Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/9f58f2-7919-4bfc-8f73-e7073cfe134f/1/Tq78SebNZ-JZlqLA_Fe4DMI9ukQ.mft
File: Tq78SebNZ-JZlqLA_Fe4DMI9ukQ.mft (raw, json)
Hash identifier: 9I48NMc4Mrg/+HOPiLflRUcXGg8jsGqDSxqLXHLoFA4=
Subject key identifier: B2:D7:C0:36:2D:3B:DD:4D:13:EB:8C:F4:80:14:2C:F3:34:13:A6:B6
Authority key identifier: 4E:AE:FC:49:E6:CD:67:E2:59:96:A2:C0:FC:57:B8:0C:C2:3D:BA:44
Certificate issuer: /CN=4eaefc49e6cd67e25996a2c0fc57b80cc23dba44
Certificate serial: 019A19BD4AA51A45F0AC87E0C804D1DC4234
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tq78SebNZ-JZlqLA_Fe4DMI9ukQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/9f58f2-7919-4bfc-8f73-e7073cfe134f/1/Tq78SebNZ-JZlqLA_Fe4DMI9ukQ.mft
Manifest number: 1684
Signing time: Sat 25 Oct 2025 05:00:27 +0000
Manifest this update: Sat 25 Oct 2025 05:00:27 +0000
Manifest next update: Sun 26 Oct 2025 05:00:27 +0000
Files and hashes: 1: Tq78SebNZ-JZlqLA_Fe4DMI9ukQ.crl (hash: 8wRNYKI03xX2TyAJSSWCjtVFXbkgySmQLOPjlc/bp3Q=)
2: pXY7p3AnqDJfjALLmtVHw8U2GfM.roa (hash: ZUNXce9TBnEjmUfFa15l+WlhliqRz/AO8NwAB4Sid60=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/9f58f2-7919-4bfc-8f73-e7073cfe134f/1/Tq78SebNZ-JZlqLA_Fe4DMI9ukQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/9f58f2-7919-4bfc-8f73-e7073cfe134f/1/Tq78SebNZ-JZlqLA_Fe4DMI9ukQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Tq78SebNZ-JZlqLA_Fe4DMI9ukQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 Oct 2025 05:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:19:bd:4a:a5:1a:45:f0:ac:87:e0:c8:04:d1:dc:42:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4eaefc49e6cd67e25996a2c0fc57b80cc23dba44
Validity
Not Before: Oct 25 05:00:27 2025 GMT
Not After : Oct 26 05:00:27 2025 GMT
Subject: CN=b2d7c0362d3bdd4d13eb8cf480142cf33413a6b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:dc:64:a9:89:50:5e:74:e4:c7:3e:a7:72:12:
68:2c:e1:73:ef:65:70:04:69:a8:a1:8c:4f:c6:2b:
3e:09:71:48:da:8f:d9:14:f7:17:7c:17:12:2c:ee:
c3:dd:be:da:24:ba:50:65:f6:87:ff:3a:18:4d:85:
b0:ad:78:f9:20:55:57:e4:db:f0:e7:f9:ff:cd:45:
8c:bf:71:de:b6:ea:3e:68:86:04:ce:4d:33:1d:11:
d7:9d:2f:6a:87:aa:1f:f6:cd:9e:aa:0b:af:bb:fc:
48:88:1f:cc:24:a2:e0:ab:10:4e:2d:01:b4:ff:0d:
e2:49:94:4f:fb:33:79:1b:b2:a2:13:64:4a:ba:2d:
63:70:98:0c:68:2e:80:d2:0f:5f:d0:73:19:e3:60:
8b:17:b7:95:5c:d0:40:01:a5:89:55:8a:93:b6:de:
83:2f:e7:23:f0:2a:cb:a4:f6:eb:f3:a9:7d:d3:11:
c0:bb:32:12:54:eb:8e:1d:a3:3d:0a:23:2a:a3:8f:
13:cd:7e:87:72:dd:ad:78:6b:17:4c:c5:fd:90:d6:
e1:f8:63:0b:46:87:83:e6:26:28:9e:0e:ee:cc:2b:
3a:b0:59:b6:17:33:6c:e9:0e:3f:91:7b:31:d8:d6:
47:d2:7b:73:72:0d:79:25:6e:ee:b0:ba:6a:3a:25:
d5:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:D7:C0:36:2D:3B:DD:4D:13:EB:8C:F4:80:14:2C:F3:34:13:A6:B6
X509v3 Authority Key Identifier:
keyid:4E:AE:FC:49:E6:CD:67:E2:59:96:A2:C0:FC:57:B8:0C:C2:3D:BA:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tq78SebNZ-JZlqLA_Fe4DMI9ukQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/9f58f2-7919-4bfc-8f73-e7073cfe134f/1/Tq78SebNZ-JZlqLA_Fe4DMI9ukQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/9f58f2-7919-4bfc-8f73-e7073cfe134f/1/Tq78SebNZ-JZlqLA_Fe4DMI9ukQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:ec:62:24:f0:a8:3d:43:9a:26:9d:43:88:cf:d0:25:3b:fb:
9a:89:bf:35:11:74:fa:9d:3d:ee:db:ce:9a:ef:0a:ef:4e:65:
e8:15:a0:2a:84:0f:69:eb:a7:1b:a8:7d:40:bd:0a:c5:29:6d:
b2:47:89:1d:1d:af:93:55:cb:b5:d1:38:88:63:c8:3f:cb:75:
34:a0:3d:cd:f9:d0:66:2e:17:03:64:ba:08:d5:91:0d:b9:c1:
44:bd:ff:1e:32:17:16:34:25:34:a9:6e:bd:3b:09:61:56:cf:
68:f1:19:bb:ef:fd:d4:5a:51:68:69:5e:c3:01:80:9a:38:00:
1c:85:fd:14:18:49:d0:27:d8:46:fe:f6:51:4a:81:fd:dd:c3:
40:ba:3f:df:c8:f5:ae:2b:bc:14:87:59:a1:c0:2d:6f:f5:6c:
99:35:f4:44:3c:7d:c9:21:2f:bd:45:06:86:2f:b7:40:a6:80:
d0:a3:fa:e2:26:66:07:e9:2a:e0:06:c6:71:2e:13:09:5a:3a:
13:a7:13:8b:d5:39:0b:b0:da:4d:cc:2d:76:82:71:61:09:70:
44:7a:97:47:ee:1b:73:8a:fe:d6:b5:2a:47:5d:e8:1d:9c:df:
67:18:31:65:f5:14:70:04:a8:66:b8:56:68:b3:38:4c:57:8e:
2d:44:da:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 25 13:39:29 2025 by rpki-client