Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/4748c7-cd9e-401e-a8a4-0d48e6895f12/1/tjC3O1HLxTgN1K2z1ar_TXozTF4.mft
File: tjC3O1HLxTgN1K2z1ar_TXozTF4.mft (raw, json)
Hash identifier: lwrkWfn0Vm9vd7BJj1fqxHtL5hwTgCeShwgpiGwekPM=
Subject key identifier: 3A:45:08:31:B0:09:54:47:B0:D3:30:C0:DF:F4:B9:8B:72:E8:70:71
Authority key identifier: B6:30:B7:3B:51:CB:C5:38:0D:D4:AD:B3:D5:AA:FF:4D:7A:33:4C:5E
Certificate issuer: /CN=b630b73b51cbc5380dd4adb3d5aaff4d7a334c5e
Certificate serial: 0199FC21B89BB48ED9831901AD4FC41A3C84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tjC3O1HLxTgN1K2z1ar_TXozTF4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/4748c7-cd9e-401e-a8a4-0d48e6895f12/1/tjC3O1HLxTgN1K2z1ar_TXozTF4.mft
Manifest number: 16F0
Signing time: Sun 19 Oct 2025 11:01:32 +0000
Manifest this update: Sun 19 Oct 2025 11:01:32 +0000
Manifest next update: Mon 20 Oct 2025 11:01:32 +0000
Files and hashes: 1: tjC3O1HLxTgN1K2z1ar_TXozTF4.crl (hash: b9VvkOGWrBYN3RKRaGIDFDqoVXo9YLKBwxauKn+ZIVA=)
2: vtod0X9q1UxXYWyU0iJvMZK0FuU.roa (hash: hazDQDv/KGyD5MQE7kb1mVj2PkHFae3QD7YWTocQdWk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/4748c7-cd9e-401e-a8a4-0d48e6895f12/1/tjC3O1HLxTgN1K2z1ar_TXozTF4.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/4748c7-cd9e-401e-a8a4-0d48e6895f12/1/tjC3O1HLxTgN1K2z1ar_TXozTF4.mft
rsync://rpki.ripe.net/repository/DEFAULT/tjC3O1HLxTgN1K2z1ar_TXozTF4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:b8:9b:b4:8e:d9:83:19:01:ad:4f:c4:1a:3c:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b630b73b51cbc5380dd4adb3d5aaff4d7a334c5e
Validity
Not Before: Oct 19 11:01:32 2025 GMT
Not After : Oct 20 11:01:32 2025 GMT
Subject: CN=3a450831b0095447b0d330c0dff4b98b72e87071
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:26:e6:70:16:91:5b:5e:a8:a8:cc:98:68:53:
b4:6a:a3:74:7f:92:29:7d:e6:54:44:f4:b6:d4:dd:
c8:dd:db:27:8a:d1:e2:37:88:e6:b2:ab:8f:63:6d:
2d:63:74:4f:e6:8f:70:eb:87:b6:ec:be:24:5a:65:
a2:37:68:a2:50:f0:4f:bb:ee:37:16:59:3a:ba:82:
1f:2c:3b:e5:af:4d:1a:83:71:b8:6f:0b:9d:06:b4:
46:0a:ca:b9:9c:3e:a0:09:61:bb:8d:80:e7:40:7a:
07:37:c0:1c:00:25:ee:7c:5f:ae:a3:59:52:bc:0c:
90:33:9c:83:23:c6:9f:dc:bb:6c:48:b6:16:a5:13:
a0:5f:2d:5c:dc:5e:b6:ba:db:0d:10:ed:80:e6:a5:
f2:80:20:f4:bf:fa:fe:0b:d5:9f:1e:2d:1a:f8:ba:
7b:88:38:ad:a1:04:45:b6:42:b0:90:50:50:44:bc:
b3:f6:37:61:03:55:90:0d:f7:46:c5:41:1e:63:9a:
90:89:f4:a4:ea:6e:83:5c:d0:42:0b:e1:f3:98:71:
24:bd:5e:c8:92:68:b8:08:cb:f5:98:d1:9b:28:b7:
44:a1:e4:70:99:9b:d3:9a:57:2f:93:75:dd:56:ff:
5e:17:c4:b8:b9:a6:b6:5a:fd:5d:f6:46:c9:b9:55:
9e:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:45:08:31:B0:09:54:47:B0:D3:30:C0:DF:F4:B9:8B:72:E8:70:71
X509v3 Authority Key Identifier:
keyid:B6:30:B7:3B:51:CB:C5:38:0D:D4:AD:B3:D5:AA:FF:4D:7A:33:4C:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tjC3O1HLxTgN1K2z1ar_TXozTF4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/4748c7-cd9e-401e-a8a4-0d48e6895f12/1/tjC3O1HLxTgN1K2z1ar_TXozTF4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/4748c7-cd9e-401e-a8a4-0d48e6895f12/1/tjC3O1HLxTgN1K2z1ar_TXozTF4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:a1:74:32:cb:cc:27:38:44:75:66:8e:00:1b:f3:f6:03:a8:
08:e6:9c:f9:5b:f9:6d:ea:d4:f4:7e:a9:99:30:1d:50:a6:5c:
d0:65:13:a0:f7:6d:fd:d6:c9:ca:7a:9d:d0:24:8f:63:81:05:
de:22:e1:fb:28:8a:e3:9a:d8:21:69:59:43:44:8c:89:62:49:
91:cd:3a:18:25:92:6b:f8:6d:0a:bd:fb:b9:e9:6a:29:8d:1f:
b5:db:05:2f:94:bd:10:e8:70:16:38:88:5d:d8:a2:14:c6:36:
4e:41:e3:5f:c2:ef:22:77:df:02:3f:7b:83:fe:73:06:de:be:
53:89:2c:ba:b8:3d:78:c8:62:0a:cc:f0:b7:d7:ba:62:94:31:
33:e0:b2:21:5c:b2:a4:ac:23:61:ca:5d:89:98:68:74:65:38:
a4:00:01:78:35:ee:4e:5c:55:6c:8c:a2:0d:2a:f8:74:93:0b:
87:d1:af:c2:fe:12:f5:65:42:3e:f4:f0:b4:ab:e8:22:3d:96:
eb:52:94:8d:93:ab:17:99:72:9c:d4:c2:21:cb:1b:5c:84:03:
78:85:7d:e3:ac:c8:ff:52:cd:ef:9d:8e:bb:50:4e:89:58:77:
89:4b:91:37:0f:7f:c5:f5:4f:46:1c:2c:de:78:39:52:c4:61:
87:0e:89:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:29:49 2025 by rpki-client