Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/e61614-ebc5-4731-8560-9d1812999a35/1/tKkPaJZnhEKvruG6qqayot7KzTs.mft
File: tKkPaJZnhEKvruG6qqayot7KzTs.mft (raw, json)
Hash identifier: jc4mBfzxCXk1rYHSkru8F3Qxo5KXqBqyvZYqt7uaLGk=
Subject key identifier: 5C:B9:8C:C4:33:FF:3D:0E:0B:28:C7:C6:33:55:32:15:98:06:24:39
Authority key identifier: B4:A9:0F:68:96:67:84:42:AF:AE:E1:BA:AA:A6:B2:A2:DE:CA:CD:3B
Certificate issuer: /CN=b4a90f6896678442afaee1baaaa6b2a2decacd3b
Certificate serial: 019A05C89C2ADB5A1CF17B09300B190F1356
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tKkPaJZnhEKvruG6qqayot7KzTs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/e61614-ebc5-4731-8560-9d1812999a35/1/tKkPaJZnhEKvruG6qqayot7KzTs.mft
Manifest number: 16EC
Signing time: Tue 21 Oct 2025 08:00:24 +0000
Manifest this update: Tue 21 Oct 2025 08:00:24 +0000
Manifest next update: Wed 22 Oct 2025 08:00:24 +0000
Files and hashes: 1: 39ZjK9ko_rOoFQIzT57AAjvsCVs.roa (hash: BIzWpSHIVnRCyLi48qy1GipHxFT8YyuZOYnCzfTHwBQ=)
2: OazFtN4IiCarucNk5wRvdseM_QM.roa (hash: EMG8IwLgN/B9dcK6/rw77xxT/QPgwRqBDKE5biLAPVI=)
3: tKkPaJZnhEKvruG6qqayot7KzTs.crl (hash: +tl+IlZYz8Sbwlj2qKo5UImhj6nMHtcLemd6iYJu6Ro=)
4: v1Ryzz_N409NzbmRAuen4MQjOWo.roa (hash: nCjeo/lqPblEWttxGqrN/iF+J58uOtYvtP5cDeaC0E8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/e61614-ebc5-4731-8560-9d1812999a35/1/tKkPaJZnhEKvruG6qqayot7KzTs.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/e61614-ebc5-4731-8560-9d1812999a35/1/tKkPaJZnhEKvruG6qqayot7KzTs.mft
rsync://rpki.ripe.net/repository/DEFAULT/tKkPaJZnhEKvruG6qqayot7KzTs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Oct 2025 08:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:05:c8:9c:2a:db:5a:1c:f1:7b:09:30:0b:19:0f:13:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4a90f6896678442afaee1baaaa6b2a2decacd3b
Validity
Not Before: Oct 21 08:00:24 2025 GMT
Not After : Oct 22 08:00:24 2025 GMT
Subject: CN=5cb98cc433ff3d0e0b28c7c63355321598062439
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:3f:91:3e:80:53:7e:75:fe:af:fe:13:98:d1:
2d:eb:00:06:a3:76:69:d7:a9:11:fb:91:48:5c:2c:
33:9b:29:2a:f2:10:4a:76:8c:f8:7e:65:aa:bf:43:
ec:c3:cb:c5:f8:10:ea:96:fa:c9:85:13:84:f4:1c:
7d:e4:c1:ba:0c:2e:17:57:86:16:6c:54:cf:4a:7f:
61:9f:68:f1:dd:36:67:34:a9:7a:41:cc:ff:82:16:
49:d7:d9:54:d2:29:57:07:2a:d3:2c:98:3d:d5:30:
3c:6d:c8:de:ff:3f:03:4d:2d:ef:91:58:0e:6d:f6:
ad:bc:13:32:71:7a:39:15:69:e8:b5:49:08:07:6b:
36:03:7a:a2:0a:25:32:39:69:b1:17:cb:16:47:80:
9f:d1:e4:76:f0:98:0e:2f:a0:49:31:99:1d:2f:87:
0d:bd:69:68:6c:33:d7:fb:fd:98:6a:af:ec:a0:d0:
43:32:a8:15:10:62:91:9a:86:49:fc:b6:9f:2b:dc:
c1:9c:07:a7:e1:b1:22:60:ac:42:62:41:04:18:6a:
d1:ce:a3:37:0c:a3:ef:7b:fc:e0:9f:b2:89:cf:67:
ba:55:3f:57:03:78:95:31:af:ce:3e:a8:c5:a4:3a:
36:d2:b9:5c:14:b9:06:c3:37:a8:61:19:c1:f7:f8:
b0:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:B9:8C:C4:33:FF:3D:0E:0B:28:C7:C6:33:55:32:15:98:06:24:39
X509v3 Authority Key Identifier:
keyid:B4:A9:0F:68:96:67:84:42:AF:AE:E1:BA:AA:A6:B2:A2:DE:CA:CD:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tKkPaJZnhEKvruG6qqayot7KzTs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/e61614-ebc5-4731-8560-9d1812999a35/1/tKkPaJZnhEKvruG6qqayot7KzTs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/e61614-ebc5-4731-8560-9d1812999a35/1/tKkPaJZnhEKvruG6qqayot7KzTs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:e2:b7:f8:a5:ce:0a:8b:3c:fc:dd:2e:d1:46:d4:ea:05:8a:
c4:8e:c9:96:98:39:a0:be:39:e6:50:0e:b2:44:2b:d7:02:0b:
2c:91:03:78:b6:a4:3b:d1:0f:fd:b9:c5:2b:46:0b:ea:58:4a:
ad:cc:88:f8:86:e0:b3:bd:fb:9f:99:22:e1:25:2e:e7:ad:b9:
07:98:03:d7:d4:d3:3b:2e:e9:5a:b2:55:34:42:68:ed:4f:67:
1b:0d:71:13:78:1d:60:cc:5a:14:dc:6e:c0:bc:85:b5:7c:8f:
82:b5:e0:ba:93:63:f2:10:a7:48:ac:48:f5:ab:d1:2f:22:2b:
77:78:10:bd:84:94:ff:ac:65:a8:f7:98:3b:61:c1:a7:b3:70:
3f:4b:4f:1f:e4:52:e2:01:e6:68:d1:bd:a5:23:82:32:d6:c7:
7a:ce:e4:51:ed:c6:8d:69:2e:ca:fb:54:c5:9b:ca:04:a9:b9:
e0:7d:1d:a2:1a:09:a9:9e:c8:9f:bc:d8:fd:4e:19:f3:c2:83:
c5:25:da:70:f9:1f:9b:65:44:ce:fd:7b:71:bc:53:4c:29:3a:
68:cc:fd:f8:30:ed:6f:5b:b6:5a:fe:8d:cb:ff:9b:95:f5:61:
bd:b4:87:3e:d1:0c:12:db:70:b5:b8:a2:8d:1d:1b:00:e5:e0:
0f:c9:47:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 17:02:23 2025 by rpki-client