Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/65646f-bea4-4f93-96be-48fea345fa13/1/TCFvZlYK4WunWU9GrwYPNR4OtJ4.mft
File: TCFvZlYK4WunWU9GrwYPNR4OtJ4.mft (raw, json)
Hash identifier: WbkzK8GxwoFg/4mPeHwDjJ4viYQCkkUHjnrGdaIlmMM=
Subject key identifier: A2:EC:86:9A:8D:C9:90:97:49:FA:C0:63:B6:A4:4C:C9:6B:E9:01:6C
Authority key identifier: 4C:21:6F:66:56:0A:E1:6B:A7:59:4F:46:AF:06:0F:35:1E:0E:B4:9E
Certificate issuer: /CN=4c216f66560ae16ba7594f46af060f351e0eb49e
Certificate serial: 0199FB0F2556F86260FF334D879C9509B562
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TCFvZlYK4WunWU9GrwYPNR4OtJ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/65646f-bea4-4f93-96be-48fea345fa13/1/TCFvZlYK4WunWU9GrwYPNR4OtJ4.mft
Manifest number: 0D0C
Signing time: Sun 19 Oct 2025 06:01:37 +0000
Manifest this update: Sun 19 Oct 2025 06:01:37 +0000
Manifest next update: Mon 20 Oct 2025 06:01:37 +0000
Files and hashes: 1: MhvE3qmmLRT0N7DSbTLw9Csy23Q.roa (hash: JVGSBwpVFJHRhnHW5L6AwZ0tkeTLczM6lU9i030j0HQ=)
2: TCFvZlYK4WunWU9GrwYPNR4OtJ4.crl (hash: Fmv7TZUBSn2p9frGe10ar05yw0EgEcF0ZFgXXEKeGuI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/65646f-bea4-4f93-96be-48fea345fa13/1/TCFvZlYK4WunWU9GrwYPNR4OtJ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/65646f-bea4-4f93-96be-48fea345fa13/1/TCFvZlYK4WunWU9GrwYPNR4OtJ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/TCFvZlYK4WunWU9GrwYPNR4OtJ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:0f:25:56:f8:62:60:ff:33:4d:87:9c:95:09:b5:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c216f66560ae16ba7594f46af060f351e0eb49e
Validity
Not Before: Oct 19 06:01:37 2025 GMT
Not After : Oct 20 06:01:37 2025 GMT
Subject: CN=a2ec869a8dc9909749fac063b6a44cc96be9016c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:af:29:1c:cf:71:06:1c:07:88:68:ba:89:9e:
f9:14:9f:dc:f0:2a:ab:c0:5f:12:cb:19:96:15:82:
dd:b9:cf:e7:de:25:6d:b5:74:73:5b:4b:6b:cc:8d:
95:30:83:90:b8:57:cc:38:83:5b:01:82:03:d2:15:
16:ec:07:b6:3c:ba:46:56:a0:02:58:3b:62:32:a4:
e4:c2:43:64:e6:e5:39:48:de:81:b8:fb:d7:39:93:
f0:bc:97:ee:e4:35:88:0f:e8:67:ff:07:2b:65:fd:
99:a5:15:0b:b0:31:c8:20:3c:01:91:11:47:62:b8:
fc:31:23:f3:af:6b:83:57:b7:28:e0:c3:a6:26:5c:
0a:c1:d7:76:ba:72:ac:3d:3d:86:11:65:1d:66:26:
46:1c:51:52:c3:6d:74:18:1e:7b:9a:71:05:ba:3e:
91:8c:cc:15:ac:53:55:4d:a2:3c:c1:25:c8:aa:88:
dd:1c:a6:94:c0:92:90:2d:53:9a:40:ff:9a:be:24:
f8:f4:68:55:e5:ab:c4:7e:ee:38:6f:3b:19:6b:59:
80:0b:ce:07:d0:c3:00:89:8a:14:cf:bf:aa:94:60:
97:71:e9:6a:5c:07:91:cc:2d:20:92:5b:03:46:8e:
17:be:8f:82:12:b2:e5:90:ee:19:84:8d:e7:1d:e6:
bd:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:EC:86:9A:8D:C9:90:97:49:FA:C0:63:B6:A4:4C:C9:6B:E9:01:6C
X509v3 Authority Key Identifier:
keyid:4C:21:6F:66:56:0A:E1:6B:A7:59:4F:46:AF:06:0F:35:1E:0E:B4:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TCFvZlYK4WunWU9GrwYPNR4OtJ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/65646f-bea4-4f93-96be-48fea345fa13/1/TCFvZlYK4WunWU9GrwYPNR4OtJ4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/65646f-bea4-4f93-96be-48fea345fa13/1/TCFvZlYK4WunWU9GrwYPNR4OtJ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:3f:8b:bc:ee:0b:91:a8:ff:73:97:b0:38:7d:a8:bf:1d:27:
6e:6d:a0:c0:be:e6:ad:a2:8d:96:78:87:c0:01:d0:63:48:a0:
33:33:f9:ea:64:c9:ac:49:4e:fc:b3:a4:96:d5:41:3c:d7:11:
f6:9f:a6:27:b2:a2:0f:1e:cb:db:9c:2b:38:4f:bd:46:44:cd:
dc:ae:5b:02:17:ac:4d:57:23:44:c2:df:19:22:20:d0:df:12:
f0:a7:3f:3f:5a:51:94:27:82:4c:88:de:40:bf:26:23:3d:c5:
c0:02:fb:88:6f:84:43:ce:76:05:4e:db:bf:e0:20:ca:18:12:
c2:88:9a:0e:1d:1c:22:d4:20:8e:da:d6:b5:09:8b:c7:c1:f4:
f6:f8:1d:52:6f:af:9f:3c:de:d6:14:1e:3c:e5:c2:21:39:e5:
d0:a5:f2:c5:00:e7:65:e3:dd:43:57:01:b4:d8:fb:d5:bb:c6:
c4:1e:97:42:8e:37:2c:1e:aa:2a:ac:e8:80:82:ab:1a:dd:f1:
bc:b7:e2:3b:d5:4e:c1:3d:0a:5b:64:b7:eb:7c:65:a5:d5:31:
b3:ad:73:1f:8d:d6:c6:3a:d8:49:82:58:e7:58:0c:94:3d:34:
28:bf:a7:b2:62:71:91:fa:5d:72:6c:fa:4e:52:0a:50:23:95:
ab:64:f2:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:12:02 2025 by rpki-client