Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/5ba81e-e274-4ba3-954d-bdf94a3fb32d/1/Tc_QAaZn4WRatAxbvtifWScAT4U.mft
File: Tc_QAaZn4WRatAxbvtifWScAT4U.mft (raw, json)
Hash identifier: 5PI62Scu6W3tSeu7B7oiksbIQm647dqey+sznSLMe08=
Subject key identifier: 63:C2:24:0B:91:E1:40:67:71:22:23:07:13:3C:AA:54:44:B9:85:D6
Authority key identifier: 4D:CF:D0:01:A6:67:E1:64:5A:B4:0C:5B:BE:D8:9F:59:27:00:4F:85
Certificate issuer: /CN=4dcfd001a667e1645ab40c5bbed89f5927004f85
Certificate serial: 0199FC58554CF52A858F6A4BA65904678A33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tc_QAaZn4WRatAxbvtifWScAT4U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/5ba81e-e274-4ba3-954d-bdf94a3fb32d/1/Tc_QAaZn4WRatAxbvtifWScAT4U.mft
Manifest number: 0B0D
Signing time: Sun 19 Oct 2025 12:01:11 +0000
Manifest this update: Sun 19 Oct 2025 12:01:11 +0000
Manifest next update: Mon 20 Oct 2025 12:01:11 +0000
Files and hashes: 1: Tc_QAaZn4WRatAxbvtifWScAT4U.crl (hash: 2mI4gRdz/grS2S63ylq1uXjxNIdlUg4qx4LKSPgB13s=)
2: jdMFheDlAIgKvi6YF6C6Rm8zqwg.roa (hash: 0uopvNrGmCf9iLiAY1t8oTN34NZD3FhGP5c/aZny+2A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/5ba81e-e274-4ba3-954d-bdf94a3fb32d/1/Tc_QAaZn4WRatAxbvtifWScAT4U.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/5ba81e-e274-4ba3-954d-bdf94a3fb32d/1/Tc_QAaZn4WRatAxbvtifWScAT4U.mft
rsync://rpki.ripe.net/repository/DEFAULT/Tc_QAaZn4WRatAxbvtifWScAT4U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:55:4c:f5:2a:85:8f:6a:4b:a6:59:04:67:8a:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4dcfd001a667e1645ab40c5bbed89f5927004f85
Validity
Not Before: Oct 19 12:01:11 2025 GMT
Not After : Oct 20 12:01:11 2025 GMT
Subject: CN=63c2240b91e1406771222307133caa5444b985d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:c3:84:a2:7b:b8:74:75:41:da:79:0b:5e:dd:
59:37:bd:0e:13:74:ae:7a:0e:39:a9:ba:c0:5c:0b:
bf:28:1c:23:e0:01:c0:cb:39:7a:ad:c5:15:51:cb:
ff:66:85:c3:7c:7c:1a:aa:68:b7:fe:4f:2e:92:27:
e7:39:e0:d7:95:57:3f:d9:6d:a3:fb:aa:17:e6:e0:
48:2d:52:72:60:7a:13:c4:1b:a8:f8:20:3d:32:7e:
0f:59:87:e7:96:38:f9:fd:3c:3d:17:5e:e9:1b:47:
27:b2:42:0d:cf:a9:98:c0:e8:1d:36:3a:92:26:6e:
2f:8d:a1:ca:54:e6:1a:fc:2e:ce:50:9d:2f:57:b3:
30:79:94:88:00:e7:0d:5c:d0:26:0e:bf:26:b1:50:
91:a4:be:5a:34:c3:bd:34:70:14:30:38:78:e6:ad:
6e:74:7a:5f:2b:85:af:13:ce:ad:bf:d7:52:4f:f4:
24:07:e4:72:0b:81:e7:34:e0:07:7c:25:fa:ea:ba:
d2:05:5c:4a:f0:dc:45:c7:40:ab:bb:d7:6d:47:08:
bd:e3:27:f2:ca:a5:28:ee:6e:43:77:98:57:8b:a1:
f1:68:a4:2b:8f:65:99:9c:3d:dd:dd:09:d0:6a:d2:
64:d6:17:94:57:4d:1d:f2:27:6b:29:8c:a7:15:54:
60:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:C2:24:0B:91:E1:40:67:71:22:23:07:13:3C:AA:54:44:B9:85:D6
X509v3 Authority Key Identifier:
keyid:4D:CF:D0:01:A6:67:E1:64:5A:B4:0C:5B:BE:D8:9F:59:27:00:4F:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tc_QAaZn4WRatAxbvtifWScAT4U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/5ba81e-e274-4ba3-954d-bdf94a3fb32d/1/Tc_QAaZn4WRatAxbvtifWScAT4U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/5ba81e-e274-4ba3-954d-bdf94a3fb32d/1/Tc_QAaZn4WRatAxbvtifWScAT4U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:90:04:ef:18:7a:e3:18:1f:d6:18:0a:d8:4f:eb:79:b8:ea:
5b:85:02:ad:83:69:b9:59:0e:70:04:40:40:f2:44:84:62:5c:
c5:8b:32:1a:d0:23:3e:db:89:e8:bc:77:f9:f0:90:9e:e1:3d:
3d:62:f4:8d:c4:28:24:b0:b2:f3:a5:1d:51:0a:60:42:c6:52:
cb:7c:dc:23:3e:c4:c8:7f:56:8d:b1:af:ad:13:e6:ae:79:b8:
37:b3:4c:98:1a:d2:c8:d6:c1:15:6b:bb:e3:62:27:29:37:41:
29:be:4a:2c:f6:eb:1d:08:01:d7:57:bb:77:65:f3:45:3f:27:
80:eb:ab:1b:09:f2:c7:62:3f:34:7b:b3:99:02:cf:f8:08:49:
45:c0:24:10:e5:63:e6:68:6a:74:ce:9f:f4:d2:de:1f:4c:6d:
5b:6c:cc:3f:4d:6a:46:60:a6:71:97:18:a9:ef:bf:6b:cf:ab:
1f:08:a2:69:ac:e8:0a:dc:25:bf:6c:b9:99:e2:a6:80:2f:19:
d5:71:ae:90:9a:fa:26:4f:f8:8a:c4:fc:8d:8d:cc:3b:fc:87:
fb:27:9e:fa:fa:21:a8:e3:33:49:ef:99:01:2d:1e:7f:c2:47:
8d:49:d4:9c:89:79:37:ee:3a:53:3c:f2:e6:4a:e4:3f:63:8d:
e1:c3:12:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 19:57:14 2025 by rpki-client