Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/355efb-26b0-4112-b4b5-93c29640bbfe/1/Tchxtd3wdAsxfR4042smgQu5gCY.mft
File: Tchxtd3wdAsxfR4042smgQu5gCY.mft (raw, json)
Hash identifier: gFaNnaMt2CRCyuDMVnYRKBGkbb+A+zB44cdvRlvnml8=
Subject key identifier: A3:92:04:99:FB:1B:D5:F3:7B:F0:AC:A0:C4:D6:80:2D:36:89:FC:FC
Authority key identifier: 4D:C8:71:B5:DD:F0:74:0B:31:7D:1E:34:E3:6B:26:81:0B:B9:80:26
Certificate issuer: /CN=4dc871b5ddf0740b317d1e34e36b26810bb98026
Certificate serial: 0199FB7CEFF4D103E8DA32941DEB4EE3DDF4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tchxtd3wdAsxfR4042smgQu5gCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/355efb-26b0-4112-b4b5-93c29640bbfe/1/Tchxtd3wdAsxfR4042smgQu5gCY.mft
Manifest number: 09B3
Signing time: Sun 19 Oct 2025 08:01:32 +0000
Manifest this update: Sun 19 Oct 2025 08:01:32 +0000
Manifest next update: Mon 20 Oct 2025 08:01:32 +0000
Files and hashes: 1: Tchxtd3wdAsxfR4042smgQu5gCY.crl (hash: K7GI2SNwGu80fdnYkf8UaitiML/ea19uSP7tbZPe0c4=)
2: paYxpLOj5q1m1CkvSIrYuNJXnfY.roa (hash: oASY8mwNlrx1vBXDbDUsEVfC2Mdva3sHjU/P5M6cgKw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/355efb-26b0-4112-b4b5-93c29640bbfe/1/Tchxtd3wdAsxfR4042smgQu5gCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/355efb-26b0-4112-b4b5-93c29640bbfe/1/Tchxtd3wdAsxfR4042smgQu5gCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Tchxtd3wdAsxfR4042smgQu5gCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:7c:ef:f4:d1:03:e8:da:32:94:1d:eb:4e:e3:dd:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4dc871b5ddf0740b317d1e34e36b26810bb98026
Validity
Not Before: Oct 19 08:01:32 2025 GMT
Not After : Oct 20 08:01:32 2025 GMT
Subject: CN=a3920499fb1bd5f37bf0aca0c4d6802d3689fcfc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:39:ac:a3:ec:58:96:45:87:59:69:3a:f8:61:
36:28:8d:34:4c:bc:c7:aa:e4:ac:bc:a7:9a:00:a8:
8e:ee:24:23:b3:01:e1:13:7d:88:ca:41:87:c7:7a:
6b:25:55:a1:de:c6:ba:d9:a0:ee:77:7e:81:0f:f3:
0a:a7:25:c1:f6:ef:c0:b6:39:0c:8f:a8:e9:05:51:
1b:5d:5b:e1:e8:6d:b8:ba:62:7c:9c:e0:5f:21:ad:
0c:bc:3f:7a:7a:2e:4d:b6:8d:ab:30:3c:c6:26:84:
3c:d0:7d:eb:8b:38:61:36:0a:6b:14:b5:7d:91:7e:
96:4a:7b:69:9c:83:33:f0:41:44:d0:6f:d0:c8:57:
d6:37:a7:74:88:48:62:72:79:5f:66:97:99:58:35:
6e:a1:9a:71:d3:d9:11:2c:50:8e:11:18:25:24:66:
43:f5:7c:aa:41:79:4d:1d:31:d5:91:0f:66:10:8e:
be:e8:a6:09:48:e5:df:42:77:f5:b2:8b:d0:ca:43:
8b:2c:29:84:de:b6:84:c5:27:55:46:ea:19:a1:75:
d0:87:b6:86:9c:a9:b4:87:cf:ad:d4:bf:e4:13:ff:
44:f8:77:ca:c2:9a:71:88:5a:bf:eb:3d:ca:2e:91:
6c:5d:81:9c:8f:5b:4e:f8:3e:4b:1d:12:01:c8:6b:
c1:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:92:04:99:FB:1B:D5:F3:7B:F0:AC:A0:C4:D6:80:2D:36:89:FC:FC
X509v3 Authority Key Identifier:
keyid:4D:C8:71:B5:DD:F0:74:0B:31:7D:1E:34:E3:6B:26:81:0B:B9:80:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tchxtd3wdAsxfR4042smgQu5gCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/355efb-26b0-4112-b4b5-93c29640bbfe/1/Tchxtd3wdAsxfR4042smgQu5gCY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/355efb-26b0-4112-b4b5-93c29640bbfe/1/Tchxtd3wdAsxfR4042smgQu5gCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:6d:bc:de:a1:04:0f:e8:f3:70:c0:64:ef:65:82:05:ca:e8:
eb:b8:3e:66:3c:4c:c6:5e:d9:70:f1:72:fe:0c:0f:13:19:cf:
63:89:03:bb:a9:ec:3d:ee:32:64:d4:1b:3c:f9:d3:db:2e:29:
a0:3f:20:94:4a:83:6b:d3:6b:df:7c:94:c2:ec:c3:e7:0d:cd:
1e:eb:2f:82:81:41:e7:f9:a8:e4:77:7a:ba:0c:ee:d9:82:28:
8c:22:72:d9:20:61:d1:95:29:f4:e6:e0:0b:28:e1:5b:72:64:
45:e8:4a:10:b5:a7:6d:dd:68:72:9b:80:f5:a3:81:cf:84:95:
17:d4:c3:e4:4c:1a:c1:48:be:71:71:28:ad:9e:81:2a:83:1c:
66:f1:da:af:1d:72:23:c7:ea:c7:c4:db:f9:d0:0e:1b:be:0d:
76:3f:8a:6a:00:11:e6:f0:79:07:06:9f:67:74:18:2d:c6:11:
84:7c:bc:84:3d:b1:b6:81:53:e4:f3:4e:0b:77:66:0b:44:cc:
c8:3a:2f:03:8c:14:ce:c6:6b:37:92:6a:4c:66:9b:9f:b6:a7:
8c:45:b2:b8:e3:78:61:3d:3c:fd:21:5d:e2:0c:63:85:64:1c:
9d:21:1c:37:6c:ae:79:31:c1:cb:58:17:8b:73:ea:0d:11:7f:
d7:91:c4:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:41:31 2025 by rpki-client