Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/c5c595-2673-4d5f-8a85-ae8c81f96f42/1/TOSIxkAcj16WnhXWRlH7Sy0tzfc.mft
File: TOSIxkAcj16WnhXWRlH7Sy0tzfc.mft (raw, json)
Hash identifier: P6Tsl7zpJkOt27TbGSlWBO3XJmJ+WJi4XtIvKWrt92M=
Subject key identifier: 1A:83:94:F3:55:97:89:2D:1A:60:B6:41:3C:A1:8A:79:60:10:6A:F6
Authority key identifier: 4C:E4:88:C6:40:1C:8F:5E:96:9E:15:D6:46:51:FB:4B:2D:2D:CD:F7
Certificate issuer: /CN=4ce488c6401c8f5e969e15d64651fb4b2d2dcdf7
Certificate serial: 0199FBEAC74935C59140C862B38AC5949CE0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TOSIxkAcj16WnhXWRlH7Sy0tzfc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/c5c595-2673-4d5f-8a85-ae8c81f96f42/1/TOSIxkAcj16WnhXWRlH7Sy0tzfc.mft
Manifest number: 10DC
Signing time: Sun 19 Oct 2025 10:01:31 +0000
Manifest this update: Sun 19 Oct 2025 10:01:31 +0000
Manifest next update: Mon 20 Oct 2025 10:01:31 +0000
Files and hashes: 1: TOSIxkAcj16WnhXWRlH7Sy0tzfc.crl (hash: jZMcNcEBq7cjE/hfDFbDNPNfhdlDZmKh2gmJndjIGR0=)
2: ebErOTcxF8x0HRmokQpD8A9P798.roa (hash: hgALEdNUDsS4deffBsaMplhK9QNYL4vbKGcbf+NsbgE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/c5c595-2673-4d5f-8a85-ae8c81f96f42/1/TOSIxkAcj16WnhXWRlH7Sy0tzfc.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/c5c595-2673-4d5f-8a85-ae8c81f96f42/1/TOSIxkAcj16WnhXWRlH7Sy0tzfc.mft
rsync://rpki.ripe.net/repository/DEFAULT/TOSIxkAcj16WnhXWRlH7Sy0tzfc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ea:c7:49:35:c5:91:40:c8:62:b3:8a:c5:94:9c:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ce488c6401c8f5e969e15d64651fb4b2d2dcdf7
Validity
Not Before: Oct 19 10:01:31 2025 GMT
Not After : Oct 20 10:01:31 2025 GMT
Subject: CN=1a8394f35597892d1a60b6413ca18a7960106af6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:e7:37:b1:3b:16:6b:f2:0f:cb:24:af:81:90:
e7:5f:e0:1a:e2:d6:5e:a8:b8:67:01:70:3a:5e:bb:
37:57:d6:19:64:43:f7:4b:96:05:f4:15:6d:db:1d:
c0:66:ff:5b:02:51:bc:f6:90:6e:17:57:d6:7f:39:
79:13:ab:fb:2a:38:f4:85:49:6c:76:7b:3f:e8:18:
d1:29:58:92:25:c0:58:09:a7:25:f5:64:d9:78:34:
58:be:3a:2a:bb:e6:90:9b:51:aa:72:bc:60:e6:ad:
32:03:65:32:69:f6:a3:29:32:f1:c6:45:f4:9b:19:
b2:88:67:2e:24:2d:41:96:5e:20:34:55:2c:18:b8:
4b:6f:db:ea:95:2f:50:6c:26:08:23:95:11:fa:46:
a5:c3:51:af:43:5f:f3:fa:0c:61:ed:14:8a:fd:d3:
b5:e9:e3:86:ef:87:8e:62:47:70:46:cf:a5:56:b2:
a8:31:5f:92:e8:0f:94:5f:4c:df:fb:56:c2:0f:17:
78:14:46:1b:c1:df:85:4e:aa:d9:be:40:c3:1e:09:
57:d7:eb:66:26:f2:04:8d:79:ae:20:3f:4a:d9:64:
0e:27:c1:09:a4:29:ae:68:fb:aa:fe:f0:a5:e7:36:
d4:3f:87:ef:d4:f1:0f:7e:2c:94:62:1b:00:74:6b:
e5:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:83:94:F3:55:97:89:2D:1A:60:B6:41:3C:A1:8A:79:60:10:6A:F6
X509v3 Authority Key Identifier:
keyid:4C:E4:88:C6:40:1C:8F:5E:96:9E:15:D6:46:51:FB:4B:2D:2D:CD:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TOSIxkAcj16WnhXWRlH7Sy0tzfc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/c5c595-2673-4d5f-8a85-ae8c81f96f42/1/TOSIxkAcj16WnhXWRlH7Sy0tzfc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/c5c595-2673-4d5f-8a85-ae8c81f96f42/1/TOSIxkAcj16WnhXWRlH7Sy0tzfc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:97:23:30:6c:38:b7:a5:4f:b4:2f:8a:eb:c4:98:57:57:b5:
ff:7c:d8:58:59:18:03:10:c8:c3:77:aa:f6:93:3d:71:fb:b7:
ba:37:12:b0:14:3b:2b:01:35:1d:ca:7e:61:3c:2b:84:4b:f0:
d2:00:b8:e7:93:78:79:ff:26:eb:ee:2b:87:30:e8:23:3c:61:
09:ea:51:ac:ef:43:6f:42:ec:6b:d2:55:d9:ab:85:08:b1:04:
c0:c2:d3:b6:f8:56:b6:91:80:43:09:b2:bd:ff:cd:01:6f:e4:
9e:1a:89:4e:e2:ea:b9:40:65:5f:d8:f4:96:51:3a:e6:ec:0f:
cc:9c:b4:fe:a9:a9:cb:6f:b7:99:6e:6f:3f:57:31:dd:c7:8f:
44:c4:45:b6:0c:42:27:ec:8b:7e:9b:59:4d:e5:09:68:e5:b2:
ee:d7:0a:87:28:a6:1b:0a:cb:cc:e4:e5:64:3b:12:f8:28:cd:
3d:b2:56:cf:dc:81:99:81:7a:39:d5:b9:14:96:6f:ca:87:78:
e5:80:77:5e:5f:79:52:35:cc:fc:77:74:06:4f:6c:c4:4c:4a:
81:4c:c2:e8:d8:96:78:9a:00:b6:2e:b5:1c:52:01:74:91:1f:
f4:39:c4:c8:ee:d7:3a:5d:0b:2d:94:44:40:13:66:f0:1d:1b:
58:ee:86:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:06:33 2025 by rpki-client