Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/9668b5-5e92-4c18-9bb9-4351bbf74c0c/1/Ty0wsBXsTvGw08ZDR8jRtZgpP4E.mft
File: Ty0wsBXsTvGw08ZDR8jRtZgpP4E.mft (raw, json)
Hash identifier: sSIzDgXxKN3fLNknZsbt/703hwhRjgfEZF/IGpuleOM=
Subject key identifier: 03:FD:61:BC:8B:B2:99:35:26:32:0D:09:D6:02:01:53:CF:72:CF:AA
Authority key identifier: 4F:2D:30:B0:15:EC:4E:F1:B0:D3:C6:43:47:C8:D1:B5:98:29:3F:81
Certificate issuer: /CN=4f2d30b015ec4ef1b0d3c64347c8d1b598293f81
Certificate serial: 019A1C194DA49C8287DAE412A3492FF35DE1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ty0wsBXsTvGw08ZDR8jRtZgpP4E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/9668b5-5e92-4c18-9bb9-4351bbf74c0c/1/Ty0wsBXsTvGw08ZDR8jRtZgpP4E.mft
Manifest number: 095A
Signing time: Sat 25 Oct 2025 16:00:11 +0000
Manifest this update: Sat 25 Oct 2025 16:00:11 +0000
Manifest next update: Sun 26 Oct 2025 16:00:11 +0000
Files and hashes: 1: Gm9NfecPR-RUq_slL2NKmzGqQ1c.roa (hash: tkU2/2KHzDAlfUyxsnryBif6WpEicFze6N39RJoBTkM=)
2: IdcqQLaLPNCQJzdTXpACnqYscnI.roa (hash: H+1S4n+OyXlFrQgh9A84gwVt0xMSOKKs5oiKIXtOgjU=)
3: OVQ5uPkYukiV8dv56D7X8vrwp8E.roa (hash: OWeiLtMHum8JXxqxvdWPi5crevEaVFFy1EtOqegV6tI=)
4: P8VDh_9fdYN8xXLvtJMOKaqZaBs.roa (hash: nMTrg+lyYaQ59OMP8FwWXirKWOtKtrNaOkuqtu/tSjc=)
5: Pq__l0a6HrBOcCXhEDnn7AV0g54.roa (hash: A1mBB7bcRpMOwkOKXDY7TtCFDZr1ayBKUG0wvvr/Zlw=)
6: Ty0wsBXsTvGw08ZDR8jRtZgpP4E.crl (hash: ge0c+gUqoGabb6gZc2+QdDRJ424/vVPgzTZd1CMjHmI=)
7: qqV4lt6FTPnmuHdRaoUeaEC2b8U.roa (hash: HtCD/Cd4hhljqddcvUw+6pkmRGrV8qPj/FjkfpsV+Jw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/9668b5-5e92-4c18-9bb9-4351bbf74c0c/1/Ty0wsBXsTvGw08ZDR8jRtZgpP4E.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/9668b5-5e92-4c18-9bb9-4351bbf74c0c/1/Ty0wsBXsTvGw08ZDR8jRtZgpP4E.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ty0wsBXsTvGw08ZDR8jRtZgpP4E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 Oct 2025 11:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1c:19:4d:a4:9c:82:87:da:e4:12:a3:49:2f:f3:5d:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f2d30b015ec4ef1b0d3c64347c8d1b598293f81
Validity
Not Before: Oct 25 16:00:11 2025 GMT
Not After : Oct 26 16:00:11 2025 GMT
Subject: CN=03fd61bc8bb2993526320d09d6020153cf72cfaa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:45:76:e5:cc:c2:f1:f2:1e:bb:64:c0:4f:3b:
99:ab:1d:7e:21:eb:6a:b4:93:f3:a5:15:e0:6e:13:
a3:9c:d5:2c:62:41:e3:25:40:fe:13:72:94:08:a6:
4c:08:9a:49:e4:c3:00:90:17:22:ec:66:0c:cb:a1:
11:9d:f0:c9:6f:a9:5d:06:44:26:01:8c:26:ee:9b:
95:be:4c:01:d4:8f:f4:fd:88:8f:9c:25:42:17:04:
eb:ec:88:08:84:59:c8:83:d0:ed:c2:f2:03:25:d7:
16:de:55:c1:d8:83:fb:00:14:e9:a5:ae:6f:d4:70:
3a:54:f7:a8:61:42:c4:a4:38:99:ba:25:04:c2:a0:
e7:c8:1e:2c:35:7b:33:cc:39:98:7f:15:ce:ed:1d:
42:3b:e5:6e:2f:eb:b1:72:8a:f6:75:b7:05:ae:da:
cc:a2:f8:00:27:2b:91:b7:5c:3f:3e:50:bb:85:79:
84:31:e3:06:dd:8e:76:07:b5:25:48:7c:d9:de:d3:
c4:b5:e2:4a:35:ed:37:73:7b:ba:d0:12:34:cf:72:
f7:84:b6:38:8f:49:bd:5a:2e:c6:1a:92:cd:9a:ad:
dc:fb:e1:1a:c7:76:3a:1d:0c:76:34:93:6d:1f:6b:
37:f2:12:0d:89:89:4d:06:9d:aa:01:69:2c:d7:27:
64:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:FD:61:BC:8B:B2:99:35:26:32:0D:09:D6:02:01:53:CF:72:CF:AA
X509v3 Authority Key Identifier:
keyid:4F:2D:30:B0:15:EC:4E:F1:B0:D3:C6:43:47:C8:D1:B5:98:29:3F:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ty0wsBXsTvGw08ZDR8jRtZgpP4E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/9668b5-5e92-4c18-9bb9-4351bbf74c0c/1/Ty0wsBXsTvGw08ZDR8jRtZgpP4E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/9668b5-5e92-4c18-9bb9-4351bbf74c0c/1/Ty0wsBXsTvGw08ZDR8jRtZgpP4E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:4e:a9:6d:60:77:7d:9a:44:5d:5f:2f:56:c6:7d:40:05:51:
ec:43:24:3b:58:ae:ec:d0:a0:5a:1a:4e:fd:95:70:39:c5:be:
3c:02:5d:54:8b:56:f9:a8:31:7b:a2:b3:97:a5:cf:6b:6f:85:
bb:85:99:d5:70:e4:35:63:69:3d:84:d7:cf:a2:02:b2:3f:92:
fe:48:94:5d:b7:b9:44:94:f9:8f:1b:7d:9e:12:b1:5b:ff:e1:
0b:62:6d:47:7e:21:9d:7e:6f:73:ff:dd:52:a6:a1:d5:ba:1a:
a6:0d:20:04:c8:6e:7d:ad:93:b7:a4:bb:31:05:93:82:28:1b:
47:4a:ae:60:1b:0f:b7:13:92:aa:9e:9f:03:98:53:b4:35:b8:
27:da:80:ca:52:cb:79:8b:67:7b:82:f3:13:01:f4:a5:f9:15:
81:55:aa:ef:95:8e:83:a1:f9:e5:d3:14:c4:c5:d3:7c:2c:c9:
de:87:92:40:ee:ee:b4:ac:c8:c1:b8:11:b9:f3:e3:59:54:ba:
19:cd:86:b7:32:39:13:9d:e6:5e:00:09:79:1f:9d:1d:15:4a:
5b:4e:b8:13:59:91:3a:93:6a:d6:5e:6a:58:bd:ab:60:77:88:
6d:5b:ef:ec:22:7c:ce:4e:79:62:c6:0e:3f:49:59:6d:1d:42:
4a:25:28:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 25 17:57:12 2025 by rpki-client