Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/cf2ebf-2a09-43d2-a225-a165359a6211/1/TuQFf56gFAzvfOR4k2nFzwH3xo4.mft
File: TuQFf56gFAzvfOR4k2nFzwH3xo4.mft (raw, json)
Hash identifier: gWv6oy7ODGvXGd873pvJr9xB6o4zsZpK+1mFOa6y1Do=
Subject key identifier: 40:43:9F:A6:71:AB:2D:A7:0B:ED:6D:29:FD:2B:60:3B:14:90:EA:2D
Authority key identifier: 4E:E4:05:7F:9E:A0:14:0C:EF:7C:E4:78:93:69:C5:CF:01:F7:C6:8E
Certificate issuer: /CN=4ee4057f9ea0140cef7ce4789369c5cf01f7c68e
Certificate serial: 0199FDD9188041007769D1FC3A91510CEF24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TuQFf56gFAzvfOR4k2nFzwH3xo4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/cf2ebf-2a09-43d2-a225-a165359a6211/1/TuQFf56gFAzvfOR4k2nFzwH3xo4.mft
Manifest number: 1539
Signing time: Sun 19 Oct 2025 19:01:27 +0000
Manifest this update: Sun 19 Oct 2025 19:01:27 +0000
Manifest next update: Mon 20 Oct 2025 19:01:27 +0000
Files and hashes: 1: CEuXJrDVGtc7Z4aBHwivyFbJk6I.roa (hash: YlEuDFYK1ghHbSy2lJ7W4OAiAQ8b74GXZr4K2Q1Nk+o=)
2: TuQFf56gFAzvfOR4k2nFzwH3xo4.crl (hash: S9qH2XN3sW+LaWVTnHWZZaLHTH4nGEwgGXSRHafc1AE=)
3: zQYGnUVB4bBy-t9A3BsXP2JPTI8.roa (hash: yYhiUqDeYjOIAS1CW8QCSgxrWRWrSjdPUM0N7RvDxVg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/cf2ebf-2a09-43d2-a225-a165359a6211/1/TuQFf56gFAzvfOR4k2nFzwH3xo4.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/cf2ebf-2a09-43d2-a225-a165359a6211/1/TuQFf56gFAzvfOR4k2nFzwH3xo4.mft
rsync://rpki.ripe.net/repository/DEFAULT/TuQFf56gFAzvfOR4k2nFzwH3xo4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 19:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d9:18:80:41:00:77:69:d1:fc:3a:91:51:0c:ef:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ee4057f9ea0140cef7ce4789369c5cf01f7c68e
Validity
Not Before: Oct 19 19:01:27 2025 GMT
Not After : Oct 20 19:01:27 2025 GMT
Subject: CN=40439fa671ab2da70bed6d29fd2b603b1490ea2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:cd:8b:a8:3f:04:18:04:c4:2e:a8:ad:92:71:
14:9f:18:5c:6f:df:96:5c:4f:ba:83:77:60:24:12:
9a:96:42:2b:3f:ee:ac:d8:b2:dd:60:bc:76:1b:66:
ed:b3:cf:1d:8f:f7:51:2f:b6:b3:44:c0:b6:6b:1f:
e4:e4:23:52:25:18:a6:ba:c1:bb:cf:05:4d:aa:d6:
d8:5c:50:75:50:a6:20:76:30:30:ee:09:2d:0c:c1:
fc:fb:90:3e:87:fd:a2:03:30:2c:4e:66:eb:b6:fd:
18:e3:e3:cd:a4:37:9d:82:88:e2:3a:75:a7:5e:44:
77:67:dc:78:e7:b3:2e:38:4b:ba:14:56:82:35:32:
02:06:1a:31:1e:ba:b9:48:ec:aa:91:eb:74:d0:52:
5d:e1:7f:5f:aa:4c:6a:7c:03:66:7a:a7:bb:df:5f:
10:5b:a4:90:9f:e4:fc:a9:0b:0d:a9:c9:ac:67:26:
3d:9e:f4:fb:a1:b8:8c:64:5b:d3:bc:c8:e2:e1:45:
7b:19:48:8c:0a:a6:5c:19:eb:64:9b:2d:47:e9:a7:
68:bd:f8:2f:1d:6f:c3:7c:45:78:5d:d9:81:84:5a:
6a:3c:50:4f:b1:dd:51:43:18:59:11:60:3a:8f:ec:
a3:6f:08:db:92:aa:a3:84:84:07:88:80:da:09:04:
a8:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:43:9F:A6:71:AB:2D:A7:0B:ED:6D:29:FD:2B:60:3B:14:90:EA:2D
X509v3 Authority Key Identifier:
keyid:4E:E4:05:7F:9E:A0:14:0C:EF:7C:E4:78:93:69:C5:CF:01:F7:C6:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TuQFf56gFAzvfOR4k2nFzwH3xo4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/cf2ebf-2a09-43d2-a225-a165359a6211/1/TuQFf56gFAzvfOR4k2nFzwH3xo4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/cf2ebf-2a09-43d2-a225-a165359a6211/1/TuQFf56gFAzvfOR4k2nFzwH3xo4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:fc:c8:3f:dc:8f:57:2c:2a:19:6d:a8:3c:33:4f:75:7e:be:
c5:dc:21:4c:5f:6e:e4:e4:f8:4c:69:cc:32:df:e2:f4:20:f1:
3a:09:7d:e4:9d:10:44:cc:7f:e9:f0:4f:a5:8d:62:22:3c:16:
ba:1a:88:d0:6b:06:f8:1d:90:e4:94:fc:2d:bf:ef:4f:0c:d5:
a4:9a:f6:61:c4:e1:9b:32:b6:19:b7:ac:de:25:b2:af:59:d5:
c9:97:2e:a7:88:6f:82:4a:b0:29:d0:73:4e:8f:2b:53:06:10:
cf:d6:28:38:19:b0:ae:01:36:66:0b:12:1e:0f:3c:d2:11:f5:
00:aa:07:9e:83:2d:d2:f0:66:89:5b:fd:a8:a5:c8:54:6b:ae:
cb:69:46:f1:3a:b3:ea:e8:bf:aa:5b:f5:5f:0c:eb:e1:01:af:
d6:45:40:ba:87:22:99:53:ae:0a:06:62:6b:2b:ab:49:fc:82:
29:72:79:0b:2b:ed:ed:b8:eb:1f:8b:89:b3:e2:94:92:8b:63:
5e:6b:9b:b4:52:de:3c:00:1f:60:eb:fc:f8:dc:22:80:cd:7c:
82:ad:f6:40:49:82:4a:b7:7e:5a:9f:f1:29:a8:fa:20:8c:a7:
78:3c:81:b4:01:e0:2c:e8:db:3d:19:a7:90:80:4d:8f:b4:23:
9d:67:b5:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:14:20 2025 by rpki-client