Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/d3c1d5-e923-4831-804c-c7586282fe13/1/tNiyeqpV5Ro0X2pFGeNnlVBGwwo.mft
File: tNiyeqpV5Ro0X2pFGeNnlVBGwwo.mft (raw, json)
Hash identifier: vUh/WokxMX1WDBhtRGWO+NzRKym4yZDru9LkBLTj7h4=
Subject key identifier: F1:DF:82:5E:84:A3:38:D5:2A:3B:49:67:5F:3E:0E:8E:B9:09:F6:87
Authority key identifier: B4:D8:B2:7A:AA:55:E5:1A:34:5F:6A:45:19:E3:67:95:50:46:C3:0A
Certificate issuer: /CN=b4d8b27aaa55e51a345f6a4519e367955046c30a
Certificate serial: 0199FBEA9EBD42206020DA963DF99F5A3A58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tNiyeqpV5Ro0X2pFGeNnlVBGwwo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/d3c1d5-e923-4831-804c-c7586282fe13/1/tNiyeqpV5Ro0X2pFGeNnlVBGwwo.mft
Manifest number: 128A
Signing time: Sun 19 Oct 2025 10:01:21 +0000
Manifest this update: Sun 19 Oct 2025 10:01:21 +0000
Manifest next update: Mon 20 Oct 2025 10:01:21 +0000
Files and hashes: 1: nqRmyRsi2-hKiZqffDikHhIZIA8.roa (hash: vx+mbFW9leAh9kJ2X2Cv3OUNnkvDKbo77etkxvxrmFM=)
2: tNiyeqpV5Ro0X2pFGeNnlVBGwwo.crl (hash: jy6gAjQIYimi+Lkx+cQq4fUe/0/or0QBe8Ini0eOPFY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/d3c1d5-e923-4831-804c-c7586282fe13/1/tNiyeqpV5Ro0X2pFGeNnlVBGwwo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/d3c1d5-e923-4831-804c-c7586282fe13/1/tNiyeqpV5Ro0X2pFGeNnlVBGwwo.mft
rsync://rpki.ripe.net/repository/DEFAULT/tNiyeqpV5Ro0X2pFGeNnlVBGwwo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ea:9e:bd:42:20:60:20:da:96:3d:f9:9f:5a:3a:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4d8b27aaa55e51a345f6a4519e367955046c30a
Validity
Not Before: Oct 19 10:01:21 2025 GMT
Not After : Oct 20 10:01:21 2025 GMT
Subject: CN=f1df825e84a338d52a3b49675f3e0e8eb909f687
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:52:d3:e7:63:83:c0:90:c1:ba:52:82:6b:f5:
67:3f:6e:b3:6f:32:50:2b:58:0e:11:e3:4a:10:25:
c2:a2:27:e1:7c:24:e4:4f:e1:39:01:8e:d6:5a:09:
4a:8e:95:53:6b:fb:d5:d4:e6:8f:a4:f0:06:4f:4f:
03:c1:f4:58:ad:fa:1a:00:35:de:73:9f:b6:41:55:
b6:78:d3:ba:31:89:e2:b9:f8:86:3b:88:d0:bf:68:
b1:e6:98:7b:97:a9:32:69:97:a6:b7:c4:53:c9:12:
aa:a1:79:3a:76:ff:f8:8d:35:d4:b7:e3:52:53:b3:
8d:55:ad:65:7c:f5:0b:a7:cd:ab:74:88:b7:0b:f9:
c8:f3:f9:1c:f2:19:f1:52:c2:07:1b:2b:75:cc:ac:
b8:03:fe:d4:d4:c7:aa:5d:ad:4f:74:dc:08:a6:5a:
22:e4:ac:92:53:a7:f1:70:58:ce:b4:76:29:07:19:
d6:11:21:6c:2a:67:73:2b:68:54:24:b0:19:cb:b8:
89:a0:7b:fd:18:58:e8:4b:ab:51:f3:66:97:34:2c:
23:ab:0b:9e:2e:94:4a:92:d1:52:31:7e:eb:7a:c1:
87:ea:aa:58:e7:b5:f0:53:36:eb:fd:e4:67:2d:78:
bd:d7:72:01:99:b3:81:a0:cc:04:28:fd:92:97:1a:
eb:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:DF:82:5E:84:A3:38:D5:2A:3B:49:67:5F:3E:0E:8E:B9:09:F6:87
X509v3 Authority Key Identifier:
keyid:B4:D8:B2:7A:AA:55:E5:1A:34:5F:6A:45:19:E3:67:95:50:46:C3:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tNiyeqpV5Ro0X2pFGeNnlVBGwwo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/d3c1d5-e923-4831-804c-c7586282fe13/1/tNiyeqpV5Ro0X2pFGeNnlVBGwwo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/d3c1d5-e923-4831-804c-c7586282fe13/1/tNiyeqpV5Ro0X2pFGeNnlVBGwwo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:3f:5c:d1:da:53:49:1f:af:d2:9c:c0:fc:0d:1c:a2:93:a6:
37:64:d6:34:1b:3d:bb:62:df:c0:6a:9a:54:a0:57:c1:ed:dd:
ee:0b:d4:5c:70:81:6b:9c:3c:f2:ee:ee:86:11:a7:eb:1c:39:
7e:ff:3e:fe:30:92:31:2b:9b:a3:84:6c:59:17:b8:03:6e:e3:
a9:75:8a:e6:28:38:6d:d2:e2:d9:30:b9:05:cf:af:6c:f6:3e:
e7:ae:e3:0c:25:bc:8e:fc:e7:84:b0:ea:9d:88:5c:4f:75:3f:
b2:f6:9b:05:ad:73:2f:6e:03:90:2f:9b:22:59:94:11:a0:7d:
9a:e5:19:b3:10:c2:60:d6:da:71:1d:8d:bf:1f:e9:30:3e:d1:
fd:f5:11:5b:31:75:b5:9c:5c:92:ac:df:88:f5:ef:a7:d6:51:
c8:f1:c6:28:53:aa:27:d0:74:66:9b:50:af:72:a5:4b:73:0c:
e5:94:9e:7f:71:d5:9c:98:63:92:c6:22:63:92:f4:26:81:4c:
82:be:ad:46:88:51:61:7d:f8:09:47:30:a2:c0:6f:f7:bf:08:
b7:9a:f0:51:31:a9:7f:00:65:30:fc:6d:23:c4:65:71:21:04:
18:2c:6c:d7:60:09:fb:e4:13:6f:e6:12:2b:a9:7a:1c:0f:e8:
08:73:70:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:37:31 2025 by rpki-client