Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/3e8e42-dffb-435d-bd2b-eb8b1ecc4741/1/TdL8TSP9nCQgxASRhxgI7FQkpnA.mft
File: TdL8TSP9nCQgxASRhxgI7FQkpnA.mft (raw, json)
Hash identifier: JzGHzrqzqheq0KFZ5dPZbw9yIWKESr1FSbSOnf+HivE=
Subject key identifier: 6C:66:82:28:90:38:0F:49:00:6C:C0:87:B8:D5:FA:6B:B9:AD:24:32
Authority key identifier: 4D:D2:FC:4D:23:FD:9C:24:20:C4:04:91:87:18:08:EC:54:24:A6:70
Certificate issuer: /CN=4dd2fc4d23fd9c2420c40491871808ec5424a670
Certificate serial: 0199FAD7DA3025A6568750F5CFFD5FEFBCB6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TdL8TSP9nCQgxASRhxgI7FQkpnA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/3e8e42-dffb-435d-bd2b-eb8b1ecc4741/1/TdL8TSP9nCQgxASRhxgI7FQkpnA.mft
Manifest number: 16E5
Signing time: Sun 19 Oct 2025 05:01:13 +0000
Manifest this update: Sun 19 Oct 2025 05:01:13 +0000
Manifest next update: Mon 20 Oct 2025 05:01:13 +0000
Files and hashes: 1: 6PYHTPLOKPA_a6iVYvGQByWG7yU.roa (hash: w5WzWtoII8U9oezorMTaJGrRrTvsQaItUP16lTCSY7s=)
2: TdL8TSP9nCQgxASRhxgI7FQkpnA.crl (hash: XXbj1xfWpMzBi8Zj+YSoVWL0uAOfuGMNbmbTW9Iv4L8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/3e8e42-dffb-435d-bd2b-eb8b1ecc4741/1/TdL8TSP9nCQgxASRhxgI7FQkpnA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/3e8e42-dffb-435d-bd2b-eb8b1ecc4741/1/TdL8TSP9nCQgxASRhxgI7FQkpnA.mft
rsync://rpki.ripe.net/repository/DEFAULT/TdL8TSP9nCQgxASRhxgI7FQkpnA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 05:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fa:d7:da:30:25:a6:56:87:50:f5:cf:fd:5f:ef:bc:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4dd2fc4d23fd9c2420c40491871808ec5424a670
Validity
Not Before: Oct 19 05:01:13 2025 GMT
Not After : Oct 20 05:01:13 2025 GMT
Subject: CN=6c66822890380f49006cc087b8d5fa6bb9ad2432
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:cd:c6:83:2e:af:a4:92:e5:44:fc:96:a0:d1:
5e:e6:be:2f:ae:ab:1c:f0:60:c1:72:f1:92:c6:ed:
69:8a:e0:bb:e4:1d:e6:bb:34:73:9a:7f:a4:fe:35:
96:3d:69:88:59:9b:ab:17:16:1d:0d:ad:7c:d1:87:
a1:b2:62:20:41:d5:88:1a:84:6e:00:7f:e3:a6:ae:
fc:b3:13:04:da:48:ac:1a:a1:f3:87:c7:94:e8:6a:
a4:6d:a4:e8:22:76:c6:06:ed:67:5b:54:37:33:6c:
a9:0f:48:14:25:93:f3:57:d8:f7:10:c8:4b:8a:50:
ec:86:95:d1:2e:69:af:bb:73:ea:a6:f9:a4:7b:3c:
d2:24:5c:13:63:6f:c1:6b:65:dd:0a:4b:9b:d0:1b:
72:ce:26:e9:38:9e:55:be:52:d4:f6:b4:b4:27:73:
3a:38:bc:d2:6b:10:5d:fe:fb:18:04:a8:b8:83:a4:
88:b7:39:f2:d6:8c:92:1a:a9:2c:8c:92:e5:f4:11:
91:47:40:c1:cf:42:4a:d2:d0:8a:7f:08:40:4f:c0:
61:f7:50:84:3e:9b:4b:23:b6:3b:02:63:1d:10:38:
40:1d:a9:18:dd:25:fa:4f:4d:ec:0b:29:2d:49:dc:
d7:dc:6f:eb:84:90:ef:11:a3:8c:ca:c1:0c:d0:cf:
77:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:66:82:28:90:38:0F:49:00:6C:C0:87:B8:D5:FA:6B:B9:AD:24:32
X509v3 Authority Key Identifier:
keyid:4D:D2:FC:4D:23:FD:9C:24:20:C4:04:91:87:18:08:EC:54:24:A6:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TdL8TSP9nCQgxASRhxgI7FQkpnA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/3e8e42-dffb-435d-bd2b-eb8b1ecc4741/1/TdL8TSP9nCQgxASRhxgI7FQkpnA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/3e8e42-dffb-435d-bd2b-eb8b1ecc4741/1/TdL8TSP9nCQgxASRhxgI7FQkpnA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:d5:2c:49:82:ab:69:e8:2e:5f:85:42:bd:5a:91:6b:9f:5c:
b1:db:2f:36:26:86:e6:40:a1:05:b3:e4:66:70:03:98:ac:36:
af:cf:d6:e1:e5:35:3d:c8:0c:8a:89:17:7d:ff:b7:81:51:3e:
30:87:f7:27:2e:c8:08:7a:59:48:74:7c:0a:15:ef:48:93:54:
3a:5f:a3:31:b7:98:d4:b7:1b:fc:b4:5e:a7:89:8c:ba:fc:7b:
81:49:b3:14:8b:bc:87:36:ca:16:13:ad:36:c4:08:ff:ec:8c:
37:39:65:82:0b:9e:c1:92:63:38:ee:5b:48:62:7a:ef:80:0c:
50:72:a6:53:3b:d4:29:a2:7b:4b:31:82:a2:95:3f:5a:2a:a3:
a0:44:50:f5:17:ee:a6:b1:1b:ee:3c:11:25:b2:5d:5b:ea:46:
ac:92:72:ad:17:00:3a:69:d2:de:f2:ea:96:9f:4d:e6:55:c7:
74:3f:fc:7b:af:93:94:e2:b1:7c:8c:68:d9:e1:a2:3b:62:ad:
4d:30:3f:64:c1:58:b0:06:dd:28:09:06:03:26:98:7c:b6:91:
69:79:58:27:5e:75:aa:45:bf:cd:8c:3f:7b:d0:1c:f8:c3:a9:
1f:1e:cf:20:96:e3:5b:ed:d6:32:e4:44:54:63:c1:c6:ff:43:
b0:94:3e:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:26:16 2025 by rpki-client