Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/aca790-6329-414a-bed5-bad2cb480912/1/Tg8xxu_bmkRbjxcvC-Df1RQr4AA.mft
File: Tg8xxu_bmkRbjxcvC-Df1RQr4AA.mft (raw, json)
Hash identifier: oECFXB5BhfgQOUzuPM1b3k18+0gRNzMK4Ju3u55Cq1M=
Subject key identifier: AA:A1:51:F5:60:2B:41:08:46:66:C4:84:52:4E:2A:FB:2F:F0:C8:F2
Authority key identifier: 4E:0F:31:C6:EF:DB:9A:44:5B:8F:17:2F:0B:E0:DF:D5:14:2B:E0:00
Certificate issuer: /CN=4e0f31c6efdb9a445b8f172f0be0dfd5142be000
Certificate serial: 019A0CDD6C5682EACCC6032ADC9DC09EE68C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tg8xxu_bmkRbjxcvC-Df1RQr4AA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/aca790-6329-414a-bed5-bad2cb480912/1/Tg8xxu_bmkRbjxcvC-Df1RQr4AA.mft
Manifest number: 0106
Signing time: Wed 22 Oct 2025 17:00:28 +0000
Manifest this update: Wed 22 Oct 2025 17:00:28 +0000
Manifest next update: Thu 23 Oct 2025 17:00:28 +0000
Files and hashes: 1: 1-U8-4zu6FwPD_h-JBtHqluBUugc.roa (hash: B3V6UvPy+Yv+8toI+28gvW2unDO4YgNU77Me0s0gt9U=)
2: Tg8xxu_bmkRbjxcvC-Df1RQr4AA.crl (hash: MzYFuFxUJuWU2kuhqkfcm/gK9exBtSoHZLUHk6STDcw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/aca790-6329-414a-bed5-bad2cb480912/1/Tg8xxu_bmkRbjxcvC-Df1RQr4AA.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/aca790-6329-414a-bed5-bad2cb480912/1/Tg8xxu_bmkRbjxcvC-Df1RQr4AA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Tg8xxu_bmkRbjxcvC-Df1RQr4AA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 23 Oct 2025 13:42:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:0c:dd:6c:56:82:ea:cc:c6:03:2a:dc:9d:c0:9e:e6:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e0f31c6efdb9a445b8f172f0be0dfd5142be000
Validity
Not Before: Oct 22 17:00:28 2025 GMT
Not After : Oct 23 17:00:28 2025 GMT
Subject: CN=aaa151f5602b41084666c484524e2afb2ff0c8f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:4f:b9:ac:cf:6e:69:4f:b4:87:d4:fc:05:6d:
78:9e:53:f0:c0:b8:be:54:df:c6:7b:51:10:0b:57:
92:9e:dd:b7:ac:ac:db:bf:62:f1:2b:21:15:74:b1:
df:99:93:92:a8:61:eb:e1:b7:21:70:3d:30:9c:7f:
b8:88:85:aa:e6:bd:c1:ee:3a:e7:4d:8e:8f:13:51:
58:c0:26:61:bf:50:a9:d4:19:ec:7e:7d:8b:8d:fb:
1e:fe:59:0f:ed:0d:e8:de:35:64:d5:65:88:47:cf:
84:30:b7:67:a6:73:d8:03:64:59:17:3c:64:b0:d6:
fe:31:79:b4:6a:79:62:64:7a:4a:d2:6a:80:69:04:
8d:99:78:8d:e7:34:f1:bc:19:17:d2:40:b2:83:b2:
89:7b:f3:78:b9:fe:52:73:a1:4d:b9:4e:0d:47:8c:
99:53:e7:33:0b:5a:19:07:d0:41:03:00:34:b8:8b:
d9:96:1e:1a:eb:90:af:74:23:11:41:e0:9b:af:c3:
14:f4:f2:89:a4:59:b5:bd:26:5f:23:e9:21:02:eb:
4f:6f:20:48:c4:47:52:c1:8a:38:77:e9:b2:47:4f:
78:bc:cf:59:42:2b:7c:29:c1:8f:40:74:64:33:be:
18:df:71:40:a2:f2:27:4c:46:bc:4b:ce:3c:ca:ba:
c2:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:A1:51:F5:60:2B:41:08:46:66:C4:84:52:4E:2A:FB:2F:F0:C8:F2
X509v3 Authority Key Identifier:
keyid:4E:0F:31:C6:EF:DB:9A:44:5B:8F:17:2F:0B:E0:DF:D5:14:2B:E0:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tg8xxu_bmkRbjxcvC-Df1RQr4AA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/aca790-6329-414a-bed5-bad2cb480912/1/Tg8xxu_bmkRbjxcvC-Df1RQr4AA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/aca790-6329-414a-bed5-bad2cb480912/1/Tg8xxu_bmkRbjxcvC-Df1RQr4AA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:f1:35:ce:5a:e4:aa:7d:c5:67:e7:83:d8:96:b5:37:be:6d:
e3:75:ac:82:eb:6e:a4:59:a9:0b:af:44:25:34:bc:09:f3:03:
27:98:c3:58:bf:79:c1:0f:92:58:57:67:33:0f:c6:c2:ae:d5:
88:a9:9c:4b:31:ef:8b:d1:62:f8:71:f3:53:eb:d9:20:c0:e4:
7f:31:97:03:15:b4:81:99:d2:0d:c1:7c:60:77:4f:17:62:4e:
09:25:48:d4:85:b7:3e:45:f7:e5:0d:bc:f1:f4:09:19:14:cc:
c2:95:c7:f4:db:aa:39:ec:2c:a5:f6:e3:84:d2:ad:77:11:d1:
65:53:e8:06:98:da:c6:4c:04:bf:ee:f3:ed:60:a8:34:fd:c9:
3b:5e:28:67:f4:ce:31:99:29:72:8b:45:63:2b:6d:d4:4f:f6:
f4:db:18:b3:dd:5b:4d:70:58:f9:b2:f1:ca:26:2b:a6:05:ba:
06:84:16:44:4b:3e:bf:49:fa:8a:6b:4f:22:8e:c9:05:da:7c:
d2:27:64:be:52:28:e6:b0:07:ee:5a:2a:9e:3e:34:a0:33:c4:
03:bf:18:63:08:65:13:7c:ad:04:cf:59:58:0b:bc:10:13:e3:
88:20:a9:4e:5a:4a:d2:cd:70:5b:67:d7:ac:a9:f2:97:b6:f3:
2b:52:1e:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 22 23:00:56 2025 by rpki-client