Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/283e8f-bda2-49dc-8afe-af137ccb2b69/1/tcOYwHMlxA59dtI5ahvoXEL9wsg.mft
File: tcOYwHMlxA59dtI5ahvoXEL9wsg.mft (raw, json)
Hash identifier: r0Gg3+Xstqr910ddai/acpx+l6fjfPP6fOxGZsFpPp8=
Subject key identifier: 61:24:90:ED:0A:E6:05:0F:B9:E9:42:1E:F7:F4:09:72:53:48:6D:B8
Authority key identifier: B5:C3:98:C0:73:25:C4:0E:7D:76:D2:39:6A:1B:E8:5C:42:FD:C2:C8
Certificate issuer: /CN=b5c398c07325c40e7d76d2396a1be85c42fdc2c8
Certificate serial: 0199FDD9D28FD38FEAD8EE804E90FA9B0DAD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tcOYwHMlxA59dtI5ahvoXEL9wsg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/283e8f-bda2-49dc-8afe-af137ccb2b69/1/tcOYwHMlxA59dtI5ahvoXEL9wsg.mft
Manifest number: 0661
Signing time: Sun 19 Oct 2025 19:02:14 +0000
Manifest this update: Sun 19 Oct 2025 19:02:14 +0000
Manifest next update: Mon 20 Oct 2025 19:02:14 +0000
Files and hashes: 1: HeTNJZjhVHC3QazbToD7IxfPGhg.roa (hash: k/lPKk3dyIcZTARgL9fxQcpWqaVNc6/eODt+UcBvC5M=)
2: tcOYwHMlxA59dtI5ahvoXEL9wsg.crl (hash: 3P/ezFnQY+gI8A1RsH66zRb+aOMYy8IIDyyGLyCKUz8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/283e8f-bda2-49dc-8afe-af137ccb2b69/1/tcOYwHMlxA59dtI5ahvoXEL9wsg.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/283e8f-bda2-49dc-8afe-af137ccb2b69/1/tcOYwHMlxA59dtI5ahvoXEL9wsg.mft
rsync://rpki.ripe.net/repository/DEFAULT/tcOYwHMlxA59dtI5ahvoXEL9wsg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d9:d2:8f:d3:8f:ea:d8:ee:80:4e:90:fa:9b:0d:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5c398c07325c40e7d76d2396a1be85c42fdc2c8
Validity
Not Before: Oct 19 19:02:14 2025 GMT
Not After : Oct 20 19:02:14 2025 GMT
Subject: CN=612490ed0ae6050fb9e9421ef7f4097253486db8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:7c:aa:4d:da:6d:a8:62:4e:70:1a:cd:2b:eb:
88:d6:78:6e:99:42:f8:3b:a5:ef:92:3c:8d:2f:f3:
c8:65:32:00:25:27:8c:98:7e:2f:b8:1e:ff:74:5d:
e4:cf:e0:46:d1:68:9e:2b:88:1b:4f:bb:d4:89:6f:
15:87:15:ed:28:f5:bb:85:41:0b:87:e0:13:97:e5:
2b:ad:fe:45:76:2b:91:6f:ab:96:92:02:c2:e8:10:
e1:00:61:d2:fc:ca:86:94:3f:8c:47:aa:59:7d:c8:
cf:3b:44:e7:d6:40:42:a9:7e:3c:b1:14:f7:30:c8:
a2:3d:17:74:ae:00:26:d3:9a:ab:dd:48:96:fc:48:
48:f9:d9:e7:49:6e:0d:b1:24:4d:17:e4:c7:e3:4d:
fa:8d:5b:fa:b5:b6:73:38:ac:d4:ab:0b:83:d1:91:
46:fb:49:4a:51:68:a8:1a:72:e7:0f:26:e1:9d:ca:
1f:25:0b:56:8b:63:d6:a7:c8:be:79:5c:49:f5:c3:
ac:27:cd:05:59:49:5a:b1:5f:b1:e9:c9:dc:26:ee:
55:6c:ad:1e:1d:28:64:3c:ea:de:bf:b0:91:e0:36:
4a:40:c9:0c:02:e0:72:7b:e9:68:a2:64:3a:63:40:
af:02:5a:21:1e:eb:9c:62:89:93:7e:66:28:02:fe:
d4:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:24:90:ED:0A:E6:05:0F:B9:E9:42:1E:F7:F4:09:72:53:48:6D:B8
X509v3 Authority Key Identifier:
keyid:B5:C3:98:C0:73:25:C4:0E:7D:76:D2:39:6A:1B:E8:5C:42:FD:C2:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tcOYwHMlxA59dtI5ahvoXEL9wsg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/283e8f-bda2-49dc-8afe-af137ccb2b69/1/tcOYwHMlxA59dtI5ahvoXEL9wsg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/283e8f-bda2-49dc-8afe-af137ccb2b69/1/tcOYwHMlxA59dtI5ahvoXEL9wsg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:ab:46:f2:b3:90:be:75:87:0f:fb:b1:98:48:61:ce:3c:f1:
17:08:c2:88:4d:02:05:b2:9f:f2:4e:60:fb:94:c7:06:c5:7e:
a8:ec:49:20:32:39:ca:cd:d4:5e:da:8c:ee:ee:fc:66:01:71:
37:5d:55:22:88:c4:66:fb:d4:7a:dc:84:a4:10:14:50:6b:9e:
01:40:2f:b0:bd:0b:81:c8:a7:6d:e7:3f:47:ee:97:eb:47:1e:
c1:6f:aa:09:b0:d9:ef:ef:f8:23:c8:73:e5:43:f3:d0:6b:6b:
d7:71:5b:a2:f7:db:0a:29:73:b9:67:2c:6d:5a:20:ed:40:2f:
90:1c:5c:32:db:fb:37:7e:5f:24:43:b8:d4:71:51:e3:a1:91:
a0:08:5c:00:37:9d:f7:d0:43:16:8b:f0:3c:2f:5b:c6:5e:c6:
ee:6a:16:c1:90:1e:21:15:4b:03:b1:30:26:91:36:2a:84:41:
02:a5:de:31:2d:93:96:0e:4e:dd:d4:1b:2f:a4:f1:fb:05:5b:
f4:e3:f9:e3:73:91:fb:68:09:c8:b3:e9:b5:00:8a:c4:cf:b6:
3c:ea:c6:a6:6f:67:bf:51:c5:fa:70:ca:30:80:23:9e:5d:7c:
85:75:a0:51:8b:d0:05:fc:da:a1:9c:d4:77:b1:fb:ea:f0:84:
2d:fc:ad:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:50:43 2025 by rpki-client