Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/786b51-e2df-4fd6-9c9b-f567c3e9f5ff/1/TsOgYsuW2aPyGostqEj4HG9zv5U.mft
File: TsOgYsuW2aPyGostqEj4HG9zv5U.mft (raw, json)
Hash identifier: kNy1zg88g6sTVg36pA8zQa4aLAnsjg2cchG2q7KsKS4=
Subject key identifier: E6:AE:43:E5:9F:75:C1:E0:44:D3:51:17:C1:4D:2B:67:63:75:CD:E3
Authority key identifier: 4E:C3:A0:62:CB:96:D9:A3:F2:1A:8B:2D:A8:48:F8:1C:6F:73:BF:95
Certificate issuer: /CN=4ec3a062cb96d9a3f21a8b2da848f81c6f73bf95
Certificate serial: 019A0147ADB9AF4BD5CF530F35FCD9774253
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TsOgYsuW2aPyGostqEj4HG9zv5U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/786b51-e2df-4fd6-9c9b-f567c3e9f5ff/1/TsOgYsuW2aPyGostqEj4HG9zv5U.mft
Manifest number: 1680
Signing time: Mon 20 Oct 2025 11:01:06 +0000
Manifest this update: Mon 20 Oct 2025 11:01:06 +0000
Manifest next update: Tue 21 Oct 2025 11:01:06 +0000
Files and hashes: 1: TsOgYsuW2aPyGostqEj4HG9zv5U.crl (hash: OaxhpPvKoupWV3IqqCYLqJG6YjPbGYMDWkXiUzUMYhM=)
2: Zo-iXOH7eoz1wcNDU4gFPp4lbTo.roa (hash: lEXdntgkazPfcD7Ym6WQrguJ42W+/3phyup2XOjaUaA=)
3: w0BgVrxvQVnjW2X3qjBQ3ko9xOc.roa (hash: Ucfa4JRcD7zc33DVXeSZa1Nus1iwZHoQ8xtQZD2xfUQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/786b51-e2df-4fd6-9c9b-f567c3e9f5ff/1/TsOgYsuW2aPyGostqEj4HG9zv5U.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/786b51-e2df-4fd6-9c9b-f567c3e9f5ff/1/TsOgYsuW2aPyGostqEj4HG9zv5U.mft
rsync://rpki.ripe.net/repository/DEFAULT/TsOgYsuW2aPyGostqEj4HG9zv5U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 09:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:01:47:ad:b9:af:4b:d5:cf:53:0f:35:fc:d9:77:42:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ec3a062cb96d9a3f21a8b2da848f81c6f73bf95
Validity
Not Before: Oct 20 11:01:06 2025 GMT
Not After : Oct 21 11:01:06 2025 GMT
Subject: CN=e6ae43e59f75c1e044d35117c14d2b676375cde3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:f1:d8:08:7e:46:7c:0d:80:82:50:3c:6b:88:
f6:88:03:9b:da:3d:83:9e:cb:3a:db:18:2f:1c:39:
df:fd:bb:f2:31:6d:dd:96:42:8c:19:e0:b9:81:2b:
ff:17:39:21:c5:46:da:c9:12:27:cc:fe:ae:ed:b2:
31:ef:64:62:5f:50:46:22:55:36:47:cb:fe:f3:03:
17:7d:7e:43:6b:e0:ab:f3:ed:1f:ee:14:74:38:3d:
e4:e4:c7:e6:9d:23:94:ce:44:08:70:6f:e6:01:24:
c5:90:43:5e:e1:69:65:ee:fa:70:d9:63:35:c7:44:
28:b6:25:9a:58:74:3e:e9:62:42:d7:b5:9b:6b:94:
3d:91:93:9b:53:a6:22:9d:73:3d:54:88:ec:8b:9f:
dc:25:b3:19:65:f2:87:76:be:6b:fd:20:fc:1d:e2:
78:9a:5b:54:d3:ae:b2:e8:54:fb:0a:3b:ff:c3:a5:
c3:b5:94:ff:58:1b:ee:d5:49:95:18:41:05:8e:a0:
23:a2:b1:67:6d:84:d0:3b:42:6d:4d:d9:e1:a2:a8:
8c:a1:89:17:b4:31:95:27:7a:ea:34:c7:a7:c1:db:
63:a3:e5:7d:70:d7:f8:19:74:c8:3e:26:ae:86:21:
c4:22:0e:87:f3:ce:ac:f6:80:22:30:85:ea:67:15:
81:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:AE:43:E5:9F:75:C1:E0:44:D3:51:17:C1:4D:2B:67:63:75:CD:E3
X509v3 Authority Key Identifier:
keyid:4E:C3:A0:62:CB:96:D9:A3:F2:1A:8B:2D:A8:48:F8:1C:6F:73:BF:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TsOgYsuW2aPyGostqEj4HG9zv5U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/786b51-e2df-4fd6-9c9b-f567c3e9f5ff/1/TsOgYsuW2aPyGostqEj4HG9zv5U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/786b51-e2df-4fd6-9c9b-f567c3e9f5ff/1/TsOgYsuW2aPyGostqEj4HG9zv5U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:02:ba:e2:5c:04:85:94:23:9e:de:d7:63:10:f0:66:f9:7d:
82:3f:cd:d2:78:bb:34:7f:63:07:7f:6d:cf:75:26:23:9f:25:
13:88:9b:9b:4a:45:30:5a:5f:40:36:44:09:0b:49:d7:ab:04:
51:c4:93:e6:d7:a1:6d:cf:a3:42:17:e2:a6:31:a0:da:41:09:
7d:ea:45:7c:ba:c0:eb:04:65:cc:67:1c:e4:24:fc:74:c7:94:
84:e6:97:3c:1a:b6:b9:98:e1:f0:b3:4a:12:93:a9:5b:9e:42:
6b:f1:74:e9:07:38:13:73:4e:a6:db:91:53:21:48:02:66:0d:
8c:26:91:da:69:1b:7f:cd:fd:73:c4:5d:f4:70:60:00:d4:38:
c3:cd:3e:54:fe:7d:88:0b:1f:9e:e0:00:66:ad:e1:0b:52:38:
6c:c8:96:14:72:3d:e9:63:c3:fb:d3:b6:3f:4a:63:62:63:60:
aa:da:1a:ed:c7:d3:88:76:09:18:5f:03:f3:2d:4d:32:ce:a8:
b7:19:46:fa:bb:d7:ea:78:77:ba:b3:f5:7a:2b:8e:7d:f5:27:
f5:a5:d5:84:32:36:3d:59:ad:49:b9:22:8b:a2:b5:7c:59:02:
1d:b6:58:21:b7:4b:fb:84:b0:4f:f5:97:e9:16:25:93:c6:a7:
86:c0:d7:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 13:16:40 2025 by rpki-client