Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/398bbb-184f-4851-b2a0-91f49d8d115d/1/TPgIAsZXmk1KEGCNz5LprOmQWxY.mft
File: TPgIAsZXmk1KEGCNz5LprOmQWxY.mft (raw, json)
Hash identifier: 784ALMrkIOsV+1eHKTTdF0xnWBMLS9YbmVotEWd8j6s=
Subject key identifier: A4:D1:E7:89:27:57:48:26:F1:BB:85:98:66:9F:7E:BF:9F:A4:E7:C7
Authority key identifier: 4C:F8:08:02:C6:57:9A:4D:4A:10:60:8D:CF:92:E9:AC:E9:90:5B:16
Certificate issuer: /CN=4cf80802c6579a4d4a10608dcf92e9ace9905b16
Certificate serial: 0199FD341970877D948584E1F266569D2EC9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TPgIAsZXmk1KEGCNz5LprOmQWxY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/398bbb-184f-4851-b2a0-91f49d8d115d/1/TPgIAsZXmk1KEGCNz5LprOmQWxY.mft
Manifest number: 05A4
Signing time: Sun 19 Oct 2025 16:01:13 +0000
Manifest this update: Sun 19 Oct 2025 16:01:13 +0000
Manifest next update: Mon 20 Oct 2025 16:01:13 +0000
Files and hashes: 1: S_Xx9-8zCphJzSWDqTG616N4Rxk.roa (hash: V5J5cYmKRxz4Xbqlmv0bBd8iH4Q+4weH7tvjv/5AKq0=)
2: TPgIAsZXmk1KEGCNz5LprOmQWxY.crl (hash: Pzw+hCAyogOhd4238RMTTSPJ5X8qTWMARxon7bvQtc8=)
3: V3x4-1WXGWfdIqvzomsHhdbzXSs.roa (hash: zh2EOf1/AdU8UOAuoYHykO5WxiDzPCEaB7bgSCkL3Ec=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/398bbb-184f-4851-b2a0-91f49d8d115d/1/TPgIAsZXmk1KEGCNz5LprOmQWxY.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/398bbb-184f-4851-b2a0-91f49d8d115d/1/TPgIAsZXmk1KEGCNz5LprOmQWxY.mft
rsync://rpki.ripe.net/repository/DEFAULT/TPgIAsZXmk1KEGCNz5LprOmQWxY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:34:19:70:87:7d:94:85:84:e1:f2:66:56:9d:2e:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4cf80802c6579a4d4a10608dcf92e9ace9905b16
Validity
Not Before: Oct 19 16:01:13 2025 GMT
Not After : Oct 20 16:01:13 2025 GMT
Subject: CN=a4d1e78927574826f1bb8598669f7ebf9fa4e7c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:c7:46:ef:0a:f3:1a:c3:09:88:dc:6a:77:e9:
d1:a0:1b:8d:24:f3:29:2d:69:67:58:3d:f0:1f:5f:
ff:b3:1f:8d:b9:6b:0a:7b:18:94:fa:5c:29:ec:59:
f5:d7:69:71:4a:38:e9:50:85:58:d3:f8:9c:3a:78:
2d:63:f6:10:05:af:53:06:fe:2c:c1:10:7d:b1:4e:
a6:3d:b3:24:41:5d:b7:07:09:5a:81:5e:63:b9:cc:
a4:8e:12:02:ab:a4:18:95:47:35:53:85:ab:cc:d7:
7f:f0:02:d7:ac:57:9b:5d:40:fc:34:2f:8f:c4:cf:
f8:a4:fb:c0:eb:1b:dd:35:cc:d2:bc:1a:b2:c8:27:
7e:2f:08:56:77:48:45:76:4b:00:b5:e6:cf:7a:2e:
e5:e9:22:da:1a:11:89:48:0b:76:5b:d7:61:53:9b:
cd:3f:a1:34:8f:0e:87:6c:0a:cb:2b:e8:00:7f:d1:
df:df:81:10:20:2d:07:d7:73:56:a4:6b:ad:28:c8:
e6:c9:08:e4:c4:e9:01:c4:97:b0:9c:16:f0:e4:02:
3c:ea:48:f7:b6:db:77:b4:82:26:fd:2a:d0:4f:c1:
c4:7d:39:d4:26:d1:2a:b7:fb:96:2b:be:1e:38:71:
21:a1:16:e4:d9:2d:50:18:83:95:16:13:e0:65:43:
d9:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:D1:E7:89:27:57:48:26:F1:BB:85:98:66:9F:7E:BF:9F:A4:E7:C7
X509v3 Authority Key Identifier:
keyid:4C:F8:08:02:C6:57:9A:4D:4A:10:60:8D:CF:92:E9:AC:E9:90:5B:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TPgIAsZXmk1KEGCNz5LprOmQWxY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/398bbb-184f-4851-b2a0-91f49d8d115d/1/TPgIAsZXmk1KEGCNz5LprOmQWxY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/398bbb-184f-4851-b2a0-91f49d8d115d/1/TPgIAsZXmk1KEGCNz5LprOmQWxY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:fe:d1:f8:9f:04:e5:4c:0c:1b:9d:d4:a8:f3:ab:84:9c:f3:
66:af:32:58:78:97:a7:98:3e:1d:80:26:fa:6d:1b:2e:c8:fa:
d3:fb:6b:8c:e9:21:f8:4f:e6:de:c6:b9:e9:ec:82:18:d7:a3:
71:4a:a0:34:2c:5f:5e:97:a8:50:0d:80:52:ea:79:97:9e:05:
86:36:4a:3c:2d:b0:b8:51:a9:8d:50:0a:71:d5:6f:d9:25:bb:
eb:11:f8:51:c2:3e:3b:04:f5:1b:ee:6b:ad:9e:6e:b1:e9:1e:
5f:f3:a5:15:7a:1c:b9:3d:c9:e7:a5:b5:fc:43:a1:4f:bc:c5:
51:fb:a8:c7:de:77:85:e0:28:59:3e:a5:67:f9:18:33:e9:80:
38:db:43:c2:f8:6c:64:2b:bc:ee:93:27:a8:fc:e9:97:30:75:
c7:25:4b:74:a1:b0:cf:e2:2f:cf:26:0c:42:db:99:b3:3d:a1:
9b:50:79:81:66:2d:dd:88:c2:91:8d:71:64:1d:a0:d6:a8:97:
35:40:9d:46:ed:66:d7:5f:58:cd:e3:36:d5:9d:e6:b9:69:65:
59:db:1a:3b:ca:37:f9:b3:d1:4a:44:74:3b:ba:b1:94:e2:44:
6e:8d:88:e5:e9:26:cf:06:60:9f:c7:35:92:24:bb:2f:bd:25:
e3:15:6b:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:42:00 2025 by rpki-client