Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/264934-2a7f-428b-afe5-81d214edf298/1/tN1tZY4UVx6Dn3gT2jHyIXQigY4.mft
File: tN1tZY4UVx6Dn3gT2jHyIXQigY4.mft (raw, json)
Hash identifier: ZvpQ35+YjO0ZoYxgy5myw2tZBKJTc8ZRRlPpR0AaHOg=
Subject key identifier: BE:E4:C2:81:BF:D5:1D:05:26:1B:2A:40:18:23:B0:05:73:21:75:E9
Authority key identifier: B4:DD:6D:65:8E:14:57:1E:83:9F:78:13:DA:31:F2:21:74:22:81:8E
Certificate issuer: /CN=b4dd6d658e14571e839f7813da31f2217422818e
Certificate serial: 019A06DB55F98C5CBF5D5D8387D67B028CAE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tN1tZY4UVx6Dn3gT2jHyIXQigY4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/264934-2a7f-428b-afe5-81d214edf298/1/tN1tZY4UVx6Dn3gT2jHyIXQigY4.mft
Manifest number: 16E8
Signing time: Tue 21 Oct 2025 13:00:28 +0000
Manifest this update: Tue 21 Oct 2025 13:00:28 +0000
Manifest next update: Wed 22 Oct 2025 13:00:28 +0000
Files and hashes: 1: i7TTR0PMX6DAq8x2EEX7tvYEy2w.roa (hash: iWmz0ZT2uDCkIA/K5JDubPnWXPlf7zxHizjmswntW2Y=)
2: tN1tZY4UVx6Dn3gT2jHyIXQigY4.crl (hash: CnZEJ536/9iD9R/jOQ5yLgeQdIZtHgv7ilbyj0hVhlM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/264934-2a7f-428b-afe5-81d214edf298/1/tN1tZY4UVx6Dn3gT2jHyIXQigY4.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/264934-2a7f-428b-afe5-81d214edf298/1/tN1tZY4UVx6Dn3gT2jHyIXQigY4.mft
rsync://rpki.ripe.net/repository/DEFAULT/tN1tZY4UVx6Dn3gT2jHyIXQigY4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Oct 2025 13:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:06:db:55:f9:8c:5c:bf:5d:5d:83:87:d6:7b:02:8c:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4dd6d658e14571e839f7813da31f2217422818e
Validity
Not Before: Oct 21 13:00:28 2025 GMT
Not After : Oct 22 13:00:28 2025 GMT
Subject: CN=bee4c281bfd51d05261b2a401823b005732175e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:99:a4:1a:cb:a1:11:87:5d:b8:45:7b:19:c5:
40:43:2c:43:be:92:a4:ff:96:da:a0:62:22:91:31:
bd:e5:d3:4e:81:cb:aa:18:2e:17:a7:80:e6:ce:32:
b4:de:d1:0f:cb:56:93:f7:75:b9:06:48:f3:1c:b2:
e4:b6:98:33:4c:31:52:85:6e:da:dd:c8:34:f6:c5:
90:0e:e6:27:a6:99:f1:d7:b9:77:c9:ef:a2:79:cb:
d2:7a:a5:45:cd:85:90:aa:bb:b5:4c:d3:37:66:ce:
71:15:ab:ad:ab:78:ba:2b:c4:93:77:28:08:fb:cc:
25:f2:9a:de:66:29:ba:09:9b:af:06:a5:a3:88:db:
33:f9:c9:d6:3e:ad:5d:4d:7a:dc:33:d8:21:4f:48:
71:d3:5a:7c:56:e2:ef:f9:17:53:d4:11:2d:cc:d6:
e4:af:98:ed:f9:9d:9a:f6:ff:4c:9b:3e:6a:9b:b0:
f7:14:71:d3:c4:a8:4b:7e:58:43:5c:e1:3c:e9:4e:
ca:89:0d:ef:53:21:1a:d7:19:c0:f9:2d:d9:01:5f:
0d:51:56:7d:3a:bf:83:a8:0a:41:6e:03:38:da:30:
8f:f1:8f:eb:78:1b:f6:d6:08:ad:92:df:f2:d5:24:
70:f8:65:66:72:52:26:a2:af:1e:a5:da:e7:40:fb:
4f:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:E4:C2:81:BF:D5:1D:05:26:1B:2A:40:18:23:B0:05:73:21:75:E9
X509v3 Authority Key Identifier:
keyid:B4:DD:6D:65:8E:14:57:1E:83:9F:78:13:DA:31:F2:21:74:22:81:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tN1tZY4UVx6Dn3gT2jHyIXQigY4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/264934-2a7f-428b-afe5-81d214edf298/1/tN1tZY4UVx6Dn3gT2jHyIXQigY4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/264934-2a7f-428b-afe5-81d214edf298/1/tN1tZY4UVx6Dn3gT2jHyIXQigY4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:22:19:64:2e:67:ad:03:a8:7a:29:28:a7:25:e2:42:51:13:
fc:4f:01:0e:25:9c:01:db:11:f3:2f:87:53:cd:19:22:80:a1:
33:2b:07:f1:1d:d9:0e:65:ad:3a:c3:a2:ac:7a:d7:9d:f0:48:
6e:b7:93:59:7f:40:80:d2:9c:53:77:62:7e:8d:d3:93:a0:06:
a5:60:c1:8a:ce:ae:3d:8a:5f:f8:f9:2d:6e:63:ba:51:63:0b:
c9:d8:c6:2c:35:b8:4a:bb:d8:5f:11:b9:a8:22:d0:82:01:37:
34:84:0f:c0:1c:37:0b:45:e5:b6:fa:45:15:31:c0:11:84:cb:
d9:21:9b:7d:93:71:ee:92:7c:7b:20:fe:54:21:4b:17:1b:e6:
e5:df:6c:89:a6:92:88:0c:d2:d1:0a:fb:01:2c:42:b5:26:f0:
8b:f6:1c:85:59:07:98:a5:58:a0:bb:98:72:95:62:1e:ff:7f:
1c:f4:c4:fd:e9:06:5f:dd:68:6b:41:45:c4:01:32:d5:de:9d:
f7:8a:88:26:2f:90:9d:ca:79:62:8c:e0:41:77:a0:a6:62:ac:
cf:dc:43:df:26:f2:e9:30:7a:8c:04:b7:50:bc:67:48:6c:38:
3a:37:40:21:07:ab:de:21:d6:8f:d8:ad:6a:d9:6c:15:13:5b:
5e:d2:be:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 21:26:09 2025 by rpki-client