Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/4afeab-02b9-4ebd-bfa2-8e80b496a03e/1/TgTgpximE5qcZfDUiGu4JxTaZoI.mft
File: TgTgpximE5qcZfDUiGu4JxTaZoI.mft (raw, json)
Hash identifier: tFOMah8W+isyM73ymh7UWikkzknajO455oG3d++h+V0=
Subject key identifier: 85:AA:C2:19:F2:53:B0:0D:5E:A3:83:C1:6F:54:E9:EC:88:2E:D5:86
Authority key identifier: 4E:04:E0:A7:18:A6:13:9A:9C:65:F0:D4:88:6B:B8:27:14:DA:66:82
Certificate issuer: /CN=4e04e0a718a6139a9c65f0d4886bb82714da6682
Certificate serial: 0199FBEB322C8F7E9DEEAC2FBECC3EFFEE68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TgTgpximE5qcZfDUiGu4JxTaZoI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/4afeab-02b9-4ebd-bfa2-8e80b496a03e/1/TgTgpximE5qcZfDUiGu4JxTaZoI.mft
Manifest number: 16E2
Signing time: Sun 19 Oct 2025 10:01:58 +0000
Manifest this update: Sun 19 Oct 2025 10:01:58 +0000
Manifest next update: Mon 20 Oct 2025 10:01:58 +0000
Files and hashes: 1: TgTgpximE5qcZfDUiGu4JxTaZoI.crl (hash: TivbVKlAWrWHeIPeslaWCbiNejk/Xc8WLVztBWK90Yg=)
2: _DVbXJIlrc4WueVJodx5_dUQQGU.roa (hash: qLnLYdx/R1C59idEfb9lAoJsSeK5qnRHJhL7xW0LEkE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/4afeab-02b9-4ebd-bfa2-8e80b496a03e/1/TgTgpximE5qcZfDUiGu4JxTaZoI.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/4afeab-02b9-4ebd-bfa2-8e80b496a03e/1/TgTgpximE5qcZfDUiGu4JxTaZoI.mft
rsync://rpki.ripe.net/repository/DEFAULT/TgTgpximE5qcZfDUiGu4JxTaZoI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:32:2c:8f:7e:9d:ee:ac:2f:be:cc:3e:ff:ee:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e04e0a718a6139a9c65f0d4886bb82714da6682
Validity
Not Before: Oct 19 10:01:58 2025 GMT
Not After : Oct 20 10:01:58 2025 GMT
Subject: CN=85aac219f253b00d5ea383c16f54e9ec882ed586
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:53:e1:85:07:cd:b6:34:74:6c:d3:ca:e2:a3:
27:3e:07:a8:45:13:09:db:4f:76:1c:4d:67:29:f5:
42:b3:06:fe:fa:d4:96:e3:fb:1f:af:c8:3d:f3:22:
ce:f3:f3:5a:12:33:ef:46:8a:07:2d:63:38:15:f0:
7f:96:e9:b9:bc:fa:d3:a7:cc:2d:66:71:d7:92:dd:
24:f2:21:c4:62:7c:6e:b4:11:dc:74:87:d8:c2:6b:
6d:bc:2c:c8:2d:b8:44:38:a1:90:6f:99:c7:e6:97:
c8:46:c3:d5:52:ad:7e:d7:c1:f1:11:c0:01:66:dd:
03:40:69:14:f8:4d:92:4c:0b:a2:cd:ab:18:48:d1:
45:8c:52:68:55:35:b9:8f:9d:ae:fa:c6:70:29:68:
9c:b9:52:63:63:90:f7:5e:3c:cb:0d:c8:91:c4:20:
6d:e1:58:01:6a:59:db:74:b3:39:4e:2a:7f:6d:c1:
d7:91:ab:e9:b3:2c:54:85:32:12:cb:b9:ed:7b:52:
e3:69:dd:e0:a0:89:1b:ef:c8:29:a6:59:f6:4d:d3:
4c:94:30:d4:9d:76:60:ff:ef:14:7f:b8:93:7b:73:
a4:b5:d3:77:23:7d:f8:2b:19:06:87:ac:04:1a:e8:
c4:a7:2b:90:47:31:ae:74:b1:1e:0d:a8:6e:9d:d8:
c4:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:AA:C2:19:F2:53:B0:0D:5E:A3:83:C1:6F:54:E9:EC:88:2E:D5:86
X509v3 Authority Key Identifier:
keyid:4E:04:E0:A7:18:A6:13:9A:9C:65:F0:D4:88:6B:B8:27:14:DA:66:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TgTgpximE5qcZfDUiGu4JxTaZoI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/4afeab-02b9-4ebd-bfa2-8e80b496a03e/1/TgTgpximE5qcZfDUiGu4JxTaZoI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/4afeab-02b9-4ebd-bfa2-8e80b496a03e/1/TgTgpximE5qcZfDUiGu4JxTaZoI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:a9:a8:06:7b:87:27:82:ca:b8:66:75:d4:f8:6d:6e:ed:49:
a3:96:73:3a:e7:21:51:4e:5f:2a:b8:09:87:12:4e:2a:6d:3c:
84:a6:7e:29:e5:13:fc:48:5c:19:fb:7b:6d:78:89:53:ad:cc:
24:e2:35:88:e9:8f:0a:a6:69:45:27:d4:47:96:bd:f0:cd:62:
1a:8e:03:e2:4e:9d:fc:2d:76:c7:c1:d8:33:c6:a7:ca:7b:71:
9c:99:3d:86:16:fa:b7:f8:21:75:dd:09:e2:3b:ec:72:fd:c7:
5e:1c:46:99:a5:4b:cd:6e:41:bf:88:54:43:b3:cc:7c:ad:ad:
61:c8:1c:60:51:35:f3:0e:c2:a5:b8:c8:52:26:18:d4:9b:3d:
f1:eb:4a:82:8d:6d:fb:bf:ad:e2:7f:a9:35:06:9e:10:70:58:
8c:11:f9:ce:63:4d:3e:8d:ba:08:15:d5:40:e6:78:cf:e6:ff:
29:35:bf:96:d2:6c:61:68:ea:96:00:2b:6b:89:e1:3f:a2:7f:
fc:44:9e:77:40:6c:b9:01:70:33:cc:ff:d2:6c:ad:4d:37:ff:
53:99:ff:40:d4:e7:de:79:00:0f:2b:54:c8:8b:70:31:6d:dc:
02:03:81:5c:0e:26:42:e5:ce:8a:d6:09:06:86:45:bf:22:23:
26:69:db:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:40:20 2025 by rpki-client