Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/2c8482-5331-4e57-9974-40837d48473d/1/TaTWGZrsgo9pieLoTOwXdlusXNU.mft
File: TaTWGZrsgo9pieLoTOwXdlusXNU.mft (raw, json)
Hash identifier: VVLKmBPpRVU4zkogWhZ/9B4L9YHP2yBPtClVEhFDHgs=
Subject key identifier: 94:BA:0B:4F:B7:14:65:E0:11:93:30:C7:95:86:6C:EE:53:93:A6:5D
Authority key identifier: 4D:A4:D6:19:9A:EC:82:8F:69:89:E2:E8:4C:EC:17:76:5B:AC:5C:D5
Certificate issuer: /CN=4da4d6199aec828f6989e2e84cec17765bac5cd5
Certificate serial: 019A00DA069E0C5772B054847326B437479F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TaTWGZrsgo9pieLoTOwXdlusXNU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/2c8482-5331-4e57-9974-40837d48473d/1/TaTWGZrsgo9pieLoTOwXdlusXNU.mft
Manifest number: 16EB
Signing time: Mon 20 Oct 2025 09:01:19 +0000
Manifest this update: Mon 20 Oct 2025 09:01:19 +0000
Manifest next update: Tue 21 Oct 2025 09:01:19 +0000
Files and hashes: 1: BhaT-M-zQEVQbEPTvK_whwRLo3g.roa (hash: yoydrscKhHCdRvyWQAObyBBT0xMyfOzTOU389MtWZv4=)
2: TaTWGZrsgo9pieLoTOwXdlusXNU.crl (hash: YTOG55Q6xoBgZ88MQyjYcbGOQfa//2Y2UK3hCh+X1co=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/2c8482-5331-4e57-9974-40837d48473d/1/TaTWGZrsgo9pieLoTOwXdlusXNU.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/2c8482-5331-4e57-9974-40837d48473d/1/TaTWGZrsgo9pieLoTOwXdlusXNU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TaTWGZrsgo9pieLoTOwXdlusXNU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 09:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:00:da:06:9e:0c:57:72:b0:54:84:73:26:b4:37:47:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4da4d6199aec828f6989e2e84cec17765bac5cd5
Validity
Not Before: Oct 20 09:01:19 2025 GMT
Not After : Oct 21 09:01:19 2025 GMT
Subject: CN=94ba0b4fb71465e0119330c795866cee5393a65d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:08:42:c8:50:e5:49:1e:dd:a5:40:ba:81:0d:
ef:47:40:23:a9:25:5a:52:51:f2:33:17:36:37:23:
b3:5f:fe:3d:d0:a4:04:54:d9:96:2a:03:c6:e9:4c:
98:21:40:0a:29:a6:bb:d1:4b:46:39:2d:96:90:26:
9e:91:32:15:db:5c:e3:7e:a8:d0:4a:f6:60:70:2a:
ba:39:95:32:f6:14:01:20:75:8f:3e:a9:a5:2e:11:
45:a9:f9:25:6b:7f:2b:ed:14:39:45:5d:d0:e0:3b:
66:98:ea:b1:28:85:a9:17:f1:c5:30:06:9b:50:6c:
e7:f5:6d:22:1a:3d:56:53:a5:c8:31:56:1f:6a:c6:
af:53:3b:a4:f0:ea:0e:90:c0:f2:8f:6b:c6:7c:cb:
08:81:3f:c6:39:fa:dd:43:2b:4f:32:7e:6d:38:c4:
e2:4a:0b:a0:7c:5e:c0:16:c4:fc:74:da:35:3d:b0:
74:6e:1f:0a:43:82:78:c0:64:d6:a4:3d:d9:1e:d1:
0b:4d:2a:0a:8a:6b:93:9d:bd:6f:93:ec:d1:9b:32:
e8:2b:17:52:a0:d6:7b:bd:32:d7:74:1c:98:5d:ec:
c6:03:71:ca:54:e5:b0:b0:2e:a6:1f:a5:1f:5c:95:
78:24:76:1e:b9:6f:9e:b1:8f:1c:98:62:f9:1c:d2:
2f:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:BA:0B:4F:B7:14:65:E0:11:93:30:C7:95:86:6C:EE:53:93:A6:5D
X509v3 Authority Key Identifier:
keyid:4D:A4:D6:19:9A:EC:82:8F:69:89:E2:E8:4C:EC:17:76:5B:AC:5C:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TaTWGZrsgo9pieLoTOwXdlusXNU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/2c8482-5331-4e57-9974-40837d48473d/1/TaTWGZrsgo9pieLoTOwXdlusXNU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/2c8482-5331-4e57-9974-40837d48473d/1/TaTWGZrsgo9pieLoTOwXdlusXNU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:80:3e:e1:d2:f7:53:17:9e:f7:86:9e:f6:92:ca:29:f3:0d:
e2:6d:13:b5:a9:b3:a8:fb:37:58:92:42:f6:ac:98:b2:f0:95:
09:ea:05:16:07:39:af:cb:dd:16:0d:9b:e6:09:2f:5f:72:c7:
c6:f7:85:8e:55:5e:ab:c2:ba:50:83:28:12:0c:96:bb:f7:30:
3b:3f:79:7d:50:41:99:f3:4d:83:c9:56:87:46:4b:6a:38:d3:
74:b1:5b:d1:3c:1c:67:bb:e8:2a:7c:9b:45:c0:6d:c0:5b:33:
6f:cb:90:5d:85:03:0d:93:a9:07:32:2b:71:28:e3:d7:ab:d6:
22:d4:d1:79:46:1c:e5:7f:57:2d:32:c4:2c:5f:bb:42:a1:a8:
a7:2c:31:9b:38:0e:31:10:8e:1a:6b:b2:37:ff:84:97:62:35:
bf:f0:e0:fd:d1:ce:bd:f3:07:c1:56:85:79:7e:f5:af:80:ab:
e7:f3:f4:ba:7c:c1:e1:36:d0:03:c9:0b:2c:9a:80:08:6e:44:
86:20:c1:16:2a:78:bd:8d:d5:91:d6:f2:63:35:10:11:50:8f:
79:30:03:73:e9:70:55:3d:40:92:7e:ad:cc:13:03:66:12:51:
58:31:a4:e7:aa:d0:5a:8a:5d:e1:e0:da:5d:54:f0:e3:79:f4:
3d:da:bf:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 14:36:25 2025 by rpki-client