Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/3fe931-7dd6-443b-aade-d9a61937a1e5/1/TfGBHzmXuVCsieQQ6j7wGKZz1fw.mft
File: TfGBHzmXuVCsieQQ6j7wGKZz1fw.mft (raw, json)
Hash identifier: X3OJV+a+ytjNJd7CE48Fjs9GSVWR9ETaVcGbKNk09+M=
Subject key identifier: 3B:60:96:44:38:D6:2E:88:AD:A3:C4:3C:4D:CA:AD:C9:C8:1F:5A:60
Authority key identifier: 4D:F1:81:1F:39:97:B9:50:AC:89:E4:10:EA:3E:F0:18:A6:73:D5:FC
Certificate issuer: /CN=4df1811f3997b950ac89e410ea3ef018a673d5fc
Certificate serial: 0199FDD95ABB1EAA60B63F872A7DD96C0FE7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TfGBHzmXuVCsieQQ6j7wGKZz1fw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/3fe931-7dd6-443b-aade-d9a61937a1e5/1/TfGBHzmXuVCsieQQ6j7wGKZz1fw.mft
Manifest number: 06A2
Signing time: Sun 19 Oct 2025 19:01:44 +0000
Manifest this update: Sun 19 Oct 2025 19:01:44 +0000
Manifest next update: Mon 20 Oct 2025 19:01:44 +0000
Files and hashes: 1: 4m_ZlqWE1YEBP4kWtbELic7ECzg.roa (hash: t8PO7dqvDfBV4dwcfBXHsLynSbU2oXoJqnNbzqZG81g=)
2: TfGBHzmXuVCsieQQ6j7wGKZz1fw.crl (hash: F3fvJ+o9c26/veItmkx2C7UaDZxN/j9UcCbO3qY0+4Y=)
3: risExVobQciJpjckh7R5a6pHayQ.roa (hash: smtSJjRXs0E72dzCfhCCARBzkZPKWKCqhHgp8E/C6HY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/3fe931-7dd6-443b-aade-d9a61937a1e5/1/TfGBHzmXuVCsieQQ6j7wGKZz1fw.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/3fe931-7dd6-443b-aade-d9a61937a1e5/1/TfGBHzmXuVCsieQQ6j7wGKZz1fw.mft
rsync://rpki.ripe.net/repository/DEFAULT/TfGBHzmXuVCsieQQ6j7wGKZz1fw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d9:5a:bb:1e:aa:60:b6:3f:87:2a:7d:d9:6c:0f:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4df1811f3997b950ac89e410ea3ef018a673d5fc
Validity
Not Before: Oct 19 19:01:44 2025 GMT
Not After : Oct 20 19:01:44 2025 GMT
Subject: CN=3b60964438d62e88ada3c43c4dcaadc9c81f5a60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:c4:52:23:c0:bb:83:22:1b:30:40:2e:05:e9:
c8:32:6d:4b:85:ea:96:e5:4c:85:a1:57:2f:0f:48:
89:23:31:35:17:07:7f:47:68:a7:50:fb:f8:8e:ec:
88:4c:e1:30:bc:a9:d0:7c:c4:f8:0c:f9:7b:0d:36:
36:46:ef:a5:22:f0:db:31:85:14:1e:1e:c9:24:3c:
36:7c:a6:41:4a:6e:9e:8b:95:2d:7f:e7:14:31:1d:
87:da:f8:64:26:66:a4:f0:b3:22:29:21:1e:83:7a:
cf:66:5c:f7:dc:8f:5f:20:c4:bc:68:70:77:d4:23:
9d:fa:0c:2a:b8:02:88:26:02:88:a8:bb:3d:53:4b:
3c:d8:65:2b:94:f1:6e:2d:78:38:12:13:bb:12:c1:
59:7c:7d:1d:f8:1e:e4:f2:16:f0:2c:a5:07:de:1b:
b5:38:4c:40:2e:c1:d1:59:b6:15:33:a8:d0:3c:63:
3a:c2:f8:f9:9f:6a:a3:ac:9b:ef:38:0c:42:5d:11:
08:ef:be:1c:3f:08:a1:62:3a:bf:40:9f:fd:56:cd:
c1:11:d5:d9:87:5b:8f:0d:c5:58:57:cc:30:82:77:
30:5a:cc:f4:67:94:e7:a4:b8:3a:3b:cf:7d:a8:a7:
b4:39:1d:02:88:37:d3:eb:92:87:fb:0f:ec:44:09:
c0:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:60:96:44:38:D6:2E:88:AD:A3:C4:3C:4D:CA:AD:C9:C8:1F:5A:60
X509v3 Authority Key Identifier:
keyid:4D:F1:81:1F:39:97:B9:50:AC:89:E4:10:EA:3E:F0:18:A6:73:D5:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TfGBHzmXuVCsieQQ6j7wGKZz1fw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/3fe931-7dd6-443b-aade-d9a61937a1e5/1/TfGBHzmXuVCsieQQ6j7wGKZz1fw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/3fe931-7dd6-443b-aade-d9a61937a1e5/1/TfGBHzmXuVCsieQQ6j7wGKZz1fw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:14:ad:93:6d:ca:cd:5e:b6:dd:13:c8:53:5e:72:f1:a4:01:
15:cc:33:34:9d:63:37:90:b1:a0:3a:9b:df:76:b4:80:22:43:
54:9a:f0:1e:e9:fd:03:6a:81:39:ca:b1:39:c5:0a:98:ed:ae:
9e:cd:49:6b:c4:75:2c:23:44:fc:72:52:2e:8c:4f:91:37:cd:
11:d9:ac:01:16:10:de:ab:45:fa:7c:7f:7a:63:a9:fd:19:a5:
a4:47:55:50:ac:7a:de:2e:d9:51:cc:6b:00:8c:42:08:4d:8b:
e7:d3:82:67:a8:91:43:38:95:87:39:99:06:39:ab:89:9d:98:
89:a8:d5:6b:71:5b:c6:33:4b:33:f0:77:d1:3d:5a:ec:05:a0:
fe:63:58:b6:db:c5:44:29:94:9e:08:7c:0e:d6:b1:27:59:6d:
bc:36:f5:80:52:01:84:f6:5a:4e:d9:d7:68:74:30:3a:da:d4:
07:24:60:19:0b:a1:ac:85:ec:38:c2:13:89:1f:60:3b:93:04:
84:e8:3f:46:75:79:46:58:85:be:66:54:8e:a3:8a:f4:cb:aa:
e1:35:63:24:35:64:52:97:bc:d4:ee:5a:d0:15:b8:d6:c5:92:
aa:c4:9f:80:12:a5:10:8f:37:e7:28:dc:09:da:fa:40:fa:3f:
50:47:de:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 21:00:32 2025 by rpki-client