Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/20974d-6403-4107-a75b-13fb7a5130ca/1/tOxsCl6-xYF9kbkeeaa8YTLrnSw.mft
File: tOxsCl6-xYF9kbkeeaa8YTLrnSw.mft (raw, json)
Hash identifier: RgvZY6KYanPH87BhgJOmFrtg6YURWOx5FWXpsoSvDpI=
Subject key identifier: 6D:E7:A9:67:3B:18:DB:29:5F:47:1B:32:26:E9:F3:A8:5E:14:C7:7D
Authority key identifier: B4:EC:6C:0A:5E:BE:C5:81:7D:91:B9:1E:79:A6:BC:61:32:EB:9D:2C
Certificate issuer: /CN=b4ec6c0a5ebec5817d91b91e79a6bc6132eb9d2c
Certificate serial: 019A1AD0316DB3BA74E997BAE2D0361BA8B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tOxsCl6-xYF9kbkeeaa8YTLrnSw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/20974d-6403-4107-a75b-13fb7a5130ca/1/tOxsCl6-xYF9kbkeeaa8YTLrnSw.mft
Manifest number: 16F5
Signing time: Sat 25 Oct 2025 10:00:42 +0000
Manifest this update: Sat 25 Oct 2025 10:00:42 +0000
Manifest next update: Sun 26 Oct 2025 10:00:42 +0000
Files and hashes: 1: 0WgKhjREJrZPp5eivCc5Ledwy08.roa (hash: g1cMz695Vu5b1v4C7JspTc1yMqOrx6XRuND1g3o80ZU=)
2: c4XFDsuP3oiOPuoN5dW6Mp7swps.roa (hash: RShjOJ6yyL7rh4X46zYbqRc79tC1/dWZp0uZXHk88jM=)
3: tOxsCl6-xYF9kbkeeaa8YTLrnSw.crl (hash: 4qHfhvmbRTAi6XLnrhHcURe0r97WzM603pV94M5RnwM=)
4: x8qy1V86ggKXIYJ47lPp7-bEQ08.roa (hash: Tid2ObTc99hFnnGIy0KhVlQV4ZEsaX9AQcsvz/R/sw4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/20974d-6403-4107-a75b-13fb7a5130ca/1/tOxsCl6-xYF9kbkeeaa8YTLrnSw.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/20974d-6403-4107-a75b-13fb7a5130ca/1/tOxsCl6-xYF9kbkeeaa8YTLrnSw.mft
rsync://rpki.ripe.net/repository/DEFAULT/tOxsCl6-xYF9kbkeeaa8YTLrnSw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 Oct 2025 08:33:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1a:d0:31:6d:b3:ba:74:e9:97:ba:e2:d0:36:1b:a8:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4ec6c0a5ebec5817d91b91e79a6bc6132eb9d2c
Validity
Not Before: Oct 25 10:00:42 2025 GMT
Not After : Oct 26 10:00:42 2025 GMT
Subject: CN=6de7a9673b18db295f471b3226e9f3a85e14c77d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:43:d0:93:f9:3b:b2:8b:03:18:3f:dd:79:ca:
0f:bb:19:58:50:25:73:9d:36:f4:65:c7:ab:ce:01:
6f:7f:f4:3a:ae:3b:6f:7d:1c:35:94:fa:a1:96:96:
12:e8:1f:53:ff:13:2a:b8:d8:f1:c7:9d:ac:26:1f:
80:16:ff:0d:76:51:4a:82:69:90:41:91:ad:7d:af:
a7:f3:32:fd:09:0b:14:8f:03:d3:f8:38:db:3a:3f:
ea:0c:08:bc:f5:c0:a0:76:4d:37:10:0d:cf:e2:75:
89:32:d7:35:87:bd:0d:86:74:e7:a1:3f:e1:6d:94:
1b:a4:c2:97:50:5d:0e:37:e2:fe:e5:fc:60:84:21:
ed:62:5c:f1:c9:c6:4b:dd:f2:4a:43:63:42:e9:06:
68:d5:a4:73:13:79:af:9d:33:a9:16:76:f1:49:d8:
fb:53:c0:89:c3:3d:f7:b6:12:17:0a:fa:fb:95:90:
ee:44:2d:b9:78:ba:2d:7f:fa:f0:51:d1:b7:be:89:
78:69:eb:75:d7:8d:3c:f7:16:33:50:a1:b9:1e:f3:
d9:c9:ed:ea:28:51:d6:9e:b4:7d:a5:b3:16:7b:8f:
a6:08:36:68:f4:19:69:5d:2e:a9:cc:5a:e3:df:44:
a7:1c:ef:5f:9c:eb:80:28:84:61:75:ef:22:c7:83:
03:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:E7:A9:67:3B:18:DB:29:5F:47:1B:32:26:E9:F3:A8:5E:14:C7:7D
X509v3 Authority Key Identifier:
keyid:B4:EC:6C:0A:5E:BE:C5:81:7D:91:B9:1E:79:A6:BC:61:32:EB:9D:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tOxsCl6-xYF9kbkeeaa8YTLrnSw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/20974d-6403-4107-a75b-13fb7a5130ca/1/tOxsCl6-xYF9kbkeeaa8YTLrnSw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/20974d-6403-4107-a75b-13fb7a5130ca/1/tOxsCl6-xYF9kbkeeaa8YTLrnSw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:d9:8b:68:05:e1:e5:5c:48:3c:85:46:18:82:66:ac:40:90:
47:e2:56:75:64:a9:27:23:25:a7:9e:2b:00:e8:36:93:5f:3f:
05:f8:ba:5b:57:6a:3e:84:73:4d:bb:eb:3a:d8:20:3b:48:80:
77:d7:c1:75:27:24:c5:d3:22:d7:71:1b:b6:3a:3a:36:81:d2:
c8:cc:0c:58:e5:0e:c1:2e:ca:d3:04:84:55:be:7f:6d:88:d9:
c2:be:08:02:0e:27:17:92:d6:ba:35:24:79:4f:d4:8b:65:45:
cb:8c:d8:68:12:81:0e:d6:45:4a:f7:74:77:d3:6f:cc:52:42:
c2:2c:89:e0:ed:73:44:c2:dd:d4:22:7c:6f:1a:f6:89:d5:4c:
81:81:33:42:10:e6:7f:e0:52:22:26:b0:08:6b:cc:6a:4b:49:
39:76:11:2d:61:30:d4:58:77:0c:1d:5b:58:89:30:f7:96:3c:
2c:5a:b4:4d:29:53:61:38:86:af:06:3c:64:d9:67:cb:a4:d7:
b9:38:af:eb:25:c0:66:b6:63:cf:35:aa:e1:65:1b:f0:5d:c3:
0f:c4:54:ad:03:ea:ce:15:b7:d1:28:da:5d:e6:16:19:96:ab:
41:02:24:fb:c3:70:d5:68:aa:a9:15:98:2b:be:fd:c0:e8:b5:
4c:6a:1b:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 25 13:42:34 2025 by rpki-client