Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/171cea-3d78-4513-ad49-5a905af507c3/1/tu2bXLS2SGbDg97kV2v_P_h1JC0.mft
File: tu2bXLS2SGbDg97kV2v_P_h1JC0.mft (raw, json)
Hash identifier: zOuG0ch0hO/tKAiDflp+5m+LuGVIzNkDguOvMbh2lus=
Subject key identifier: 89:CE:EE:53:F5:67:D3:6F:1E:ED:74:D6:ED:66:8B:62:5C:B6:B9:D3
Authority key identifier: B6:ED:9B:5C:B4:B6:48:66:C3:83:DE:E4:57:6B:FF:3F:F8:75:24:2D
Certificate issuer: /CN=b6ed9b5cb4b64866c383dee4576bff3ff875242d
Certificate serial: 019A2177297EB6573C156524ABBE68970FF7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tu2bXLS2SGbDg97kV2v_P_h1JC0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/171cea-3d78-4513-ad49-5a905af507c3/1/tu2bXLS2SGbDg97kV2v_P_h1JC0.mft
Manifest number: 0E6D
Signing time: Sun 26 Oct 2025 17:00:48 +0000
Manifest this update: Sun 26 Oct 2025 17:00:48 +0000
Manifest next update: Mon 27 Oct 2025 17:00:48 +0000
Files and hashes: 1: Cr7WIZXJqqSxx1MgWk3fJvY56gA.roa (hash: W0p2Ng/L4A+CUhGlPSgje47dkJ8+aMEjdUAnh4zo9Rc=)
2: tu2bXLS2SGbDg97kV2v_P_h1JC0.crl (hash: CA3/lZ+apGd8emFdiIPSYejneOCwnt9gNBP80KRfPM4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/171cea-3d78-4513-ad49-5a905af507c3/1/tu2bXLS2SGbDg97kV2v_P_h1JC0.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/171cea-3d78-4513-ad49-5a905af507c3/1/tu2bXLS2SGbDg97kV2v_P_h1JC0.mft
rsync://rpki.ripe.net/repository/DEFAULT/tu2bXLS2SGbDg97kV2v_P_h1JC0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 17:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:21:77:29:7e:b6:57:3c:15:65:24:ab:be:68:97:0f:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b6ed9b5cb4b64866c383dee4576bff3ff875242d
Validity
Not Before: Oct 26 17:00:48 2025 GMT
Not After : Oct 27 17:00:48 2025 GMT
Subject: CN=89ceee53f567d36f1eed74d6ed668b625cb6b9d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:6a:61:c6:7c:63:15:84:20:69:76:b4:e5:cc:
27:51:b5:90:91:5e:af:61:d9:fa:7d:f1:e2:bc:3e:
72:c6:74:26:db:56:e4:b3:5f:5f:b6:70:66:01:8a:
23:2e:37:82:8d:e5:c0:03:4b:d4:3d:a8:ef:f6:a3:
87:af:4c:55:7d:cb:e6:a3:43:aa:52:1c:2b:ee:c3:
c9:c3:f6:5a:30:f4:a9:fb:fc:91:72:31:90:f4:59:
0a:43:db:de:a4:f2:93:6c:d2:07:ce:54:65:3b:10:
b5:85:50:cd:bc:45:72:0d:b1:22:06:ac:24:bd:de:
64:aa:4c:b6:5a:19:e7:aa:6c:10:7b:53:61:ca:a4:
af:a5:90:f4:c8:e2:7c:fa:23:30:34:bf:37:19:46:
9d:a9:9b:e2:45:27:73:92:fc:7a:e4:f7:e8:d7:2b:
5e:7b:99:69:ff:35:cb:ab:df:47:90:2f:40:d2:1b:
9f:de:21:4e:40:86:a6:7a:fa:a2:06:d1:1f:9c:ea:
4c:b3:27:ea:88:33:02:8b:e5:35:6c:10:89:43:b0:
90:26:9c:58:f0:58:2b:f8:24:2d:8a:71:4c:1a:53:
38:ef:a4:e3:70:4a:56:2e:77:62:90:6b:e1:0b:29:
69:18:51:06:e7:76:25:61:f3:f7:b3:b8:aa:00:63:
9c:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:CE:EE:53:F5:67:D3:6F:1E:ED:74:D6:ED:66:8B:62:5C:B6:B9:D3
X509v3 Authority Key Identifier:
keyid:B6:ED:9B:5C:B4:B6:48:66:C3:83:DE:E4:57:6B:FF:3F:F8:75:24:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tu2bXLS2SGbDg97kV2v_P_h1JC0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/171cea-3d78-4513-ad49-5a905af507c3/1/tu2bXLS2SGbDg97kV2v_P_h1JC0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/171cea-3d78-4513-ad49-5a905af507c3/1/tu2bXLS2SGbDg97kV2v_P_h1JC0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:db:46:41:7b:2d:0a:51:8b:d1:91:5b:71:31:1a:d0:1b:42:
90:d3:83:f6:14:12:47:08:c1:3f:4d:3d:ac:0e:49:a0:09:ca:
28:ad:8c:fb:14:6c:6f:a2:5e:68:1a:93:5c:f2:7b:cc:cf:87:
bd:97:cf:69:cd:c8:99:30:1b:5d:0c:c6:48:61:41:56:40:5d:
c4:5c:cf:d7:ea:bb:67:f2:42:3c:75:e7:00:23:44:5b:69:f3:
84:ec:36:b0:e1:d9:24:fd:6a:76:01:12:1a:42:e2:b6:5e:79:
a5:32:8a:65:5e:1a:41:09:da:58:e3:ee:d7:a6:33:b6:d1:05:
bc:d1:c3:82:c6:e0:84:1c:6f:49:1e:3a:67:cc:6b:8a:a5:f1:
b8:cb:ad:d4:9f:c6:98:c0:58:40:f3:23:e2:51:5f:5e:89:59:
d2:7e:bc:71:2a:32:d3:91:58:04:37:4a:24:dd:d4:f1:cd:11:
18:4e:13:44:d8:07:f4:ce:26:c9:04:bc:17:a8:25:19:9e:3b:
d0:5c:66:80:68:ee:36:a2:19:4c:25:f2:31:9a:b7:7b:86:48:
4a:7a:85:83:1e:0f:00:fe:8a:3b:4d:d5:9f:91:0d:a6:f3:f6:
b2:41:7a:a8:8e:cf:1b:16:f1:35:10:9b:7a:9e:e6:3a:2c:a5:
12:8e:d1:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 01:18:40 2025 by rpki-client