Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/649a98-339a-4f4b-8750-6e9d3b732b08/1/tWyxebPbXGs2zTMINAgB_tsrfRk.mft
File: tWyxebPbXGs2zTMINAgB_tsrfRk.mft (raw, json)
Hash identifier: 1Cbapx9m6oEGV70XbP7zlE4WD2AoFadqMlB5uML+jRY=
Subject key identifier: 91:D5:3A:65:67:AE:B2:95:D5:C5:D8:AE:0D:6F:33:E2:C6:4D:28:BF
Authority key identifier: B5:6C:B1:79:B3:DB:5C:6B:36:CD:33:08:34:08:01:FE:DB:2B:7D:19
Certificate issuer: /CN=b56cb179b3db5c6b36cd3308340801fedb2b7d19
Certificate serial: 019A210970E35F8F006A901F1F53FA322802
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tWyxebPbXGs2zTMINAgB_tsrfRk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/649a98-339a-4f4b-8750-6e9d3b732b08/1/tWyxebPbXGs2zTMINAgB_tsrfRk.mft
Manifest number: 16F7
Signing time: Sun 26 Oct 2025 15:00:58 +0000
Manifest this update: Sun 26 Oct 2025 15:00:58 +0000
Manifest next update: Mon 27 Oct 2025 15:00:58 +0000
Files and hashes: 1: egERklG4JDoNVaiZcO7pQtm8HwI.roa (hash: UCPCOxDDKaXVSI1SbOM7CcRIC7mRuotxlKVUCRUv8VQ=)
2: tWyxebPbXGs2zTMINAgB_tsrfRk.crl (hash: HN3nMKkSVD/F7FZ/rGaiJMlg5GdEVq1YpX8rFnhPhfA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/649a98-339a-4f4b-8750-6e9d3b732b08/1/tWyxebPbXGs2zTMINAgB_tsrfRk.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/649a98-339a-4f4b-8750-6e9d3b732b08/1/tWyxebPbXGs2zTMINAgB_tsrfRk.mft
rsync://rpki.ripe.net/repository/DEFAULT/tWyxebPbXGs2zTMINAgB_tsrfRk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:21:09:70:e3:5f:8f:00:6a:90:1f:1f:53:fa:32:28:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b56cb179b3db5c6b36cd3308340801fedb2b7d19
Validity
Not Before: Oct 26 15:00:58 2025 GMT
Not After : Oct 27 15:00:58 2025 GMT
Subject: CN=91d53a6567aeb295d5c5d8ae0d6f33e2c64d28bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:53:75:a6:79:b4:ce:7d:dc:de:19:7c:6c:31:
0c:d7:ce:9d:60:f2:56:ce:f3:29:e9:3f:6b:a8:48:
01:30:9f:47:8a:8b:30:5c:a4:4f:b3:7e:c5:be:65:
eb:3c:26:81:b2:9d:5b:49:14:fe:36:45:a7:4b:44:
59:ef:eb:42:b9:f1:b7:16:48:11:b5:5e:9d:42:11:
2e:72:ce:c5:8b:a0:1e:16:e8:97:0f:09:eb:32:33:
82:09:90:7f:36:aa:26:90:e7:8e:5d:a6:0a:0b:5f:
91:93:e7:66:f6:ec:bc:8e:87:a0:ea:90:84:00:ee:
3c:6d:30:32:56:59:1e:88:2a:13:48:76:e9:63:25:
a6:96:50:56:87:da:ae:c5:7a:8c:f3:d5:4e:4b:71:
28:bb:bf:58:2d:19:a0:fa:fd:8a:cb:27:2e:3b:7f:
cc:50:64:13:ab:ef:36:9b:ad:40:e4:7f:d7:83:36:
40:6d:d8:ad:84:5b:4a:36:8c:44:bb:89:89:c9:ac:
55:ef:ce:1c:46:46:b8:7b:4a:78:53:53:8b:fa:f1:
4b:33:42:7b:b9:2c:26:e2:c9:43:00:f9:4b:dd:07:
ed:0a:94:f7:dd:53:6a:8d:fb:d8:b6:1c:f0:3b:58:
93:55:2b:54:da:5e:bc:55:af:30:4f:fb:0c:96:26:
7a:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:D5:3A:65:67:AE:B2:95:D5:C5:D8:AE:0D:6F:33:E2:C6:4D:28:BF
X509v3 Authority Key Identifier:
keyid:B5:6C:B1:79:B3:DB:5C:6B:36:CD:33:08:34:08:01:FE:DB:2B:7D:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tWyxebPbXGs2zTMINAgB_tsrfRk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/649a98-339a-4f4b-8750-6e9d3b732b08/1/tWyxebPbXGs2zTMINAgB_tsrfRk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/649a98-339a-4f4b-8750-6e9d3b732b08/1/tWyxebPbXGs2zTMINAgB_tsrfRk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:22:ef:4e:1f:eb:53:7c:12:58:b1:cb:cf:2a:e3:6d:44:bb:
24:6a:22:8e:36:99:b2:f5:41:30:d7:e2:e9:8e:59:90:1d:f8:
8a:d6:bd:02:6a:1a:41:40:6e:f7:46:8c:3d:e8:19:b1:0f:5f:
46:97:7c:54:4b:a8:ae:5d:f5:75:08:23:e3:c2:ed:a4:54:73:
95:ab:88:0d:ed:c2:39:8b:b8:35:0d:96:d9:18:7e:c7:22:7f:
27:35:65:25:20:2a:cb:f9:fb:f8:f8:6a:97:2a:e4:70:26:45:
b5:b5:e6:8b:3e:f0:26:42:5d:82:0f:50:09:9e:55:8c:8e:aa:
f5:fe:c6:64:39:b8:9e:65:b2:26:6c:ff:68:5b:bf:75:69:f7:
03:61:6f:84:22:49:1a:11:e6:c1:2d:60:a7:57:e6:8e:19:7e:
40:33:c1:1b:af:b3:92:0e:0f:79:39:be:d9:ab:47:1d:43:9f:
9b:90:37:33:e4:a2:27:33:e1:0c:1f:27:2a:cf:cd:6b:77:a7:
1d:f2:a8:01:1b:9f:03:a8:4a:5b:4f:38:eb:8e:8f:f3:3b:de:
21:aa:d6:aa:cb:25:16:65:25:60:ab:2b:01:bb:bb:ec:2f:0c:
92:1c:ae:0b:b7:b5:a6:9a:be:13:0c:5a:15:c8:52:e9:48:9a:
7c:13:3d:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 20:43:33 2025 by rpki-client