Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/1f1e7b-5907-48c1-90fd-5602712baa5b/1/TgfHPboamfW7wV94xjkKqZwmmCQ.mft
File: TgfHPboamfW7wV94xjkKqZwmmCQ.mft (raw, json)
Hash identifier: QH/wDk016/a2Tz6VKn+GTN4aKjOYbrqJYDK7Nx5kEVM=
Subject key identifier: F9:C7:27:53:EF:D1:94:D6:67:C6:86:AD:21:98:BE:61:2B:F5:C3:75
Authority key identifier: 4E:07:C7:3D:BA:1A:99:F5:BB:C1:5F:78:C6:39:0A:A9:9C:26:98:24
Certificate issuer: /CN=4e07c73dba1a99f5bbc15f78c6390aa99c269824
Certificate serial: 0199FBEACA8CF6766DD7B4DBEFD67DFF938B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TgfHPboamfW7wV94xjkKqZwmmCQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/1f1e7b-5907-48c1-90fd-5602712baa5b/1/TgfHPboamfW7wV94xjkKqZwmmCQ.mft
Manifest number: 14A9
Signing time: Sun 19 Oct 2025 10:01:32 +0000
Manifest this update: Sun 19 Oct 2025 10:01:32 +0000
Manifest next update: Mon 20 Oct 2025 10:01:32 +0000
Files and hashes: 1: TgfHPboamfW7wV94xjkKqZwmmCQ.crl (hash: 8eFsJQ91EX7BOBtLSjijL4XQ36xb1d5zqvnzkqrk0sY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/1f1e7b-5907-48c1-90fd-5602712baa5b/1/TgfHPboamfW7wV94xjkKqZwmmCQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/1f1e7b-5907-48c1-90fd-5602712baa5b/1/TgfHPboamfW7wV94xjkKqZwmmCQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/TgfHPboamfW7wV94xjkKqZwmmCQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ea:ca:8c:f6:76:6d:d7:b4:db:ef:d6:7d:ff:93:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e07c73dba1a99f5bbc15f78c6390aa99c269824
Validity
Not Before: Oct 19 10:01:32 2025 GMT
Not After : Oct 20 10:01:32 2025 GMT
Subject: CN=f9c72753efd194d667c686ad2198be612bf5c375
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:d2:96:12:60:53:1c:de:17:02:05:4f:19:00:
c7:f2:51:22:b1:6f:b7:24:3f:20:40:c7:32:f3:95:
33:f3:fc:88:6c:84:fd:27:dd:b6:6c:db:8f:fb:7e:
26:e0:87:fa:23:4d:b3:b2:20:39:bb:68:8e:22:16:
83:f9:80:30:59:14:b6:9f:27:2e:31:e4:83:db:31:
32:8f:1e:9f:2c:c4:70:f1:1a:7f:12:49:6c:67:81:
c1:7d:9c:02:f0:59:f3:ec:6d:72:ac:91:65:af:f5:
cb:60:ea:41:e6:47:54:7e:34:7f:2e:51:7a:36:6a:
5f:07:79:e5:98:0d:f7:f1:20:b8:48:83:c8:61:cd:
cf:1e:19:8e:d6:44:ce:2a:35:22:55:c7:78:9f:93:
96:c1:1f:44:3a:39:f4:8a:bb:09:bc:69:c1:b2:8b:
41:b9:06:d8:41:b5:6a:1b:b0:27:5e:16:7a:01:95:
9b:57:86:57:1b:ea:21:a7:1d:4b:a9:67:e5:9c:24:
25:71:ce:85:41:29:e8:da:b6:21:5f:bb:ae:bc:13:
9e:e4:97:23:06:2d:3b:f1:1d:4f:8f:9d:2b:33:90:
2f:43:07:71:bd:e1:2d:8d:a0:5f:28:43:82:ec:be:
dc:ad:c4:4a:47:b1:c9:94:b7:bd:df:19:c1:5a:1c:
93:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:C7:27:53:EF:D1:94:D6:67:C6:86:AD:21:98:BE:61:2B:F5:C3:75
X509v3 Authority Key Identifier:
keyid:4E:07:C7:3D:BA:1A:99:F5:BB:C1:5F:78:C6:39:0A:A9:9C:26:98:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TgfHPboamfW7wV94xjkKqZwmmCQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/1f1e7b-5907-48c1-90fd-5602712baa5b/1/TgfHPboamfW7wV94xjkKqZwmmCQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/1f1e7b-5907-48c1-90fd-5602712baa5b/1/TgfHPboamfW7wV94xjkKqZwmmCQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:1d:83:19:38:cc:de:bd:ca:73:96:12:67:1a:a7:e7:d7:5c:
61:95:84:c2:b6:e7:da:f7:73:63:b4:21:3a:a1:a7:96:68:eb:
e4:05:1d:4c:c9:4b:1c:e1:41:38:f9:df:3b:8e:54:a0:41:ec:
52:83:31:e4:38:92:3d:ba:dd:d5:cb:ba:fd:50:49:bd:51:5e:
7f:2f:68:7a:1f:03:eb:30:a0:41:78:9d:56:29:e1:af:bc:4a:
ac:00:73:e9:13:b4:33:d9:73:9c:c4:97:c4:39:fb:b2:86:a6:
48:05:f0:8f:11:6b:fa:03:57:b7:be:11:4c:a2:42:c6:00:0e:
53:11:5c:c9:18:a5:b0:ad:23:5b:6c:b3:80:29:fb:dd:c0:65:
e6:dd:f0:0b:67:39:4e:44:b5:24:74:06:19:04:ab:bc:c5:05:
f9:63:88:dd:4f:b3:35:fa:02:bf:1e:26:e2:99:40:81:13:1d:
b0:61:2d:2a:fc:d5:ed:5a:20:38:9a:23:88:cf:b8:78:18:b4:
5f:50:da:29:e6:91:df:49:30:31:b0:73:f4:d9:63:86:9d:71:
11:55:76:95:4d:85:c4:88:ba:a9:a5:d8:98:21:dc:8e:86:99:
04:c4:95:c0:35:74:b1:b9:36:48:e0:62:40:9f:33:a4:c5:5f:
7d:ab:b3:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:05:45 2025 by rpki-client