Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/9ff43e-f817-4ebe-a0d9-7a18931d985b/1/tn8bh-Z1L0VDm4UozJaLR3CloPs.mft
File: tn8bh-Z1L0VDm4UozJaLR3CloPs.mft (raw, json)
Hash identifier: pfpQZu/eZloLsUvkyV1HwIawJXwbk8yEbqGMCER1NXs=
Subject key identifier: EB:5D:D7:16:3C:16:5C:1D:81:F4:4E:C8:28:CD:F8:ED:FA:BD:DC:1D
Authority key identifier: B6:7F:1B:87:E6:75:2F:45:43:9B:85:28:CC:96:8B:47:70:A5:A0:FB
Certificate issuer: /CN=b67f1b87e6752f45439b8528cc968b4770a5a0fb
Certificate serial: 019A22F7230234269E779D1A981F5212CFA8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tn8bh-Z1L0VDm4UozJaLR3CloPs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/9ff43e-f817-4ebe-a0d9-7a18931d985b/1/tn8bh-Z1L0VDm4UozJaLR3CloPs.mft
Manifest number: 16F4
Signing time: Mon 27 Oct 2025 00:00:12 +0000
Manifest this update: Mon 27 Oct 2025 00:00:12 +0000
Manifest next update: Tue 28 Oct 2025 00:00:12 +0000
Files and hashes: 1: kYfhtSfEKW3P-62E9GiF_Ua9EUo.roa (hash: p1no5bz1+uk9Sv3KCtgs/QuEn0taiRhnvBxPn7m9ACY=)
2: tn8bh-Z1L0VDm4UozJaLR3CloPs.crl (hash: 0H0gaSbTHvRP1lk4zaI+mMyiJ/fwvfybj+b4GoIIzb0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/9ff43e-f817-4ebe-a0d9-7a18931d985b/1/tn8bh-Z1L0VDm4UozJaLR3CloPs.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/9ff43e-f817-4ebe-a0d9-7a18931d985b/1/tn8bh-Z1L0VDm4UozJaLR3CloPs.mft
rsync://rpki.ripe.net/repository/DEFAULT/tn8bh-Z1L0VDm4UozJaLR3CloPs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 19:48:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:22:f7:23:02:34:26:9e:77:9d:1a:98:1f:52:12:cf:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b67f1b87e6752f45439b8528cc968b4770a5a0fb
Validity
Not Before: Oct 27 00:00:12 2025 GMT
Not After : Oct 28 00:00:12 2025 GMT
Subject: CN=eb5dd7163c165c1d81f44ec828cdf8edfabddc1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:a6:16:70:00:e8:31:8e:80:a6:ff:ec:9f:08:
5e:06:7a:87:56:c6:4d:42:4f:86:67:e9:00:38:49:
b1:85:b1:fa:d4:59:ac:5e:3a:2e:18:09:3f:89:ce:
12:02:1e:bb:82:f1:1e:2b:d5:b4:93:a6:cf:9d:53:
73:74:fc:65:a3:e0:59:cd:4a:30:ae:78:58:e2:11:
06:c5:8f:60:1f:69:46:c8:21:97:39:f9:0a:cc:3f:
18:79:6e:dc:75:49:90:ca:e7:2e:71:fc:a3:35:5e:
5e:87:68:68:18:74:06:21:83:df:01:7c:69:13:35:
d4:1d:a2:a1:e0:8a:d3:a1:58:02:08:12:49:80:1c:
a6:0a:2f:8f:30:04:c3:9e:9b:3a:ab:91:7e:a1:9e:
39:4f:ed:5d:b9:9a:67:af:64:01:13:7a:35:a2:93:
da:10:87:61:cd:4f:92:1d:8e:af:d6:7b:ad:c7:f1:
5e:4d:95:be:8e:5d:e0:28:ca:a3:71:43:74:0d:cb:
5a:fb:82:12:d3:d6:f6:d8:de:de:09:73:d1:f2:be:
45:d6:73:f3:89:2c:8d:f0:1b:77:47:87:b2:4c:55:
4e:bd:22:14:d3:cc:20:24:a3:00:cf:45:30:c2:ee:
6a:20:2a:a8:1c:02:59:2f:77:da:aa:d7:51:4a:f2:
7d:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:5D:D7:16:3C:16:5C:1D:81:F4:4E:C8:28:CD:F8:ED:FA:BD:DC:1D
X509v3 Authority Key Identifier:
keyid:B6:7F:1B:87:E6:75:2F:45:43:9B:85:28:CC:96:8B:47:70:A5:A0:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tn8bh-Z1L0VDm4UozJaLR3CloPs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/9ff43e-f817-4ebe-a0d9-7a18931d985b/1/tn8bh-Z1L0VDm4UozJaLR3CloPs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/9ff43e-f817-4ebe-a0d9-7a18931d985b/1/tn8bh-Z1L0VDm4UozJaLR3CloPs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:59:42:92:a8:51:9d:09:8e:a7:c3:97:99:36:db:ae:be:5a:
f1:39:06:db:20:0a:01:2b:22:27:c3:b9:34:c3:06:dd:13:3d:
21:00:9f:9f:a0:ae:07:32:fa:59:fb:c6:09:70:51:18:7e:5b:
65:0c:78:31:8d:d5:22:6c:99:e1:d0:f6:76:1b:ce:a4:55:09:
cc:35:39:37:be:74:c4:f7:46:b8:ab:b0:98:bf:a2:f1:8b:61:
09:ba:70:dd:cd:80:09:6e:ca:77:93:99:81:3e:6d:cf:3c:96:
39:f5:3d:63:03:84:82:5a:0b:3d:20:24:5d:e7:d2:ba:92:6c:
98:69:4b:4b:f2:6c:5a:fa:ad:dd:c0:2a:9b:b9:69:a6:e2:b2:
84:93:51:01:cb:88:c4:65:38:d9:14:90:dd:31:8a:54:4a:44:
35:e4:69:4e:96:18:ed:7b:94:0f:b0:a1:2c:c8:dd:b6:38:cf:
f9:44:1b:3c:f1:e3:0c:00:20:a4:99:2b:a6:21:2d:cf:7d:c8:
53:42:89:a0:37:fa:20:32:46:91:57:cd:c4:ff:ed:3f:5c:22:
c9:ec:60:4c:c7:a5:15:96:67:a9:28:6f:1e:45:2f:bb:51:23:
a0:a4:db:34:0e:97:4b:ba:0a:a5:d6:ca:ba:8c:6a:7e:37:53:
91:24:54:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 03:57:28 2025 by rpki-client