Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/b17ca4-2e2e-415a-adde-77257e04765f/1/TuBDL1Qp2GHXdDv8MdetAZYopes.mft
File: TuBDL1Qp2GHXdDv8MdetAZYopes.mft (raw, json)
Hash identifier: 88zW2z/AX+AQLe8M79+ys3dJd5nu7oT8f8NK1DlDBEE=
Subject key identifier: F7:BD:FF:FD:E8:15:8B:2F:2E:24:54:32:46:64:77:D2:2C:79:D7:13
Authority key identifier: 4E:E0:43:2F:54:29:D8:61:D7:74:3B:FC:31:D7:AD:01:96:28:A5:EB
Certificate issuer: /CN=4ee0432f5429d861d7743bfc31d7ad019628a5eb
Certificate serial: 019A2EFBC6AB6DECC10275B46FD774F25843
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TuBDL1Qp2GHXdDv8MdetAZYopes.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/b17ca4-2e2e-415a-adde-77257e04765f/1/TuBDL1Qp2GHXdDv8MdetAZYopes.mft
Manifest number: 16FC
Signing time: Wed 29 Oct 2025 08:00:43 +0000
Manifest this update: Wed 29 Oct 2025 08:00:43 +0000
Manifest next update: Thu 30 Oct 2025 08:00:43 +0000
Files and hashes: 1: TuBDL1Qp2GHXdDv8MdetAZYopes.crl (hash: q9mt22Vdy7GKupVgL1tgdefw2aXJD/O+BQDTKO2qEow=)
2: V-oDOUzOLBq0RjtBmicPhW9GyFQ.roa (hash: iuJ5R7a61uv63vftS3TPCits4UE3OCvlD1Io0BilMuI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/b17ca4-2e2e-415a-adde-77257e04765f/1/TuBDL1Qp2GHXdDv8MdetAZYopes.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/b17ca4-2e2e-415a-adde-77257e04765f/1/TuBDL1Qp2GHXdDv8MdetAZYopes.mft
rsync://rpki.ripe.net/repository/DEFAULT/TuBDL1Qp2GHXdDv8MdetAZYopes.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Oct 2025 07:57:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:2e:fb:c6:ab:6d:ec:c1:02:75:b4:6f:d7:74:f2:58:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ee0432f5429d861d7743bfc31d7ad019628a5eb
Validity
Not Before: Oct 29 08:00:43 2025 GMT
Not After : Oct 30 08:00:43 2025 GMT
Subject: CN=f7bdfffde8158b2f2e245432466477d22c79d713
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:c8:57:28:85:53:10:cf:8e:b7:10:15:a6:5f:
d9:ac:04:46:b4:2d:f6:f7:8d:a0:e4:da:e2:3c:a8:
99:14:38:a1:bd:bc:96:cf:15:77:dd:c3:cf:c4:d1:
01:c4:70:e7:80:4c:bd:98:a5:c6:02:ac:61:a2:34:
5d:b7:fc:d4:f7:8f:d8:38:e8:b6:7b:39:fa:0e:4a:
72:5b:df:b1:09:98:3f:44:9c:ed:42:ab:aa:73:8b:
60:c4:ee:d8:13:de:61:08:c5:8d:3f:93:a6:c0:c3:
95:df:c5:cb:52:55:ae:8b:88:5d:ce:6b:b9:9f:71:
e1:ed:ca:ae:24:6f:f7:f1:3d:0f:c1:59:e2:8b:cb:
5f:4c:3c:7f:e7:e7:9f:1e:1e:fa:06:aa:dc:f1:a2:
aa:2c:3c:50:cb:51:b7:96:af:b3:6f:24:6a:1f:9d:
2b:7f:60:12:40:5b:4a:37:00:b6:57:90:69:f8:3e:
57:30:20:8d:4c:fd:a2:6a:ca:3a:39:02:d2:f3:82:
a1:ae:27:84:9a:6c:13:04:fd:89:e8:b3:62:61:84:
fd:99:6c:c7:11:03:d5:2b:03:b3:0b:53:78:2f:6d:
8a:fb:88:68:a5:f9:d0:cb:85:2e:4e:c7:e9:2e:8c:
80:17:44:9c:2d:41:e6:3d:e7:a6:4e:31:74:ff:fe:
ba:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:BD:FF:FD:E8:15:8B:2F:2E:24:54:32:46:64:77:D2:2C:79:D7:13
X509v3 Authority Key Identifier:
keyid:4E:E0:43:2F:54:29:D8:61:D7:74:3B:FC:31:D7:AD:01:96:28:A5:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TuBDL1Qp2GHXdDv8MdetAZYopes.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/b17ca4-2e2e-415a-adde-77257e04765f/1/TuBDL1Qp2GHXdDv8MdetAZYopes.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/b17ca4-2e2e-415a-adde-77257e04765f/1/TuBDL1Qp2GHXdDv8MdetAZYopes.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:15:6d:0c:b7:a1:e4:b9:88:db:6c:8f:e1:78:82:58:ec:3e:
42:43:8c:78:0b:61:6c:68:29:ac:50:21:a9:94:24:2a:04:e6:
94:23:b4:f4:21:e8:ed:2f:db:4a:8b:5e:9c:9b:68:4d:af:9f:
44:9d:f2:d7:88:da:1c:ff:01:51:a0:e3:9c:f1:fc:da:55:06:
38:e2:05:45:b8:66:de:47:ca:fe:2a:40:b1:b4:47:2d:7b:2e:
b0:3e:87:b2:10:dd:a1:23:99:5a:5f:2f:a9:22:f4:a8:56:82:
a6:bf:d4:87:75:3d:75:8e:fd:7e:d3:ab:ed:78:fe:c1:37:f4:
b7:95:f4:e3:ca:e0:16:32:57:0f:d1:94:02:d2:a9:2e:ce:d3:
cb:83:97:cc:a2:5b:ad:70:05:d1:9a:a4:39:4b:05:3f:6a:0c:
4a:9d:24:b4:38:2a:17:a3:07:d9:e9:90:16:c8:93:1a:24:6d:
67:1e:3b:2c:cd:12:ad:86:99:e5:6c:9b:82:cc:ff:46:5e:c7:
af:f5:39:ae:ef:de:ca:a0:ff:78:ec:29:3f:73:c4:b8:a6:97:
47:08:d2:31:6f:4a:5d:34:69:d6:ca:0a:58:18:90:ac:7f:e8:
1a:09:b9:83:62:39:c4:14:40:c1:40:00:05:a6:65:47:de:4a:
b5:00:5c:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 29 09:56:05 2025 by rpki-client