Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/0f3e0b-26c3-4cf9-8056-29af33bc6b98/1/TKRH97Ondvck2LyBQL4xdmYsJNA.mft
File: TKRH97Ondvck2LyBQL4xdmYsJNA.mft (raw, json)
Hash identifier: NrspA36ksc0No9uR555CtvvX7SH1ypO70uOsCyzywQM=
Subject key identifier: FC:90:FD:ED:62:8A:B1:3B:04:48:99:E0:99:82:C1:9A:16:53:52:F0
Authority key identifier: 4C:A4:47:F7:B3:A7:76:F7:24:D8:BC:81:40:BE:31:76:66:2C:24:D0
Certificate issuer: /CN=4ca447f7b3a776f724d8bc8140be3176662c24d0
Certificate serial: 0199FCC6AC0D20ED5B263163F12B431286B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TKRH97Ondvck2LyBQL4xdmYsJNA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/0f3e0b-26c3-4cf9-8056-29af33bc6b98/1/TKRH97Ondvck2LyBQL4xdmYsJNA.mft
Manifest number: 0774
Signing time: Sun 19 Oct 2025 14:01:42 +0000
Manifest this update: Sun 19 Oct 2025 14:01:42 +0000
Manifest next update: Mon 20 Oct 2025 14:01:42 +0000
Files and hashes: 1: TKRH97Ondvck2LyBQL4xdmYsJNA.crl (hash: 4AGsOW6COAUVXlkkHG/zbBG26cx/KfuOBQ2tbwxGD8Y=)
2: fIoweheWq1JqzVdLBCrrD-x4kK4.roa (hash: yoQba86aaUs4p2P/E/UoxSeIL5NEm/wDobQOVMT4e5A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/0f3e0b-26c3-4cf9-8056-29af33bc6b98/1/TKRH97Ondvck2LyBQL4xdmYsJNA.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/0f3e0b-26c3-4cf9-8056-29af33bc6b98/1/TKRH97Ondvck2LyBQL4xdmYsJNA.mft
rsync://rpki.ripe.net/repository/DEFAULT/TKRH97Ondvck2LyBQL4xdmYsJNA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:ac:0d:20:ed:5b:26:31:63:f1:2b:43:12:86:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ca447f7b3a776f724d8bc8140be3176662c24d0
Validity
Not Before: Oct 19 14:01:42 2025 GMT
Not After : Oct 20 14:01:42 2025 GMT
Subject: CN=fc90fded628ab13b044899e09982c19a165352f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:15:45:74:1a:3f:aa:79:49:9c:ae:ea:42:11:
c3:e8:4b:9d:6f:81:22:00:3f:93:87:b9:1c:14:9b:
1e:5f:f5:32:f0:b2:50:7f:9e:ff:76:ff:c5:63:5b:
d3:70:a5:bb:dd:e3:30:cb:d2:b0:13:39:28:1b:b3:
b4:f7:c5:bb:d8:a1:02:89:06:53:0c:16:01:bf:8c:
f0:8b:c9:10:72:1f:a6:8d:87:d0:3b:9b:52:20:a4:
6c:6c:6d:67:2f:7c:4b:63:d9:be:67:f4:2d:25:16:
5d:60:6c:73:3a:29:0f:5c:5a:e9:5a:75:00:ad:11:
f5:20:54:9a:7a:f1:6f:16:75:cd:1d:28:e0:a8:39:
da:f2:05:74:3d:be:e7:46:2e:19:23:ef:36:1e:21:
39:74:d5:41:96:9f:54:38:96:9a:a2:a2:39:35:05:
1c:aa:97:9e:6b:af:1f:fc:f1:ec:2c:15:cf:43:40:
a3:7f:9b:99:a3:3c:67:b2:f9:8f:96:cd:90:2b:03:
44:f9:8a:a3:27:e7:3f:38:9d:cb:46:af:6d:c9:cd:
c8:b3:de:80:bd:6d:79:68:8b:fb:b0:df:45:ae:f1:
d4:87:ce:41:70:83:74:a2:b2:82:32:6d:60:b9:10:
2c:9e:be:44:80:4a:3b:b5:19:06:37:bd:1f:cf:aa:
36:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:90:FD:ED:62:8A:B1:3B:04:48:99:E0:99:82:C1:9A:16:53:52:F0
X509v3 Authority Key Identifier:
keyid:4C:A4:47:F7:B3:A7:76:F7:24:D8:BC:81:40:BE:31:76:66:2C:24:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TKRH97Ondvck2LyBQL4xdmYsJNA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/0f3e0b-26c3-4cf9-8056-29af33bc6b98/1/TKRH97Ondvck2LyBQL4xdmYsJNA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/0f3e0b-26c3-4cf9-8056-29af33bc6b98/1/TKRH97Ondvck2LyBQL4xdmYsJNA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:cb:33:49:f9:27:a7:22:8c:08:14:df:37:61:a0:fb:0a:a5:
3a:49:b5:01:38:fd:a6:39:5b:7f:69:4a:80:af:22:9a:5a:53:
53:f6:c6:94:02:72:85:38:11:ef:54:3c:75:8b:77:e4:76:99:
52:24:96:69:51:c1:c2:97:8d:46:f8:2c:c2:cf:23:26:55:a2:
7a:68:11:55:5c:b3:7a:f0:4a:b5:65:ce:63:18:c5:27:33:da:
fd:27:4d:34:57:7a:2e:06:de:2c:7e:ce:7c:ce:eb:95:42:c1:
4e:8e:76:9f:b7:3e:89:36:22:61:32:9f:87:4b:e2:54:d7:02:
8d:ab:68:0a:cb:94:90:88:2f:b9:21:ac:65:29:a1:07:04:44:
cb:7c:18:e6:23:76:30:83:67:45:ef:a1:4d:69:3f:56:32:b1:
ba:8e:ef:07:c8:6e:f0:d0:53:ab:eb:1b:76:c0:78:ef:f0:90:
f0:26:e8:d8:e6:77:a5:83:2f:05:92:86:3a:f3:09:47:03:d7:
fe:9e:5c:cc:ed:90:aa:38:35:4b:17:72:a8:c4:44:6f:2d:bf:
d7:96:9b:6e:a5:45:c5:75:63:45:f1:22:66:dd:64:82:a4:e9:
54:3f:90:da:77:1d:eb:f2:c4:c7:2d:3a:30:29:c6:84:51:6b:
e5:60:95:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:55:53 2025 by rpki-client