Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/b8e5c4-38eb-445f-b036-c37790e6d482/1/Tu9qrm-6XGGmFzmvyrVaYiZuie4.mft
File: Tu9qrm-6XGGmFzmvyrVaYiZuie4.mft (raw, json)
Hash identifier: b/aD1eOgAdidXfwQiP0K0xDWQVM8IavUBmE4RGKkMPA=
Subject key identifier: 60:DD:55:F9:27:4A:16:58:48:F6:2B:FC:B5:43:2B:B7:3D:E6:6B:A9
Authority key identifier: 4E:EF:6A:AE:6F:BA:5C:61:A6:17:39:AF:CA:B5:5A:62:26:6E:89:EE
Certificate issuer: /CN=4eef6aae6fba5c61a61739afcab55a62266e89ee
Certificate serial: 019A2553A313CC2DD2A3CAA53AE9AABC67C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tu9qrm-6XGGmFzmvyrVaYiZuie4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/b8e5c4-38eb-445f-b036-c37790e6d482/1/Tu9qrm-6XGGmFzmvyrVaYiZuie4.mft
Manifest number: 16F0
Signing time: Mon 27 Oct 2025 11:00:29 +0000
Manifest this update: Mon 27 Oct 2025 11:00:29 +0000
Manifest next update: Tue 28 Oct 2025 11:00:29 +0000
Files and hashes: 1: EsNde2nZ0dUcA8Xoq5-tHg_EXc8.roa (hash: EuB6IqBcAAWKbULQ1dsjzb0/Ucv72mc0J9mJsdHmCGA=)
2: Tu9qrm-6XGGmFzmvyrVaYiZuie4.crl (hash: ISXmhQTGG3QuccvYJZvP+2OT0PUTmZsPi/3sn2yyKcY=)
3: eUaNjbQ13AL_bdj9OsodbJhievk.roa (hash: vqTtUX/Z4j6GrRJo/zNXECftqpV9YIa2rqV3Ge4NXvs=)
4: occ86qiOIs73r7C894le5tLORUc.roa (hash: vjqBb3FygjXd34w4UXc66ToikB55Yx9gYxFBgH7Uvw4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/b8e5c4-38eb-445f-b036-c37790e6d482/1/Tu9qrm-6XGGmFzmvyrVaYiZuie4.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/b8e5c4-38eb-445f-b036-c37790e6d482/1/Tu9qrm-6XGGmFzmvyrVaYiZuie4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Tu9qrm-6XGGmFzmvyrVaYiZuie4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 11:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:25:53:a3:13:cc:2d:d2:a3:ca:a5:3a:e9:aa:bc:67:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4eef6aae6fba5c61a61739afcab55a62266e89ee
Validity
Not Before: Oct 27 11:00:29 2025 GMT
Not After : Oct 28 11:00:29 2025 GMT
Subject: CN=60dd55f9274a165848f62bfcb5432bb73de66ba9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:d2:e3:9e:90:5a:5a:0d:43:34:e0:43:07:a4:
a4:69:fa:3a:65:3c:9b:0d:2a:b1:56:3d:6b:e2:2e:
bb:4e:04:b2:04:1b:62:0d:c3:da:1c:c2:3f:5a:01:
24:a6:41:d0:27:3c:af:a3:36:f0:93:13:0b:7b:fb:
bf:4f:22:2c:7a:7d:eb:b2:b6:2f:db:05:57:3c:35:
01:65:d5:dc:95:4d:1d:a7:e2:66:81:bf:e5:41:9f:
cd:15:28:89:b0:74:3b:ce:bb:6a:60:32:23:7d:ee:
da:3a:2b:d3:64:40:04:58:aa:0b:b9:1f:d1:1a:24:
78:ea:0c:6a:29:2b:35:ff:8c:6e:eb:ad:95:2c:d5:
f2:d6:27:79:d6:f6:f0:c9:c1:7e:f3:85:7b:2e:0d:
ae:1a:26:4e:3f:28:89:7d:ca:10:a9:c8:c0:73:ce:
15:bd:a3:4c:84:18:89:cb:33:bf:11:99:1a:23:98:
ff:76:26:f9:41:5a:ae:78:36:51:05:26:78:af:e3:
fd:b6:4d:0c:e1:b4:3c:ec:cc:98:63:24:6c:53:db:
f0:94:32:83:3f:03:93:7e:99:50:43:13:de:c6:12:
97:42:e2:89:2a:a2:2c:d6:19:08:8d:b0:a2:19:b2:
58:ac:68:db:fc:ca:2b:61:75:25:71:dc:d8:6e:8c:
5b:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:DD:55:F9:27:4A:16:58:48:F6:2B:FC:B5:43:2B:B7:3D:E6:6B:A9
X509v3 Authority Key Identifier:
keyid:4E:EF:6A:AE:6F:BA:5C:61:A6:17:39:AF:CA:B5:5A:62:26:6E:89:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tu9qrm-6XGGmFzmvyrVaYiZuie4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/b8e5c4-38eb-445f-b036-c37790e6d482/1/Tu9qrm-6XGGmFzmvyrVaYiZuie4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/b8e5c4-38eb-445f-b036-c37790e6d482/1/Tu9qrm-6XGGmFzmvyrVaYiZuie4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:4a:8c:3f:d6:b2:57:c0:70:99:53:48:0c:da:11:63:f9:5c:
67:fb:c0:45:2b:b3:7d:d7:0d:89:5a:33:dd:31:77:a6:2f:70:
30:dc:91:2e:30:65:6e:ee:5d:ee:83:c5:a4:e5:fd:38:b2:38:
d3:29:81:e8:ab:fc:9a:69:e6:0b:10:77:38:b2:fd:0e:98:2e:
9b:1c:db:14:fa:3b:0b:17:1e:8e:a3:e4:8a:52:17:b9:c7:d3:
a6:39:bf:4f:da:87:46:2f:de:0a:e8:e6:0c:3c:44:e0:4c:ed:
e6:e8:aa:b8:15:9f:a9:75:79:f3:85:e6:e9:7c:ed:d7:a4:ac:
4e:97:87:c9:7e:10:62:9e:f3:0d:f2:d7:47:46:8e:9e:8b:26:
ba:85:ff:54:a5:19:d2:2b:42:93:a7:49:c4:d7:1d:99:47:6b:
95:bc:38:72:da:cc:4e:33:e0:4b:0f:87:6d:59:85:3d:eb:e8:
7f:be:0a:eb:b6:07:5d:f2:96:03:c8:6c:d0:c2:92:c2:8d:84:
68:00:c4:f2:26:e1:27:fc:7d:ee:21:99:38:8e:3d:70:8c:99:
8d:48:69:82:3f:2e:68:22:04:79:0b:94:80:5f:f7:8f:e6:5c:
61:26:24:b0:1f:9a:b4:97:8e:bd:c9:de:47:26:2e:a9:2d:15:
c1:53:23:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 16:59:28 2025 by rpki-client