Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/d46a81-3735-42c6-9bbb-1d1799b59c99/1/tLB5uhPORqvsf1vD893Ni7hnWQU.mft
File: tLB5uhPORqvsf1vD893Ni7hnWQU.mft (raw, json)
Hash identifier: dJ/W2348igLJrC5xhd8myhnRFCRlmvHORIE3+Yk0lZs=
Subject key identifier: B2:21:5D:46:FA:78:BE:79:8D:E2:5A:3A:F3:1E:E4:BC:5A:26:7F:8B
Authority key identifier: B4:B0:79:BA:13:CE:46:AB:EC:7F:5B:C3:F3:DD:CD:8B:B8:67:59:05
Certificate issuer: /CN=b4b079ba13ce46abec7f5bc3f3ddcd8bb8675905
Certificate serial: 019A01112835CE4DFA8A6833856731E2F943
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tLB5uhPORqvsf1vD893Ni7hnWQU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/d46a81-3735-42c6-9bbb-1d1799b59c99/1/tLB5uhPORqvsf1vD893Ni7hnWQU.mft
Manifest number: 16E2
Signing time: Mon 20 Oct 2025 10:01:32 +0000
Manifest this update: Mon 20 Oct 2025 10:01:32 +0000
Manifest next update: Tue 21 Oct 2025 10:01:32 +0000
Files and hashes: 1: tLB5uhPORqvsf1vD893Ni7hnWQU.crl (hash: zjdy9zy68Yznf5uN5/yHsAMgwevQdp+8ilw8pWRkGl0=)
2: u2BcurtkahmzzbpCvF5G__EHmrQ.roa (hash: sXnsJfkykB72mvD9Mf1AHstwJM/7MpBbK+WiRKqEOhY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/d46a81-3735-42c6-9bbb-1d1799b59c99/1/tLB5uhPORqvsf1vD893Ni7hnWQU.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/d46a81-3735-42c6-9bbb-1d1799b59c99/1/tLB5uhPORqvsf1vD893Ni7hnWQU.mft
rsync://rpki.ripe.net/repository/DEFAULT/tLB5uhPORqvsf1vD893Ni7hnWQU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 10:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:01:11:28:35:ce:4d:fa:8a:68:33:85:67:31:e2:f9:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4b079ba13ce46abec7f5bc3f3ddcd8bb8675905
Validity
Not Before: Oct 20 10:01:32 2025 GMT
Not After : Oct 21 10:01:32 2025 GMT
Subject: CN=b2215d46fa78be798de25a3af31ee4bc5a267f8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:ad:e3:bb:2f:5a:4a:2f:91:51:f6:72:f6:5c:
e7:d5:0a:20:1a:52:dd:dc:55:dd:c1:9e:4b:18:70:
78:66:20:a2:d0:ca:bb:c1:07:ce:52:02:7e:dc:97:
ab:ec:a3:ce:90:7a:53:7d:10:f1:32:02:77:b3:00:
48:4e:ec:7f:b3:36:05:76:4a:d5:0d:cc:93:ce:86:
e0:56:be:55:88:49:f0:41:bb:0f:a3:b7:2f:51:e6:
ea:4f:ae:99:05:bd:b2:21:a9:e0:20:0a:65:5b:74:
bc:9b:85:d6:77:46:78:5a:23:61:ec:d3:da:73:5e:
18:7c:d9:26:a6:70:52:24:8f:b4:7f:ed:a9:02:65:
22:fb:63:a6:3b:1a:45:32:c6:22:bc:e7:13:08:fb:
a5:f6:7f:aa:da:33:52:78:85:ec:30:fc:b2:b5:00:
42:e2:88:22:e8:b0:0d:de:84:41:ef:56:8e:ed:bd:
8c:48:a4:ab:e3:45:79:d5:ba:34:c0:98:1d:38:d1:
b7:cd:fe:e3:fc:1c:47:57:d5:69:a2:41:9a:fd:4b:
2e:25:bb:fb:62:9b:cc:58:97:38:f0:d7:6c:aa:e7:
a4:ef:a9:f2:f8:3c:d0:c1:c4:39:6d:30:c7:ba:d6:
2b:e5:86:e0:c0:ec:1f:ae:78:b0:eb:40:17:af:69:
fe:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:21:5D:46:FA:78:BE:79:8D:E2:5A:3A:F3:1E:E4:BC:5A:26:7F:8B
X509v3 Authority Key Identifier:
keyid:B4:B0:79:BA:13:CE:46:AB:EC:7F:5B:C3:F3:DD:CD:8B:B8:67:59:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tLB5uhPORqvsf1vD893Ni7hnWQU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/d46a81-3735-42c6-9bbb-1d1799b59c99/1/tLB5uhPORqvsf1vD893Ni7hnWQU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/d46a81-3735-42c6-9bbb-1d1799b59c99/1/tLB5uhPORqvsf1vD893Ni7hnWQU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:5f:7d:7d:d9:63:d7:7c:81:40:9a:a2:c6:dc:06:38:b4:15:
33:95:45:49:2c:76:59:ec:9b:76:94:f2:a6:a8:6e:01:f2:e4:
99:26:48:09:df:b2:22:98:d1:16:a4:d7:22:f9:85:fe:0a:b7:
3b:bd:d2:d2:b7:7d:5b:62:6c:06:db:6d:26:c5:34:0f:de:4a:
b7:fc:55:2c:6d:dd:bc:79:58:58:3c:4a:37:ae:76:35:52:5d:
9e:4c:d0:ab:5e:9e:30:77:98:34:d0:48:a4:97:c2:a8:ca:31:
7e:75:11:1f:69:25:98:f2:3a:c5:9d:be:b8:e1:24:df:6e:6e:
4f:bb:67:41:4f:29:9d:96:3b:6f:c0:2a:68:7e:91:7a:e0:9c:
56:b0:27:0a:3c:c0:f9:0b:d5:30:3e:5f:9f:68:23:e5:8c:08:
6f:01:0b:76:f9:af:3f:6f:f9:9b:d2:3f:ca:34:c7:6c:31:3b:
b1:d6:c8:68:bf:8d:3f:4a:50:6e:05:c8:e7:c7:56:3b:16:d6:
58:04:f7:98:38:f6:7a:05:b5:2c:db:35:60:e3:28:71:76:8a:
72:a9:e8:3c:df:fe:a7:a7:0f:5e:7c:ec:dd:2a:64:00:ca:99:
01:3f:25:f6:39:e5:dd:ae:1f:90:3b:f7:81:36:ec:45:2c:3c:
e4:4a:8d:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 18:03:24 2025 by rpki-client