Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/ce001b-a4d8-4f0e-831d-35c66d7c5260/1/tfGesN1I4bJJJJCLtbaEjMFnhUY.mft
File: tfGesN1I4bJJJJCLtbaEjMFnhUY.mft (raw, json)
Hash identifier: 5R36SVIsG9zbQP4TYguxPI0TuE+WOIQo1Bz4fK/egec=
Subject key identifier: F7:75:BB:DB:4E:FF:D0:61:B7:1D:68:7A:CC:A9:24:DA:AF:60:E7:C5
Authority key identifier: B5:F1:9E:B0:DD:48:E1:B2:49:24:90:8B:B5:B6:84:8C:C1:67:85:46
Certificate issuer: /CN=b5f19eb0dd48e1b24924908bb5b6848cc1678546
Certificate serial: 0199C569E9BA99841F8DB7F44638EFD283D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tfGesN1I4bJJJJCLtbaEjMFnhUY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/ce001b-a4d8-4f0e-831d-35c66d7c5260/1/tfGesN1I4bJJJJCLtbaEjMFnhUY.mft
Manifest number: 16C6
Signing time: Wed 08 Oct 2025 20:01:16 +0000
Manifest this update: Wed 08 Oct 2025 20:01:16 +0000
Manifest next update: Thu 09 Oct 2025 20:01:16 +0000
Files and hashes: 1: dMyCW0_TBkO1nYNBL_n11IKNaBI.roa (hash: WTKaBFp1QPSs1ROafjR4WJfZR1PRtcVHfjnPURoJWEQ=)
2: iWujOO5h_XVMHY2nSFxBko0o46E.roa (hash: hfZ0O6pRdbOdpr8hVRCYtXgEcI0jSP4lHjfs8kAt2hk=)
3: qrrQR7WuIleyYS2sO7I0VvjROUo.roa (hash: 4JE74Aq/xmpPqZIRbZrMja/xvjU3RSpM11pAC7vf4sE=)
4: tfGesN1I4bJJJJCLtbaEjMFnhUY.crl (hash: DKNnYiF0OYz3x4D7Clk1tBNuIF9AHwEpqdn31TrvDC0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/ce001b-a4d8-4f0e-831d-35c66d7c5260/1/tfGesN1I4bJJJJCLtbaEjMFnhUY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/ce001b-a4d8-4f0e-831d-35c66d7c5260/1/tfGesN1I4bJJJJCLtbaEjMFnhUY.mft
rsync://rpki.ripe.net/repository/DEFAULT/tfGesN1I4bJJJJCLtbaEjMFnhUY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 Oct 2025 13:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:c5:69:e9:ba:99:84:1f:8d:b7:f4:46:38:ef:d2:83:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5f19eb0dd48e1b24924908bb5b6848cc1678546
Validity
Not Before: Oct 8 20:01:16 2025 GMT
Not After : Oct 9 20:01:16 2025 GMT
Subject: CN=f775bbdb4effd061b71d687acca924daaf60e7c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:f5:b5:f9:3b:60:fc:bc:7a:d1:23:b5:9d:2d:
e8:c4:9e:f6:df:88:78:b6:23:f6:1f:e2:89:c8:8a:
43:23:50:69:a3:2c:d4:59:91:04:eb:68:4a:81:be:
b4:8b:86:05:4b:66:29:65:38:3c:a9:7b:3d:7b:57:
37:d6:03:bf:80:07:37:a8:af:7c:5f:31:ce:00:7a:
76:ac:49:06:45:3a:bc:46:6b:cf:29:d0:d0:2c:b6:
9e:56:67:14:a2:29:54:03:12:54:80:96:f0:3f:e2:
60:60:06:35:1b:1f:d5:3c:0c:04:50:18:49:d0:22:
02:d0:6d:56:a8:af:4b:76:7e:fc:5c:1c:7e:46:fa:
57:cd:43:2b:1f:4a:ca:17:99:c8:7c:41:63:44:a0:
90:a4:a4:19:d9:f9:aa:cb:01:65:b3:03:cd:6e:08:
94:94:f2:ed:ce:9f:ad:4a:97:7f:f8:a4:46:cc:ae:
a8:1c:69:c4:19:42:98:06:0c:0a:1f:7f:85:e3:d4:
12:b9:a8:14:b3:dd:ca:84:3a:23:8c:67:98:ee:bb:
53:22:af:c7:58:98:be:a2:f2:2b:9e:13:70:b9:48:
3f:09:d3:3a:09:25:ff:d4:90:20:8d:d4:20:a5:03:
c8:dc:a2:8c:59:e7:fe:fc:bc:ab:ca:13:45:35:92:
a4:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:75:BB:DB:4E:FF:D0:61:B7:1D:68:7A:CC:A9:24:DA:AF:60:E7:C5
X509v3 Authority Key Identifier:
keyid:B5:F1:9E:B0:DD:48:E1:B2:49:24:90:8B:B5:B6:84:8C:C1:67:85:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tfGesN1I4bJJJJCLtbaEjMFnhUY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/ce001b-a4d8-4f0e-831d-35c66d7c5260/1/tfGesN1I4bJJJJCLtbaEjMFnhUY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/ce001b-a4d8-4f0e-831d-35c66d7c5260/1/tfGesN1I4bJJJJCLtbaEjMFnhUY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:fb:f6:58:c7:6c:91:7d:df:18:58:ab:2c:70:1a:27:fc:57:
85:66:b0:34:fe:bc:c0:f6:d6:0d:26:14:67:b7:49:f6:1f:48:
35:42:75:ad:09:e0:a9:c2:23:2e:df:2b:11:c1:9a:cb:03:44:
8a:ac:01:0d:33:19:0f:69:09:a5:83:01:01:ac:d8:d6:48:88:
7e:b5:17:52:e1:0a:2f:e7:37:bf:f7:9d:68:2d:d2:c2:9d:fa:
88:01:b0:d7:a7:8a:1d:c9:a0:61:8b:5a:96:cd:81:4e:e6:84:
4e:09:f3:e6:01:e3:ae:96:38:8f:a7:d1:ef:1c:e2:b8:cb:24:
05:9a:97:c0:0b:fc:6a:b8:b8:d1:3a:cb:c1:c5:50:ee:4c:d9:
ae:f7:31:dd:ff:52:07:b5:fc:90:a6:19:33:b4:79:0a:17:c8:
f9:54:82:fa:34:3a:b4:b5:cf:81:58:b1:1e:1e:f8:46:e6:9d:
9c:12:32:2a:4e:7e:50:10:03:74:ba:6a:b8:7e:d0:70:f6:39:
52:08:cc:27:9f:b4:b5:8f:30:c3:87:db:dd:58:05:08:be:d7:
c3:fd:d9:09:3a:b9:a9:18:69:e1:20:c9:51:32:8b:d0:3f:b4:
ee:1d:4b:cc:f8:65:4e:f4:6e:75:cd:57:1d:89:02:6a:22:c1:
57:a8:b3:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 8 21:31:55 2025 by rpki-client