Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/9ee980-67a2-4d3c-b6ca-fde073588f0f/1/tZkJ7RcbOMH9xDYiKeeNaYUd4Rw.mft
File: tZkJ7RcbOMH9xDYiKeeNaYUd4Rw.mft (raw, json)
Hash identifier: EgqZXd3N40Pz6HCwdLpEq5/ph1EeIlGMS3DKhJCi/uU=
Subject key identifier: A5:2A:68:59:78:4B:D9:B3:FA:DF:4C:4C:86:F5:A5:64:81:1D:FB:28
Authority key identifier: B5:99:09:ED:17:1B:38:C1:FD:C4:36:22:29:E7:8D:69:85:1D:E1:1C
Certificate issuer: /CN=b59909ed171b38c1fdc4362229e78d69851de11c
Certificate serial: 019A236526557DD1335CB25F9D96A8FA9B63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tZkJ7RcbOMH9xDYiKeeNaYUd4Rw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/9ee980-67a2-4d3c-b6ca-fde073588f0f/1/tZkJ7RcbOMH9xDYiKeeNaYUd4Rw.mft
Manifest number: 16F8
Signing time: Mon 27 Oct 2025 02:00:22 +0000
Manifest this update: Mon 27 Oct 2025 02:00:22 +0000
Manifest next update: Tue 28 Oct 2025 02:00:22 +0000
Files and hashes: 1: 1lSa1sl-dNBGB6RIspgIufADhjs.roa (hash: ZUkq8NELozqtJDfHgnQK7IOC8L6Hnu5OT9um+2WKleM=)
2: TB1SNMK17klLvRw1OV09EGXDsjg.roa (hash: 3s2Ua7bRSNfwEdFtiO4U1p/wzm3QtvPjfYSSDJ4385k=)
3: tZkJ7RcbOMH9xDYiKeeNaYUd4Rw.crl (hash: WPN0Noyx1aQji4uF+7SZbUt+iwNV9WsZBQ+DIcudmUo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/9ee980-67a2-4d3c-b6ca-fde073588f0f/1/tZkJ7RcbOMH9xDYiKeeNaYUd4Rw.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/9ee980-67a2-4d3c-b6ca-fde073588f0f/1/tZkJ7RcbOMH9xDYiKeeNaYUd4Rw.mft
rsync://rpki.ripe.net/repository/DEFAULT/tZkJ7RcbOMH9xDYiKeeNaYUd4Rw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 02:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:23:65:26:55:7d:d1:33:5c:b2:5f:9d:96:a8:fa:9b:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b59909ed171b38c1fdc4362229e78d69851de11c
Validity
Not Before: Oct 27 02:00:22 2025 GMT
Not After : Oct 28 02:00:22 2025 GMT
Subject: CN=a52a6859784bd9b3fadf4c4c86f5a564811dfb28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:c9:cf:23:6a:8d:f2:aa:69:05:86:f5:55:4d:
d3:1b:f3:2c:34:0e:14:73:f5:79:bc:9d:a0:ed:fb:
9b:aa:11:07:79:b0:cf:b2:2c:d6:6a:11:37:ab:af:
49:fa:7f:ae:37:71:df:da:90:28:29:5f:25:d1:68:
cc:0a:f6:9c:92:a4:ea:72:8e:1a:3e:85:ea:7e:06:
b8:23:0d:c2:a5:d6:58:c1:f4:9a:96:24:6f:26:7a:
85:6a:b4:d0:3d:c3:96:6e:1d:bb:85:e2:dc:0d:38:
20:b9:8d:df:95:d0:ee:b6:43:ad:a1:84:9f:df:b8:
98:1e:1e:c2:f3:d1:e7:81:d5:06:fc:61:64:2d:06:
90:c7:b0:bf:26:58:5b:06:ff:3a:f2:d5:a3:9d:4a:
bf:59:ce:82:84:e9:98:3e:b3:b1:14:01:ac:a4:16:
9d:91:12:7d:7b:2e:f2:1b:e3:27:fe:b3:f7:2a:4b:
78:de:6a:02:60:c1:1d:a6:0b:9a:31:46:7d:4d:f0:
e0:84:ef:f7:b4:70:67:bb:ce:c6:68:02:43:f4:0e:
87:67:2e:e0:e8:1f:02:8a:be:da:6a:d8:1b:f1:7f:
f5:65:09:ef:ee:c1:6d:e5:e3:5c:e3:cf:85:38:64:
a3:de:fc:19:68:3b:9a:c2:12:76:e3:7c:09:4d:48:
d0:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:2A:68:59:78:4B:D9:B3:FA:DF:4C:4C:86:F5:A5:64:81:1D:FB:28
X509v3 Authority Key Identifier:
keyid:B5:99:09:ED:17:1B:38:C1:FD:C4:36:22:29:E7:8D:69:85:1D:E1:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tZkJ7RcbOMH9xDYiKeeNaYUd4Rw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/9ee980-67a2-4d3c-b6ca-fde073588f0f/1/tZkJ7RcbOMH9xDYiKeeNaYUd4Rw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/9ee980-67a2-4d3c-b6ca-fde073588f0f/1/tZkJ7RcbOMH9xDYiKeeNaYUd4Rw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:bf:b0:00:6f:df:9c:14:fc:68:33:7c:3d:82:34:31:03:00:
40:43:a1:74:1c:73:31:ec:30:29:01:49:17:0d:80:64:9e:24:
87:a0:02:e4:b9:f2:55:d3:15:4e:2b:b4:b8:8d:ae:58:f4:ba:
3e:5d:8e:a8:61:20:8a:4e:7b:39:a8:67:26:d9:6e:66:2f:20:
c2:05:63:0c:51:0a:bb:9d:1e:72:e4:f9:96:14:4b:91:33:d1:
8f:9c:6c:70:92:66:3f:44:2e:fe:49:77:7c:d3:0f:f7:24:9c:
da:c0:64:2d:71:e9:3c:0a:b4:ab:e7:4b:13:5f:75:eb:98:99:
bd:45:11:45:02:8c:b8:b7:03:55:e7:7c:14:d6:cf:a8:47:78:
e6:e8:1c:10:33:b0:3c:b2:ad:b0:12:df:30:68:08:76:bd:8d:
ca:d0:f0:45:b1:d6:ee:78:f4:11:58:cc:f5:b0:9b:ee:f6:98:
33:86:be:76:ac:4c:9a:22:52:a9:ef:6d:4f:f9:d0:6b:5c:0b:
38:1a:8b:8a:f7:ac:3c:f1:a4:f2:a4:03:28:2a:17:bb:ca:5f:
4e:f3:fb:5a:ab:c0:87:1d:c2:ed:f0:f4:47:d7:b0:79:2f:1b:
4a:ea:99:66:28:2a:72:d7:a6:b1:4c:af:be:20:a6:d7:58:43:
98:de:62:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 12:02:40 2025 by rpki-client