Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/b22c1e-ca4c-481e-91a2-5c93239e5e2e/1/tp0ot9AoyruWhKgOFLqvFcpv0vY.mft
File: tp0ot9AoyruWhKgOFLqvFcpv0vY.mft (raw, json)
Hash identifier: a6F0Y9kGvCS7rg+EOLsp3cGpJnoM0jy52OdgW0ivrBg=
Subject key identifier: 62:CA:C2:C4:7E:CB:D6:1D:B7:52:CC:B6:57:B1:8B:C3:48:6B:A4:93
Authority key identifier: B6:9D:28:B7:D0:28:CA:BB:96:84:A8:0E:14:BA:AF:15:CA:6F:D2:F6
Certificate issuer: /CN=b69d28b7d028cabb9684a80e14baaf15ca6fd2f6
Certificate serial: 0199FB46178486D0285D41DC2CDF170FB943
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tp0ot9AoyruWhKgOFLqvFcpv0vY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/b22c1e-ca4c-481e-91a2-5c93239e5e2e/1/tp0ot9AoyruWhKgOFLqvFcpv0vY.mft
Manifest number: 16E2
Signing time: Sun 19 Oct 2025 07:01:38 +0000
Manifest this update: Sun 19 Oct 2025 07:01:38 +0000
Manifest next update: Mon 20 Oct 2025 07:01:38 +0000
Files and hashes: 1: BWKFYtuMXyE_lLT4h0W6XfTBenI.roa (hash: fLpCOLgiuzK6uz2EqJr6SiyMyUYxX5Pc6xAMSALFqDM=)
2: tp0ot9AoyruWhKgOFLqvFcpv0vY.crl (hash: +Ko+4D3d5AhR7SZJo3e02mwE18e55tOHLhP31/T/1dY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/b22c1e-ca4c-481e-91a2-5c93239e5e2e/1/tp0ot9AoyruWhKgOFLqvFcpv0vY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/b22c1e-ca4c-481e-91a2-5c93239e5e2e/1/tp0ot9AoyruWhKgOFLqvFcpv0vY.mft
rsync://rpki.ripe.net/repository/DEFAULT/tp0ot9AoyruWhKgOFLqvFcpv0vY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:46:17:84:86:d0:28:5d:41:dc:2c:df:17:0f:b9:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b69d28b7d028cabb9684a80e14baaf15ca6fd2f6
Validity
Not Before: Oct 19 07:01:38 2025 GMT
Not After : Oct 20 07:01:38 2025 GMT
Subject: CN=62cac2c47ecbd61db752ccb657b18bc3486ba493
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:e3:5e:23:0e:c0:06:91:1c:97:f4:78:03:ea:
b7:6c:f5:a7:4f:c3:a2:16:f1:55:e7:5a:de:3d:88:
28:10:14:1a:16:ee:cf:f3:bf:9d:16:43:8c:16:c9:
46:5c:e5:0e:f0:a0:13:4c:89:df:cf:70:63:89:e4:
04:1e:82:d9:3a:27:7b:7f:25:3a:21:c8:7a:ff:ce:
92:f7:e1:0e:4a:7b:24:d3:a5:2b:d5:19:14:0a:02:
e3:e8:45:ca:f7:2e:c1:75:19:2c:6c:62:fc:d1:6e:
4e:29:ab:3b:05:65:63:11:48:e2:c6:73:01:c0:63:
98:19:55:ba:8d:31:4b:8f:bf:03:95:0f:7b:a3:03:
27:24:08:1f:05:b7:e0:1f:bf:2e:97:29:79:13:ce:
55:4a:22:a3:d4:5c:ad:0f:91:1c:8c:a3:29:24:11:
bd:f2:61:0f:2e:0a:64:fc:a5:b6:ea:a2:91:4d:4f:
e1:5f:a4:0c:a1:34:63:99:87:3d:b6:ed:3e:d3:43:
5f:7e:2b:6c:27:49:50:cc:21:c9:18:87:2f:fa:ed:
96:b2:75:fe:ae:89:e1:2d:31:82:62:e0:b6:8e:07:
56:1f:7d:d1:af:39:bc:fa:1a:92:e5:b3:a0:40:b6:
24:7d:26:d7:d1:9c:6e:7f:9d:18:39:b0:02:de:d4:
d0:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:CA:C2:C4:7E:CB:D6:1D:B7:52:CC:B6:57:B1:8B:C3:48:6B:A4:93
X509v3 Authority Key Identifier:
keyid:B6:9D:28:B7:D0:28:CA:BB:96:84:A8:0E:14:BA:AF:15:CA:6F:D2:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tp0ot9AoyruWhKgOFLqvFcpv0vY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/b22c1e-ca4c-481e-91a2-5c93239e5e2e/1/tp0ot9AoyruWhKgOFLqvFcpv0vY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/b22c1e-ca4c-481e-91a2-5c93239e5e2e/1/tp0ot9AoyruWhKgOFLqvFcpv0vY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:cd:f4:e5:78:5b:8c:0f:3d:d0:d5:9e:ce:ac:8c:28:eb:cb:
a8:a5:43:71:72:b4:96:16:3b:7c:64:db:13:d4:ae:0b:89:8a:
e1:02:33:1c:81:07:33:62:ad:a0:95:28:55:ba:24:17:85:a7:
24:86:4d:0d:c5:c3:58:64:a7:87:0f:75:3d:09:3a:2b:b1:9e:
06:7c:d6:ab:a6:3b:5e:57:fd:0b:e4:1f:9b:3d:35:57:fa:74:
b0:6f:e0:52:f9:7b:05:6f:c5:42:23:a2:d3:2a:79:6c:9a:c2:
7a:60:1b:ab:1b:b3:20:b2:29:38:f7:80:e9:0f:41:a9:e4:0c:
77:79:8f:6b:18:5c:7e:53:81:90:6d:95:f2:36:6a:82:4c:24:
66:57:7b:b2:62:7f:a9:29:c5:ac:71:1e:4d:3b:a8:b2:65:eb:
7e:f0:fc:1b:b5:7f:04:27:3e:9d:df:36:43:17:b8:40:91:a7:
72:9b:79:6d:07:db:b0:17:95:92:d2:89:b0:2f:8f:e5:69:7c:
0f:e6:ff:93:9c:47:82:dd:05:80:d4:10:dc:c3:10:a3:33:27:
4a:3a:ee:a4:eb:f1:98:23:ea:64:8a:62:2a:9a:9e:b5:63:73:
46:0f:4a:c0:20:85:54:32:b5:6b:4e:4f:a5:b2:6a:b1:7a:97:
f9:fa:b6:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:26:30 2025 by rpki-client