
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/0a131e-37c6-45cb-9682-0b0c12b22bf9/1/TKUJs1AR7XFmOVK6Dgw8OEV_nQc.mft
File: TKUJs1AR7XFmOVK6Dgw8OEV_nQc.mft (raw, json)
Hash identifier: g3AYG96BkRt22lOSExDuYYpe54/r2GitJdcKU+oi6Uo=
Subject key identifier: 65:7A:8D:51:3A:53:D9:07:82:32:8C:69:F4:C3:6F:05:D8:D0:55:0E
Authority key identifier: 4C:A5:09:B3:50:11:ED:71:66:39:52:BA:0E:0C:3C:38:45:7F:9D:07
Certificate issuer: /CN=4ca509b35011ed71663952ba0e0c3c38457f9d07
Certificate serial: 0199FC8FAF73D76FA4667A8674CDAA3CDFF4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TKUJs1AR7XFmOVK6Dgw8OEV_nQc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/0a131e-37c6-45cb-9682-0b0c12b22bf9/1/TKUJs1AR7XFmOVK6Dgw8OEV_nQc.mft
Manifest number: 1674
Signing time: Sun 19 Oct 2025 13:01:38 +0000
Manifest this update: Sun 19 Oct 2025 13:01:38 +0000
Manifest next update: Mon 20 Oct 2025 13:01:38 +0000
Files and hashes: 1: TKUJs1AR7XFmOVK6Dgw8OEV_nQc.crl (hash: MyY4+HM23xk3sR/FG7MQDu6kf0QqsWxlPC5s58zRxYA=)
2: ilNe5KDmG0o6LZVjHMLtOGd-0DQ.roa (hash: JkEgQ36ayeHC4m0mo3MRV7E4gABrbKLeaaxVJdDM2eE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/0a131e-37c6-45cb-9682-0b0c12b22bf9/1/TKUJs1AR7XFmOVK6Dgw8OEV_nQc.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/0a131e-37c6-45cb-9682-0b0c12b22bf9/1/TKUJs1AR7XFmOVK6Dgw8OEV_nQc.mft
rsync://rpki.ripe.net/repository/DEFAULT/TKUJs1AR7XFmOVK6Dgw8OEV_nQc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:af:73:d7:6f:a4:66:7a:86:74:cd:aa:3c:df:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ca509b35011ed71663952ba0e0c3c38457f9d07
Validity
Not Before: Oct 19 13:01:38 2025 GMT
Not After : Oct 20 13:01:38 2025 GMT
Subject: CN=657a8d513a53d90782328c69f4c36f05d8d0550e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:07:0e:e3:37:a5:79:6e:63:66:57:99:2a:46:
4d:18:30:05:b7:cf:f3:f3:64:48:4b:3a:cf:20:f7:
91:44:ca:12:66:ed:0d:dc:1f:10:36:4c:86:04:d4:
f2:1f:d2:d8:ef:01:b5:1a:c5:1f:f5:2b:62:ef:ce:
74:de:51:9d:66:50:9e:71:f1:f7:7b:78:b4:e9:0a:
35:f3:04:45:9f:d7:bd:60:4d:ed:67:4f:c7:28:11:
6b:25:4c:01:cc:ab:59:e3:07:80:59:cc:96:c9:b6:
a4:3c:9c:67:99:3a:e1:ee:15:cf:8e:e4:59:79:5f:
dd:5d:1b:c3:71:eb:a7:18:17:43:23:4e:b1:59:50:
4e:21:20:0c:42:9f:6e:23:27:b0:63:13:ed:32:16:
a8:f9:f3:e1:60:74:32:4b:86:23:84:d0:29:c1:f2:
f0:b5:64:56:5c:59:70:0d:07:2c:18:af:a9:1f:c2:
b7:9a:45:29:1b:43:38:19:d2:be:7b:b7:43:0a:45:
07:e1:db:b1:b1:31:a0:11:2f:f1:bd:4d:02:98:b9:
0c:71:22:9d:e9:c3:64:a6:c3:18:1a:9e:1b:74:e0:
00:1f:8c:66:6f:ff:7b:96:34:a8:59:1c:52:01:d6:
ad:10:fe:85:67:6e:b5:e4:3d:23:c4:03:eb:88:0d:
24:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:7A:8D:51:3A:53:D9:07:82:32:8C:69:F4:C3:6F:05:D8:D0:55:0E
X509v3 Authority Key Identifier:
keyid:4C:A5:09:B3:50:11:ED:71:66:39:52:BA:0E:0C:3C:38:45:7F:9D:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TKUJs1AR7XFmOVK6Dgw8OEV_nQc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/0a131e-37c6-45cb-9682-0b0c12b22bf9/1/TKUJs1AR7XFmOVK6Dgw8OEV_nQc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/0a131e-37c6-45cb-9682-0b0c12b22bf9/1/TKUJs1AR7XFmOVK6Dgw8OEV_nQc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:b7:3f:5a:c3:8d:1e:a9:48:fe:03:e1:f5:df:ab:54:13:bb:
7f:83:35:ae:0b:60:f6:ce:ce:0c:3e:b8:26:f9:57:49:10:70:
f0:f7:be:c5:f3:ec:2d:42:24:d7:38:45:7b:fa:a1:d9:00:a1:
f0:22:22:2e:36:f3:15:fc:a1:b6:74:46:e4:c4:80:dc:82:6f:
de:dc:ff:40:3a:aa:cc:36:02:38:54:ce:2a:bb:4f:be:ba:d2:
5d:70:2d:5f:cf:9f:b0:e1:5d:44:d1:bb:89:34:e0:80:17:5a:
9d:8d:60:b4:83:55:b0:8e:5d:62:57:5d:9a:e5:1b:cf:9c:3d:
ad:35:4f:76:0e:78:b2:b1:2e:c0:53:ca:33:63:58:b7:9f:7b:
59:65:df:b0:7a:0a:d0:18:9f:12:f5:4e:29:18:54:22:63:a9:
4d:af:b5:36:02:9f:2a:59:80:1e:f7:4d:e9:b6:a7:43:30:1c:
22:9e:b5:5b:21:dd:4e:f1:a1:85:df:76:14:d7:1e:2d:27:98:
aa:b5:0b:0a:84:ba:c6:8b:4f:4c:6f:b1:b4:4b:23:4d:19:b8:
77:e7:4e:7a:5a:6f:cb:d3:a9:14:f0:f3:47:d8:61:99:c8:f0:
4f:07:a8:58:0a:2a:a2:da:4d:8f:bb:da:e0:66:44:b7:11:6b:
d2:5f:36:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:14:37 2025 by rpki-client