Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/1e36e8-8fa6-4c17-a240-32e57bc5474b/1/Ty_D6GA1oLjpOA_7I_I_V0MLess.mft
File: Ty_D6GA1oLjpOA_7I_I_V0MLess.mft (raw, json)
Hash identifier: TkPojEqOvMnlSQ8Js46yMqbb9TP5KbpotpoAOTpRZBk=
Subject key identifier: 32:3F:2E:3D:E7:0F:83:93:9F:54:3B:97:D7:9B:B3:17:19:61:0E:7B
Authority key identifier: 4F:2F:C3:E8:60:35:A0:B8:E9:38:0F:FB:23:F2:3F:57:43:0B:7A:CB
Certificate issuer: /CN=4f2fc3e86035a0b8e9380ffb23f23f57430b7acb
Certificate serial: 0199FEEBA2F134E78C3E415E970CB3A7201D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ty_D6GA1oLjpOA_7I_I_V0MLess.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/1e36e8-8fa6-4c17-a240-32e57bc5474b/1/Ty_D6GA1oLjpOA_7I_I_V0MLess.mft
Manifest number: 0F53
Signing time: Mon 20 Oct 2025 00:01:19 +0000
Manifest this update: Mon 20 Oct 2025 00:01:19 +0000
Manifest next update: Tue 21 Oct 2025 00:01:19 +0000
Files and hashes: 1: Ty_D6GA1oLjpOA_7I_I_V0MLess.crl (hash: xNagxBJepOCVBnoJZOjA/9q6mK+xkmRZIW8ARjQw5Lk=)
2: WjR-M02WnGrf1hvkkNo0bZEQvnQ.roa (hash: CW8wqMfi/RZSfPuGRw3DqaK3c0hn412Beo4u95KUkQA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/1e36e8-8fa6-4c17-a240-32e57bc5474b/1/Ty_D6GA1oLjpOA_7I_I_V0MLess.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/1e36e8-8fa6-4c17-a240-32e57bc5474b/1/Ty_D6GA1oLjpOA_7I_I_V0MLess.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ty_D6GA1oLjpOA_7I_I_V0MLess.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:eb:a2:f1:34:e7:8c:3e:41:5e:97:0c:b3:a7:20:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f2fc3e86035a0b8e9380ffb23f23f57430b7acb
Validity
Not Before: Oct 20 00:01:19 2025 GMT
Not After : Oct 21 00:01:19 2025 GMT
Subject: CN=323f2e3de70f83939f543b97d79bb31719610e7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:09:1e:06:ca:08:0f:e6:1f:97:56:31:14:b4:
04:67:22:0b:7a:41:85:f2:fc:8f:6b:43:ec:33:da:
0e:21:b3:ab:14:c0:d5:ea:6d:90:47:78:38:70:4a:
e1:25:ae:55:d2:06:e8:54:b6:11:49:af:1b:28:52:
51:a1:05:72:b6:24:dd:37:1d:a8:6d:0e:9c:21:26:
fa:cd:30:72:eb:f2:2d:da:42:be:61:a5:ae:93:ab:
44:cf:38:4a:9b:14:68:46:63:c3:08:b7:81:c9:3c:
8a:b8:7b:f2:b5:6f:e4:c8:cb:a6:76:53:92:9d:f2:
e2:09:b7:e7:35:97:45:3e:01:97:72:76:67:89:36:
f1:49:60:2b:99:00:fa:8e:7a:65:14:aa:d9:b5:73:
b4:92:3b:52:9b:79:62:f0:b2:da:d0:7b:7f:bc:86:
f0:46:4b:7a:f1:b6:f6:a4:74:19:82:87:55:f9:ef:
98:7d:da:d9:e1:9d:dc:03:f9:b9:a5:87:df:55:01:
53:33:fc:bf:61:44:69:b0:7e:7e:eb:ed:81:3e:2f:
23:b7:73:b5:50:60:cc:13:d6:e7:c6:89:57:98:36:
55:98:0a:a1:25:db:09:de:49:d2:d4:e2:d9:c3:ea:
ad:b3:8b:7b:8e:90:5a:9f:e3:75:89:81:ea:3e:53:
e1:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:3F:2E:3D:E7:0F:83:93:9F:54:3B:97:D7:9B:B3:17:19:61:0E:7B
X509v3 Authority Key Identifier:
keyid:4F:2F:C3:E8:60:35:A0:B8:E9:38:0F:FB:23:F2:3F:57:43:0B:7A:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ty_D6GA1oLjpOA_7I_I_V0MLess.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/1e36e8-8fa6-4c17-a240-32e57bc5474b/1/Ty_D6GA1oLjpOA_7I_I_V0MLess.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/1e36e8-8fa6-4c17-a240-32e57bc5474b/1/Ty_D6GA1oLjpOA_7I_I_V0MLess.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:94:9e:33:ea:9b:66:e8:28:28:f5:5b:0f:05:8e:a5:9c:1b:
ca:63:ce:47:06:d2:15:f1:bb:51:b2:ed:d6:57:d3:42:1e:a3:
47:a6:7c:00:8d:a6:e1:d3:22:df:e9:aa:19:1c:22:14:5a:90:
01:39:3a:05:9c:b5:1b:df:c7:f3:57:53:29:bf:96:be:b3:9a:
bc:0d:c2:8d:09:66:ca:e7:4d:9f:9c:39:a5:e7:a8:60:59:7e:
7f:95:56:a4:0a:10:22:98:3d:81:d1:9d:bf:77:80:66:2b:bc:
43:38:3d:83:fe:db:e4:ab:c2:84:27:65:d9:c9:95:48:db:a0:
11:af:d0:10:a6:d3:e5:2f:cb:cf:63:08:ca:02:8c:51:61:2c:
92:4e:2c:9d:c7:b8:96:4f:6f:67:76:bb:cf:65:30:7d:84:6e:
c2:1e:ae:bc:bc:4d:da:47:e5:d2:9c:e0:9f:28:0e:b1:de:99:
ba:13:59:c5:19:9e:da:bf:c7:e3:49:53:c4:a2:61:ae:b2:42:
40:2f:e9:dc:6e:ef:0b:fb:7f:a1:48:7f:3f:0a:11:ec:a5:69:
d1:df:e8:8a:3f:6f:0f:8a:8d:07:c8:e8:48:f9:02:e6:50:4c:
af:95:10:fe:bc:4f:80:a4:14:d8:ba:f1:8f:be:0a:2b:d0:35:
60:ac:a0:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 09:01:50 2025 by rpki-client