Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/cb3e6b-a444-49dd-9f64-17c12273c54a/1/TgoZ1Iw1R8Ktufjv_erGrZ5PnRk.mft
File: TgoZ1Iw1R8Ktufjv_erGrZ5PnRk.mft (raw, json)
Hash identifier: YAjisqMZo7/LBokMzpYhJ76mJVYFrMXTi5FEQ/QACQk=
Subject key identifier: 0D:03:18:DE:FA:36:15:59:84:3F:C2:9F:D9:E7:6B:27:24:41:95:55
Authority key identifier: 4E:0A:19:D4:8C:35:47:C2:AD:B9:F8:EF:FD:EA:C6:AD:9E:4F:9D:19
Certificate issuer: /CN=4e0a19d48c3547c2adb9f8effdeac6ad9e4f9d19
Certificate serial: 0199FDDA0B4E621CF05E9AD7947A49D94836
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TgoZ1Iw1R8Ktufjv_erGrZ5PnRk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/cb3e6b-a444-49dd-9f64-17c12273c54a/1/TgoZ1Iw1R8Ktufjv_erGrZ5PnRk.mft
Manifest number: 0D70
Signing time: Sun 19 Oct 2025 19:02:29 +0000
Manifest this update: Sun 19 Oct 2025 19:02:29 +0000
Manifest next update: Mon 20 Oct 2025 19:02:29 +0000
Files and hashes: 1: E7on5Vfvg98I2xAlaMeiutbcdZQ.roa (hash: 52cCubbGQVWlaOLXukS3Zd4+5KnclvBfBahudlSwT/s=)
2: TgoZ1Iw1R8Ktufjv_erGrZ5PnRk.crl (hash: kiBtD3ycI7XlkWDTR7pcl4EAjqls+ZPwBwGsefPWN8Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/cb3e6b-a444-49dd-9f64-17c12273c54a/1/TgoZ1Iw1R8Ktufjv_erGrZ5PnRk.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/cb3e6b-a444-49dd-9f64-17c12273c54a/1/TgoZ1Iw1R8Ktufjv_erGrZ5PnRk.mft
rsync://rpki.ripe.net/repository/DEFAULT/TgoZ1Iw1R8Ktufjv_erGrZ5PnRk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:da:0b:4e:62:1c:f0:5e:9a:d7:94:7a:49:d9:48:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e0a19d48c3547c2adb9f8effdeac6ad9e4f9d19
Validity
Not Before: Oct 19 19:02:29 2025 GMT
Not After : Oct 20 19:02:29 2025 GMT
Subject: CN=0d0318defa361559843fc29fd9e76b2724419555
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:ff:f2:75:02:2b:7a:66:9a:f5:db:dd:ec:fa:
6b:45:8c:c2:c6:a6:2c:c5:52:86:48:ee:db:c4:63:
e7:c2:7f:94:52:05:97:bd:a4:02:23:6a:8f:0d:2d:
14:76:20:16:99:d7:ca:68:c9:b0:62:ff:37:ff:5d:
f0:ba:01:78:0c:c3:ab:dc:bc:95:70:36:ce:9c:f2:
25:7e:c1:9f:25:23:0c:01:2a:23:2f:4d:84:f2:61:
3a:63:20:0c:01:a2:19:1e:e2:b1:d9:54:ea:bf:7a:
5f:94:74:5c:41:63:6a:12:41:7a:c7:9b:43:f6:08:
95:68:1b:7d:0c:be:dd:7b:50:ac:27:c6:c7:d8:b8:
09:79:7a:bf:bb:e0:30:d9:07:b1:7a:6c:71:4c:a8:
01:a1:96:89:dc:73:f6:1d:f2:4a:16:af:16:c1:b2:
35:88:51:32:ce:f2:b2:af:10:f8:3d:86:2a:b0:d9:
35:72:fc:81:a9:4c:9f:04:a8:e3:88:8a:ab:f6:65:
f4:de:f5:8a:6b:a5:d5:4c:d2:c6:d2:cf:98:06:ea:
40:1c:4f:b1:68:53:1c:12:8c:68:23:ee:eb:04:f9:
d9:31:5d:31:f7:dc:56:5c:94:e5:8a:82:8c:f2:47:
65:69:ff:a8:11:30:d7:98:db:3f:ac:48:4a:9e:1e:
a7:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:03:18:DE:FA:36:15:59:84:3F:C2:9F:D9:E7:6B:27:24:41:95:55
X509v3 Authority Key Identifier:
keyid:4E:0A:19:D4:8C:35:47:C2:AD:B9:F8:EF:FD:EA:C6:AD:9E:4F:9D:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TgoZ1Iw1R8Ktufjv_erGrZ5PnRk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/cb3e6b-a444-49dd-9f64-17c12273c54a/1/TgoZ1Iw1R8Ktufjv_erGrZ5PnRk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/cb3e6b-a444-49dd-9f64-17c12273c54a/1/TgoZ1Iw1R8Ktufjv_erGrZ5PnRk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:59:6b:5e:84:a2:83:f4:18:b9:19:25:df:10:cb:31:04:fe:
6a:fb:3a:c7:d5:62:16:74:3f:b3:03:bc:5f:5e:38:d6:bc:d7:
a7:27:d5:0b:f9:79:56:1b:a6:b1:e5:29:1b:1f:32:08:1f:45:
ab:ee:9f:f0:17:dd:ef:df:60:68:1e:7c:f1:48:81:33:ae:ad:
58:1b:be:ee:87:0d:e3:77:52:cc:3d:99:5b:46:2d:3c:8f:0d:
36:ca:e7:d3:82:c2:b7:a3:38:a9:c1:21:2e:8f:4c:02:07:ba:
46:7d:58:22:6c:11:0b:26:f3:79:ab:19:c1:c8:82:4e:00:51:
81:55:c5:fe:27:32:49:9a:96:a2:d1:d0:47:6e:bb:41:ec:64:
a7:f0:92:72:bb:8d:5b:48:e6:18:28:f2:8e:7c:b1:18:18:9f:
c0:33:ad:85:a9:10:40:5e:e1:22:b1:89:9d:b7:7b:5b:d5:f0:
cd:eb:4c:09:a7:e5:8c:83:82:d7:d2:b0:95:2b:f9:29:9c:0d:
d2:3d:ed:1f:db:b5:c2:cf:13:d2:90:17:ea:a3:ae:db:ac:ec:
07:5b:30:1d:68:a7:78:21:7c:91:8d:99:7a:fa:d3:69:67:eb:
3c:d1:ac:2f:e3:83:5c:86:51:c2:8e:ee:3d:53:69:d6:7b:46:
57:eb:87:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:41:18 2025 by rpki-client