Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/b1e0ff-9696-4b61-bd5e-7f6e4930f25a/1/tUK8DYzCj1WGFe0_rlPKzkpu8IE.mft
File: tUK8DYzCj1WGFe0_rlPKzkpu8IE.mft (raw, json)
Hash identifier: 3RdOaxx6M8KA+qKp2ftVgPfpbJgPkJJi/Hv5GxGuTos=
Subject key identifier: A3:B5:78:C7:08:E7:F6:DC:BD:F2:2D:7B:CA:37:FD:78:6D:46:C8:68
Authority key identifier: B5:42:BC:0D:8C:C2:8F:55:86:15:ED:3F:AE:53:CA:CE:4A:6E:F0:81
Certificate issuer: /CN=b542bc0d8cc28f558615ed3fae53cace4a6ef081
Certificate serial: 019922FA5750870BB6094D5E56C1B04288DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tUK8DYzCj1WGFe0_rlPKzkpu8IE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/b1e0ff-9696-4b61-bd5e-7f6e4930f25a/1/tUK8DYzCj1WGFe0_rlPKzkpu8IE.mft
Manifest number: 0C5E
Signing time: Sun 07 Sep 2025 07:00:55 +0000
Manifest this update: Sun 07 Sep 2025 07:00:55 +0000
Manifest next update: Mon 08 Sep 2025 07:00:55 +0000
Files and hashes: 1: Y7rbDno7w__NNU8_Y1vybLh8QhU.roa (hash: JcJWoK6XwWQ+PAZZ9rS/dpHArel2kscu87IT6w7P4BM=)
2: tUK8DYzCj1WGFe0_rlPKzkpu8IE.crl (hash: EtHzahQA5+36xYh3DbEs4UfnTWmIr61WYfcHih516KY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/b1e0ff-9696-4b61-bd5e-7f6e4930f25a/1/tUK8DYzCj1WGFe0_rlPKzkpu8IE.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/b1e0ff-9696-4b61-bd5e-7f6e4930f25a/1/tUK8DYzCj1WGFe0_rlPKzkpu8IE.mft
rsync://rpki.ripe.net/repository/DEFAULT/tUK8DYzCj1WGFe0_rlPKzkpu8IE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:fa:57:50:87:0b:b6:09:4d:5e:56:c1:b0:42:88:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b542bc0d8cc28f558615ed3fae53cace4a6ef081
Validity
Not Before: Sep 7 07:00:55 2025 GMT
Not After : Sep 8 07:00:55 2025 GMT
Subject: CN=a3b578c708e7f6dcbdf22d7bca37fd786d46c868
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:d7:d1:69:8d:43:3c:5e:44:a7:cd:b0:00:1d:
e2:62:a3:ab:4d:3d:b3:61:ad:55:f1:3d:be:a9:95:
18:98:87:f5:c7:2d:e1:62:36:00:48:3d:b8:5a:d0:
c5:2e:48:80:f8:fb:b2:20:c5:66:27:a5:47:b6:1b:
74:e2:ac:3a:9b:b6:e0:a8:50:c4:b2:a8:96:fc:61:
56:11:90:3e:22:cc:da:92:cd:16:b6:32:13:aa:72:
88:3b:85:44:56:c1:a3:a9:b4:a6:1f:11:8c:2e:e3:
a3:f7:16:33:c7:f6:9f:20:b1:e6:6f:96:4b:f8:aa:
27:a2:99:24:68:9f:e3:1a:a9:08:3d:bd:54:89:5b:
ad:83:15:57:b5:e2:27:4e:e2:f8:6b:3d:5d:13:14:
64:ed:78:9d:a5:69:24:ea:91:66:8e:bb:08:f0:c0:
7d:3a:4c:39:a9:bb:61:25:54:dd:50:e5:03:5d:6a:
2b:be:63:61:cb:82:6a:59:8b:bc:3d:24:17:4b:c8:
6a:ee:a7:0a:58:a4:ff:c6:2a:29:8f:3b:30:7b:b2:
99:30:48:61:05:49:df:2a:84:f4:fa:ba:3c:d4:be:
15:fe:c1:3b:4a:25:4b:33:da:5b:b4:c7:41:f7:86:
28:52:14:b7:c7:b4:84:df:41:d1:db:d2:b6:c7:dc:
71:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:B5:78:C7:08:E7:F6:DC:BD:F2:2D:7B:CA:37:FD:78:6D:46:C8:68
X509v3 Authority Key Identifier:
keyid:B5:42:BC:0D:8C:C2:8F:55:86:15:ED:3F:AE:53:CA:CE:4A:6E:F0:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tUK8DYzCj1WGFe0_rlPKzkpu8IE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/b1e0ff-9696-4b61-bd5e-7f6e4930f25a/1/tUK8DYzCj1WGFe0_rlPKzkpu8IE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/b1e0ff-9696-4b61-bd5e-7f6e4930f25a/1/tUK8DYzCj1WGFe0_rlPKzkpu8IE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:51:bb:bc:ee:0a:1e:b5:a7:c4:62:46:32:8c:c9:76:83:9c:
14:b5:2d:f8:79:f9:00:97:b4:88:4d:78:c6:b7:f2:7a:03:ea:
eb:01:f4:56:e5:29:87:92:fd:c3:39:e6:fd:4b:7a:80:2d:8c:
83:ec:ff:e5:75:1b:47:8e:18:fb:3f:9c:7e:c9:65:c7:2a:69:
bc:95:66:b0:d0:2b:cd:12:f2:55:67:33:ae:6c:ed:7c:79:30:
15:f0:2f:e0:7b:cd:ea:2d:61:62:54:35:3f:c0:2c:6d:d9:a3:
f6:a1:90:0a:7e:c2:fe:d8:5f:67:6d:4b:a6:e5:bd:6a:1c:40:
9f:d9:5b:38:2b:a7:50:f4:71:26:3a:ea:0f:65:51:71:8d:d8:
ce:86:7b:3d:6a:29:f5:93:bb:fc:76:a4:4a:82:16:70:c4:0f:
a0:59:9f:06:01:97:16:e1:5f:da:64:2f:7f:e5:7d:ae:c3:f8:
05:ed:e9:7e:98:30:e0:42:0d:fd:77:ef:73:a4:c4:a5:ee:41:
ec:90:59:16:fd:c4:e4:e0:11:79:91:2c:f6:51:7d:cc:da:9e:
5b:16:49:96:a5:92:7c:8e:7c:64:e5:32:af:02:f7:3f:aa:61:
6b:3d:0f:dd:8d:e4:86:3f:10:2a:52:fd:26:63:52:d3:3e:69:
e0:34:67:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:28:08 2025 by rpki-client