz8NfBWI.crl (hash: GiZQIvv2YePLeYApuc7F1IRDXtHVRunG2MtWYxsn+hM=)
2: _2jPSPlgYJsD4ywwlbMtnQzhjck.roa (hash: dPt4vhrAZj1gNIW23Wk2/nT1GhYcZvAFuVHXtMeqVMs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/179ed5-d253-4255-9017-88df125ba663/1/TOmGBryaXUQHT_jL7cvbz8NfBWI.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/179ed5-d253-4255-9017-88df125ba663/1/TOmGBryaXUQHT_jL7cvbz8NfBWI.mft
rsync://rpki.ripe.net/repository/DEFAULT/TOmGBryaXUQHT_jL7cvbz8NfBWI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:46:08:4c:b8:1f:16:fa:c8:5d:13:4f:34:21:45:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ce98606bc9a5d44074ff8cbedcbdbcfc35f0562
Validity
Not Before: Oct 19 07:01:34 2025 GMT
Not After : Oct 20 07:01:34 2025 GMT
Subject: CN=00b0b0508c755080f28a5fbc4fef707e69eb12b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:d7:26:9e:27:05:c2:64:8c:2a:9a:52:b7:12:
fe:08:1a:e7:b4:b9:2b:2c:28:83:86:2d:3d:f6:f2:
66:b7:74:4a:94:82:8d:43:3d:cc:2a:8d:1e:e2:68:
29:e3:57:51:89:5e:b7:70:f3:52:b1:4d:21:84:b1:
12:9a:4b:18:2c:9e:24:33:b8:49:b9:15:e7:c5:df:
c9:b7:07:f0:c6:56:3b:b4:f7:e5:0f:b0:a4:be:38:
2f:59:87:65:37:7c:bd:06:7f:48:c0:63:dc:ce:1b:
06:74:5f:47:08:40:d2:68:ab:86:c4:3e:09:ac:4c:
38:83:09:c1:da:d1:71:d3:9a:30:ce:d3:a8:50:e1:
e9:30:c3:70:e2:8c:2b:d0:fd:68:a1:40:fe:06:7e:
e6:0e:3c:b2:f8:1b:10:f5:d4:3f:e0:56:f6:4a:ec:
03:b4:b7:87:76:d8:aa:1e:33:6a:e0:1f:37:47:f2:
4f:04:f9:f4:97:19:68:50:2d:09:a0:ba:94:5b:fa:
eb:00:1c:6e:0c:a8:da:c2:54:06:f5:78:b4:d2:0e:
82:c8:cb:2a:39:1e:1f:90:4d:04:05:04:b5:67:22:
84:75:66:ec:d8:23:f2:4a:c4:17:d6:44:fc:39:68:
08:08:11:3e:52:d7:c7:0f:f5:30:e7:f1:a5:93:49:
51:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:B0:B0:50:8C:75:50:80:F2:8A:5F:BC:4F:EF:70:7E:69:EB:12:B3
X509v3 Authority Key Identifier:
keyid:4C:E9:86:06:BC:9A:5D:44:07:4F:F8:CB:ED:CB:DB:CF:C3:5F:05:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TOmGBryaXUQHT_jL7cvbz8NfBWI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/179ed5-d253-4255-9017-88df125ba663/1/TOmGBryaXUQHT_jL7cvbz8NfBWI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/179ed5-d253-4255-9017-88df125ba663/1/TOmGBryaXUQHT_jL7cvbz8NfBWI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:0b:0d:cc:3f:7f:65:a6:a0:7c:0e:5a:85:1d:17:14:4c:91:
9d:0f:2e:0b:2e:ec:c9:81:79:53:8d:3c:fe:15:2d:08:c5:a1:
32:a0:5a:db:bf:5c:60:b3:04:63:39:df:37:cb:9f:3e:0d:7e:
97:76:8c:6b:08:88:fe:53:69:83:cd:47:78:85:ad:6d:12:c2:
29:00:3e:0e:d3:be:48:da:e5:03:7c:22:4a:ad:7d:4e:3b:5d:
91:06:56:cf:97:17:ee:2c:2b:05:33:4e:72:50:90:ec:58:06:
a1:b4:fe:a8:3e:70:2b:dd:e4:16:00:13:51:e1:a8:85:7b:5a:
28:18:5f:6e:7f:ed:53:b6:6b:28:8b:81:fd:3e:18:fe:62:06:
98:78:07:41:41:31:8a:38:13:ff:f6:c2:dd:2d:4e:63:9c:c1:
ef:1c:bb:54:ff:4e:2e:12:2b:bd:19:70:f2:18:42:c2:69:4b:
b3:45:ce:18:22:de:51:d4:0d:fe:0c:1e:3e:97:0b:f6:c6:e7:
6f:59:fd:45:12:78:9e:00:bc:e7:5f:3b:71:3f:c9:71:ce:02:
01:c5:bc:33:f5:13:b8:2e:7f:e2:94:d2:11:ea:1a:cd:d2:25:
bb:dc:b3:30:2b:6f:f1:2e:b5:41:7b:4d:8a:b4:bb:07:fd:f2:
fa:94:2b:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:19:57 2025 by rpki-client