Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/9a4cce-fd12-4707-be95-0a246ab05946/1/tSJ4dZnxeY4kX5k_jLgYL5nP0QQ.mft
File: tSJ4dZnxeY4kX5k_jLgYL5nP0QQ.mft (raw, json)
Hash identifier: 10Q5r93IRnC3Rva7WtRAwEVcHlGemCwujuGcVn8GoBc=
Subject key identifier: 8A:9B:0B:9C:F2:5D:39:25:BA:36:93:30:41:5C:1E:F5:38:72:7F:B5
Authority key identifier: B5:22:78:75:99:F1:79:8E:24:5F:99:3F:8C:B8:18:2F:99:CF:D1:04
Certificate issuer: /CN=b522787599f1798e245f993f8cb8182f99cfd104
Certificate serial: 0199FFFE7AB1F5C13601D9475C01237807E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tSJ4dZnxeY4kX5k_jLgYL5nP0QQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/9a4cce-fd12-4707-be95-0a246ab05946/1/tSJ4dZnxeY4kX5k_jLgYL5nP0QQ.mft
Manifest number: 0E61
Signing time: Mon 20 Oct 2025 05:01:31 +0000
Manifest this update: Mon 20 Oct 2025 05:01:31 +0000
Manifest next update: Tue 21 Oct 2025 05:01:31 +0000
Files and hashes: 1: 2o-thtsUmdvMYHtv9qjNUTl4ar8.roa (hash: lFf88qPAFyfJ0i5OxU8GOvf0pF7V0Wi7poD5MDkBh2U=)
2: tSJ4dZnxeY4kX5k_jLgYL5nP0QQ.crl (hash: 7uZv+UpAaMjc8YH1l0DNxI/yCxHjOBXI+lGRakPPgCw=)
3: xzr06xbQWPKGyePi4W8ezv0xyXU.roa (hash: r6Ttugun2Irp6PGhhAikFJmsuU2fRdTtE284A/50Ue4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/9a4cce-fd12-4707-be95-0a246ab05946/1/tSJ4dZnxeY4kX5k_jLgYL5nP0QQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/9a4cce-fd12-4707-be95-0a246ab05946/1/tSJ4dZnxeY4kX5k_jLgYL5nP0QQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/tSJ4dZnxeY4kX5k_jLgYL5nP0QQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 05:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:fe:7a:b1:f5:c1:36:01:d9:47:5c:01:23:78:07:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b522787599f1798e245f993f8cb8182f99cfd104
Validity
Not Before: Oct 20 05:01:31 2025 GMT
Not After : Oct 21 05:01:31 2025 GMT
Subject: CN=8a9b0b9cf25d3925ba369330415c1ef538727fb5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:b2:d1:17:bd:ac:55:d4:93:fd:45:6d:4c:c3:
29:2b:20:77:9b:a9:27:55:95:c8:4e:1f:2f:0c:1c:
13:37:98:90:24:5f:a9:73:c0:3a:a0:3b:a5:b7:a8:
68:31:e3:04:03:61:ca:96:8f:ac:93:71:fa:5c:63:
29:d0:76:8d:84:a8:e9:ae:bc:0c:35:1a:fe:49:b4:
8c:a0:02:d6:24:4c:2a:62:f5:a0:ae:d8:aa:f1:59:
b2:a9:e4:16:f6:8a:87:e4:4a:1b:5f:3a:bb:8a:61:
d7:3d:1e:72:75:30:fd:b4:24:71:d6:a8:c0:8d:ae:
40:89:13:67:0e:96:0f:13:1b:72:d3:20:cf:db:04:
7a:64:8d:ea:05:ac:0a:50:f6:4a:30:ba:a8:9d:2a:
86:5b:1e:54:94:63:b0:52:ea:0c:e8:b9:30:82:8d:
f4:1f:de:98:da:7b:c9:8b:6f:7a:c0:d0:01:41:b8:
65:60:c3:33:59:86:13:8b:02:fd:c3:4a:f3:6b:48:
6c:d9:cd:17:79:53:83:49:a1:19:1c:65:1b:06:00:
20:61:ba:e7:07:fc:5d:fe:be:2b:98:36:0f:a8:7a:
b6:d4:e6:0c:e5:dd:38:f0:1b:7b:d0:f4:2b:fc:d7:
73:b9:01:c9:38:5c:ab:4e:9f:49:c3:5f:37:9f:06:
27:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:9B:0B:9C:F2:5D:39:25:BA:36:93:30:41:5C:1E:F5:38:72:7F:B5
X509v3 Authority Key Identifier:
keyid:B5:22:78:75:99:F1:79:8E:24:5F:99:3F:8C:B8:18:2F:99:CF:D1:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tSJ4dZnxeY4kX5k_jLgYL5nP0QQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/9a4cce-fd12-4707-be95-0a246ab05946/1/tSJ4dZnxeY4kX5k_jLgYL5nP0QQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/9a4cce-fd12-4707-be95-0a246ab05946/1/tSJ4dZnxeY4kX5k_jLgYL5nP0QQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:34:ac:3b:32:ed:fd:e6:ef:9e:eb:b5:b8:ba:af:51:1e:f9:
52:56:2d:2a:22:0b:a9:71:12:f7:ff:88:c8:23:82:8c:77:5d:
61:49:49:02:0c:a4:74:98:87:99:64:8a:41:48:11:51:ff:a8:
98:5f:bc:03:22:74:51:d5:b2:07:ea:48:0a:c1:3c:19:ba:98:
88:fb:c0:79:cf:fd:8d:bb:5c:02:bd:d6:6f:b9:3b:d3:74:82:
5e:6a:ee:03:ab:07:e1:ed:fb:fc:59:7c:24:1a:d5:8a:4c:47:
15:86:da:15:ce:bb:5c:c3:33:d0:56:5f:26:7b:f3:ee:e2:9b:
38:20:d7:e9:c7:ee:14:c8:97:ed:31:93:69:93:ab:94:08:a1:
55:1c:8f:20:79:b6:d7:8f:62:f1:1c:c7:fa:f5:56:5e:88:3d:
f8:93:1a:96:c3:10:3b:8c:b6:df:51:59:e1:37:4b:42:b3:68:
20:0a:1f:f1:15:e8:80:15:da:8a:b4:93:26:51:49:2e:c6:3f:
83:e4:2b:44:fd:b8:49:02:3c:ff:e7:9d:b3:d7:a2:1a:96:22:
07:86:06:01:3d:09:3c:2c:0f:10:f2:a7:2f:fa:83:05:96:d6:
ed:9c:98:f2:ea:5e:fd:f8:5c:79:f4:62:83:6d:50:16:15:a3:
b3:b3:84:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 13:11:56 2025 by rpki-client