
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/02c5ec-7c6f-4ae2-9897-3059c89b72ea/1/TFTszmy8nFSSnqpLIrM3sP2bNr8.mft
File: TFTszmy8nFSSnqpLIrM3sP2bNr8.mft (raw, json)
Hash identifier: HyHoWJ8rtAyDwOOsyY5xV9L9+fmGxI4jy1IVmk4Hnr8=
Subject key identifier: 06:B1:BF:DF:50:A7:5C:79:86:0F:1B:A9:A2:73:C2:29:C1:1E:70:B7
Authority key identifier: 4C:54:EC:CE:6C:BC:9C:54:92:9E:AA:4B:22:B3:37:B0:FD:9B:36:BF
Certificate issuer: /CN=4c54ecce6cbc9c54929eaa4b22b337b0fd9b36bf
Certificate serial: 0199FDD979F8F5E5DBF2A6B2C9F73F2BFF38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TFTszmy8nFSSnqpLIrM3sP2bNr8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/02c5ec-7c6f-4ae2-9897-3059c89b72ea/1/TFTszmy8nFSSnqpLIrM3sP2bNr8.mft
Manifest number: 16E4
Signing time: Sun 19 Oct 2025 19:01:51 +0000
Manifest this update: Sun 19 Oct 2025 19:01:51 +0000
Manifest next update: Mon 20 Oct 2025 19:01:51 +0000
Files and hashes: 1: TFTszmy8nFSSnqpLIrM3sP2bNr8.crl (hash: /4RDdmhw/575Uou6iXVZsa4RSfibcnjdl475PP053j8=)
2: eHPqpiMAvfqI-We9VzdWjZPR_bY.roa (hash: 2EtKDvjgQC4QGGaHfks3HUfVQC7NvALc/OB3oROL6rM=)
3: ePZ7Yuu3-_aTMfNEBfmL4fdhXII.roa (hash: ho6FnqARFfeawc2fVl+6U/A9evk5Ck/9UluGTSWRaEw=)
4: jEFUKY2bhw_vuBM1OshauBn8mvg.roa (hash: ZeWPCxGU+ldLXwfBechPAx21XNMieJ0auUVK9LjYs/8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/02c5ec-7c6f-4ae2-9897-3059c89b72ea/1/TFTszmy8nFSSnqpLIrM3sP2bNr8.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/02c5ec-7c6f-4ae2-9897-3059c89b72ea/1/TFTszmy8nFSSnqpLIrM3sP2bNr8.mft
rsync://rpki.ripe.net/repository/DEFAULT/TFTszmy8nFSSnqpLIrM3sP2bNr8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d9:79:f8:f5:e5:db:f2:a6:b2:c9:f7:3f:2b:ff:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c54ecce6cbc9c54929eaa4b22b337b0fd9b36bf
Validity
Not Before: Oct 19 19:01:51 2025 GMT
Not After : Oct 20 19:01:51 2025 GMT
Subject: CN=06b1bfdf50a75c79860f1ba9a273c229c11e70b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:0b:61:01:d9:3b:c6:59:b3:ae:11:01:3f:8f:
af:43:77:1a:bc:de:35:e9:f0:87:60:9d:53:f2:71:
2c:00:80:44:02:9d:ee:d9:a9:d2:70:fe:30:56:09:
8d:c8:e3:0d:76:a3:84:96:7a:26:f4:82:b3:75:67:
a7:a3:32:89:27:1a:5d:18:30:0a:d5:4a:e1:0d:03:
05:8f:2a:71:7a:f5:4a:dd:ac:8b:b1:29:4a:3a:f8:
6a:20:a3:ae:15:1b:4f:57:7a:4b:73:1e:b6:9f:c7:
bf:79:f5:9a:56:51:2f:ce:7c:ee:10:46:21:f4:9d:
c1:23:0b:3c:de:e2:de:b3:c0:5c:e8:4c:3a:ef:50:
0c:b6:91:d9:3c:e9:0a:a7:19:7c:71:f4:8b:00:3b:
fe:30:03:2c:46:82:92:76:d7:3b:8e:49:d0:9e:5c:
17:d7:5a:f7:3e:99:0e:ce:ce:08:a2:9b:6b:13:29:
a1:b6:a2:72:d4:63:b5:11:b2:8c:ac:10:dc:08:22:
ed:f4:71:98:4f:84:ae:75:42:36:21:5e:a0:c0:c8:
94:06:24:f7:89:94:2a:89:fb:79:04:c6:df:e2:e8:
68:98:ae:7c:78:3c:88:01:10:fd:55:e2:eb:97:82:
ca:87:b6:c7:0f:c3:8b:a5:eb:f5:a7:53:aa:d4:9d:
66:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:B1:BF:DF:50:A7:5C:79:86:0F:1B:A9:A2:73:C2:29:C1:1E:70:B7
X509v3 Authority Key Identifier:
keyid:4C:54:EC:CE:6C:BC:9C:54:92:9E:AA:4B:22:B3:37:B0:FD:9B:36:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TFTszmy8nFSSnqpLIrM3sP2bNr8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/02c5ec-7c6f-4ae2-9897-3059c89b72ea/1/TFTszmy8nFSSnqpLIrM3sP2bNr8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/02c5ec-7c6f-4ae2-9897-3059c89b72ea/1/TFTszmy8nFSSnqpLIrM3sP2bNr8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:25:61:9d:e5:0e:f0:f4:ef:b5:1e:b4:96:ac:a1:a6:c8:99:
c6:44:ec:fe:ac:63:15:b9:6c:6d:d8:b6:01:82:43:0a:15:2c:
a5:39:cb:82:bc:79:68:09:ec:58:c8:1d:51:19:c8:da:d6:c0:
77:ad:c3:20:7f:8d:c8:ce:92:c6:3d:32:e6:81:77:62:a1:25:
2e:88:71:cf:39:b0:e3:3b:52:cd:98:7f:ba:98:cc:50:45:a6:
44:26:d7:58:30:05:fc:e7:2b:9c:11:b7:ef:bb:9e:f6:42:a1:
e6:0f:86:6b:25:2d:fe:7f:93:d8:2f:26:da:d6:29:84:0e:10:
93:2b:29:bc:d6:e9:bd:e5:76:45:92:e8:4b:a6:32:0a:b1:d5:
44:b2:18:1e:9b:8b:42:7c:89:91:04:c2:ec:d2:b1:bb:c4:8d:
fe:ee:12:89:16:7c:b4:6f:cc:e0:90:64:7a:b5:5f:4d:b4:c9:
cd:f5:07:af:90:c0:ff:06:09:f8:11:8c:a8:5d:5e:de:4e:40:
c7:a7:ef:47:b1:6a:47:81:a5:3b:8e:db:51:b4:00:ed:2d:94:
4c:3c:4a:e5:3b:b2:a2:a0:77:7f:f9:19:2e:84:66:36:c8:0a:
df:98:e7:cc:fb:69:61:e5:24:95:01:61:8b:99:f5:6c:61:ed:
32:fc:4a:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:17:59 2025 by rpki-client