Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/9f58f2-7919-4bfc-8f73-e7073cfe134f/1/Tq78SebNZ-JZlqLA_Fe4DMI9ukQ.mft
File: Tq78SebNZ-JZlqLA_Fe4DMI9ukQ.mft (raw, json)
Hash identifier: iXCL6dvUko5h33rBNqxdDkmsjPgmIy4tayFO/MZF4ho=
Subject key identifier: FE:16:60:40:B2:BB:52:44:CF:7B:B0:91:C0:28:66:59:86:8A:81:37
Authority key identifier: 4E:AE:FC:49:E6:CD:67:E2:59:96:A2:C0:FC:57:B8:0C:C2:3D:BA:44
Certificate issuer: /CN=4eaefc49e6cd67e25996a2c0fc57b80cc23dba44
Certificate serial: 019A51BE95F2C9BA2484CB444939AC07F393
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tq78SebNZ-JZlqLA_Fe4DMI9ukQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/9f58f2-7919-4bfc-8f73-e7073cfe134f/1/Tq78SebNZ-JZlqLA_Fe4DMI9ukQ.mft
Manifest number: 16A1
Signing time: Wed 05 Nov 2025 02:00:35 +0000
Manifest this update: Wed 05 Nov 2025 02:00:35 +0000
Manifest next update: Thu 06 Nov 2025 02:00:35 +0000
Files and hashes: 1: Tq78SebNZ-JZlqLA_Fe4DMI9ukQ.crl (hash: 0ugX9K7aSab2bImj59Pv6021j0NDRg6HBu4OeBETo7o=)
2: pXY7p3AnqDJfjALLmtVHw8U2GfM.roa (hash: ZUNXce9TBnEjmUfFa15l+WlhliqRz/AO8NwAB4Sid60=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/9f58f2-7919-4bfc-8f73-e7073cfe134f/1/Tq78SebNZ-JZlqLA_Fe4DMI9ukQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/9f58f2-7919-4bfc-8f73-e7073cfe134f/1/Tq78SebNZ-JZlqLA_Fe4DMI9ukQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Tq78SebNZ-JZlqLA_Fe4DMI9ukQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 02:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:be:95:f2:c9:ba:24:84:cb:44:49:39:ac:07:f3:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4eaefc49e6cd67e25996a2c0fc57b80cc23dba44
Validity
Not Before: Nov 5 02:00:35 2025 GMT
Not After : Nov 6 02:00:35 2025 GMT
Subject: CN=fe166040b2bb5244cf7bb091c0286659868a8137
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:be:86:3b:4f:42:ba:f7:ea:6d:40:dc:0a:46:
c8:07:c5:55:5a:74:e8:d8:6d:0b:79:e1:9b:fc:b8:
4f:f5:8d:cc:ce:b8:2e:ed:c3:c5:d3:c7:4f:24:e5:
bf:a0:2b:ab:4f:bc:39:55:db:96:65:2a:50:e3:ee:
2d:8e:8c:e6:07:bb:4a:31:f4:dc:20:03:04:6b:4f:
85:7b:a4:4d:c0:e8:10:b1:9b:f4:36:1b:ef:28:bf:
55:eb:61:1a:42:f1:e8:42:92:b7:62:91:bd:2a:2b:
c8:94:cd:49:91:09:65:46:c2:9e:97:64:18:5c:cd:
73:e9:aa:b2:36:4c:2b:df:b6:ec:f6:24:d4:56:b0:
e8:72:ab:06:c3:84:eb:cd:25:f3:62:b9:a6:5e:f0:
28:ca:b9:de:0a:0d:eb:f6:43:fc:a4:f1:3d:7d:fd:
d2:fe:22:b2:8c:cf:64:0b:92:cc:d7:af:dd:77:1b:
bd:47:06:78:9b:fe:d7:53:f2:0e:3b:8c:f1:d8:1b:
e8:07:e7:8d:d9:f4:43:68:8e:6c:99:0f:ad:da:49:
d5:f9:95:76:4c:c0:00:2c:eb:16:ca:68:b0:58:ab:
b9:53:ca:08:ce:44:b8:2b:a7:85:33:4b:8d:d1:ae:
ae:0a:28:f5:d9:ea:21:80:ed:7e:2c:bd:38:64:e3:
23:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:16:60:40:B2:BB:52:44:CF:7B:B0:91:C0:28:66:59:86:8A:81:37
X509v3 Authority Key Identifier:
keyid:4E:AE:FC:49:E6:CD:67:E2:59:96:A2:C0:FC:57:B8:0C:C2:3D:BA:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tq78SebNZ-JZlqLA_Fe4DMI9ukQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/9f58f2-7919-4bfc-8f73-e7073cfe134f/1/Tq78SebNZ-JZlqLA_Fe4DMI9ukQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/9f58f2-7919-4bfc-8f73-e7073cfe134f/1/Tq78SebNZ-JZlqLA_Fe4DMI9ukQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:90:50:33:71:4d:49:49:58:2d:89:3e:ae:f7:3a:e0:97:31:
ef:41:0b:05:1f:1d:a0:05:d1:98:86:ed:16:35:b1:ef:84:12:
27:96:d7:8c:fe:91:f5:e5:7d:f5:1c:81:c9:f1:dd:2e:8d:52:
75:cd:1f:d2:9b:12:00:b9:e7:6c:fb:49:3a:d5:b4:76:c9:ed:
f1:8a:91:2e:e8:0b:59:0b:78:71:97:37:30:11:28:af:31:a9:
d8:53:86:a2:41:c6:ab:ed:b5:2d:6b:f2:83:07:5e:d7:07:12:
b2:41:90:2f:d8:23:93:b4:5b:7d:a5:23:19:2b:37:92:6e:7d:
b3:31:0e:a4:d6:b7:b4:e7:dd:a9:d2:38:68:3a:47:e4:ce:7d:
be:59:2f:8d:0e:71:d1:9b:8b:b6:da:e6:da:af:99:7a:92:bf:
5b:e0:fd:46:2b:09:fe:6d:0e:a6:9d:d2:c6:7e:ba:b8:0a:d1:
cf:ef:49:23:e5:bf:ec:a1:74:e9:c6:01:87:19:7d:75:d6:29:
de:73:cf:49:80:dd:51:3d:86:2a:45:68:e4:40:2d:bc:81:72:
c0:a8:bd:9b:d4:9c:7f:cc:d5:32:38:9d:b1:69:b6:9a:16:5c:
05:0d:01:b8:f5:ae:0c:76:70:f4:2a:43:7d:46:12:76:20:36:
93:b6:81:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 09:40:57 2025 by rpki-client