Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/9b2fc1-ba58-4957-8540-eb1ed0b487b1/1/TSE3TacxMU8KBRddJbDYmnb24IE.mft
File: TSE3TacxMU8KBRddJbDYmnb24IE.mft (raw, json)
Hash identifier: gNbNpGsfnMyriLMyKTThVD0yG65+sbNGLokZPLt0MZE=
Subject key identifier: 06:E2:78:59:F2:84:0B:2B:6B:FB:62:86:76:BA:E3:67:C8:0E:19:8A
Authority key identifier: 4D:21:37:4D:A7:31:31:4F:0A:05:17:5D:25:B0:D8:9A:76:F6:E0:81
Certificate issuer: /CN=4d21374da731314f0a05175d25b0d89a76f6e081
Certificate serial: 0199FC8F82A0EA770977D348D9C6ED2A80F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TSE3TacxMU8KBRddJbDYmnb24IE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/9b2fc1-ba58-4957-8540-eb1ed0b487b1/1/TSE3TacxMU8KBRddJbDYmnb24IE.mft
Manifest number: 0651
Signing time: Sun 19 Oct 2025 13:01:27 +0000
Manifest this update: Sun 19 Oct 2025 13:01:27 +0000
Manifest next update: Mon 20 Oct 2025 13:01:27 +0000
Files and hashes: 1: TSE3TacxMU8KBRddJbDYmnb24IE.crl (hash: XbMMZ8HWtR48OQWjC29z3l52mLxVanGw9ozsPewsJeg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/9b2fc1-ba58-4957-8540-eb1ed0b487b1/1/TSE3TacxMU8KBRddJbDYmnb24IE.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/9b2fc1-ba58-4957-8540-eb1ed0b487b1/1/TSE3TacxMU8KBRddJbDYmnb24IE.mft
rsync://rpki.ripe.net/repository/DEFAULT/TSE3TacxMU8KBRddJbDYmnb24IE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:82:a0:ea:77:09:77:d3:48:d9:c6:ed:2a:80:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d21374da731314f0a05175d25b0d89a76f6e081
Validity
Not Before: Oct 19 13:01:27 2025 GMT
Not After : Oct 20 13:01:27 2025 GMT
Subject: CN=06e27859f2840b2b6bfb628676bae367c80e198a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:7c:54:d5:3c:c1:81:13:d1:9e:01:a1:15:54:
e6:6c:92:55:d4:2c:61:55:ea:08:3a:f0:8e:1f:82:
7a:c1:9a:1f:4e:5f:b4:25:60:ca:69:09:ec:0b:4a:
5d:73:bb:b8:62:0d:11:8c:a5:e2:dd:a3:51:67:49:
29:3e:84:48:ab:81:86:88:0e:23:47:47:bb:61:6a:
74:f1:f9:64:a1:24:fd:4b:45:f4:c4:40:c9:f0:23:
bb:1e:af:55:b0:62:61:ff:85:90:da:de:46:d6:cf:
58:5a:4a:7a:c2:97:4f:36:73:e3:d3:eb:99:e5:4f:
8e:bd:51:3b:fd:14:1c:1b:f4:d5:b0:22:de:53:29:
c3:45:7d:cd:92:22:61:b8:f1:36:07:7a:e7:f2:67:
b3:08:f3:2f:71:e0:80:f0:5d:57:c1:7e:e9:9e:d9:
ee:12:84:6e:2d:ca:08:05:25:19:80:4a:4e:87:1f:
96:de:74:f0:50:f6:5c:39:fa:c5:eb:c3:31:ab:b3:
ba:4c:c2:8a:63:93:3f:91:cd:61:68:36:5f:9a:7a:
46:9f:76:32:d5:08:00:0c:62:44:37:43:19:69:36:
f6:5b:7c:1f:7a:c9:94:20:03:a9:1b:58:db:f4:34:
22:00:63:15:f8:33:56:dc:87:ba:11:64:55:89:52:
24:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:E2:78:59:F2:84:0B:2B:6B:FB:62:86:76:BA:E3:67:C8:0E:19:8A
X509v3 Authority Key Identifier:
keyid:4D:21:37:4D:A7:31:31:4F:0A:05:17:5D:25:B0:D8:9A:76:F6:E0:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TSE3TacxMU8KBRddJbDYmnb24IE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/9b2fc1-ba58-4957-8540-eb1ed0b487b1/1/TSE3TacxMU8KBRddJbDYmnb24IE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/9b2fc1-ba58-4957-8540-eb1ed0b487b1/1/TSE3TacxMU8KBRddJbDYmnb24IE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:80:e3:b0:14:c7:58:47:97:ec:02:d9:50:e6:ef:65:6b:20:
5b:5e:4d:4c:20:39:cc:d4:66:af:01:e3:4e:e2:1d:16:10:b4:
1c:8d:1c:50:b1:2f:13:5d:7f:9a:ee:60:db:51:08:db:9b:ae:
6a:52:6f:38:89:09:b6:78:8d:02:c0:2a:c2:80:14:ff:bb:75:
a6:cc:e1:18:ef:39:16:e6:11:f2:90:83:01:5b:9b:e5:58:8f:
fa:ac:9d:de:b3:47:45:43:e8:76:e8:86:f3:65:8c:17:4f:b1:
b0:00:3b:09:9b:d6:52:65:99:92:c8:db:8b:be:5f:33:69:37:
07:b3:79:9c:ef:da:15:39:ba:96:84:51:4a:6b:6d:71:36:b1:
49:5c:d6:b9:55:b9:41:c8:ed:f4:3a:c2:b9:01:7d:33:44:bb:
cd:62:8b:77:69:5f:66:5c:ca:24:f4:7b:10:4e:59:42:b6:09:
6d:e3:b9:25:b2:9b:17:3a:a7:25:a8:e2:e5:a2:5e:c2:cd:a2:
9c:7a:00:5f:74:c9:89:7d:c7:ef:92:36:b9:dc:3b:d5:4d:0b:
98:9d:79:c6:ba:f3:fa:f3:0d:96:00:c6:4a:65:bc:08:1b:42:
d2:ac:65:26:a8:e4:48:11:ed:41:f2:b6:c4:90:b2:2c:5c:4b:
2e:74:fa:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:23:52 2025 by rpki-client