Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/ffe7d5-d91d-48ae-8ee5-ce94e38e82d6/1/ToWU69x9fPfaLgA8hNhqfBr4cbw.mft
File: ToWU69x9fPfaLgA8hNhqfBr4cbw.mft (raw, json)
Hash identifier: xXR42VaBRTKKR156Hcj+dIsknTYtX2YYIa7wXCw3rIM=
Subject key identifier: 84:3B:7B:16:AB:04:40:29:90:84:5F:AE:44:6C:5E:E2:00:B9:B9:7A
Authority key identifier: 4E:85:94:EB:DC:7D:7C:F7:DA:2E:00:3C:84:D8:6A:7C:1A:F8:71:BC
Certificate issuer: /CN=4e8594ebdc7d7cf7da2e003c84d86a7c1af871bc
Certificate serial: 019A00DA4EFE81CC25DA2696AAA349D355C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ToWU69x9fPfaLgA8hNhqfBr4cbw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/ffe7d5-d91d-48ae-8ee5-ce94e38e82d6/1/ToWU69x9fPfaLgA8hNhqfBr4cbw.mft
Manifest number: 0587
Signing time: Mon 20 Oct 2025 09:01:38 +0000
Manifest this update: Mon 20 Oct 2025 09:01:38 +0000
Manifest next update: Tue 21 Oct 2025 09:01:38 +0000
Files and hashes: 1: GanlBJdb2pr7VV04ogaTHUPUlUg.roa (hash: Vbl6ZyOGtSJws1SpPK0y8iRHBk5yj2N+r0ihm4gCy0w=)
2: ToWU69x9fPfaLgA8hNhqfBr4cbw.crl (hash: 9+rRfGj+9NRkMycKjHHCyuraqllIDFSvZ55UShxRKVk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/ffe7d5-d91d-48ae-8ee5-ce94e38e82d6/1/ToWU69x9fPfaLgA8hNhqfBr4cbw.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/ffe7d5-d91d-48ae-8ee5-ce94e38e82d6/1/ToWU69x9fPfaLgA8hNhqfBr4cbw.mft
rsync://rpki.ripe.net/repository/DEFAULT/ToWU69x9fPfaLgA8hNhqfBr4cbw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 09:01:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:00:da:4e:fe:81:cc:25:da:26:96:aa:a3:49:d3:55:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e8594ebdc7d7cf7da2e003c84d86a7c1af871bc
Validity
Not Before: Oct 20 09:01:38 2025 GMT
Not After : Oct 21 09:01:38 2025 GMT
Subject: CN=843b7b16ab04402990845fae446c5ee200b9b97a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:5a:99:0d:38:f4:03:3c:28:8b:85:9b:09:51:
00:96:e1:1c:18:2d:f2:69:5a:6b:42:bd:03:48:e1:
7d:f9:df:8f:ae:9e:fe:0a:33:6b:96:52:37:ab:0c:
81:68:09:d7:9e:c3:bb:9c:e7:25:f9:27:3c:eb:0c:
e0:98:7d:21:3e:8a:cf:2f:e2:c7:e6:7e:62:bd:49:
1e:62:47:1d:65:ee:e4:de:b4:49:4f:f7:d7:9e:56:
0a:5b:f7:62:a5:c9:9b:c4:6c:1d:5f:21:e9:c9:ad:
e4:d6:4b:f4:d3:f4:3d:2c:b4:f3:a8:4f:a1:bb:db:
a3:f7:fd:e0:9f:ed:ad:a7:aa:e8:77:fb:d0:c8:10:
e1:8c:20:97:59:70:88:ff:c4:e2:da:fb:03:c9:6c:
52:f7:b0:f9:8d:31:90:61:92:c1:ad:97:0a:27:68:
b9:88:7a:7b:54:b0:08:95:df:c1:6b:c2:74:d2:a1:
fc:d1:c8:6e:e5:a4:96:96:4f:57:af:80:eb:5a:1f:
ca:82:0f:86:e2:c8:ae:a6:cf:d2:7d:e1:71:e8:2f:
38:53:a5:34:34:5d:21:c8:1f:45:48:8b:6e:b2:95:
45:d4:40:f7:2a:4e:be:f7:77:67:55:1e:e4:58:39:
0d:dc:fa:86:57:41:90:30:e4:99:cb:c4:ab:b1:b4:
94:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:3B:7B:16:AB:04:40:29:90:84:5F:AE:44:6C:5E:E2:00:B9:B9:7A
X509v3 Authority Key Identifier:
keyid:4E:85:94:EB:DC:7D:7C:F7:DA:2E:00:3C:84:D8:6A:7C:1A:F8:71:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ToWU69x9fPfaLgA8hNhqfBr4cbw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/ffe7d5-d91d-48ae-8ee5-ce94e38e82d6/1/ToWU69x9fPfaLgA8hNhqfBr4cbw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/ffe7d5-d91d-48ae-8ee5-ce94e38e82d6/1/ToWU69x9fPfaLgA8hNhqfBr4cbw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:43:e6:78:df:b1:2e:25:8c:58:42:f3:ff:2a:c6:70:ee:ba:
83:8d:b0:d9:18:4d:4f:2e:73:b4:a3:eb:0d:8f:b0:ad:6b:a5:
09:50:c6:2c:c2:7d:c6:76:b7:6b:ee:5d:54:3e:1f:3c:61:29:
9a:b5:fc:16:e7:da:b7:16:4c:de:27:31:fc:ae:87:04:ba:fe:
1d:9c:26:33:f7:dd:00:3a:30:40:5a:fe:8c:ac:4a:58:12:d2:
5c:c6:12:a8:5b:b3:6f:c7:e3:4c:2d:0e:96:a4:c4:96:33:5f:
2e:65:78:ad:4e:be:a7:18:7d:3c:42:96:fc:86:cf:33:e9:b1:
c0:f8:d9:54:6a:25:55:85:e1:bf:1e:81:47:a6:f6:6f:e5:33:
68:87:46:f6:96:06:a1:86:90:bb:a1:27:78:79:f1:49:ca:ec:
dc:db:f6:76:e3:8c:6b:60:7c:96:02:93:49:47:50:64:68:5e:
b0:8e:9c:fd:35:5f:f5:65:20:58:e7:91:db:8b:8e:92:b7:d4:
b4:77:14:11:20:86:e3:0f:df:95:b0:43:ac:d8:e5:87:a4:a1:
9c:69:b3:1f:9d:b9:4f:ea:3e:d9:d4:2f:a3:ff:9d:28:c6:41:
92:ca:b7:a6:f6:a2:eb:ff:f0:17:a2:2b:d1:8d:aa:6b:7a:71:
4e:6d:51:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 19:42:08 2025 by rpki-client