Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/95d780-baad-4db7-beb5-454599a4d22c/1/TYqYddfQ0SvEenC37emjymTYLTI.mft
File: TYqYddfQ0SvEenC37emjymTYLTI.mft (raw, json)
Hash identifier: Rygspkk7R8mLV/ZwoD5SwttS+0IssxBeDJUfQxGiN8I=
Subject key identifier: E6:AD:06:9C:1E:B9:8F:DF:BC:48:61:A2:EC:70:E3:B2:5D:70:CF:7A
Authority key identifier: 4D:8A:98:75:D7:D0:D1:2B:C4:7A:70:B7:ED:E9:A3:CA:64:D8:2D:32
Certificate issuer: /CN=4d8a9875d7d0d12bc47a70b7ede9a3ca64d82d32
Certificate serial: 019A0592031BF2BFE0CE043FCC09352AEC00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TYqYddfQ0SvEenC37emjymTYLTI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/95d780-baad-4db7-beb5-454599a4d22c/1/TYqYddfQ0SvEenC37emjymTYLTI.mft
Manifest number: 0D60
Signing time: Tue 21 Oct 2025 07:00:46 +0000
Manifest this update: Tue 21 Oct 2025 07:00:46 +0000
Manifest next update: Wed 22 Oct 2025 07:00:46 +0000
Files and hashes: 1: Qkkirv8lLJuTeoHE2XBshzOic18.roa (hash: JXSnxQgZnKW02ndUqgQ4ahHIPbZr+aCryUo1lSsSpVM=)
2: TYqYddfQ0SvEenC37emjymTYLTI.crl (hash: FY6GBh+3SU2eSSDHnDPOnCKotr9p8BZdbencc51u3fw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/95d780-baad-4db7-beb5-454599a4d22c/1/TYqYddfQ0SvEenC37emjymTYLTI.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/95d780-baad-4db7-beb5-454599a4d22c/1/TYqYddfQ0SvEenC37emjymTYLTI.mft
rsync://rpki.ripe.net/repository/DEFAULT/TYqYddfQ0SvEenC37emjymTYLTI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Oct 2025 07:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:05:92:03:1b:f2:bf:e0:ce:04:3f:cc:09:35:2a:ec:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d8a9875d7d0d12bc47a70b7ede9a3ca64d82d32
Validity
Not Before: Oct 21 07:00:46 2025 GMT
Not After : Oct 22 07:00:46 2025 GMT
Subject: CN=e6ad069c1eb98fdfbc4861a2ec70e3b25d70cf7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:cd:b7:c2:d3:31:5a:2e:97:e6:a1:eb:41:e1:
b6:20:c9:73:03:d7:70:f3:97:83:fe:e6:04:9a:15:
ca:fe:80:ff:95:f3:4d:10:ee:74:52:dd:da:23:4e:
0b:63:db:ce:0f:ce:8b:29:de:fa:e8:bd:03:04:b7:
22:6c:fa:6b:a6:ac:c2:12:fb:06:ef:cc:87:66:b0:
b2:0e:d6:ba:91:43:38:d2:68:eb:d5:af:85:fb:54:
f0:07:07:94:bb:c7:d8:43:f6:da:69:7b:60:dc:5c:
b8:78:72:1f:a3:74:1d:5f:81:ce:67:3c:98:03:40:
99:e6:a8:0b:9f:5f:95:86:fe:d4:c0:74:a8:21:f1:
be:27:87:f9:df:cf:74:a6:68:81:1b:a1:35:d5:b7:
84:81:01:58:47:1d:c3:da:23:e2:a2:13:a5:0b:c2:
a4:3e:f3:65:af:d5:ba:72:bf:33:be:b6:c8:27:9b:
d6:69:2d:a4:10:1c:fd:89:7e:10:68:b2:b4:d1:34:
5e:d9:34:b1:61:74:e9:36:a2:cd:fc:15:1b:b6:fb:
af:29:ed:63:7e:90:70:74:8e:98:0a:66:1b:e9:c8:
91:d0:19:6a:61:74:c9:58:51:86:7a:81:2a:e7:99:
1b:8b:09:df:bd:4e:a1:6f:c7:06:60:7d:8d:bc:78:
f7:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:AD:06:9C:1E:B9:8F:DF:BC:48:61:A2:EC:70:E3:B2:5D:70:CF:7A
X509v3 Authority Key Identifier:
keyid:4D:8A:98:75:D7:D0:D1:2B:C4:7A:70:B7:ED:E9:A3:CA:64:D8:2D:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TYqYddfQ0SvEenC37emjymTYLTI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/95d780-baad-4db7-beb5-454599a4d22c/1/TYqYddfQ0SvEenC37emjymTYLTI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/95d780-baad-4db7-beb5-454599a4d22c/1/TYqYddfQ0SvEenC37emjymTYLTI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:c7:ce:06:16:aa:e6:f6:85:34:ed:95:9e:c3:03:be:ac:09:
65:a0:97:14:ed:56:10:7b:0b:2f:86:e2:d5:b5:f5:74:95:d6:
e5:89:b8:f3:d7:f5:b4:c4:23:77:c1:d1:68:9f:eb:50:75:3d:
35:fb:3f:e9:34:b4:5b:86:09:6c:80:e0:d9:75:51:27:68:3c:
f6:cd:0f:c8:37:3e:df:c5:0a:b3:1c:55:b2:84:6f:3d:af:53:
86:08:11:ab:3b:dc:70:7b:a0:e4:ae:49:62:0c:d1:c4:83:3e:
fd:2b:1b:f1:3e:74:f9:42:39:4b:f2:b4:bb:6a:52:03:01:ac:
f9:de:ac:5b:ba:90:14:69:57:6c:a1:0c:4e:ce:99:f6:ec:81:
71:e2:b0:19:83:15:46:1c:c2:81:fd:94:82:b6:dd:aa:99:0d:
50:b1:9e:fc:60:7a:de:f4:8d:81:ba:b9:2f:f9:c2:22:b1:c1:
d2:cf:b5:a5:35:01:a7:1d:35:48:13:df:f7:d3:b5:53:6c:be:
05:d3:e7:18:fc:10:a9:d6:95:15:9a:4d:a9:79:d4:df:58:fa:
71:d8:11:87:4b:7f:71:7d:18:d0:2f:8d:8c:74:fa:73:88:2b:
55:3e:23:0b:46:8b:be:9c:ca:ec:99:96:9a:e2:43:9a:18:26:
77:b2:78:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 11:02:43 2025 by rpki-client