Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/02c5ec-7c6f-4ae2-9897-3059c89b72ea/1/TFTszmy8nFSSnqpLIrM3sP2bNr8.mft
File: TFTszmy8nFSSnqpLIrM3sP2bNr8.mft (raw, json)
Hash identifier: o2/DFE2hiDCcI8hK8DR7HioqwWmFMKUkPZ6wsKw9ex4=
Subject key identifier: 53:AE:A8:97:26:39:99:BF:1C:5E:B3:7E:D9:DD:E0:DC:B1:33:45:19
Authority key identifier: 4C:54:EC:CE:6C:BC:9C:54:92:9E:AA:4B:22:B3:37:B0:FD:9B:36:BF
Certificate issuer: /CN=4c54ecce6cbc9c54929eaa4b22b337b0fd9b36bf
Certificate serial: 019A01B660D4E4D2B0F6111E33BAFBB0C52B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TFTszmy8nFSSnqpLIrM3sP2bNr8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/02c5ec-7c6f-4ae2-9897-3059c89b72ea/1/TFTszmy8nFSSnqpLIrM3sP2bNr8.mft
Manifest number: 16E6
Signing time: Mon 20 Oct 2025 13:02:00 +0000
Manifest this update: Mon 20 Oct 2025 13:02:00 +0000
Manifest next update: Tue 21 Oct 2025 13:02:00 +0000
Files and hashes: 1: TFTszmy8nFSSnqpLIrM3sP2bNr8.crl (hash: 8EtfE61JxjvX8gYdTvy53N5PJrNyUCh2gD0KmCZkM5A=)
2: eHPqpiMAvfqI-We9VzdWjZPR_bY.roa (hash: 2EtKDvjgQC4QGGaHfks3HUfVQC7NvALc/OB3oROL6rM=)
3: ePZ7Yuu3-_aTMfNEBfmL4fdhXII.roa (hash: ho6FnqARFfeawc2fVl+6U/A9evk5Ck/9UluGTSWRaEw=)
4: jEFUKY2bhw_vuBM1OshauBn8mvg.roa (hash: ZeWPCxGU+ldLXwfBechPAx21XNMieJ0auUVK9LjYs/8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/02c5ec-7c6f-4ae2-9897-3059c89b72ea/1/TFTszmy8nFSSnqpLIrM3sP2bNr8.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/02c5ec-7c6f-4ae2-9897-3059c89b72ea/1/TFTszmy8nFSSnqpLIrM3sP2bNr8.mft
rsync://rpki.ripe.net/repository/DEFAULT/TFTszmy8nFSSnqpLIrM3sP2bNr8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 13:02:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:01:b6:60:d4:e4:d2:b0:f6:11:1e:33:ba:fb:b0:c5:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c54ecce6cbc9c54929eaa4b22b337b0fd9b36bf
Validity
Not Before: Oct 20 13:02:00 2025 GMT
Not After : Oct 21 13:02:00 2025 GMT
Subject: CN=53aea897263999bf1c5eb37ed9dde0dcb1334519
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:5b:91:83:00:9b:04:cc:76:d3:1a:9c:07:68:
f9:73:74:ce:fa:e2:5f:8b:01:58:c0:a1:0a:6f:98:
0c:3b:7d:21:a1:e7:42:7d:fb:9e:71:07:64:49:0d:
4b:98:e2:42:dc:15:30:92:b6:3e:b8:6a:aa:99:eb:
97:f2:e0:b7:a7:6f:86:fd:06:5d:72:26:04:15:5f:
3b:7f:23:77:7a:69:58:d7:21:17:52:59:b6:02:b8:
62:b2:98:7d:d4:c7:a9:23:d0:2d:75:f5:c9:c6:eb:
8a:ef:17:7c:eb:f9:86:16:eb:58:bf:f9:fd:94:24:
80:da:7f:0d:99:9e:07:90:e0:91:af:06:f7:22:2b:
e9:d0:d3:e0:8d:d5:c3:ce:32:ee:f6:3c:e5:f7:b6:
fa:a4:ab:f7:82:04:0b:a9:0a:76:bc:a3:8d:03:df:
44:4b:87:34:07:59:9c:a6:65:c2:1d:5f:0e:9e:cf:
58:79:f3:22:8c:f4:5b:31:ce:d0:c7:43:69:a3:8b:
15:18:8c:8c:15:f0:95:53:96:09:d4:45:91:41:95:
cf:da:f7:d8:2c:81:c3:a7:7c:11:3e:a0:f6:f4:58:
31:52:df:0e:68:14:89:85:16:b5:52:01:ce:8c:22:
29:09:31:75:ef:8e:91:69:4c:98:c3:ab:91:5e:34:
4b:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:AE:A8:97:26:39:99:BF:1C:5E:B3:7E:D9:DD:E0:DC:B1:33:45:19
X509v3 Authority Key Identifier:
keyid:4C:54:EC:CE:6C:BC:9C:54:92:9E:AA:4B:22:B3:37:B0:FD:9B:36:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TFTszmy8nFSSnqpLIrM3sP2bNr8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/02c5ec-7c6f-4ae2-9897-3059c89b72ea/1/TFTszmy8nFSSnqpLIrM3sP2bNr8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/02c5ec-7c6f-4ae2-9897-3059c89b72ea/1/TFTszmy8nFSSnqpLIrM3sP2bNr8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bb:57:a2:de:ef:a1:91:0b:38:41:1b:54:cc:cd:f4:9f:0f:de:
d1:35:e6:26:2b:c4:61:42:49:bc:95:19:b4:c4:c0:e2:23:9d:
3a:3f:73:44:8b:51:4a:3b:f1:2e:12:ea:4c:c1:54:91:e0:c1:
36:a6:17:51:50:75:ee:85:47:73:66:36:6a:ee:9a:0b:93:a1:
da:f8:57:2d:91:af:1d:55:12:fe:16:85:bb:66:78:6a:ad:28:
b0:aa:fd:c1:c2:69:8a:eb:cd:24:e9:63:93:d5:42:cf:a2:b3:
58:48:69:2f:ec:21:32:1e:f1:bc:b1:f9:d1:9b:22:bd:e2:bd:
6e:24:68:48:3c:aa:5e:93:af:5d:73:da:e5:e3:38:9d:28:14:
56:fc:f2:9d:16:b8:d8:16:43:f3:95:be:ff:c4:90:60:34:de:
dd:a8:37:92:0b:0e:74:60:38:6d:a2:9c:b1:9e:43:9b:ff:45:
20:73:3a:1d:e9:60:5b:70:5c:d3:4f:ca:c5:42:e9:cb:b8:51:
ee:6f:9d:5c:50:0d:0b:34:78:4c:4c:0e:f7:01:45:28:94:c6:
10:0f:4a:b3:d0:6b:06:9f:21:6f:39:f8:ae:34:03:98:fe:85:
03:3d:55:84:6d:5e:a9:de:5d:e1:a9:ff:82:71:4f:32:51:af:
4a:ac:fe:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 15:52:53 2025 by rpki-client