Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/359179-4ac2-431c-9531-0b7a33dd5b56/1/tFBkwayGkOLHepWaUCVG6YvNNyc.mft
File: tFBkwayGkOLHepWaUCVG6YvNNyc.mft (raw, json)
Hash identifier: 8IBSjEaRdJ6yyFmB/Csnne2zDJTSG7JxrexW9GUpKr4=
Subject key identifier: BB:2F:6F:93:80:C7:DB:11:3C:6E:1E:1F:78:95:08:D0:3A:7B:30:44
Authority key identifier: B4:50:64:C1:AC:86:90:E2:C7:7A:95:9A:50:25:46:E9:8B:CD:37:27
Certificate issuer: /CN=b45064c1ac8690e2c77a959a502546e98bcd3727
Certificate serial: 0199FFC877CDFBC5EC7BEAE62FF5CBFF921B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tFBkwayGkOLHepWaUCVG6YvNNyc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/359179-4ac2-431c-9531-0b7a33dd5b56/1/tFBkwayGkOLHepWaUCVG6YvNNyc.mft
Manifest number: 0D64
Signing time: Mon 20 Oct 2025 04:02:31 +0000
Manifest this update: Mon 20 Oct 2025 04:02:31 +0000
Manifest next update: Tue 21 Oct 2025 04:02:31 +0000
Files and hashes: 1: _INaZ6DycFqZuVm42lkSOfz9oRs.roa (hash: N1fFaEC6dFW7nNDOY6nEbXrF6dJ7s2tSPU9xB9zA38k=)
2: tFBkwayGkOLHepWaUCVG6YvNNyc.crl (hash: WvUuZL+8BaDMuXxDsHSjczmfv6vWTpmyNS2Mz/XQIq4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/359179-4ac2-431c-9531-0b7a33dd5b56/1/tFBkwayGkOLHepWaUCVG6YvNNyc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/359179-4ac2-431c-9531-0b7a33dd5b56/1/tFBkwayGkOLHepWaUCVG6YvNNyc.mft
rsync://rpki.ripe.net/repository/DEFAULT/tFBkwayGkOLHepWaUCVG6YvNNyc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:c8:77:cd:fb:c5:ec:7b:ea:e6:2f:f5:cb:ff:92:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b45064c1ac8690e2c77a959a502546e98bcd3727
Validity
Not Before: Oct 20 04:02:31 2025 GMT
Not After : Oct 21 04:02:31 2025 GMT
Subject: CN=bb2f6f9380c7db113c6e1e1f789508d03a7b3044
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:67:10:3f:b8:62:8f:ab:b7:28:74:09:3e:a9:
c5:f1:fa:fe:d0:17:39:23:ab:a9:66:4c:29:b7:bd:
0f:fb:b0:f5:e6:5e:ae:47:cd:4c:bf:a1:f6:a1:1e:
08:20:03:6d:84:02:3a:6e:c8:7a:77:51:45:75:75:
2f:66:19:90:0f:f0:75:0e:5b:22:fd:92:02:be:d4:
cb:c9:c8:41:0e:e2:77:9c:7d:ab:3e:e6:09:fd:4b:
b3:9b:b5:01:97:5e:05:ea:71:9d:cc:45:97:2c:e4:
28:f4:2a:2b:08:93:7a:fd:2f:de:32:bf:7d:41:cb:
1e:21:20:a7:59:5e:7c:7b:ee:83:46:39:85:51:fe:
7a:c8:c0:0b:27:d7:5b:9c:62:60:d6:a3:69:65:f4:
ff:69:e4:ea:3c:54:43:63:1f:82:49:74:0a:32:4d:
35:56:9c:89:a1:d2:a7:40:42:b6:58:ab:9b:16:a4:
ed:46:fd:7a:cf:46:73:b1:7a:e0:3e:66:69:22:7a:
21:94:e4:a0:0c:d2:79:f3:1f:42:4b:02:57:ad:3f:
5b:a9:63:10:10:96:2e:ec:b6:5f:d9:b3:f2:52:24:
8b:25:28:41:2c:7c:33:c2:4e:d1:79:56:05:72:b1:
a1:3c:5e:f1:3d:72:d1:81:84:4e:db:d4:d5:d9:10:
bc:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:2F:6F:93:80:C7:DB:11:3C:6E:1E:1F:78:95:08:D0:3A:7B:30:44
X509v3 Authority Key Identifier:
keyid:B4:50:64:C1:AC:86:90:E2:C7:7A:95:9A:50:25:46:E9:8B:CD:37:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tFBkwayGkOLHepWaUCVG6YvNNyc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/359179-4ac2-431c-9531-0b7a33dd5b56/1/tFBkwayGkOLHepWaUCVG6YvNNyc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/359179-4ac2-431c-9531-0b7a33dd5b56/1/tFBkwayGkOLHepWaUCVG6YvNNyc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bc:b5:bb:6a:39:bf:fc:97:a2:bf:37:9e:70:25:dc:74:5c:75:
60:08:26:d8:db:9a:ef:da:95:8c:5b:ce:c8:62:66:9f:23:0c:
8f:b2:a4:35:22:64:e2:6d:f3:4c:19:51:f6:f5:7b:69:9c:fb:
2b:8f:9a:e9:bf:2b:19:b6:6f:eb:d4:95:53:0e:40:01:ae:d8:
f8:c1:5a:ce:a8:26:ec:5d:3c:d4:9f:84:c7:14:78:15:1f:76:
4b:9e:45:fd:6f:98:4a:4e:54:3c:d8:49:0f:aa:09:39:ed:4f:
b0:c4:5b:ee:4c:c7:7f:98:09:3a:5a:61:31:6f:36:a2:26:9f:
33:1d:de:e8:4a:5f:c2:ee:82:bf:6b:f2:7b:b4:2a:d5:7e:ef:
4d:66:79:8c:ab:6f:2b:3a:a4:17:0c:51:98:ab:c6:b7:36:49:
be:ea:3d:23:a0:18:2f:45:8e:e6:14:e6:4f:36:61:25:19:49:
54:48:f3:09:a3:be:de:eb:b6:c9:fa:11:79:72:2f:d9:61:24:
bd:44:69:4c:ad:02:73:2f:00:83:c8:ce:6e:a0:da:f9:95:b4:
d4:85:1e:8b:50:ed:db:4d:25:db:0d:78:7b:5c:35:f7:0d:84:
94:91:85:e7:bf:0d:fe:64:fc:02:94:c2:a2:f2:13:6d:a0:e4:
a4:72:2d:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 07:08:02 2025 by rpki-client