Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/134ccb-b0ab-446b-8172-62e27cd1e975/1/tA2EnMQ7cy2rZkH8b9Wk2zotuUc.mft
File: tA2EnMQ7cy2rZkH8b9Wk2zotuUc.mft (raw, json)
Hash identifier: G4bZjY35bSMANtsXo6P09eZ+DqIhwL/lI0zR3P3UUTg=
Subject key identifier: F9:A4:53:36:40:58:CC:FA:22:FC:27:59:E4:75:E9:5A:6A:70:36:75
Authority key identifier: B4:0D:84:9C:C4:3B:73:2D:AB:66:41:FC:6F:D5:A4:DB:3A:2D:B9:47
Certificate issuer: /CN=b40d849cc43b732dab6641fc6fd5a4db3a2db947
Certificate serial: 0199FBEB0C014BBE597A58101386DBCD74A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tA2EnMQ7cy2rZkH8b9Wk2zotuUc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/134ccb-b0ab-446b-8172-62e27cd1e975/1/tA2EnMQ7cy2rZkH8b9Wk2zotuUc.mft
Manifest number: 0A7A
Signing time: Sun 19 Oct 2025 10:01:49 +0000
Manifest this update: Sun 19 Oct 2025 10:01:49 +0000
Manifest next update: Mon 20 Oct 2025 10:01:49 +0000
Files and hashes: 1: tA2EnMQ7cy2rZkH8b9Wk2zotuUc.crl (hash: Ztku4/hVd8Tdgi3erzshcnLDcdYKHFUH6v1Um31gKbA=)
2: x7aEXzfMRzlzp6VorB64R028Jvk.roa (hash: 3aOt7CTs1p/zJJSbWQR2//U36Y0+Zh2Kxl00BzPCEXA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/134ccb-b0ab-446b-8172-62e27cd1e975/1/tA2EnMQ7cy2rZkH8b9Wk2zotuUc.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/134ccb-b0ab-446b-8172-62e27cd1e975/1/tA2EnMQ7cy2rZkH8b9Wk2zotuUc.mft
rsync://rpki.ripe.net/repository/DEFAULT/tA2EnMQ7cy2rZkH8b9Wk2zotuUc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:0c:01:4b:be:59:7a:58:10:13:86:db:cd:74:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b40d849cc43b732dab6641fc6fd5a4db3a2db947
Validity
Not Before: Oct 19 10:01:49 2025 GMT
Not After : Oct 20 10:01:49 2025 GMT
Subject: CN=f9a453364058ccfa22fc2759e475e95a6a703675
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:2f:82:64:da:e1:cd:b2:f8:b4:bf:30:69:0d:
8f:c9:f9:4e:3f:9a:d6:c5:49:aa:91:7c:5a:90:a4:
1e:f4:f1:f0:48:23:29:58:d2:4f:4f:2a:fd:01:47:
dd:bc:c3:b5:af:0b:87:73:a1:30:1a:cc:8e:ed:33:
7c:fe:ae:e1:fa:a0:fd:71:dd:2f:b2:7a:bd:90:9f:
85:22:03:22:73:7b:63:ca:31:59:90:cb:7b:e8:25:
2f:55:f8:57:da:78:bf:95:d2:f9:d3:82:9e:3e:84:
5c:96:1f:c4:24:b5:f7:cf:7b:e3:61:99:f0:69:53:
73:ed:1d:7e:3f:f5:b2:65:d4:b4:85:80:c1:db:f5:
5d:00:af:94:c0:13:fa:59:46:0e:26:a7:b5:c4:fc:
4b:89:ac:63:a4:09:33:18:30:50:14:e4:13:37:b8:
7a:93:10:54:1e:34:4e:1f:ac:eb:59:2c:b2:0b:70:
64:89:a8:70:31:8e:e2:10:ff:ed:0b:79:e6:c1:c7:
6c:7f:bb:57:e3:b3:a8:e7:5c:12:fe:3d:0c:a8:5f:
0b:43:89:c3:d5:bb:df:d1:68:1f:34:93:cc:84:9e:
9a:10:66:48:9a:54:57:2f:69:cf:2f:b3:c8:5c:fe:
f8:9d:60:83:bd:d1:69:43:6a:a2:f6:98:0c:61:de:
83:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:A4:53:36:40:58:CC:FA:22:FC:27:59:E4:75:E9:5A:6A:70:36:75
X509v3 Authority Key Identifier:
keyid:B4:0D:84:9C:C4:3B:73:2D:AB:66:41:FC:6F:D5:A4:DB:3A:2D:B9:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tA2EnMQ7cy2rZkH8b9Wk2zotuUc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/134ccb-b0ab-446b-8172-62e27cd1e975/1/tA2EnMQ7cy2rZkH8b9Wk2zotuUc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/134ccb-b0ab-446b-8172-62e27cd1e975/1/tA2EnMQ7cy2rZkH8b9Wk2zotuUc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:41:2c:e2:98:2f:83:07:96:a1:66:b0:9b:1a:d5:88:86:20:
f6:dc:c0:56:79:da:fc:a3:57:5f:cd:93:31:35:d0:d1:a5:42:
fd:1c:c1:f5:d8:92:6c:e2:4a:4b:4c:ec:c5:3c:2e:05:77:ff:
89:61:b2:68:ab:03:00:b7:6f:6a:03:c4:cb:56:e3:19:b7:43:
1d:8a:50:8a:bc:51:43:dc:5f:15:6f:4d:ad:cb:cc:b0:39:0a:
62:1b:cc:a4:94:74:bc:ea:f9:4c:fa:6b:8d:df:a6:7c:ad:3a:
e3:32:be:e3:03:ce:32:91:55:e7:8a:cf:4f:90:c3:a9:44:51:
54:d7:1d:d6:13:11:62:fa:9c:40:44:f6:26:01:9b:51:e0:89:
62:bb:8a:3c:40:78:ea:8d:77:42:11:57:84:8b:73:2a:f4:db:
ce:e4:7a:df:23:e6:08:5e:41:57:8d:86:78:76:3e:a7:5d:5c:
fb:22:d2:bb:f2:d0:19:68:ba:55:c6:3f:5e:ad:11:43:81:8d:
e0:a8:ff:57:8e:04:8f:7b:1b:23:3d:35:fc:d5:6c:e2:e2:24:
d9:73:1d:4c:e3:b5:58:2c:da:83:63:42:e5:21:e3:6e:fa:d1:
9d:a5:78:30:72:d3:a6:a6:81:4e:8f:f7:cd:4f:80:e8:36:ab:
9d:97:14:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:43:21 2025 by rpki-client