Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/c62d13-7f03-4d19-8b46-fc91433d367d/1/TKE73qVPdrioVxKv22FRhrM4OME.mft
File: TKE73qVPdrioVxKv22FRhrM4OME.mft (raw, json)
Hash identifier: 2pQxowvG7YZKwXnwk5R63Z/cqHAMg2vlNhDdX/Eg/Tg=
Subject key identifier: 5D:64:EF:F3:EE:7B:8B:14:D1:54:4C:60:07:21:71:AA:7D:86:51:0A
Authority key identifier: 4C:A1:3B:DE:A5:4F:76:B8:A8:57:12:AF:DB:61:51:86:B3:38:38:C1
Certificate issuer: /CN=4ca13bdea54f76b8a85712afdb615186b33838c1
Certificate serial: 0199FD343048B6FAEC29C27A5C89E2ABB99F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TKE73qVPdrioVxKv22FRhrM4OME.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/c62d13-7f03-4d19-8b46-fc91433d367d/1/TKE73qVPdrioVxKv22FRhrM4OME.mft
Manifest number: 16E4
Signing time: Sun 19 Oct 2025 16:01:19 +0000
Manifest this update: Sun 19 Oct 2025 16:01:19 +0000
Manifest next update: Mon 20 Oct 2025 16:01:19 +0000
Files and hashes: 1: 8axKv1QeNdYLl5PRbdXwvujzyH4.roa (hash: P16odh3n69wKkHb8t7qySEeaYC3/LuUW9W8sAY8jUTo=)
2: TKE73qVPdrioVxKv22FRhrM4OME.crl (hash: E5wSeyKQW7LJpjSvi3osVacEDFxrA0m4JH8Txo7wgv4=)
3: WNroR83uzcjISqXHww42f1zYgLY.roa (hash: ZAQula8xqSNg9/XEOBi+pmskOiJ5Nh7rkmicK30wwYU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/c62d13-7f03-4d19-8b46-fc91433d367d/1/TKE73qVPdrioVxKv22FRhrM4OME.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/c62d13-7f03-4d19-8b46-fc91433d367d/1/TKE73qVPdrioVxKv22FRhrM4OME.mft
rsync://rpki.ripe.net/repository/DEFAULT/TKE73qVPdrioVxKv22FRhrM4OME.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:34:30:48:b6:fa:ec:29:c2:7a:5c:89:e2:ab:b9:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ca13bdea54f76b8a85712afdb615186b33838c1
Validity
Not Before: Oct 19 16:01:19 2025 GMT
Not After : Oct 20 16:01:19 2025 GMT
Subject: CN=5d64eff3ee7b8b14d1544c60072171aa7d86510a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:40:a0:85:cd:31:09:58:77:0e:84:85:a2:8c:
9e:e8:5c:e0:6c:40:a3:0d:2e:a8:22:0c:82:07:c2:
4f:b8:8b:30:4d:f8:65:66:c0:98:93:b7:c7:c4:d8:
6d:74:52:58:e2:74:a8:10:4b:b7:ea:81:e9:17:28:
32:6e:19:3a:c7:32:da:6c:ea:a8:2d:88:c3:9c:8e:
3a:e9:fa:bd:5c:93:4e:87:6a:83:d6:e5:0b:57:7f:
2d:bf:f0:e5:5e:04:27:7b:24:ba:8f:be:8b:6b:be:
13:cb:75:a3:76:e3:09:a5:38:ff:2d:19:8e:aa:69:
e5:91:45:b7:1c:74:c3:a7:0d:0c:c4:32:ea:d6:95:
39:d6:3e:6b:da:a1:24:6b:d8:6d:71:22:5c:79:60:
b0:02:ff:57:8f:d4:5a:ab:ab:b2:5a:9f:fa:53:1d:
47:fa:c6:3f:8f:06:94:a5:be:8e:8e:58:b0:ec:c7:
6a:a5:05:b6:5f:b6:87:66:c9:4f:49:cd:43:90:e6:
f0:88:bd:fb:4f:42:b3:e8:b8:b7:b8:ab:9c:19:4e:
8f:01:80:e9:d4:70:83:3b:83:eb:46:4a:a9:b0:81:
81:96:86:cc:22:ad:d5:f9:ab:77:c2:61:96:f6:23:
60:e2:1f:83:f5:ec:1c:7c:65:5c:41:e9:2d:c5:25:
27:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:64:EF:F3:EE:7B:8B:14:D1:54:4C:60:07:21:71:AA:7D:86:51:0A
X509v3 Authority Key Identifier:
keyid:4C:A1:3B:DE:A5:4F:76:B8:A8:57:12:AF:DB:61:51:86:B3:38:38:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TKE73qVPdrioVxKv22FRhrM4OME.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/c62d13-7f03-4d19-8b46-fc91433d367d/1/TKE73qVPdrioVxKv22FRhrM4OME.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/c62d13-7f03-4d19-8b46-fc91433d367d/1/TKE73qVPdrioVxKv22FRhrM4OME.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:22:4e:ae:1b:02:14:9e:bc:7e:08:83:cc:99:e8:25:c4:72:
10:13:7c:55:ee:96:84:bf:8e:5b:34:b4:82:05:81:2d:c3:fb:
4e:c7:00:10:6b:60:f3:81:2e:e9:4d:ac:68:3e:15:40:4d:f9:
52:7c:4a:32:16:a2:12:5b:53:03:8e:05:77:2c:28:1c:67:57:
9c:2b:43:4f:68:e7:73:1e:f9:b3:f3:87:dd:b2:d4:fe:65:d8:
a4:94:ab:da:0b:2a:b1:e0:9b:34:22:c1:bd:9a:d0:25:ce:50:
61:f5:e3:00:cc:d0:dc:ac:d7:d2:62:fa:63:1f:5e:90:44:70:
fa:6b:9a:16:75:a4:c4:39:2b:b6:dc:50:db:f2:a3:03:b3:91:
01:2e:19:95:e3:cf:98:b1:bc:71:d6:d4:d5:aa:08:c2:28:92:
2b:7b:ee:18:05:96:a8:b1:a2:f8:87:e0:3d:52:3b:cc:3a:cc:
b3:e7:42:3b:37:ba:60:ca:ba:e5:df:56:9f:d9:f8:d5:8a:71:
5f:e2:7c:90:46:41:bb:7b:95:df:c5:21:da:93:ec:40:b5:19:
2b:d1:2f:28:6e:6f:86:f9:48:e6:58:98:3e:8e:fd:eb:ca:d9:
20:a7:c3:75:1c:c2:d3:7d:07:9d:74:8c:e3:e9:36:f5:6e:b9:
b0:5b:1d:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:04:14 2025 by rpki-client