Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/532065-6151-4ce0-ac6b-5d34c8575bea/1/Tuxo91FNsiFzZQCIKUsBQ7N3_CM.mft
File: Tuxo91FNsiFzZQCIKUsBQ7N3_CM.mft (raw, json)
Hash identifier: vniNPPr+3bN6CA7gMehVXeYr1xFpr9IUPqGJAVodHB8=
Subject key identifier: 2A:09:9D:AC:35:42:BC:4D:18:11:90:74:42:D4:AB:29:CA:EC:9A:51
Authority key identifier: 4E:EC:68:F7:51:4D:B2:21:73:65:00:88:29:4B:01:43:B3:77:FC:23
Certificate issuer: /CN=4eec68f7514db22173650088294b0143b377fc23
Certificate serial: 019A1496C7DE46E31D5E0AEC32FE23992CB5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tuxo91FNsiFzZQCIKUsBQ7N3_CM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/532065-6151-4ce0-ac6b-5d34c8575bea/1/Tuxo91FNsiFzZQCIKUsBQ7N3_CM.mft
Manifest number: 0771
Signing time: Fri 24 Oct 2025 05:00:17 +0000
Manifest this update: Fri 24 Oct 2025 05:00:17 +0000
Manifest next update: Sat 25 Oct 2025 05:00:17 +0000
Files and hashes: 1: I39FUsGFsmr9SUUDo-UEb6qOXN4.roa (hash: u4zl9OvdC2vc0LELt8+dwM6CALTiKOkmaqaJx/FGR/8=)
2: Tuxo91FNsiFzZQCIKUsBQ7N3_CM.crl (hash: AQlJm8XPDPoqu4471HCbpG2gPNIEJkQz6wD0yR3v42M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/532065-6151-4ce0-ac6b-5d34c8575bea/1/Tuxo91FNsiFzZQCIKUsBQ7N3_CM.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/532065-6151-4ce0-ac6b-5d34c8575bea/1/Tuxo91FNsiFzZQCIKUsBQ7N3_CM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Tuxo91FNsiFzZQCIKUsBQ7N3_CM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Oct 2025 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:14:96:c7:de:46:e3:1d:5e:0a:ec:32:fe:23:99:2c:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4eec68f7514db22173650088294b0143b377fc23
Validity
Not Before: Oct 24 05:00:17 2025 GMT
Not After : Oct 25 05:00:17 2025 GMT
Subject: CN=2a099dac3542bc4d1811907442d4ab29caec9a51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:5a:31:d9:de:a1:28:43:8d:05:e8:38:20:58:
d8:d4:fa:8c:69:de:e2:10:ae:03:f1:a5:f1:a4:02:
c1:8a:67:80:64:58:10:2b:9f:4f:58:4f:2b:49:ed:
4e:23:79:0c:c2:ad:d1:d5:ab:e2:6d:97:04:2e:73:
ef:f1:e0:b8:ae:52:e4:6d:0b:29:f9:bc:fe:dc:fa:
b9:46:f9:67:98:2c:2f:6f:88:45:de:91:d9:a2:8e:
e4:aa:53:6b:cd:51:13:8c:80:63:b3:db:49:39:7d:
f1:32:6b:96:28:18:0c:f8:05:61:d0:e5:f4:ea:5d:
ab:92:99:e3:69:81:13:66:3d:d3:cb:19:b5:c5:87:
48:41:2d:41:83:f7:39:56:02:96:ee:f3:f1:44:85:
aa:1c:d4:c1:e4:f8:e8:24:68:4e:9b:c2:67:40:40:
0b:12:aa:71:6b:37:42:a0:36:ef:5f:13:9f:e2:6e:
a4:4b:75:92:73:c5:e0:49:fb:f3:ea:ba:4d:7d:ee:
d2:74:f1:ac:dc:da:fa:cf:88:dc:cf:ed:1c:3a:05:
ee:80:48:2a:00:39:75:23:54:1a:41:30:60:a4:78:
b4:98:60:d9:25:60:e6:ff:bc:cb:4e:b1:7f:2e:a5:
47:ab:ce:9c:8f:83:b4:e6:a6:46:e1:e8:ab:c8:05:
a6:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:09:9D:AC:35:42:BC:4D:18:11:90:74:42:D4:AB:29:CA:EC:9A:51
X509v3 Authority Key Identifier:
keyid:4E:EC:68:F7:51:4D:B2:21:73:65:00:88:29:4B:01:43:B3:77:FC:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tuxo91FNsiFzZQCIKUsBQ7N3_CM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/532065-6151-4ce0-ac6b-5d34c8575bea/1/Tuxo91FNsiFzZQCIKUsBQ7N3_CM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/532065-6151-4ce0-ac6b-5d34c8575bea/1/Tuxo91FNsiFzZQCIKUsBQ7N3_CM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:41:52:3f:5d:38:f0:b2:3c:f8:bb:21:50:3c:eb:61:a3:2a:
1e:7f:6c:6a:de:a0:50:92:c1:32:d4:24:99:83:ad:62:28:4d:
fc:fe:44:83:18:a4:d2:f9:39:cf:9c:05:8d:69:5f:4e:75:e0:
fe:98:d8:90:06:f9:41:e5:02:9a:0f:72:2f:39:0d:41:5a:bd:
dc:21:bc:32:ca:54:92:91:00:d7:c7:ef:8a:78:80:87:c0:c3:
98:71:30:e9:be:14:c6:f6:33:41:08:5c:d7:8a:85:df:94:5e:
62:c5:56:3d:4c:b6:80:08:8f:42:33:a3:0a:7f:69:15:05:0b:
38:13:cd:72:90:d0:5a:0e:a1:ea:1e:46:90:ce:c5:94:ac:17:
fa:c2:38:ae:76:d6:f6:90:0e:85:0e:95:33:31:15:8b:14:70:
05:d3:bb:7d:43:35:f8:b0:d5:2c:18:e9:ff:69:e0:31:66:64:
6e:4d:15:93:5a:64:c8:5e:7b:12:40:d8:cb:b3:a8:b3:9b:71:
5b:9c:75:ab:25:80:77:eb:5e:a0:05:c3:a1:aa:6d:ab:7f:01:
ff:84:41:24:30:45:6e:4e:26:7f:c0:33:3c:e0:91:45:d4:55:
69:b9:43:7e:5f:5e:a6:3c:3b:e7:23:05:f9:1f:91:7a:bf:31:
1c:b5:d3:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 24 08:38:44 2025 by rpki-client