Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/77f99c-35cb-47a6-bac3-caba81c9a152/1/tcr-HjrqL22RHtEHoIqv7peaT1E.mft
File: tcr-HjrqL22RHtEHoIqv7peaT1E.mft (raw, json)
Hash identifier: 2RZgyzF0S+DNJzUwoXhGDZU/8gF8g3++nW1lWQvDghI=
Subject key identifier: 4A:13:F3:2C:19:79:6C:B5:04:8B:DD:A4:82:7B:E5:F5:0E:3B:C7:36
Authority key identifier: B5:CA:FE:1E:3A:EA:2F:6D:91:1E:D1:07:A0:8A:AF:EE:97:9A:4F:51
Certificate issuer: /CN=b5cafe1e3aea2f6d911ed107a08aafee979a4f51
Certificate serial: 019A02908322ADFB79919FFB460BBC5C6BA6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tcr-HjrqL22RHtEHoIqv7peaT1E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/77f99c-35cb-47a6-bac3-caba81c9a152/1/tcr-HjrqL22RHtEHoIqv7peaT1E.mft
Manifest number: 0A2F
Signing time: Mon 20 Oct 2025 17:00:16 +0000
Manifest this update: Mon 20 Oct 2025 17:00:16 +0000
Manifest next update: Tue 21 Oct 2025 17:00:16 +0000
Files and hashes: 1: Sk4oS4Jwout0TIyWtwTprBvECw8.roa (hash: d9eggJxjronzsMXpOOKPiqelR6UqHbuMYzc02e4+PZo=)
2: tcr-HjrqL22RHtEHoIqv7peaT1E.crl (hash: 7CDluwRjx9/0pMW0LIg/cFuwDbkQ/7GEI/ai+FsCVrs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/77f99c-35cb-47a6-bac3-caba81c9a152/1/tcr-HjrqL22RHtEHoIqv7peaT1E.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/77f99c-35cb-47a6-bac3-caba81c9a152/1/tcr-HjrqL22RHtEHoIqv7peaT1E.mft
rsync://rpki.ripe.net/repository/DEFAULT/tcr-HjrqL22RHtEHoIqv7peaT1E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 13:42:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:02:90:83:22:ad:fb:79:91:9f:fb:46:0b:bc:5c:6b:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5cafe1e3aea2f6d911ed107a08aafee979a4f51
Validity
Not Before: Oct 20 17:00:16 2025 GMT
Not After : Oct 21 17:00:16 2025 GMT
Subject: CN=4a13f32c19796cb5048bdda4827be5f50e3bc736
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:63:dd:1d:b4:1a:ef:6b:e0:cd:09:1b:0c:50:
31:52:72:32:e5:69:0d:8a:63:fa:e5:d9:e4:3b:ac:
6a:5d:92:5f:ef:f4:91:bd:76:9f:dc:35:1f:58:b2:
3c:86:04:20:bd:c4:1c:78:55:fb:9b:48:0f:e7:d7:
06:64:00:89:d3:22:44:17:d7:2c:62:76:89:8b:a7:
52:ef:a7:ef:85:e4:50:bf:85:c8:1a:91:9c:2e:02:
37:73:02:80:60:8d:fc:05:29:83:bc:e4:0a:f8:25:
db:79:7a:fa:8b:53:6d:72:7a:4d:43:71:f7:60:d4:
fe:6b:bd:31:80:fc:4a:47:94:d0:74:13:42:9c:5d:
47:67:1f:71:39:2c:f6:f5:a3:17:1d:60:71:fe:56:
46:61:64:e9:61:fc:1c:bd:47:ad:f2:a5:2e:23:1b:
57:00:b9:ac:28:0b:d3:07:5b:07:fd:e1:4a:90:91:
eb:55:a4:ec:20:ae:ce:04:a7:5d:1d:3c:dc:4a:53:
0e:e5:4f:f4:af:7f:a2:b6:8f:80:a9:cd:3d:80:ad:
88:7c:bd:dd:75:f6:e1:85:6b:7d:7e:b5:05:25:8d:
74:b0:8e:32:78:63:cf:1c:c0:a6:8d:55:8d:90:ca:
84:ef:8e:d6:59:f2:8a:f3:3c:cf:47:00:c4:10:ef:
37:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:13:F3:2C:19:79:6C:B5:04:8B:DD:A4:82:7B:E5:F5:0E:3B:C7:36
X509v3 Authority Key Identifier:
keyid:B5:CA:FE:1E:3A:EA:2F:6D:91:1E:D1:07:A0:8A:AF:EE:97:9A:4F:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tcr-HjrqL22RHtEHoIqv7peaT1E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/77f99c-35cb-47a6-bac3-caba81c9a152/1/tcr-HjrqL22RHtEHoIqv7peaT1E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/77f99c-35cb-47a6-bac3-caba81c9a152/1/tcr-HjrqL22RHtEHoIqv7peaT1E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:21:51:09:1c:35:34:20:17:7e:89:a3:11:9b:35:4a:ef:9d:
1b:6e:05:80:d8:9b:27:fc:5d:d2:1f:eb:85:87:c6:83:d3:0f:
dc:90:e0:a0:8b:4b:10:f4:8e:7d:6b:11:35:15:15:bb:90:44:
da:c5:fa:33:16:ef:7f:e5:13:e0:04:5e:e4:e3:a0:44:8d:14:
96:8a:3e:09:3f:3b:99:30:9d:d5:8c:c8:cf:a5:14:b7:cc:b9:
bc:4e:79:c5:26:f9:b0:f2:72:51:9a:ec:e1:ac:07:b8:66:d2:
81:b8:4e:0e:7d:1b:d7:d1:e4:54:ed:c4:68:52:71:c7:9d:d9:
7c:c7:61:8f:d2:fb:4b:b4:bf:d4:f6:04:7f:e2:89:28:3d:25:
50:bb:45:f2:98:14:96:7a:d9:79:71:0f:8a:6f:51:2f:61:51:
6f:0a:c1:9c:de:71:25:6b:2c:17:27:e5:8d:53:93:fa:d6:18:
8d:e1:44:e0:39:fd:ca:7d:24:b3:02:ed:de:7b:8f:e5:ce:d8:
ff:22:89:d0:76:c9:a4:9c:34:19:8a:3c:31:29:31:85:36:86:
2a:85:da:c5:33:3a:1f:36:22:54:a4:98:c1:1e:e9:24:75:f0:
65:08:5c:3c:29:6c:ba:7f:5a:04:0c:79:93:dc:14:5b:33:b2:
f1:6e:ea:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 23:18:45 2025 by rpki-client