Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/ee71c6-1bae-4858-af3a-bc289dc17d20/1/TAf2nWArfrt_YzDXFcnsPlq6MPo.mft
File: TAf2nWArfrt_YzDXFcnsPlq6MPo.mft (raw, json)
Hash identifier: Vqnjch0MWxxrF2zmMXUwSFxCJLlLDVxGGKBFDnnVVqU=
Subject key identifier: CD:F2:59:93:13:3F:5A:A4:79:F3:5B:68:7A:C3:21:C7:79:55:9B:BE
Authority key identifier: 4C:07:F6:9D:60:2B:7E:BB:7F:63:30:D7:15:C9:EC:3E:5A:BA:30:FA
Certificate issuer: /CN=4c07f69d602b7ebb7f6330d715c9ec3e5aba30fa
Certificate serial: 0199FCFD432338CA73BA6D1EAEDA4DB0405A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TAf2nWArfrt_YzDXFcnsPlq6MPo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/ee71c6-1bae-4858-af3a-bc289dc17d20/1/TAf2nWArfrt_YzDXFcnsPlq6MPo.mft
Manifest number: 0AD2
Signing time: Sun 19 Oct 2025 15:01:20 +0000
Manifest this update: Sun 19 Oct 2025 15:01:20 +0000
Manifest next update: Mon 20 Oct 2025 15:01:20 +0000
Files and hashes: 1: TAf2nWArfrt_YzDXFcnsPlq6MPo.crl (hash: CxTMYNLMIS2ZVV35h0R1lrJmqSqmlPXZWH9OA/jxbzQ=)
2: nXGx5bSqdUW_hrhQiJHYlpD8vR8.roa (hash: BZPTD4TDsLLlN6D+oiM71I+DEGQ39DwwkOK3NvmzOh8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/ee71c6-1bae-4858-af3a-bc289dc17d20/1/TAf2nWArfrt_YzDXFcnsPlq6MPo.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/ee71c6-1bae-4858-af3a-bc289dc17d20/1/TAf2nWArfrt_YzDXFcnsPlq6MPo.mft
rsync://rpki.ripe.net/repository/DEFAULT/TAf2nWArfrt_YzDXFcnsPlq6MPo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:fd:43:23:38:ca:73:ba:6d:1e:ae:da:4d:b0:40:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c07f69d602b7ebb7f6330d715c9ec3e5aba30fa
Validity
Not Before: Oct 19 15:01:20 2025 GMT
Not After : Oct 20 15:01:20 2025 GMT
Subject: CN=cdf25993133f5aa479f35b687ac321c779559bbe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:b1:d8:53:41:14:9a:a6:3f:3b:1c:b9:8a:36:
74:eb:ed:54:73:21:cc:c0:48:af:bc:4e:f7:57:59:
ee:1f:e7:a6:3b:88:c6:57:f3:7c:64:4e:61:06:c3:
71:e6:2f:7f:f8:4e:f2:78:df:59:fa:78:ac:c3:a3:
13:15:f3:30:c1:e4:36:cd:01:4c:aa:71:8e:ee:71:
5d:ff:ba:c2:bd:2b:03:16:9c:98:cd:75:b8:4d:d8:
6b:68:38:07:fa:2f:a0:19:36:03:f2:89:6a:df:07:
99:f4:52:08:24:e7:2e:60:af:61:d8:b9:64:fc:62:
5b:c3:a9:3e:ad:60:c8:08:9d:a5:d8:d3:9f:54:57:
70:1b:1d:8c:23:5c:cc:59:f5:56:9f:69:67:a2:bd:
34:d2:7e:be:d4:79:0f:cc:26:f9:a7:75:e2:63:16:
c6:1a:62:82:2c:ee:5f:46:21:e4:c6:17:e9:9a:4b:
ed:3c:15:ef:f1:68:de:7f:7f:66:86:42:9f:ef:0b:
a4:cc:a9:9c:91:8d:7d:f5:ee:78:29:aa:3b:4e:53:
90:dc:8f:e1:24:5e:38:a6:d2:56:54:c0:61:eb:79:
d1:96:34:b3:28:b6:fc:98:11:a5:aa:1d:57:50:5d:
06:95:b4:ec:b1:fb:f9:08:8b:be:be:8a:1b:8a:4a:
b4:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:F2:59:93:13:3F:5A:A4:79:F3:5B:68:7A:C3:21:C7:79:55:9B:BE
X509v3 Authority Key Identifier:
keyid:4C:07:F6:9D:60:2B:7E:BB:7F:63:30:D7:15:C9:EC:3E:5A:BA:30:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TAf2nWArfrt_YzDXFcnsPlq6MPo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/ee71c6-1bae-4858-af3a-bc289dc17d20/1/TAf2nWArfrt_YzDXFcnsPlq6MPo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/ee71c6-1bae-4858-af3a-bc289dc17d20/1/TAf2nWArfrt_YzDXFcnsPlq6MPo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:38:0e:a9:13:4a:ed:63:48:ac:89:47:9f:58:6c:d9:58:72:
2d:f4:c2:99:1b:0e:7b:02:17:14:b0:0a:bf:ed:c6:cb:e9:8c:
81:8f:e9:d8:1d:33:70:cb:99:bd:82:b4:13:58:f2:0c:e7:af:
b2:a1:16:8e:a2:39:81:5a:39:a4:5b:66:f9:3c:87:e7:bf:d8:
9e:1f:ed:41:f5:ea:33:f6:ba:f1:c5:63:99:fc:7f:37:0b:64:
80:ad:30:d5:98:4d:d8:6f:2e:10:0b:3e:85:bd:b1:26:60:63:
e4:a7:93:c5:89:3d:e9:67:76:92:43:0c:f9:ed:93:ee:68:c5:
d0:df:2d:79:a2:5a:3c:c9:15:3d:56:d7:88:37:59:4f:be:12:
43:55:8a:90:f3:ef:fa:65:70:9d:85:18:3d:90:a0:d2:50:7a:
54:5f:39:a9:ec:4b:d1:c2:d4:1c:c7:ad:56:14:bc:69:fa:a8:
05:25:b5:ac:d8:e9:b0:b7:0a:af:3e:8a:61:ab:ed:b7:80:d4:
c2:0e:bb:1a:5e:0d:51:5e:e8:4a:a2:6c:b9:98:4e:95:ed:70:
a0:b3:aa:72:50:ed:a8:1b:e5:d5:ca:d7:38:70:e1:66:34:d8:
0b:7a:3a:c3:65:da:c0:5f:6e:7f:71:ae:b1:f2:02:2b:49:45:
68:19:64:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:20:55 2025 by rpki-client