Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/c1d940-044d-49c4-a7a1-a0076679be60/1/TCYZGbVcLAj3Klqx0OsYXuEr3_c.mft
File: TCYZGbVcLAj3Klqx0OsYXuEr3_c.mft (raw, json)
Hash identifier: I8hGjFIYRL5nPMyr3qxTBS3RbKH4sBbIMJAwm1Yz1to=
Subject key identifier: 97:5E:24:A5:E6:E8:69:16:5D:20:63:B0:D8:1D:BD:FC:FB:41:B9:18
Authority key identifier: 4C:26:19:19:B5:5C:2C:08:F7:2A:5A:B1:D0:EB:18:5E:E1:2B:DF:F7
Certificate issuer: /CN=4c261919b55c2c08f72a5ab1d0eb185ee12bdff7
Certificate serial: 0199FBEAD06837632EF9AD1B690A49C6F492
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TCYZGbVcLAj3Klqx0OsYXuEr3_c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/c1d940-044d-49c4-a7a1-a0076679be60/1/TCYZGbVcLAj3Klqx0OsYXuEr3_c.mft
Manifest number: 16E1
Signing time: Sun 19 Oct 2025 10:01:33 +0000
Manifest this update: Sun 19 Oct 2025 10:01:33 +0000
Manifest next update: Mon 20 Oct 2025 10:01:33 +0000
Files and hashes: 1: 35EW9mUAS2KwaYDPUieiupydDBY.roa (hash: V/BNRylyiFUELWt9i2pyrF3sOU/lNLQC8epYI7MQKPY=)
2: TCYZGbVcLAj3Klqx0OsYXuEr3_c.crl (hash: 1/uMOexUlK61o/scWrfKnyz0Z0WBYgxgFtsGKncR2S4=)
3: q0NSZKvbuZKPsTOzfMB4PKlh9Ys.roa (hash: jHJ+k8Z1pg8+GnjSpwYDBxeFhhnBTCkhDCcx/6sq1Z4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/c1d940-044d-49c4-a7a1-a0076679be60/1/TCYZGbVcLAj3Klqx0OsYXuEr3_c.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/c1d940-044d-49c4-a7a1-a0076679be60/1/TCYZGbVcLAj3Klqx0OsYXuEr3_c.mft
rsync://rpki.ripe.net/repository/DEFAULT/TCYZGbVcLAj3Klqx0OsYXuEr3_c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ea:d0:68:37:63:2e:f9:ad:1b:69:0a:49:c6:f4:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c261919b55c2c08f72a5ab1d0eb185ee12bdff7
Validity
Not Before: Oct 19 10:01:33 2025 GMT
Not After : Oct 20 10:01:33 2025 GMT
Subject: CN=975e24a5e6e869165d2063b0d81dbdfcfb41b918
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:bb:f5:d6:e5:59:d6:c0:25:55:af:2b:74:1f:
22:db:36:f4:15:41:8c:e9:4d:a4:b1:ec:32:9f:62:
a3:d2:97:89:f3:2f:1d:57:4b:26:c2:a6:55:d6:58:
42:c3:1c:81:ce:1e:a8:5b:96:9e:bc:4d:e6:a4:e3:
0d:f1:96:77:7b:3f:33:90:9a:f7:d8:e4:9d:af:cf:
75:a7:63:de:d2:0d:57:df:3b:13:1b:6a:12:02:59:
38:c1:c3:b8:d2:2a:d4:35:b4:12:34:95:6c:0e:1e:
44:17:0c:49:a5:dd:e3:0e:29:f8:8c:ce:65:a7:57:
11:48:db:59:8e:f7:74:37:78:f4:d3:17:a2:08:6e:
c0:ce:08:9b:17:b1:16:62:bd:d1:21:5c:6c:b7:da:
fa:4a:c7:2f:4e:9f:90:ae:52:00:ef:c4:14:2b:46:
ce:23:23:e2:9f:31:3b:80:2d:2b:c6:a1:3f:f8:07:
46:9d:42:fe:aa:e0:f6:50:4b:94:4e:78:d5:5c:87:
88:5e:bb:80:6c:a1:07:f3:df:03:e5:d7:a1:3b:d0:
61:be:0c:c0:4f:75:d1:fb:1b:ca:d3:bb:d3:37:61:
33:57:e6:94:ee:12:46:e9:5d:1c:8f:fc:d7:f5:03:
ba:c6:01:28:70:5e:0e:14:4d:05:5e:ec:d9:8f:47:
b7:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:5E:24:A5:E6:E8:69:16:5D:20:63:B0:D8:1D:BD:FC:FB:41:B9:18
X509v3 Authority Key Identifier:
keyid:4C:26:19:19:B5:5C:2C:08:F7:2A:5A:B1:D0:EB:18:5E:E1:2B:DF:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TCYZGbVcLAj3Klqx0OsYXuEr3_c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/c1d940-044d-49c4-a7a1-a0076679be60/1/TCYZGbVcLAj3Klqx0OsYXuEr3_c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/c1d940-044d-49c4-a7a1-a0076679be60/1/TCYZGbVcLAj3Klqx0OsYXuEr3_c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:f3:03:37:c6:70:07:5b:ba:7e:67:65:19:b8:19:4a:4a:7f:
b9:a6:85:1d:99:de:74:d3:bc:b4:1a:b0:38:7e:cd:31:0e:39:
de:fa:6c:df:1a:a4:64:ca:2e:da:0b:ac:d1:dc:4d:38:68:73:
10:c5:21:2b:fc:67:04:03:b1:ff:e8:02:7a:be:4f:f2:d1:8e:
9f:5e:15:21:e0:08:a9:77:8d:c4:25:01:d1:62:8b:00:9e:e4:
cc:3e:de:ce:89:a2:c2:3e:4f:9e:ed:e0:26:5b:40:93:8c:57:
2e:94:cb:e4:60:d4:ae:af:4e:e2:be:a1:82:b7:ad:f1:d3:dc:
62:b0:53:c9:09:ce:a3:6c:39:76:35:5d:dd:f8:e8:2c:c4:1e:
46:61:ed:9d:9e:3f:e6:17:c8:cc:12:1d:96:1b:ab:cb:4a:10:
ca:67:60:c4:10:64:1c:5a:24:1b:fe:50:4d:17:e9:59:a3:fe:
cb:b5:d6:cf:1f:f5:34:cb:21:fd:e0:be:31:68:fb:f1:7d:be:
01:41:db:18:b5:00:a6:79:3f:c4:83:80:b2:6a:54:bd:33:60:
07:a5:72:09:9b:c2:10:d7:87:7c:0e:87:7c:92:3a:07:30:7e:
ba:f7:8a:4b:93:35:a6:06:ee:b4:7d:a3:23:52:d1:bf:b9:98:
eb:59:60:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:04:48 2025 by rpki-client