Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/672a2f-ac2b-4631-ab3d-c2bc1451f271/1/tcfYHsTEBVxnP_VxzK0Hw6aZEF4.mft
File: tcfYHsTEBVxnP_VxzK0Hw6aZEF4.mft (raw, json)
Hash identifier: j68qN6fLBeqJXcag/He+VHaUaasTDo7HXVkngoA7P3k=
Subject key identifier: 25:7B:5C:E1:E4:A3:C6:0B:95:F0:1D:06:36:51:0F:0D:15:21:C4:37
Authority key identifier: B5:C7:D8:1E:C4:C4:05:5C:67:3F:F5:71:CC:AD:07:C3:A6:99:10:5E
Certificate issuer: /CN=b5c7d81ec4c4055c673ff571ccad07c3a699105e
Certificate serial: 01995F0EDCCE37CE7705206CEF4082B1B45D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tcfYHsTEBVxnP_VxzK0Hw6aZEF4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/672a2f-ac2b-4631-ab3d-c2bc1451f271/1/tcfYHsTEBVxnP_VxzK0Hw6aZEF4.mft
Manifest number: 09EB
Signing time: Thu 18 Sep 2025 23:00:33 +0000
Manifest this update: Thu 18 Sep 2025 23:00:33 +0000
Manifest next update: Fri 19 Sep 2025 23:00:33 +0000
Files and hashes: 1: ZFlE4CwGV5oXv28o6nsvolZlI_Y.roa (hash: S5Q4DAjjTKxkiafJ6he6yLpO30RXNUCaXjGnLWKadCQ=)
2: a3EraYk05VPEffLc6KjCZtg0uOM.roa (hash: MkXr1kaZ6Jwr9qIlXjAkJ2Xml1hQyvkyv9rct4pH8co=)
3: fJY20OuQ1IuJYeyVIHU1EBJ0rFM.roa (hash: +X81MlM0oUdVo08v6gDJj1EWTtIWJ/ia51w5FCk6+3U=)
4: tcfYHsTEBVxnP_VxzK0Hw6aZEF4.crl (hash: cRIveFoDSpqipR+MvlTl17NmmDokk5FKOsHPfyUhbBw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/672a2f-ac2b-4631-ab3d-c2bc1451f271/1/tcfYHsTEBVxnP_VxzK0Hw6aZEF4.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/672a2f-ac2b-4631-ab3d-c2bc1451f271/1/tcfYHsTEBVxnP_VxzK0Hw6aZEF4.mft
rsync://rpki.ripe.net/repository/DEFAULT/tcfYHsTEBVxnP_VxzK0Hw6aZEF4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 19 Sep 2025 22:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:5f:0e:dc:ce:37:ce:77:05:20:6c:ef:40:82:b1:b4:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5c7d81ec4c4055c673ff571ccad07c3a699105e
Validity
Not Before: Sep 18 23:00:33 2025 GMT
Not After : Sep 19 23:00:33 2025 GMT
Subject: CN=257b5ce1e4a3c60b95f01d0636510f0d1521c437
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:ea:f0:3f:10:01:b4:66:dc:57:c1:c0:56:6d:
18:79:ae:3e:e0:d4:42:3e:89:a9:0b:63:5f:de:c5:
e5:78:24:36:f5:c2:e2:b2:25:ee:f4:a2:3f:fe:d9:
74:d0:45:19:18:56:fa:57:12:f4:2e:47:02:bc:a4:
d6:5c:0e:bd:0b:70:28:21:74:6f:11:8c:ec:22:54:
f5:12:e0:5c:f3:a1:58:99:98:44:cd:cb:53:3a:5f:
6a:4b:b1:d0:a5:71:2d:85:62:26:3b:43:95:5a:b2:
96:2b:1b:55:4a:41:5a:2a:a2:5e:72:af:66:7d:a9:
5e:c9:6f:07:71:0d:d8:b7:54:ce:67:92:96:f7:47:
38:71:b6:cd:ed:92:5a:33:4a:d0:f0:24:fb:21:ca:
7f:39:03:85:07:b6:b4:07:dd:0f:a6:e6:0b:a8:8f:
95:e1:6e:b3:c7:ff:f7:dd:b1:35:c7:71:56:14:cb:
88:c0:f3:c8:22:fa:c4:29:17:da:05:42:e6:f6:0e:
5e:0e:9d:8e:27:16:23:11:b0:8a:01:25:ae:7b:bc:
3e:de:72:79:89:42:72:59:3a:e7:f9:d9:c9:49:b6:
2b:c2:70:eb:fb:1a:5e:03:46:c1:1c:2d:74:ec:d3:
42:cc:2a:d4:39:e8:d9:6b:95:82:c8:f0:81:f3:8b:
3a:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:7B:5C:E1:E4:A3:C6:0B:95:F0:1D:06:36:51:0F:0D:15:21:C4:37
X509v3 Authority Key Identifier:
keyid:B5:C7:D8:1E:C4:C4:05:5C:67:3F:F5:71:CC:AD:07:C3:A6:99:10:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tcfYHsTEBVxnP_VxzK0Hw6aZEF4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/672a2f-ac2b-4631-ab3d-c2bc1451f271/1/tcfYHsTEBVxnP_VxzK0Hw6aZEF4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/672a2f-ac2b-4631-ab3d-c2bc1451f271/1/tcfYHsTEBVxnP_VxzK0Hw6aZEF4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:8b:ff:56:88:d1:67:cd:ea:1c:80:40:bb:20:6c:ef:b3:85:
09:ad:9c:48:be:aa:15:12:35:3a:a7:75:99:ba:67:1b:e3:41:
29:3b:72:26:a7:fb:f3:0e:86:ec:ac:e2:f9:ff:be:bb:8c:c7:
11:45:f8:d7:e3:2b:a8:37:0b:db:55:75:fa:b5:ad:59:f1:b5:
c7:58:69:bd:3d:a9:c0:d8:d5:d3:7a:3e:00:c0:e7:b5:c4:16:
67:95:1c:98:b1:1f:11:bb:60:50:e1:a0:25:1f:d3:af:c9:3f:
db:fe:f0:0d:b2:8b:27:00:db:a8:4a:69:d3:2f:29:26:98:a1:
38:87:19:c7:bc:25:ae:ce:66:35:7e:ed:30:24:a6:52:2f:ba:
48:cb:0b:4d:bd:f9:8e:0a:16:39:e0:74:b5:f7:60:da:a4:e1:
e1:37:ae:5d:6e:d6:3e:83:6e:b7:38:76:04:7a:51:b1:1c:0b:
59:9a:da:e0:0e:21:b0:68:8d:79:14:5b:45:03:ea:5f:5d:ec:
48:b4:4b:50:83:4f:da:68:e2:06:1d:53:7d:b4:77:57:8b:69:
d1:7b:94:7b:25:2e:60:ec:43:ef:b8:53:e8:45:cd:76:d2:07:
ff:67:63:1a:3c:a3:09:40:7f:4c:ac:b4:10:2e:91:5c:dc:e1:
3d:28:05:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 05:45:04 2025 by rpki-client