Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/d2a9bc-13b1-4b30-b563-209e1f84224e/1/tuD-D69oRJiK8vdE1RbtucXf5xw.mft
File: tuD-D69oRJiK8vdE1RbtucXf5xw.mft (raw, json)
Hash identifier: O1f+7DFH/3tAaxBqYrPKP5ven+ezBqSyW2xmhTxHcUw=
Subject key identifier: 5E:34:5D:F6:28:51:A1:3E:45:8D:59:1B:A1:31:E7:B1:65:0C:FB:D8
Authority key identifier: B6:E0:FE:0F:AF:68:44:98:8A:F2:F7:44:D5:16:ED:B9:C5:DF:E7:1C
Certificate issuer: /CN=b6e0fe0faf6844988af2f744d516edb9c5dfe71c
Certificate serial: 019A29D4E07EAD39357DBFBD9A24F7F289A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tuD-D69oRJiK8vdE1RbtucXf5xw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/d2a9bc-13b1-4b30-b563-209e1f84224e/1/tuD-D69oRJiK8vdE1RbtucXf5xw.mft
Manifest number: 0E81
Signing time: Tue 28 Oct 2025 08:00:08 +0000
Manifest this update: Tue 28 Oct 2025 08:00:08 +0000
Manifest next update: Wed 29 Oct 2025 08:00:08 +0000
Files and hashes: 1: a_PNkPnx5ou35JrpXNK2_iqC5Yc.roa (hash: iMkdGKK1MTR9CDFy5rjVtC+a2w/5myXmTmA9XTMLkJo=)
2: tuD-D69oRJiK8vdE1RbtucXf5xw.crl (hash: qtgFUOSvvnaHy2H906spd7HADPjGomgEq5Ett8S46KA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/d2a9bc-13b1-4b30-b563-209e1f84224e/1/tuD-D69oRJiK8vdE1RbtucXf5xw.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/d2a9bc-13b1-4b30-b563-209e1f84224e/1/tuD-D69oRJiK8vdE1RbtucXf5xw.mft
rsync://rpki.ripe.net/repository/DEFAULT/tuD-D69oRJiK8vdE1RbtucXf5xw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 08:00:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:29:d4:e0:7e:ad:39:35:7d:bf:bd:9a:24:f7:f2:89:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b6e0fe0faf6844988af2f744d516edb9c5dfe71c
Validity
Not Before: Oct 28 08:00:08 2025 GMT
Not After : Oct 29 08:00:08 2025 GMT
Subject: CN=5e345df62851a13e458d591ba131e7b1650cfbd8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:a6:91:4c:cf:d7:cb:91:f3:ed:19:eb:8a:c0:
c9:ea:68:fb:d9:27:e0:be:7f:e4:40:74:c8:dc:59:
dd:34:7c:ca:10:e7:a3:43:95:6d:2c:c4:66:0d:9f:
31:da:0b:d8:9a:6c:e9:8e:64:3c:25:f6:06:8b:6f:
70:99:7e:ad:66:a1:eb:7b:0a:a8:b3:45:d8:98:a1:
8f:5b:ed:fb:bc:66:8f:be:8a:ca:84:cd:5c:af:20:
c3:bb:18:bb:3c:3e:de:ee:b0:a2:62:7e:25:b8:90:
fa:25:b3:df:b3:05:bd:72:f6:ac:6e:8c:b9:ed:f2:
b4:2d:1c:4d:3c:a2:f5:78:98:cf:61:18:6d:79:c9:
f1:4e:b8:82:86:ce:a8:a0:fc:07:50:42:86:18:65:
05:27:3f:aa:e7:7e:25:7c:b8:4c:20:90:dc:3d:b9:
83:46:26:84:1e:0c:37:30:69:0c:b6:57:8f:cf:64:
2b:a8:d4:4b:d9:c5:1a:8b:7c:f6:4a:72:b4:7e:ba:
4f:5a:83:5b:36:c4:ce:b7:8a:f1:c1:5a:5d:db:e3:
e5:b5:74:19:96:91:2e:54:4d:97:93:c9:b0:fc:76:
79:af:70:50:67:37:b0:db:d2:5e:a4:c9:61:67:94:
83:9d:eb:c3:76:84:bd:2a:2a:56:23:8a:61:a7:05:
fc:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:34:5D:F6:28:51:A1:3E:45:8D:59:1B:A1:31:E7:B1:65:0C:FB:D8
X509v3 Authority Key Identifier:
keyid:B6:E0:FE:0F:AF:68:44:98:8A:F2:F7:44:D5:16:ED:B9:C5:DF:E7:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tuD-D69oRJiK8vdE1RbtucXf5xw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/d2a9bc-13b1-4b30-b563-209e1f84224e/1/tuD-D69oRJiK8vdE1RbtucXf5xw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/d2a9bc-13b1-4b30-b563-209e1f84224e/1/tuD-D69oRJiK8vdE1RbtucXf5xw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:a0:dd:73:af:4e:a8:5f:fa:d4:23:a2:30:0c:42:3e:b9:45:
a6:f0:0c:10:af:28:d6:11:46:42:ad:3a:8b:c6:26:b5:c8:35:
d6:c3:eb:20:05:98:41:5c:1e:bd:97:c7:ea:d7:83:f8:7b:83:
a4:da:90:71:51:05:ce:ce:46:98:ec:1e:6e:6e:28:3d:77:eb:
87:e8:bf:28:d3:28:16:e3:51:b0:62:a1:d0:ad:52:5e:19:96:
30:9a:4d:37:6f:19:3e:14:62:90:38:0c:df:cd:d2:b4:3e:9f:
33:0e:e0:95:be:05:9e:63:23:93:8e:84:24:ac:83:3e:fc:3b:
1b:2a:12:71:b7:6f:04:a6:ee:b1:34:08:27:bf:f8:85:bd:99:
79:38:20:04:b6:17:01:90:5a:70:4a:e3:c9:94:5d:19:73:1d:
1e:8d:b7:3f:63:be:73:ef:a0:96:a9:be:24:70:47:46:18:eb:
7c:83:23:97:a9:9f:6f:a4:be:ce:c9:07:f8:36:24:89:6e:4b:
9d:19:1a:40:a7:a8:e7:76:5d:13:bf:15:b5:be:19:75:27:88:
c5:77:9a:6b:b2:d3:fb:95:c7:6e:8c:d6:cb:3d:a2:0d:15:c0:
d6:47:94:06:95:e4:ae:c8:21:96:f1:64:66:ab:af:54:5f:95:
d5:13:5e:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 16:23:05 2025 by rpki-client