Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/2215f7-887a-4bd5-bf97-ffb709f7668c/1/TIc4nvQfGMH8yCdUNJ6nCWmAseM.mft
File: TIc4nvQfGMH8yCdUNJ6nCWmAseM.mft (raw, json)
Hash identifier: NNpd4JCAvkGTQ/foqJfJLXkE0txy6N/LdbDgYIc3diQ=
Subject key identifier: 46:63:11:03:3D:5B:05:81:66:B0:3D:AA:7A:D5:E5:60:3F:25:DF:87
Authority key identifier: 4C:87:38:9E:F4:1F:18:C1:FC:C8:27:54:34:9E:A7:09:69:80:B1:E3
Certificate issuer: /CN=4c87389ef41f18c1fcc82754349ea7096980b1e3
Certificate serial: 019A1DD147CECA9ABB1E1FAF932C0ED347C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TIc4nvQfGMH8yCdUNJ6nCWmAseM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/2215f7-887a-4bd5-bf97-ffb709f7668c/1/TIc4nvQfGMH8yCdUNJ6nCWmAseM.mft
Manifest number: 16FA
Signing time: Sun 26 Oct 2025 00:00:45 +0000
Manifest this update: Sun 26 Oct 2025 00:00:45 +0000
Manifest next update: Mon 27 Oct 2025 00:00:45 +0000
Files and hashes: 1: TIc4nvQfGMH8yCdUNJ6nCWmAseM.crl (hash: iXr+/07gUX3kPeFcJHIhITbPsYjnCbL0A3R2eHA6sMc=)
2: VCmh7D4aDnJ3RvUgB4_x96-F7yk.roa (hash: Fvy+64reQdJIkB2LlOhrfVK5VykM8awZbivVRRObMH8=)
3: W2TNL5im0fX66hopLKpEaeHN1Vw.roa (hash: jFMMnSyz7YrR/mDL9VXSfjnRvEdkg9GR9m7oXoI7Q1I=)
4: cC9Kn5RNwJ59ItW6IXpERzZosPw.roa (hash: Tn7jWRKA9agcVwEoCtyV/3OdfNNW+6uN3rC9ZNlnP8I=)
5: zpLViSP1mtGrcERbXmR4V_Zd6cE.roa (hash: yuKnJy9vuRLwT9M7eUlYmO+BbnE5uOEv2Od3+EfguMU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/2215f7-887a-4bd5-bf97-ffb709f7668c/1/TIc4nvQfGMH8yCdUNJ6nCWmAseM.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/2215f7-887a-4bd5-bf97-ffb709f7668c/1/TIc4nvQfGMH8yCdUNJ6nCWmAseM.mft
rsync://rpki.ripe.net/repository/DEFAULT/TIc4nvQfGMH8yCdUNJ6nCWmAseM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 00:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1d:d1:47:ce:ca:9a:bb:1e:1f:af:93:2c:0e:d3:47:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c87389ef41f18c1fcc82754349ea7096980b1e3
Validity
Not Before: Oct 26 00:00:45 2025 GMT
Not After : Oct 27 00:00:45 2025 GMT
Subject: CN=466311033d5b058166b03daa7ad5e5603f25df87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:8a:f5:e6:e1:28:27:3d:3d:bd:bf:51:db:1b:
72:db:98:8a:38:67:ce:86:0d:9e:3e:ec:3c:21:b6:
94:81:4c:1e:da:3a:4f:e0:9d:59:0a:fe:2b:67:d8:
8b:71:5e:39:56:cb:ff:0f:86:77:3f:0b:d7:ae:25:
21:40:18:04:30:1b:82:53:82:3f:c7:8d:04:6c:db:
6f:78:f7:35:a0:42:bd:f0:09:48:96:33:e8:a8:d3:
28:22:90:57:d0:c6:c8:e3:1e:a9:a3:a1:c0:a4:e4:
cd:87:fb:75:37:10:f8:84:1f:2d:cb:da:04:7f:89:
26:c6:52:d5:7c:8a:3a:0a:ac:da:08:c5:7b:2e:8d:
af:f7:e1:95:e0:24:91:76:41:4c:d2:31:fd:05:9e:
e6:8f:07:93:1c:cb:b2:cc:a6:3b:a0:99:e4:ec:07:
22:e2:56:55:04:b3:3f:7f:78:7c:91:65:cf:f4:a2:
17:b7:a4:62:e5:6c:2f:b2:7e:e0:e6:e6:6e:a0:3e:
07:64:1b:40:14:07:06:5d:b0:05:0a:f4:a2:e6:77:
54:59:0a:69:49:b0:a5:68:f4:69:bb:e4:8e:0b:cd:
e1:d2:2f:52:1c:c7:8b:20:e4:99:e7:8e:81:70:10:
9f:17:0c:a9:fd:52:db:f1:85:41:c6:84:d4:8e:fb:
87:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:63:11:03:3D:5B:05:81:66:B0:3D:AA:7A:D5:E5:60:3F:25:DF:87
X509v3 Authority Key Identifier:
keyid:4C:87:38:9E:F4:1F:18:C1:FC:C8:27:54:34:9E:A7:09:69:80:B1:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TIc4nvQfGMH8yCdUNJ6nCWmAseM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/2215f7-887a-4bd5-bf97-ffb709f7668c/1/TIc4nvQfGMH8yCdUNJ6nCWmAseM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/2215f7-887a-4bd5-bf97-ffb709f7668c/1/TIc4nvQfGMH8yCdUNJ6nCWmAseM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:02:39:4d:8a:08:bf:05:20:15:0b:36:04:81:13:99:3e:2f:
0a:33:84:f3:b9:46:ac:88:18:fd:66:93:83:61:b1:c7:32:ef:
f6:b3:1c:87:5c:a9:cd:e2:e4:02:1b:d4:fc:8f:bc:64:25:77:
ee:e1:a7:46:d7:1f:7c:67:35:ed:c3:7c:ea:3d:3b:41:a9:9b:
0d:8d:3d:f1:d7:81:62:e8:d0:a9:31:6d:6a:e5:1b:5e:2c:03:
06:c4:36:81:3a:83:0d:09:8a:49:aa:c7:0f:e3:48:e8:32:61:
42:a2:5c:6a:63:a6:9c:b0:d5:a9:f4:9d:8d:a8:cd:01:a2:f1:
23:0d:01:e2:d1:e5:f6:e1:97:8e:fb:b5:04:e4:14:dc:96:7e:
ab:ba:ac:ce:31:6a:43:66:eb:5f:a9:37:0e:91:30:43:c2:48:
f1:41:3c:04:3a:8f:b3:6b:89:71:3f:d8:15:2f:3b:71:89:84:
a2:f3:be:6f:36:c3:95:44:31:e8:aa:a2:cf:fc:07:0b:82:54:
9d:d8:a1:16:02:0f:a1:b7:21:35:88:17:40:61:fc:38:68:77:
ad:e4:d3:83:0d:fb:d3:33:2c:77:1e:55:b7:b3:78:15:af:6f:
02:f9:d4:7c:30:4b:6c:1a:9e:64:56:64:22:b2:58:8a:81:2b:
f0:87:27:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 09:08:53 2025 by rpki-client