Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/e828b7-b1d8-4f40-bd30-7c0497913af0/1/TQ8u53Yh6iXCgZ1OrJXFgYd-MM0.mft
File: TQ8u53Yh6iXCgZ1OrJXFgYd-MM0.mft (raw, json)
Hash identifier: 8Zgd4qfmJr9w4cUaU9bZipcq6ThStocKKns1fkZoHHo=
Subject key identifier: 7F:65:44:AF:3B:D6:64:08:81:F2:C5:45:01:7F:54:B9:49:49:52:49
Authority key identifier: 4D:0F:2E:E7:76:21:EA:25:C2:81:9D:4E:AC:95:C5:81:87:7E:30:CD
Certificate issuer: /CN=4d0f2ee77621ea25c2819d4eac95c581877e30cd
Certificate serial: 0199FBEC249DE3F5152D705E4BD04103C773
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TQ8u53Yh6iXCgZ1OrJXFgYd-MM0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/e828b7-b1d8-4f40-bd30-7c0497913af0/1/TQ8u53Yh6iXCgZ1OrJXFgYd-MM0.mft
Manifest number: 0E3E
Signing time: Sun 19 Oct 2025 10:03:00 +0000
Manifest this update: Sun 19 Oct 2025 10:03:00 +0000
Manifest next update: Mon 20 Oct 2025 10:03:00 +0000
Files and hashes: 1: PVatpozxq2iSr5EjDz4p95PO1D8.roa (hash: jnj6J4YwXSNpdZA8cx57mMPaW12cBZG8T42Zb5JhBQ4=)
2: TQ8u53Yh6iXCgZ1OrJXFgYd-MM0.crl (hash: KiXAhor4NA6butug3UPHDVUHgB6oAzYEnMxhj4VxPm8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/e828b7-b1d8-4f40-bd30-7c0497913af0/1/TQ8u53Yh6iXCgZ1OrJXFgYd-MM0.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/e828b7-b1d8-4f40-bd30-7c0497913af0/1/TQ8u53Yh6iXCgZ1OrJXFgYd-MM0.mft
rsync://rpki.ripe.net/repository/DEFAULT/TQ8u53Yh6iXCgZ1OrJXFgYd-MM0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:03:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ec:24:9d:e3:f5:15:2d:70:5e:4b:d0:41:03:c7:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d0f2ee77621ea25c2819d4eac95c581877e30cd
Validity
Not Before: Oct 19 10:03:00 2025 GMT
Not After : Oct 20 10:03:00 2025 GMT
Subject: CN=7f6544af3bd6640881f2c545017f54b949495249
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:ce:49:bc:1c:b5:1b:df:33:84:17:27:ce:d3:
29:b7:b0:43:df:3c:c9:e0:07:98:1a:fb:96:6e:d9:
f2:64:e3:7a:df:b3:10:73:bf:e0:a9:4f:19:3a:2d:
2c:2f:18:3a:4e:8b:1f:d9:ac:c0:d5:ec:bb:65:fc:
56:ee:a5:a6:6c:49:81:40:15:e0:98:0e:cd:39:f5:
07:61:ba:c0:f6:0a:39:5f:bc:dd:e8:b3:50:de:c7:
76:b2:15:44:34:4f:aa:5c:db:5a:03:9b:3c:c5:a8:
e8:50:f1:e4:9c:1a:9a:9a:a8:7e:c6:c8:61:b3:de:
d2:8f:af:59:90:21:f9:c7:02:54:90:80:2f:eb:16:
4a:89:2d:52:44:da:53:84:bd:6b:b2:3a:66:66:95:
d9:4e:d4:5f:ba:17:b7:d7:9e:1d:53:cd:34:ac:b4:
bc:79:be:60:5c:ee:79:33:1c:60:40:db:05:ae:7d:
d5:68:b7:f5:e4:29:b7:25:b6:2d:f4:6b:4d:d8:55:
08:90:f4:f9:9c:57:3d:bb:0f:68:1d:5e:22:69:12:
c7:e4:a4:1c:51:69:9d:cf:49:90:bf:9c:e8:85:12:
ec:98:17:ce:67:05:38:c6:36:fb:b7:9e:44:f1:0e:
cc:4e:76:2f:d4:45:f4:70:7c:8f:d5:39:86:5f:2f:
5b:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:65:44:AF:3B:D6:64:08:81:F2:C5:45:01:7F:54:B9:49:49:52:49
X509v3 Authority Key Identifier:
keyid:4D:0F:2E:E7:76:21:EA:25:C2:81:9D:4E:AC:95:C5:81:87:7E:30:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TQ8u53Yh6iXCgZ1OrJXFgYd-MM0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/e828b7-b1d8-4f40-bd30-7c0497913af0/1/TQ8u53Yh6iXCgZ1OrJXFgYd-MM0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/e828b7-b1d8-4f40-bd30-7c0497913af0/1/TQ8u53Yh6iXCgZ1OrJXFgYd-MM0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:09:13:bd:5c:9a:60:4d:ad:ce:be:da:0d:c4:fd:fa:42:aa:
81:bd:af:fc:74:af:3c:83:d1:0c:15:0e:01:85:2c:d9:4d:06:
8b:16:e8:ec:1f:0d:64:2a:34:a1:8d:ca:c5:9d:70:6f:7e:8c:
fe:3c:8d:79:41:df:a1:08:40:c2:48:48:77:fb:bf:d8:01:4f:
1d:06:9b:dc:c8:44:7f:83:03:b1:f9:0a:c7:4d:2a:dd:ab:79:
9f:2b:04:e4:dd:76:62:c5:3d:d5:91:c2:44:0f:4e:7b:72:6e:
25:2d:f4:03:a7:71:71:f4:e7:bb:6f:f5:ae:a1:4a:0d:ee:c1:
e6:20:f7:cd:9d:ef:58:40:cb:00:ea:da:03:77:6b:65:46:02:
c9:54:91:da:10:f7:15:75:e8:0d:9d:c7:72:2a:49:cc:74:47:
a9:25:42:13:06:d1:5e:7b:c3:d0:b3:bb:59:29:16:e0:ae:cd:
8f:e8:dc:b9:9f:51:dd:e0:8f:b3:fa:b8:69:b2:95:f7:aa:4e:
c2:4c:b3:2c:87:7b:d4:a3:c6:5a:ca:4c:04:2d:c9:ac:47:b9:
2f:aa:0e:80:94:f8:af:71:51:63:0f:f3:20:29:d4:16:b9:3a:
87:01:b2:6b:20:c4:ff:d5:05:d5:9a:5f:cc:e8:05:3c:4f:87:
8f:8d:43:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:58:29 2025 by rpki-client