Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/b3fa64-f8b1-44e8-aba6-8601663395eb/1/TPnD7Ef8zwHZMF_g19SBswaw1Iw.mft
File: TPnD7Ef8zwHZMF_g19SBswaw1Iw.mft (raw, json)
Hash identifier: 6nes7siaxOo5nqKUFCgH1rm4ya8rB8FHU05D7Fg0lqo=
Subject key identifier: 69:53:33:DD:FE:EE:91:20:DF:18:9F:D0:2E:8A:15:8E:5D:4B:D5:EC
Authority key identifier: 4C:F9:C3:EC:47:FC:CF:01:D9:30:5F:E0:D7:D4:81:B3:06:B0:D4:8C
Certificate issuer: /CN=4cf9c3ec47fccf01d9305fe0d7d481b306b0d48c
Certificate serial: 0199FD347DA578AD07CCA607FB318323A3C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TPnD7Ef8zwHZMF_g19SBswaw1Iw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/b3fa64-f8b1-44e8-aba6-8601663395eb/1/TPnD7Ef8zwHZMF_g19SBswaw1Iw.mft
Manifest number: 07A3
Signing time: Sun 19 Oct 2025 16:01:39 +0000
Manifest this update: Sun 19 Oct 2025 16:01:39 +0000
Manifest next update: Mon 20 Oct 2025 16:01:39 +0000
Files and hashes: 1: TPnD7Ef8zwHZMF_g19SBswaw1Iw.crl (hash: KxZrY140TWnOH552w/Bls1LtljsnZscTwOExpAyLu54=)
2: UJ9_FeIGOOjgZRJDmb3mfb4BJZs.roa (hash: Iv5M96f/4AyXNBfTo49Zxh554cDlKiW0Et8FXEewisM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/b3fa64-f8b1-44e8-aba6-8601663395eb/1/TPnD7Ef8zwHZMF_g19SBswaw1Iw.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/b3fa64-f8b1-44e8-aba6-8601663395eb/1/TPnD7Ef8zwHZMF_g19SBswaw1Iw.mft
rsync://rpki.ripe.net/repository/DEFAULT/TPnD7Ef8zwHZMF_g19SBswaw1Iw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:34:7d:a5:78:ad:07:cc:a6:07:fb:31:83:23:a3:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4cf9c3ec47fccf01d9305fe0d7d481b306b0d48c
Validity
Not Before: Oct 19 16:01:39 2025 GMT
Not After : Oct 20 16:01:39 2025 GMT
Subject: CN=695333ddfeee9120df189fd02e8a158e5d4bd5ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:44:a9:fb:b9:64:68:0b:61:19:92:f3:28:e2:
a1:96:ed:be:cc:9c:74:21:87:8e:1a:cb:52:7b:f4:
e0:61:1c:3d:80:6e:dd:87:b9:b7:6a:e5:59:47:b0:
25:87:8c:7d:8a:e4:eb:d8:27:60:0d:d2:8c:85:b1:
49:bf:03:c6:63:34:f0:c7:2d:ea:61:28:17:35:58:
e0:95:34:d9:d2:f7:b0:a6:81:29:21:1b:c3:76:8f:
e5:d0:d6:00:10:79:bb:98:45:71:25:18:67:1c:47:
24:9f:73:e7:75:16:bd:67:68:5c:4e:b4:41:3f:d6:
39:b2:07:5c:e0:f5:f2:17:75:2e:f9:20:5b:53:11:
5d:00:75:b8:d6:77:7d:56:80:1e:d8:f1:6f:05:82:
bb:31:0b:61:c9:cf:0c:ef:f3:cf:88:c5:a2:ac:0a:
c1:e0:b2:4b:54:c9:11:83:d6:2c:1e:49:74:22:20:
76:5a:7d:11:31:bd:34:62:cb:0c:d0:ca:84:8d:2a:
b6:d8:a0:f8:72:3f:43:b4:76:2e:68:06:48:ae:95:
35:6b:69:5d:7f:fc:ed:b5:4b:22:57:98:2f:5b:54:
af:3a:f1:65:2a:23:0e:4c:6d:21:e0:57:c7:e4:60:
74:9f:a9:93:5e:6d:c9:96:57:5d:2c:20:7f:a1:52:
d2:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:53:33:DD:FE:EE:91:20:DF:18:9F:D0:2E:8A:15:8E:5D:4B:D5:EC
X509v3 Authority Key Identifier:
keyid:4C:F9:C3:EC:47:FC:CF:01:D9:30:5F:E0:D7:D4:81:B3:06:B0:D4:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TPnD7Ef8zwHZMF_g19SBswaw1Iw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/b3fa64-f8b1-44e8-aba6-8601663395eb/1/TPnD7Ef8zwHZMF_g19SBswaw1Iw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/b3fa64-f8b1-44e8-aba6-8601663395eb/1/TPnD7Ef8zwHZMF_g19SBswaw1Iw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:22:5e:01:36:74:65:ec:2f:f3:e7:ef:52:ff:03:57:98:96:
22:75:c1:5c:1d:cb:a4:2a:8a:1e:3e:62:d6:1d:39:7e:ae:d5:
dd:5d:31:4b:33:4c:9e:15:57:01:f6:93:93:01:35:cb:7f:c4:
a2:18:83:60:d0:a4:1a:1b:bf:bd:ef:93:af:48:f4:3a:44:04:
79:7f:fc:fe:49:a8:45:6a:28:82:d6:16:fe:b8:09:fd:c8:3b:
70:2e:d3:e1:8a:ab:ba:11:28:59:e6:19:e7:ab:74:ff:e0:7c:
ce:0a:6f:cc:37:71:d2:a2:28:57:ea:25:1f:50:80:63:37:a5:
71:8f:f7:13:9d:55:68:9b:38:70:25:ad:93:c6:a1:24:5e:9e:
e9:e4:21:72:0a:bd:14:93:b4:b5:5d:f0:3e:54:cf:26:f4:7a:
7c:30:b0:01:49:1f:0d:5c:57:a7:f4:82:81:54:f7:59:f4:4a:
7c:4b:a5:7f:61:30:f7:cb:1e:16:c4:03:ca:a6:3a:fc:f9:66:
3f:a0:91:e3:fa:f1:a9:91:81:51:2f:8f:e6:42:5d:32:d6:7c:
e2:5a:2b:31:c8:df:e7:8f:1f:2c:b1:41:88:74:10:59:cf:ab:
c7:92:6a:71:fc:d5:fa:20:c6:81:1a:cf:54:0a:b2:9b:77:ff:
37:90:c4:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:40:25 2025 by rpki-client