Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/2c8482-5331-4e57-9974-40837d48473d/1/TaTWGZrsgo9pieLoTOwXdlusXNU.mft
File: TaTWGZrsgo9pieLoTOwXdlusXNU.mft (raw, json)
Hash identifier: i/8HImUE5eP+9LHjRwxRclGcgFsHs9wiAbz6oyIm7As=
Subject key identifier: 19:FA:A6:8A:FB:79:87:4D:43:02:80:B3:87:AA:5C:E7:8F:7F:F6:66
Authority key identifier: 4D:A4:D6:19:9A:EC:82:8F:69:89:E2:E8:4C:EC:17:76:5B:AC:5C:D5
Certificate issuer: /CN=4da4d6199aec828f6989e2e84cec17765bac5cd5
Certificate serial: 0199FEEBC833ABD4D79732C1B1C6CDD4FA38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TaTWGZrsgo9pieLoTOwXdlusXNU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/2c8482-5331-4e57-9974-40837d48473d/1/TaTWGZrsgo9pieLoTOwXdlusXNU.mft
Manifest number: 16EA
Signing time: Mon 20 Oct 2025 00:01:28 +0000
Manifest this update: Mon 20 Oct 2025 00:01:28 +0000
Manifest next update: Tue 21 Oct 2025 00:01:28 +0000
Files and hashes: 1: BhaT-M-zQEVQbEPTvK_whwRLo3g.roa (hash: yoydrscKhHCdRvyWQAObyBBT0xMyfOzTOU389MtWZv4=)
2: TaTWGZrsgo9pieLoTOwXdlusXNU.crl (hash: IC/AbIC83/W9cuhPvFosHklLiuj+/F9naVvJ0JKnjAg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/2c8482-5331-4e57-9974-40837d48473d/1/TaTWGZrsgo9pieLoTOwXdlusXNU.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/2c8482-5331-4e57-9974-40837d48473d/1/TaTWGZrsgo9pieLoTOwXdlusXNU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TaTWGZrsgo9pieLoTOwXdlusXNU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:eb:c8:33:ab:d4:d7:97:32:c1:b1:c6:cd:d4:fa:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4da4d6199aec828f6989e2e84cec17765bac5cd5
Validity
Not Before: Oct 20 00:01:28 2025 GMT
Not After : Oct 21 00:01:28 2025 GMT
Subject: CN=19faa68afb79874d430280b387aa5ce78f7ff666
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:d3:a3:74:08:a7:45:d2:e1:1d:56:71:a4:c8:
aa:6c:c6:61:fa:d3:47:8e:e0:36:32:9e:de:b2:2b:
6d:9a:8c:14:54:52:c8:3e:5f:e1:84:05:3f:24:52:
76:8b:39:f3:a9:6c:f3:70:4e:1d:b5:ac:a6:61:19:
22:92:59:4f:7f:9c:0e:aa:64:93:5e:73:96:29:40:
62:9d:0e:0d:f7:44:f7:8c:20:62:f4:74:b7:0c:fd:
7d:12:31:90:04:59:b3:f7:3b:ff:09:4a:a8:eb:a3:
7f:28:13:ae:fe:e0:10:a4:fa:95:8c:9e:0a:9d:1b:
d7:bb:88:80:28:b2:b3:bc:4b:46:f6:f1:b0:84:a7:
a4:ce:1e:90:05:43:77:e4:1a:06:13:fd:fa:fb:22:
7b:95:f2:c5:50:fe:b7:c9:e1:18:f8:1f:f6:c8:50:
53:72:f5:d2:33:84:8d:5e:4d:c1:0c:c6:b5:51:99:
b0:7f:eb:ca:56:3e:f4:c7:c6:30:82:96:03:9b:25:
1b:1b:5f:64:0c:d3:f3:9d:6e:c7:57:16:a9:a4:1b:
58:ae:2a:5a:31:6c:26:34:7a:bd:c3:d1:be:f0:50:
54:61:d2:0a:8e:30:91:55:b6:7f:7d:0a:a1:35:09:
33:86:dc:a3:c5:cc:85:1c:2f:06:87:9a:f0:ed:a0:
da:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:FA:A6:8A:FB:79:87:4D:43:02:80:B3:87:AA:5C:E7:8F:7F:F6:66
X509v3 Authority Key Identifier:
keyid:4D:A4:D6:19:9A:EC:82:8F:69:89:E2:E8:4C:EC:17:76:5B:AC:5C:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TaTWGZrsgo9pieLoTOwXdlusXNU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/2c8482-5331-4e57-9974-40837d48473d/1/TaTWGZrsgo9pieLoTOwXdlusXNU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/2c8482-5331-4e57-9974-40837d48473d/1/TaTWGZrsgo9pieLoTOwXdlusXNU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:d9:c2:0d:07:2f:77:84:b4:62:5a:b8:30:df:92:dc:12:dc:
bb:36:73:cc:00:a9:b1:13:14:f2:3c:af:6c:60:8f:67:20:a2:
41:bb:11:59:30:00:72:6e:7d:cf:ec:5f:3f:7b:e7:11:4c:69:
d4:8c:9a:58:f1:70:98:7f:83:cb:e7:ca:33:0e:6d:04:18:be:
e6:59:77:87:0f:f1:19:03:90:b7:a3:79:f3:ae:42:28:3e:ec:
c1:87:9f:3d:c9:d3:f5:eb:c5:c1:97:99:02:88:13:5d:41:29:
28:3c:a0:6d:71:15:fa:13:f7:5c:74:e0:a2:3c:63:f9:83:9b:
ad:ec:2c:d3:d1:b3:e2:d6:77:9b:76:cc:68:88:b6:06:f6:87:
ad:e0:d3:d3:78:d1:e5:7c:dd:66:d4:99:98:d1:6e:99:43:ea:
12:2b:62:db:36:62:a4:5a:0b:18:9f:34:43:b9:21:c7:22:5f:
b1:f2:3a:3b:cb:b1:6a:5c:74:67:04:ae:57:47:49:fe:27:e9:
8c:99:31:0e:b5:05:3d:69:2d:6d:c6:c9:ca:7c:35:31:93:9a:
6d:fe:f7:c1:2c:b2:de:20:99:8a:83:a7:4e:32:8d:b6:3e:2a:
59:60:6b:4a:ee:9a:3a:c3:c2:40:d2:0a:1f:1d:b0:d6:29:1d:
06:5b:84:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 08:47:28 2025 by rpki-client