Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/36ba9d-33af-4cf3-a27d-fa718ac9d758/1/tAkWj9tS6bfRp6Xo9Rjt-8LD-a8.mft
File: tAkWj9tS6bfRp6Xo9Rjt-8LD-a8.mft (raw, json)
Hash identifier: Fxmox5GFVSaKLID0lEk8dsnyF5U7Xpf9Bwc6VtsbXew=
Subject key identifier: 72:DC:D5:83:58:23:BF:76:E3:70:EC:BA:1F:4F:79:77:C9:57:06:33
Authority key identifier: B4:09:16:8F:DB:52:E9:B7:D1:A7:A5:E8:F5:18:ED:FB:C2:C3:F9:AF
Certificate issuer: /CN=b409168fdb52e9b7d1a7a5e8f518edfbc2c3f9af
Certificate serial: 019A209BAD2F916DBC2459B12D76FCAA7137
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tAkWj9tS6bfRp6Xo9Rjt-8LD-a8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/36ba9d-33af-4cf3-a27d-fa718ac9d758/1/tAkWj9tS6bfRp6Xo9Rjt-8LD-a8.mft
Manifest number: 0DBF
Signing time: Sun 26 Oct 2025 13:01:04 +0000
Manifest this update: Sun 26 Oct 2025 13:01:04 +0000
Manifest next update: Mon 27 Oct 2025 13:01:04 +0000
Files and hashes: 1: 3R1qEXucRzxQh626HSW1D35Fl4s.roa (hash: LtQHe1lS81VaVTgB7dK3iqoJ6l+gsJCEbPPIKSQ56qA=)
2: McrPxtZ4iO15y_FX1Gn0nEEhCRI.roa (hash: Di4q+SxrGvFBIxKBjSQx7OeEmS+PC0BTc6BdjCyUk3M=)
3: sLlY1jyLux_8WlPpVquZS_tXAMM.roa (hash: Ac6aebIzojMJX90LbFh/1SpU6qfnR41Si25oQuBA8+c=)
4: shBZifpLlKUixrRLPCki_9Cdo5k.roa (hash: vUCEHBiQ5vk3QwGcMpMB9RyrWPTOpvKerhzJgaIKpHk=)
5: tAkWj9tS6bfRp6Xo9Rjt-8LD-a8.crl (hash: 6qpQwxcWG9Vl72qAU6ccyH6wxJk+oG/1hEce0bU9q2E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/36ba9d-33af-4cf3-a27d-fa718ac9d758/1/tAkWj9tS6bfRp6Xo9Rjt-8LD-a8.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/36ba9d-33af-4cf3-a27d-fa718ac9d758/1/tAkWj9tS6bfRp6Xo9Rjt-8LD-a8.mft
rsync://rpki.ripe.net/repository/DEFAULT/tAkWj9tS6bfRp6Xo9Rjt-8LD-a8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:20:9b:ad:2f:91:6d:bc:24:59:b1:2d:76:fc:aa:71:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b409168fdb52e9b7d1a7a5e8f518edfbc2c3f9af
Validity
Not Before: Oct 26 13:01:04 2025 GMT
Not After : Oct 27 13:01:04 2025 GMT
Subject: CN=72dcd5835823bf76e370ecba1f4f7977c9570633
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:1c:41:09:f8:c6:05:a0:87:e7:59:83:07:be:
03:be:37:72:75:e8:fa:bc:45:df:b9:32:ab:7e:64:
99:87:d1:36:4d:4f:14:59:34:a1:89:da:a5:41:f6:
64:f9:fe:73:ba:4d:e3:82:ed:73:aa:cf:2b:46:a6:
77:08:88:6d:3e:9e:43:b3:8c:cf:4d:ee:b0:00:14:
17:ac:10:e7:4f:a3:19:ec:56:9f:53:01:30:b2:d7:
8a:3a:d0:7f:c6:26:4d:04:f6:ff:90:5c:c2:98:ce:
a7:b0:3e:d5:d5:b4:6f:61:21:18:3f:98:22:ef:47:
52:55:32:6c:cd:d4:1c:4c:11:83:ca:0c:8d:0b:88:
43:60:83:d4:69:2f:d5:e3:c5:eb:ae:41:fe:78:9b:
69:a0:37:8a:3c:00:68:f8:4f:40:09:d7:d9:09:db:
fe:8c:10:50:1a:5f:51:b6:17:c6:05:ac:45:a3:b5:
14:82:89:95:5f:d5:59:b8:d2:d4:fb:67:6a:e3:a5:
41:4b:e9:e8:47:fa:15:4f:97:77:48:bf:5b:17:a9:
03:22:ec:6c:0e:d2:91:0b:37:dc:14:4a:e9:74:80:
fe:64:e3:53:2e:ea:bf:ee:76:91:5f:ba:58:52:d1:
b8:31:91:5f:66:f9:c4:91:7a:40:84:9a:2e:d9:ea:
3c:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:DC:D5:83:58:23:BF:76:E3:70:EC:BA:1F:4F:79:77:C9:57:06:33
X509v3 Authority Key Identifier:
keyid:B4:09:16:8F:DB:52:E9:B7:D1:A7:A5:E8:F5:18:ED:FB:C2:C3:F9:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tAkWj9tS6bfRp6Xo9Rjt-8LD-a8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/36ba9d-33af-4cf3-a27d-fa718ac9d758/1/tAkWj9tS6bfRp6Xo9Rjt-8LD-a8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/36ba9d-33af-4cf3-a27d-fa718ac9d758/1/tAkWj9tS6bfRp6Xo9Rjt-8LD-a8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:16:b5:49:f1:83:6a:d2:d3:b5:2a:a7:f8:e9:aa:0c:29:62:
ce:86:1f:89:8c:e2:5f:32:cb:78:41:fc:c2:c3:26:4a:45:f2:
75:93:4a:f5:17:f3:c7:ef:87:f8:f9:07:10:d1:9a:f1:4a:c0:
6a:8f:0c:ad:36:12:d0:8e:db:b6:10:be:51:ac:33:e6:d8:43:
72:e2:10:72:67:a4:72:b9:51:54:19:99:74:93:8a:b0:af:ea:
b3:05:07:55:4d:a0:8e:c5:5e:a4:27:04:88:da:b4:67:25:14:
24:61:39:4d:30:49:14:4f:c2:07:ee:7c:69:a5:4c:50:3d:14:
42:64:d0:ee:59:82:fd:57:f2:f5:b6:40:dc:76:3e:a1:9f:f1:
01:85:7d:50:36:b6:d8:0b:1e:51:48:a0:3d:c0:3f:a3:d5:73:
2b:b2:dc:69:0d:ca:a9:fe:b7:20:5b:18:5e:c9:cb:0a:b0:86:
b2:bd:b8:3f:2e:43:e5:5c:4b:f1:78:cb:68:1b:ef:8a:16:02:
8d:56:ad:c8:b1:87:6f:2b:83:ad:c9:50:91:a6:04:81:52:23:
03:e6:4d:14:88:74:d3:0d:10:99:1e:5c:62:45:44:97:ed:d7:
f7:6f:af:fd:05:b0:6d:55:0c:8b:e3:62:9f:cf:17:65:ef:fc:
d5:f6:14:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 17:46:28 2025 by rpki-client