Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/bd173d-6cf5-4250-aa26-4a6f717c7564/1/tpJFTBZpZIbPBx7Rjnl240BJCfs.mft
File: tpJFTBZpZIbPBx7Rjnl240BJCfs.mft (raw, json)
Hash identifier: vRJBYP6TrLe1yTSFsUbcGlHcC60n41QAzFL6HGBsurs=
Subject key identifier: D1:74:44:65:EA:5D:2C:0B:87:7D:73:56:17:F8:94:93:EC:08:39:B6
Authority key identifier: B6:92:45:4C:16:69:64:86:CF:07:1E:D1:8E:79:76:E3:40:49:09:FB
Certificate issuer: /CN=b692454c16696486cf071ed18e7976e3404909fb
Certificate serial: 019A23D2DDE564DFA75AE57AABA3399EA1AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tpJFTBZpZIbPBx7Rjnl240BJCfs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/bd173d-6cf5-4250-aa26-4a6f717c7564/1/tpJFTBZpZIbPBx7Rjnl240BJCfs.mft
Manifest number: 0B45
Signing time: Mon 27 Oct 2025 04:00:13 +0000
Manifest this update: Mon 27 Oct 2025 04:00:13 +0000
Manifest next update: Tue 28 Oct 2025 04:00:13 +0000
Files and hashes: 1: 5czF8Od9k1lGzWbwlN6JD9EQv3o.roa (hash: xQiXSp/PKEr54Bt774G49z92F24A1eFshYT3vR6Fw2c=)
2: tpJFTBZpZIbPBx7Rjnl240BJCfs.crl (hash: iedbknYgL/H8CICcf8+kyAN1aFc6agUmrqdCLogQ8aU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/bd173d-6cf5-4250-aa26-4a6f717c7564/1/tpJFTBZpZIbPBx7Rjnl240BJCfs.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/bd173d-6cf5-4250-aa26-4a6f717c7564/1/tpJFTBZpZIbPBx7Rjnl240BJCfs.mft
rsync://rpki.ripe.net/repository/DEFAULT/tpJFTBZpZIbPBx7Rjnl240BJCfs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 04:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:23:d2:dd:e5:64:df:a7:5a:e5:7a:ab:a3:39:9e:a1:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b692454c16696486cf071ed18e7976e3404909fb
Validity
Not Before: Oct 27 04:00:13 2025 GMT
Not After : Oct 28 04:00:13 2025 GMT
Subject: CN=d1744465ea5d2c0b877d735617f89493ec0839b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:15:be:b6:18:5f:d0:9c:64:4d:f4:fe:0a:67:
84:7e:c5:d3:c6:64:26:28:c2:f9:67:c5:48:32:86:
8c:7d:f5:ad:45:8d:95:a8:ce:e6:e1:2c:26:8e:a9:
7c:c1:75:1c:d3:5d:be:d8:48:96:b0:8c:59:92:ab:
e6:d9:c5:1e:9f:73:6d:fd:c4:5e:fa:7d:6d:2b:c4:
e0:e5:d6:aa:cf:5b:24:7b:09:5e:f6:5c:32:a2:65:
1e:41:03:73:7c:ad:a9:f4:ed:fb:28:6e:aa:fd:88:
a9:01:33:c9:06:de:44:d1:6f:04:d9:ac:76:f3:4f:
28:30:a3:9b:d5:c7:f1:6f:aa:88:62:67:89:19:54:
bd:bd:07:f2:a4:8c:ff:c8:40:6f:b0:95:d4:81:9e:
ad:b8:a1:97:b5:fd:b6:d7:84:a5:21:00:3e:bc:c9:
d1:41:03:c7:66:53:84:ff:59:f9:86:a3:d0:d0:1e:
c7:f5:f8:4a:68:ee:f0:e6:5b:f2:41:1f:ee:20:8e:
fb:55:af:4d:7b:14:a8:e8:c3:1b:8e:3a:51:85:e6:
d8:7f:98:e6:61:5c:d4:0e:47:b0:96:4d:14:ad:a0:
5f:89:6f:91:dc:99:66:08:b9:b9:fd:f0:57:6a:84:
c9:a0:91:2f:83:51:94:d9:55:0c:0c:a6:00:2e:cd:
68:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:74:44:65:EA:5D:2C:0B:87:7D:73:56:17:F8:94:93:EC:08:39:B6
X509v3 Authority Key Identifier:
keyid:B6:92:45:4C:16:69:64:86:CF:07:1E:D1:8E:79:76:E3:40:49:09:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tpJFTBZpZIbPBx7Rjnl240BJCfs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/bd173d-6cf5-4250-aa26-4a6f717c7564/1/tpJFTBZpZIbPBx7Rjnl240BJCfs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/bd173d-6cf5-4250-aa26-4a6f717c7564/1/tpJFTBZpZIbPBx7Rjnl240BJCfs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:63:7c:8e:0f:d3:44:bb:83:f1:fb:13:f8:54:d0:70:4c:c4:
31:4a:28:2a:9a:a3:fd:5c:77:f1:5e:ce:44:af:17:37:12:cb:
ed:34:3a:8a:9e:36:72:dc:09:bd:7f:8c:86:a4:eb:73:cf:ca:
f7:ea:9f:66:a0:60:10:ab:06:59:31:52:75:75:9a:0f:8e:92:
ca:da:a5:2d:bd:4b:df:7d:59:3b:fa:00:27:dc:72:61:78:89:
3b:af:42:bc:49:ab:35:bf:82:57:eb:51:f3:9f:40:81:f4:32:
06:3a:92:88:87:93:b4:02:db:d2:41:79:8f:2a:f1:87:f0:01:
be:70:62:86:90:f2:50:66:0e:0e:76:ce:7b:f3:57:e7:b1:41:
f4:ef:ea:67:cb:70:1e:00:4f:67:67:a5:33:96:dd:c2:5b:28:
3c:b5:e0:0b:45:d2:e2:09:8d:e4:f8:38:a9:a5:72:05:bd:3f:
62:b2:45:38:ce:c8:61:f6:7e:a9:00:b6:34:ee:a9:06:a3:37:
b4:b3:b1:01:b9:68:e5:d3:2b:2f:5f:36:d3:85:f4:24:4d:dc:
65:c1:0a:66:82:b3:d9:5f:03:50:22:7b:c8:52:a8:d6:cc:3c:
96:01:23:31:f3:e4:87:ac:67:9c:4e:5e:01:c8:d5:73:6e:91:
44:01:73:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 12:08:15 2025 by rpki-client