Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/dc3491-c699-42b5-90a7-cc7e9ab09fb8/1/tcKI6WPg6fgtHGp_2E7FqjQKuo8.mft
File: tcKI6WPg6fgtHGp_2E7FqjQKuo8.mft (raw, json)
Hash identifier: CFGOdUUgwxfkZyn9T4tmUwrgu1Ji8YyxFBOGoVbpj58=
Subject key identifier: 57:8B:5C:28:F0:6F:D8:59:68:7E:7F:1F:D1:44:26:90:66:E0:A7:4B
Authority key identifier: B5:C2:88:E9:63:E0:E9:F8:2D:1C:6A:7F:D8:4E:C5:AA:34:0A:BA:8F
Certificate issuer: /CN=b5c288e963e0e9f82d1c6a7fd84ec5aa340aba8f
Certificate serial: 019A2AB11A365DC28246187AC88D79BA2985
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tcKI6WPg6fgtHGp_2E7FqjQKuo8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/dc3491-c699-42b5-90a7-cc7e9ab09fb8/1/tcKI6WPg6fgtHGp_2E7FqjQKuo8.mft
Manifest number: 0398
Signing time: Tue 28 Oct 2025 12:00:40 +0000
Manifest this update: Tue 28 Oct 2025 12:00:40 +0000
Manifest next update: Wed 29 Oct 2025 12:00:40 +0000
Files and hashes: 1: ZmF3lPkl3dsARIFpHN7vz5QHbFs.roa (hash: ukfiioKav9S2J4a6qVoPDRL9RQGgYfvHu1FXDGi1Nzg=)
2: tcKI6WPg6fgtHGp_2E7FqjQKuo8.crl (hash: fiuKdtFxu1Xfcwfw23RRO6P59J73fduw5M9EECF/dKc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/dc3491-c699-42b5-90a7-cc7e9ab09fb8/1/tcKI6WPg6fgtHGp_2E7FqjQKuo8.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/dc3491-c699-42b5-90a7-cc7e9ab09fb8/1/tcKI6WPg6fgtHGp_2E7FqjQKuo8.mft
rsync://rpki.ripe.net/repository/DEFAULT/tcKI6WPg6fgtHGp_2E7FqjQKuo8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:2a:b1:1a:36:5d:c2:82:46:18:7a:c8:8d:79:ba:29:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5c288e963e0e9f82d1c6a7fd84ec5aa340aba8f
Validity
Not Before: Oct 28 12:00:40 2025 GMT
Not After : Oct 29 12:00:40 2025 GMT
Subject: CN=578b5c28f06fd859687e7f1fd144269066e0a74b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:73:66:cd:5d:93:60:a6:d2:33:a9:3d:19:f6:
64:e3:a9:86:00:8e:bc:a0:92:33:0c:d2:88:a2:3b:
4b:3c:0e:5c:37:73:22:f6:47:21:06:09:8a:28:c1:
3e:ec:42:ec:68:64:0e:a5:0c:77:67:69:e7:63:3c:
17:2b:9e:c2:28:df:d0:c3:5f:bf:61:50:aa:7b:d4:
62:82:0a:b2:0e:35:a1:4e:37:25:8a:07:33:80:f9:
e2:f2:33:e3:5e:a6:70:68:c5:d1:e8:11:f2:df:82:
1d:b6:d2:c3:1a:3a:02:39:fa:84:fa:d4:8b:72:66:
ab:d4:ce:b4:fa:a4:37:32:0a:df:9e:ee:88:7a:63:
2f:27:2c:83:1b:9e:a0:c4:30:13:a7:40:54:03:b8:
7f:71:ae:5a:d5:62:98:0d:96:5e:b5:49:ee:cc:ce:
0b:53:1b:0a:cc:64:00:17:ef:d9:6e:41:b6:2d:af:
94:ae:8d:7a:ce:48:7c:e6:15:e6:f1:a2:6c:37:47:
82:67:7d:36:f4:82:c3:e0:92:3f:4f:6b:35:6d:16:
48:d6:c1:a0:ac:f5:aa:40:2a:9d:7a:d3:b5:58:6d:
be:e6:a0:67:0a:61:cb:1c:4e:1b:d6:99:37:97:14:
62:81:e8:86:9a:6e:be:b6:b8:75:d9:3f:84:86:2b:
9f:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:8B:5C:28:F0:6F:D8:59:68:7E:7F:1F:D1:44:26:90:66:E0:A7:4B
X509v3 Authority Key Identifier:
keyid:B5:C2:88:E9:63:E0:E9:F8:2D:1C:6A:7F:D8:4E:C5:AA:34:0A:BA:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tcKI6WPg6fgtHGp_2E7FqjQKuo8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/dc3491-c699-42b5-90a7-cc7e9ab09fb8/1/tcKI6WPg6fgtHGp_2E7FqjQKuo8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/dc3491-c699-42b5-90a7-cc7e9ab09fb8/1/tcKI6WPg6fgtHGp_2E7FqjQKuo8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:df:2c:e3:11:1f:66:6b:32:b9:4b:86:cf:75:5e:bd:38:56:
21:50:51:0d:98:9d:4c:9f:42:4d:4b:01:1c:66:bc:3b:14:46:
3d:ca:61:e2:af:f9:8d:56:98:b0:27:9d:02:42:5b:65:62:14:
8a:9c:1e:e1:b5:61:0d:54:14:5f:e9:63:f4:7a:3f:7d:d8:13:
76:b3:2e:ac:82:4a:ca:39:84:b5:56:07:af:29:01:2a:55:cc:
0c:a2:19:64:d5:f1:82:0b:62:77:91:e3:6d:3c:77:a4:a0:ff:
68:59:50:48:c0:b7:40:dc:c4:80:8e:fa:e1:8f:12:c5:c9:85:
39:7f:fe:89:6f:a9:4e:0e:43:86:b9:de:ef:99:99:71:20:6a:
95:6d:17:8b:2d:00:fd:41:23:15:75:e2:6b:7b:1d:81:ae:ce:
ad:76:70:da:2a:fd:ae:1a:8a:0f:80:73:d6:a6:ed:fa:13:54:
50:b2:8b:7b:64:b6:31:3a:72:a9:6d:b0:df:1c:17:97:d1:2f:
85:5b:d5:45:50:00:e3:56:43:3d:40:79:e8:5e:0c:4c:e6:14:
ce:3a:30:5c:81:7c:ca:a7:88:78:1d:28:d3:98:b5:af:a3:44:
f4:c6:67:3e:8e:47:4f:d9:0c:ad:26:04:b3:80:43:b0:54:e3:
11:14:82:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 13:39:11 2025 by rpki-client