Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/4f943f-d16a-48da-b93a-1487c6020c46/1/Tj_pDw-taiXUa9fDNbki2gMbLHg.mft
File: Tj_pDw-taiXUa9fDNbki2gMbLHg.mft (raw, json)
Hash identifier: HcA9iYNd89U+lRm4wcS5umCVZ5yzVBAbm1CqImmTc9Q=
Subject key identifier: 11:EB:79:49:A4:65:49:3B:3A:71:C7:B4:3A:F0:12:BD:79:63:5F:E6
Authority key identifier: 4E:3F:E9:0F:0F:AD:6A:25:D4:6B:D7:C3:35:B9:22:DA:03:1B:2C:78
Certificate issuer: /CN=4e3fe90f0fad6a25d46bd7c335b922da031b2c78
Certificate serial: 0199FC2199B1D988059C95AAA15B97626281
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tj_pDw-taiXUa9fDNbki2gMbLHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/4f943f-d16a-48da-b93a-1487c6020c46/1/Tj_pDw-taiXUa9fDNbki2gMbLHg.mft
Manifest number: 0B8A
Signing time: Sun 19 Oct 2025 11:01:24 +0000
Manifest this update: Sun 19 Oct 2025 11:01:24 +0000
Manifest next update: Mon 20 Oct 2025 11:01:24 +0000
Files and hashes: 1: A8YDmTBK0K140SrVGjKT4rgJaBs.roa (hash: dZ2I5la+5OGaL56JsGr6ibfQkik4DvtIbwTHLacKDFU=)
2: Tj_pDw-taiXUa9fDNbki2gMbLHg.crl (hash: rL3BX8jY4rD7GxL7a0FamDe9OXtIAIk8gKVv4Su7B3Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/4f943f-d16a-48da-b93a-1487c6020c46/1/Tj_pDw-taiXUa9fDNbki2gMbLHg.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/4f943f-d16a-48da-b93a-1487c6020c46/1/Tj_pDw-taiXUa9fDNbki2gMbLHg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Tj_pDw-taiXUa9fDNbki2gMbLHg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:99:b1:d9:88:05:9c:95:aa:a1:5b:97:62:62:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e3fe90f0fad6a25d46bd7c335b922da031b2c78
Validity
Not Before: Oct 19 11:01:24 2025 GMT
Not After : Oct 20 11:01:24 2025 GMT
Subject: CN=11eb7949a465493b3a71c7b43af012bd79635fe6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:f6:fb:53:86:70:66:36:fa:f0:4f:8e:cb:fb:
38:3f:19:9f:a1:01:2c:02:48:18:bb:85:44:72:81:
f8:dc:3c:52:6e:17:76:b7:03:3f:5d:ec:16:a5:5e:
94:6f:3c:8b:ea:ee:11:5e:a3:cf:de:8f:30:36:74:
9d:99:80:65:08:b7:2f:60:43:74:75:b4:6b:0d:30:
5b:b7:97:00:5d:e9:15:ce:01:e2:06:e2:60:7a:25:
2a:b5:a5:33:af:8e:37:d6:d2:03:ff:19:1e:c4:91:
ae:0c:43:30:52:b0:92:22:d0:4e:24:ff:40:00:3d:
e5:03:ec:17:a8:d8:08:a6:a4:25:60:e0:0e:1b:fe:
e1:21:aa:4a:47:b3:f6:5d:5f:d4:f7:85:4e:91:70:
18:62:64:a5:01:f2:5b:c8:b0:95:ee:67:2d:20:6e:
8d:1a:e2:69:df:c1:95:60:97:89:5d:10:d7:64:78:
a2:f3:5a:2f:e4:63:cf:0b:29:a6:d0:9c:2d:c1:9d:
db:8d:fa:da:86:d0:5f:0b:71:19:95:e8:f1:df:ae:
c9:f3:e2:01:5a:c6:32:65:f6:c2:63:2b:7f:55:60:
ed:4a:6e:b0:16:fd:df:42:5e:3a:7d:a3:0c:40:f7:
ad:5a:03:4e:00:b6:5b:63:cc:9e:e8:dc:40:cb:09:
a9:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:EB:79:49:A4:65:49:3B:3A:71:C7:B4:3A:F0:12:BD:79:63:5F:E6
X509v3 Authority Key Identifier:
keyid:4E:3F:E9:0F:0F:AD:6A:25:D4:6B:D7:C3:35:B9:22:DA:03:1B:2C:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tj_pDw-taiXUa9fDNbki2gMbLHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/4f943f-d16a-48da-b93a-1487c6020c46/1/Tj_pDw-taiXUa9fDNbki2gMbLHg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/4f943f-d16a-48da-b93a-1487c6020c46/1/Tj_pDw-taiXUa9fDNbki2gMbLHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:89:c8:2d:a9:d7:23:77:33:f2:8c:e7:0c:d3:c3:54:17:5c:
6a:f1:9a:4c:7e:70:2f:95:20:09:e1:98:54:68:d4:e7:54:f6:
8b:5f:63:bf:c1:e7:9a:02:01:5f:c6:fc:53:e1:a1:18:01:44:
4a:32:5f:c4:8f:dd:de:41:2d:f5:35:eb:21:38:9a:7c:5c:80:
b8:b7:af:97:68:cb:89:1f:ed:97:3a:b7:25:ae:dc:db:14:cc:
f2:64:bf:49:c1:51:43:05:65:09:d6:21:be:b2:d0:af:40:c5:
b7:fe:3c:44:97:4a:02:6d:a0:ae:aa:f9:31:9f:5b:81:c7:38:
eb:4b:17:13:c7:1c:a0:91:79:3a:e1:ea:fb:34:90:45:c0:1d:
69:0c:93:96:43:9e:5f:36:45:54:b6:f8:ca:1b:7a:52:50:a8:
02:f4:7e:ac:b0:d9:92:6d:6b:ec:85:f0:9b:f8:39:aa:1f:83:
d2:74:e6:6e:2b:34:a6:b2:e8:f6:9d:58:80:9b:f4:a5:8e:d0:
5d:f9:96:42:38:77:bf:11:4b:70:97:18:51:43:bb:55:a3:03:
c3:1e:d9:91:36:bd:38:1c:8c:12:e8:f7:f2:2a:4b:90:d2:48:
ff:ca:4e:c1:93:11:4a:31:87:4d:5f:26:cc:83:d0:49:de:22:
ec:33:10:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:27:07 2025 by rpki-client