Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/1a15fa-ace6-464d-8969-e4928180033c/1/TBdAzvl0ncKw9fiM3xA02oHWBtw.mft
File: TBdAzvl0ncKw9fiM3xA02oHWBtw.mft (raw, json)
Hash identifier: q+XBNgOO35777YeHht2aWkmGGZTrbBIxuRG2bYrVeVU=
Subject key identifier: 27:89:8E:06:B8:3A:68:EB:A2:4D:ED:85:E1:AD:50:11:20:E9:BA:E3
Authority key identifier: 4C:17:40:CE:F9:74:9D:C2:B0:F5:F8:8C:DF:10:34:DA:81:D6:06:DC
Certificate issuer: /CN=4c1740cef9749dc2b0f5f88cdf1034da81d606dc
Certificate serial: 0199FB0F521CABBB75BCF45CDEC155C24999
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TBdAzvl0ncKw9fiM3xA02oHWBtw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/1a15fa-ace6-464d-8969-e4928180033c/1/TBdAzvl0ncKw9fiM3xA02oHWBtw.mft
Manifest number: 1060
Signing time: Sun 19 Oct 2025 06:01:49 +0000
Manifest this update: Sun 19 Oct 2025 06:01:49 +0000
Manifest next update: Mon 20 Oct 2025 06:01:49 +0000
Files and hashes: 1: 9UfG7ZfqsnxXdNjOVBB4EufGuiU.roa (hash: nBGGqWZhxqHLJh+Oq/1SCIlZ0ENh9e+rLU6y/LQvQNA=)
2: TBdAzvl0ncKw9fiM3xA02oHWBtw.crl (hash: Gn95MCUTfnjUf6bA/v2cYxAvF+SM6BaOKrahXg0DN/w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/1a15fa-ace6-464d-8969-e4928180033c/1/TBdAzvl0ncKw9fiM3xA02oHWBtw.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/1a15fa-ace6-464d-8969-e4928180033c/1/TBdAzvl0ncKw9fiM3xA02oHWBtw.mft
rsync://rpki.ripe.net/repository/DEFAULT/TBdAzvl0ncKw9fiM3xA02oHWBtw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:0f:52:1c:ab:bb:75:bc:f4:5c:de:c1:55:c2:49:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c1740cef9749dc2b0f5f88cdf1034da81d606dc
Validity
Not Before: Oct 19 06:01:49 2025 GMT
Not After : Oct 20 06:01:49 2025 GMT
Subject: CN=27898e06b83a68eba24ded85e1ad501120e9bae3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:7e:94:14:5a:eb:a5:92:1f:8b:b8:48:1d:03:
2f:68:a9:48:16:ae:62:92:a9:ea:69:a6:a2:9a:4e:
62:69:57:96:d5:7c:ed:42:89:53:16:2b:9d:6e:b8:
e0:6f:08:f1:8b:5b:70:04:35:57:ea:4d:f4:4a:f1:
8e:d0:b4:f3:b3:1d:74:b0:c5:24:f6:b5:4d:9b:59:
f0:b3:4c:26:a5:96:b7:c6:a1:ac:f3:f3:b5:77:b4:
ec:d1:4e:ce:0f:b6:bf:60:a4:2a:9a:1f:0a:bd:5e:
b0:ed:ff:85:92:c4:f5:5d:fb:49:90:0e:51:49:c5:
e4:9f:c0:ad:a7:38:b9:75:c3:c5:59:10:13:84:f8:
b2:26:da:6d:52:bf:df:18:35:49:2c:9d:2c:64:74:
98:95:b5:83:e4:ef:8f:0b:e1:34:58:94:ff:d9:59:
03:a3:01:16:8d:12:b4:f2:11:35:91:f8:f9:b3:4b:
f1:9f:28:dd:2a:1c:3a:f9:83:75:be:0b:e9:23:25:
9d:20:96:27:f8:59:c9:70:0c:2b:fc:e8:82:ab:dc:
18:d3:81:8b:99:d7:c5:98:34:89:45:de:eb:4f:ac:
09:cc:c7:14:34:04:7a:24:50:77:e4:79:47:f7:b7:
72:c7:54:89:a4:69:2b:d2:e7:9e:c6:8e:8e:26:77:
0d:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:89:8E:06:B8:3A:68:EB:A2:4D:ED:85:E1:AD:50:11:20:E9:BA:E3
X509v3 Authority Key Identifier:
keyid:4C:17:40:CE:F9:74:9D:C2:B0:F5:F8:8C:DF:10:34:DA:81:D6:06:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TBdAzvl0ncKw9fiM3xA02oHWBtw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/1a15fa-ace6-464d-8969-e4928180033c/1/TBdAzvl0ncKw9fiM3xA02oHWBtw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/1a15fa-ace6-464d-8969-e4928180033c/1/TBdAzvl0ncKw9fiM3xA02oHWBtw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:f8:fd:ae:ec:69:f9:ce:f7:a4:43:4c:21:7e:c1:8a:f7:10:
ce:08:30:0f:06:fb:55:4a:52:3c:f7:8c:f4:78:f9:17:86:4c:
fa:bf:57:f3:e5:0d:3e:92:b4:c4:20:72:a4:cb:56:72:0d:79:
73:48:5a:a1:0e:6b:a4:e8:fa:8a:72:24:31:d7:f9:5d:86:de:
e5:f7:24:57:1d:c0:85:3a:e6:5e:53:fa:91:bd:b7:60:d8:75:
60:51:74:51:55:35:b5:47:8e:ec:d8:02:cc:f8:49:d3:51:29:
6e:a1:83:16:f4:53:9b:4c:0e:34:51:b7:08:16:1a:79:ba:71:
5c:17:79:d8:f8:80:09:44:19:e7:04:e5:f0:a3:03:89:b1:e8:
09:3e:46:26:16:5e:c4:82:75:56:62:e4:ad:e6:16:c7:9c:da:
35:d9:91:84:2a:19:db:23:75:bc:ab:99:25:e7:52:fc:68:6a:
51:71:af:bf:e3:3e:30:96:1f:38:ef:70:82:d1:07:d8:c1:29:
78:86:5a:c7:e1:4e:f3:10:f4:25:11:ab:dd:8e:5d:a1:ef:ab:
d8:f0:49:1c:92:44:a4:01:76:8d:a0:90:cb:ad:79:fd:bc:08:
2e:42:79:63:2e:8d:95:e5:34:f3:1d:bc:df:4c:e6:f4:a3:0d:
60:89:22:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:11:47 2025 by rpki-client