Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/ed384e-9949-4cc0-8a37-3bb2cd80a2c9/1/Tq5vUk7tD3PISbBkOCe4DjfEbHE.mft
File: Tq5vUk7tD3PISbBkOCe4DjfEbHE.mft (raw, json)
Hash identifier: V3u0l6O0RSEB+ELm3xWeRH9fXciMP7i6lP9+ScjzjXk=
Subject key identifier: 76:E6:7E:91:FC:85:E1:48:80:26:2A:DF:60:E0:90:32:87:09:3C:B6
Authority key identifier: 4E:AE:6F:52:4E:ED:0F:73:C8:49:B0:64:38:27:B8:0E:37:C4:6C:71
Certificate issuer: /CN=4eae6f524eed0f73c849b0643827b80e37c46c71
Certificate serial: 0199FC8F692A4AA26D230E80A66A7DA51039
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tq5vUk7tD3PISbBkOCe4DjfEbHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/ed384e-9949-4cc0-8a37-3bb2cd80a2c9/1/Tq5vUk7tD3PISbBkOCe4DjfEbHE.mft
Manifest number: 16E3
Signing time: Sun 19 Oct 2025 13:01:20 +0000
Manifest this update: Sun 19 Oct 2025 13:01:20 +0000
Manifest next update: Mon 20 Oct 2025 13:01:20 +0000
Files and hashes: 1: Tq5vUk7tD3PISbBkOCe4DjfEbHE.crl (hash: H9HpW5uAW/oDoaMDhIwhqXYAyOwwqP/m2hI2Ojh8gkE=)
2: ZPx2mzUkeOD00cVnYPqjI9aytDo.roa (hash: 9BSbx2wnbDuYyWn09oP3MayodoEwoQbrU6xTUmUCOR8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/ed384e-9949-4cc0-8a37-3bb2cd80a2c9/1/Tq5vUk7tD3PISbBkOCe4DjfEbHE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/ed384e-9949-4cc0-8a37-3bb2cd80a2c9/1/Tq5vUk7tD3PISbBkOCe4DjfEbHE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Tq5vUk7tD3PISbBkOCe4DjfEbHE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:69:2a:4a:a2:6d:23:0e:80:a6:6a:7d:a5:10:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4eae6f524eed0f73c849b0643827b80e37c46c71
Validity
Not Before: Oct 19 13:01:20 2025 GMT
Not After : Oct 20 13:01:20 2025 GMT
Subject: CN=76e67e91fc85e14880262adf60e0903287093cb6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:7e:a5:d2:57:46:0b:16:a9:7f:c3:1e:76:12:
25:81:30:f3:28:a9:ce:ce:f8:62:f9:ee:a5:dc:9e:
2f:6a:09:6c:4e:e8:25:f5:bf:ff:7f:22:3c:46:1c:
b0:f3:02:a4:6c:1c:09:e5:14:8c:93:c0:e5:f3:c8:
2b:a6:c5:b9:bb:04:4e:f7:57:10:61:4d:4d:9e:e5:
8f:3e:a0:ff:7b:2a:ce:14:14:c9:a4:e4:c9:18:72:
63:74:21:de:84:4a:48:03:03:25:f5:9b:2c:01:87:
af:58:f4:f9:bd:50:01:a8:00:b6:ac:19:e2:6b:e7:
fa:54:7a:fd:a2:f5:11:27:f4:5f:6f:c8:49:39:47:
bc:8c:19:04:b2:83:d0:ec:c4:87:ca:a4:5f:ce:9a:
09:fa:fb:f7:cc:e6:fb:7c:99:42:ed:4a:c0:02:c5:
67:14:47:3a:1a:45:10:22:55:7a:e7:ff:be:17:47:
78:3a:dc:68:35:23:c3:34:58:a8:9a:2c:b9:69:5d:
79:24:94:5b:f8:80:a6:19:80:e2:9a:65:25:87:fd:
0e:cb:32:10:ec:54:41:40:90:3d:9a:ed:c1:49:66:
0c:1f:b2:9c:5d:77:8e:65:b7:d5:00:ee:1a:95:6a:
91:32:33:05:40:b4:e5:4c:53:a9:c6:1c:23:fa:d7:
0a:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:E6:7E:91:FC:85:E1:48:80:26:2A:DF:60:E0:90:32:87:09:3C:B6
X509v3 Authority Key Identifier:
keyid:4E:AE:6F:52:4E:ED:0F:73:C8:49:B0:64:38:27:B8:0E:37:C4:6C:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tq5vUk7tD3PISbBkOCe4DjfEbHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/ed384e-9949-4cc0-8a37-3bb2cd80a2c9/1/Tq5vUk7tD3PISbBkOCe4DjfEbHE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/ed384e-9949-4cc0-8a37-3bb2cd80a2c9/1/Tq5vUk7tD3PISbBkOCe4DjfEbHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:88:38:9e:94:1d:3e:72:6e:7b:bf:33:6b:2c:73:aa:b1:fa:
7d:d0:1e:fc:a0:c7:cb:65:e8:35:45:0f:57:a1:b5:db:4e:3b:
a6:bf:14:5b:8a:88:c2:53:ec:8a:01:3f:dd:d4:57:32:10:58:
32:1a:58:58:ce:a8:34:f9:a2:5f:b3:4b:f4:85:26:71:9c:95:
10:4c:64:c8:14:c1:78:09:be:e2:c5:28:ac:bf:06:fe:19:2e:
b1:ae:13:1f:11:93:0c:fd:43:3f:8a:39:51:e2:93:e1:bc:bd:
97:fe:8d:a8:cf:9a:fd:c2:44:71:e5:0e:f3:a9:3a:85:87:c1:
ee:fd:d0:8a:b0:ca:93:9f:ff:94:91:8b:b7:e5:b1:25:33:43:
57:62:85:67:78:66:8c:e1:2e:c3:51:96:58:65:0e:1c:c4:cb:
db:cf:f4:f4:5f:1f:57:c5:e7:c0:e0:22:5f:39:19:d3:a6:1c:
8c:dc:bb:06:0f:33:1c:84:0c:a0:03:f3:2c:a3:23:74:c1:b2:
48:82:0b:12:97:82:af:fe:1a:f6:3a:32:4e:93:36:1e:03:89:
c9:d9:4f:17:4a:2e:d0:a2:9b:65:1b:1a:a9:31:5d:1f:76:54:
47:9e:f7:07:05:60:43:ad:d9:52:61:6a:ef:86:e7:c0:ea:15:
56:97:8a:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:32:36 2025 by rpki-client