Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/cf2ebf-2a09-43d2-a225-a165359a6211/1/TuQFf56gFAzvfOR4k2nFzwH3xo4.mft
File: TuQFf56gFAzvfOR4k2nFzwH3xo4.mft (raw, json)
Hash identifier: AsecY/vGZKuroeBbzakq7gEAZIvLJ5GuTqR2B9QqriI=
Subject key identifier: 75:E7:32:F6:7E:9E:F4:A7:83:0F:F1:11:5C:50:BD:33:E9:99:1C:2E
Authority key identifier: 4E:E4:05:7F:9E:A0:14:0C:EF:7C:E4:78:93:69:C5:CF:01:F7:C6:8E
Certificate issuer: /CN=4ee4057f9ea0140cef7ce4789369c5cf01f7c68e
Certificate serial: 0199FFC7EB06A0A8DBFDB8EB9403B41658C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TuQFf56gFAzvfOR4k2nFzwH3xo4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/cf2ebf-2a09-43d2-a225-a165359a6211/1/TuQFf56gFAzvfOR4k2nFzwH3xo4.mft
Manifest number: 153A
Signing time: Mon 20 Oct 2025 04:01:55 +0000
Manifest this update: Mon 20 Oct 2025 04:01:55 +0000
Manifest next update: Tue 21 Oct 2025 04:01:55 +0000
Files and hashes: 1: CEuXJrDVGtc7Z4aBHwivyFbJk6I.roa (hash: YlEuDFYK1ghHbSy2lJ7W4OAiAQ8b74GXZr4K2Q1Nk+o=)
2: TuQFf56gFAzvfOR4k2nFzwH3xo4.crl (hash: b+UpIHUWeBBkkL0Shk0L2ZNqRJLnBn5fWtRgwVLt2c4=)
3: zQYGnUVB4bBy-t9A3BsXP2JPTI8.roa (hash: yYhiUqDeYjOIAS1CW8QCSgxrWRWrSjdPUM0N7RvDxVg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/cf2ebf-2a09-43d2-a225-a165359a6211/1/TuQFf56gFAzvfOR4k2nFzwH3xo4.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/cf2ebf-2a09-43d2-a225-a165359a6211/1/TuQFf56gFAzvfOR4k2nFzwH3xo4.mft
rsync://rpki.ripe.net/repository/DEFAULT/TuQFf56gFAzvfOR4k2nFzwH3xo4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:c7:eb:06:a0:a8:db:fd:b8:eb:94:03:b4:16:58:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ee4057f9ea0140cef7ce4789369c5cf01f7c68e
Validity
Not Before: Oct 20 04:01:55 2025 GMT
Not After : Oct 21 04:01:55 2025 GMT
Subject: CN=75e732f67e9ef4a7830ff1115c50bd33e9991c2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:0a:31:16:5f:d0:5f:8a:61:a2:43:f6:ce:93:
1c:54:35:41:5f:3c:0a:4d:2a:4c:68:fb:72:fc:12:
bd:fe:7d:76:02:2c:44:9d:b0:10:5c:a3:b3:0b:62:
a6:9a:20:c5:6f:8c:29:5a:ee:7f:e6:d6:68:48:5a:
95:de:ed:c7:6c:46:4f:5d:62:44:03:74:0d:f3:f9:
2c:f0:52:4b:3d:54:87:e4:7f:bc:f0:4d:6c:4b:17:
16:c4:0b:b5:b1:74:8b:2e:79:74:d3:c9:20:d4:e3:
b5:f6:07:99:2a:dc:30:0c:86:f8:aa:99:28:2c:da:
79:fc:e8:9b:8a:79:26:8b:93:5d:94:6c:c2:87:8d:
90:e3:52:3e:9d:d6:a0:01:5c:a4:bd:03:2b:f9:47:
76:34:8b:22:33:93:0b:70:c8:3b:5f:2d:ee:a6:a1:
66:6f:b4:4f:e5:06:2b:f6:d0:03:a2:02:9e:db:0e:
9c:60:43:3a:14:96:9a:26:3d:9b:42:c3:85:07:8f:
05:2a:a3:8e:51:10:71:13:c5:32:a2:c3:da:0e:8e:
b1:0c:b7:e0:46:ac:9f:ff:42:1d:b0:d4:2b:7c:b9:
5f:81:ca:51:b3:1d:97:a4:b6:5d:14:80:3c:8f:1d:
8f:10:ad:7e:d0:be:ae:36:01:31:4b:69:c6:91:69:
89:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:E7:32:F6:7E:9E:F4:A7:83:0F:F1:11:5C:50:BD:33:E9:99:1C:2E
X509v3 Authority Key Identifier:
keyid:4E:E4:05:7F:9E:A0:14:0C:EF:7C:E4:78:93:69:C5:CF:01:F7:C6:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TuQFf56gFAzvfOR4k2nFzwH3xo4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/cf2ebf-2a09-43d2-a225-a165359a6211/1/TuQFf56gFAzvfOR4k2nFzwH3xo4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/cf2ebf-2a09-43d2-a225-a165359a6211/1/TuQFf56gFAzvfOR4k2nFzwH3xo4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:3a:3e:e5:b7:68:c8:bc:a0:a2:ae:b9:5d:b1:94:2b:56:22:
ea:a2:1a:d9:ff:e2:fa:a6:6f:87:94:63:d1:2d:43:23:47:21:
da:c1:5e:96:55:1c:a7:7e:03:16:02:64:23:69:36:b0:1f:21:
d5:e2:ac:d1:4f:82:c9:97:d6:1b:e3:bc:a5:37:81:a8:f6:38:
5e:90:5b:34:08:03:1e:8d:be:21:e1:82:61:f4:98:90:9d:6f:
ec:f4:f0:8b:53:f5:d1:92:c2:22:43:c0:d5:01:81:88:11:c8:
9f:03:13:0d:86:3f:ee:08:de:a3:21:c1:04:a5:ad:2c:70:e6:
3a:dc:23:35:1d:12:cd:bb:f3:e6:3f:03:09:4a:34:94:ca:9b:
a1:bf:62:f1:78:98:67:b3:eb:fc:d7:ac:5d:fd:4b:73:a9:c4:
93:20:c4:af:73:d2:01:89:2c:e4:0d:57:00:66:de:04:96:e3:
25:3d:83:0b:fe:e1:84:80:ca:b7:f0:d5:15:52:d0:03:99:41:
51:10:fd:48:8f:0d:75:36:bb:17:fd:19:90:0f:6a:94:eb:90:
b5:73:50:08:2c:53:82:0a:22:60:c3:b6:3d:ba:c0:a4:83:9e:
4c:13:7d:60:83:48:37:e5:c1:b2:ae:92:17:0d:78:f9:80:46:
e8:e0:0c:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 06:57:51 2025 by rpki-client