Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/995fbd-91fb-43bb-8f26-cd4bd44275c5/1/tTAFYZaI77r_0G4QikO98gZD4NY.mft
File: tTAFYZaI77r_0G4QikO98gZD4NY.mft (raw, json)
Hash identifier: kh6kWygeqDw8NsvDGanQRTPXk3m7chanjbhbwTpXGMo=
Subject key identifier: BF:07:98:1A:8A:45:40:47:C1:CC:15:08:BA:71:D4:40:E2:46:74:7C
Authority key identifier: B5:30:05:61:96:88:EF:BA:FF:D0:6E:10:8A:43:BD:F2:06:43:E0:D6
Certificate issuer: /CN=b53005619688efbaffd06e108a43bdf20643e0d6
Certificate serial: 0199C4FB969657D518577178B121CEFE5C48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tTAFYZaI77r_0G4QikO98gZD4NY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/995fbd-91fb-43bb-8f26-cd4bd44275c5/1/tTAFYZaI77r_0G4QikO98gZD4NY.mft
Manifest number: 16CB
Signing time: Wed 08 Oct 2025 18:00:46 +0000
Manifest this update: Wed 08 Oct 2025 18:00:46 +0000
Manifest next update: Thu 09 Oct 2025 18:00:46 +0000
Files and hashes: 1: H94mgXcbmEPiObELGoT_irqbFZA.roa (hash: zafi3kAgrBwpb+xZqeS8u0za5f6rLKTWup2Rk4ukWyE=)
2: cpfSzQsU6bXhLoYlLCepUpPhGUA.roa (hash: I8cvRLDssMsd0UHP/4nXy9rkIVrQ1W/PN2dEJTBJ8Vc=)
3: tTAFYZaI77r_0G4QikO98gZD4NY.crl (hash: PSJxUGeDUqb/Jn5J2WImc6ZlFCZBctQbVLNBZntAPxQ=)
4: v0ygM5ko9tgsiV9gTnymwBnpZD8.roa (hash: Qr8YJSCtuGUwCDefoz4H2ImMBPjSdowCdy9x6G8wdbw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/995fbd-91fb-43bb-8f26-cd4bd44275c5/1/tTAFYZaI77r_0G4QikO98gZD4NY.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/995fbd-91fb-43bb-8f26-cd4bd44275c5/1/tTAFYZaI77r_0G4QikO98gZD4NY.mft
rsync://rpki.ripe.net/repository/DEFAULT/tTAFYZaI77r_0G4QikO98gZD4NY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 Oct 2025 18:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:c4:fb:96:96:57:d5:18:57:71:78:b1:21:ce:fe:5c:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b53005619688efbaffd06e108a43bdf20643e0d6
Validity
Not Before: Oct 8 18:00:46 2025 GMT
Not After : Oct 9 18:00:46 2025 GMT
Subject: CN=bf07981a8a454047c1cc1508ba71d440e246747c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:bc:b6:27:1a:b0:ab:b9:42:d7:b2:ac:ee:f2:
96:6c:c6:50:a0:b6:e6:c9:73:bb:bd:52:8a:c8:42:
ad:89:b7:28:2f:11:94:f0:54:7a:98:c9:0c:03:2d:
73:d4:4e:a3:a9:9c:d0:83:fb:76:a1:a5:7b:52:f6:
a5:4c:93:1c:c8:b7:f1:61:43:db:68:24:76:db:7b:
cc:38:c8:60:fc:46:99:53:e1:c0:40:17:c0:b5:e2:
51:60:8e:cb:91:c3:32:c8:f7:fc:f2:e5:c1:9a:c5:
a8:4e:ec:97:f0:ba:2e:b5:8b:a7:4e:58:99:18:28:
3a:3e:72:de:66:bf:aa:f0:62:69:7a:49:7c:0a:35:
a1:16:20:86:d8:5b:18:a9:31:6c:56:fb:db:5d:b1:
53:f4:96:a2:4b:c3:33:39:b0:bb:74:b4:1c:96:38:
42:de:df:77:7e:00:e2:6f:01:1d:05:ae:be:e8:8e:
d5:12:e0:04:fa:fc:97:47:72:f5:61:1e:dd:2b:c6:
f0:bd:a3:6c:62:d0:c6:c1:07:11:c8:fa:96:20:16:
56:d1:85:fb:9c:91:f6:0a:23:e4:07:cc:66:98:4a:
60:77:7f:c1:30:05:a3:73:50:44:4d:38:d4:fc:69:
9c:46:d6:fe:56:a5:b5:c6:2a:85:d7:01:c5:4b:53:
2c:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:07:98:1A:8A:45:40:47:C1:CC:15:08:BA:71:D4:40:E2:46:74:7C
X509v3 Authority Key Identifier:
keyid:B5:30:05:61:96:88:EF:BA:FF:D0:6E:10:8A:43:BD:F2:06:43:E0:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tTAFYZaI77r_0G4QikO98gZD4NY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/995fbd-91fb-43bb-8f26-cd4bd44275c5/1/tTAFYZaI77r_0G4QikO98gZD4NY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/995fbd-91fb-43bb-8f26-cd4bd44275c5/1/tTAFYZaI77r_0G4QikO98gZD4NY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:88:3c:5a:d4:b1:df:08:c9:88:96:11:bf:cf:bd:62:6b:83:
43:d0:2b:5e:18:8d:fc:2c:bc:b7:c2:bc:c0:98:f0:1d:d3:38:
86:d3:6a:46:65:77:ab:68:fc:74:01:bc:6b:15:b8:c4:09:ef:
b6:38:b9:ab:29:e0:a1:93:76:02:99:a7:2b:02:94:62:8f:43:
e5:f2:31:9c:11:53:c0:61:02:b2:1f:a6:15:87:ca:46:df:7b:
59:38:e7:0d:24:17:ba:4b:66:0e:34:40:da:a9:98:d3:43:fb:
1c:ea:d2:a7:0c:92:dd:14:e1:6b:38:22:ad:4e:22:84:a2:d5:
1b:56:29:b3:1e:84:44:3d:36:79:f1:67:7a:63:e1:fb:c1:e9:
be:b0:b3:72:11:22:40:91:ec:66:1c:66:24:07:bd:81:4d:3c:
32:d0:02:05:85:89:06:33:41:52:28:77:43:8d:3c:15:a4:62:
df:08:02:a4:21:d0:e9:fc:56:48:77:40:ed:7c:91:59:4b:b3:
51:11:5c:a1:3c:84:a4:d1:95:a2:fb:13:bb:6f:04:d9:d7:3a:
ec:77:41:1b:f6:0d:1f:cc:15:0b:7f:89:f5:15:6a:4a:a9:59:
ba:c7:8d:c9:c8:de:75:d3:0d:40:84:6f:fc:d4:57:be:e7:88:
ce:27:87:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 9 03:36:28 2025 by rpki-client