Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/5ca294-897b-4e49-a9c7-bc48b41f498b/1/TNR7i4qp-8zP89UHgU_HRGSiq_A.mft
File: TNR7i4qp-8zP89UHgU_HRGSiq_A.mft (raw, json)
Hash identifier: kYDGm2eJilKdKwpdCuGFQOlJPN5CktHtGE3vf6PWjWg=
Subject key identifier: 92:C2:08:6B:49:E1:B6:40:29:B8:9C:11:D7:D7:D0:27:6C:64:10:05
Authority key identifier: 4C:D4:7B:8B:8A:A9:FB:CC:CF:F3:D5:07:81:4F:C7:44:64:A2:AB:F0
Certificate issuer: /CN=4cd47b8b8aa9fbcccff3d507814fc74464a2abf0
Certificate serial: 0199FC58FBEABF92AF91B713829B109BF4F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TNR7i4qp-8zP89UHgU_HRGSiq_A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/5ca294-897b-4e49-a9c7-bc48b41f498b/1/TNR7i4qp-8zP89UHgU_HRGSiq_A.mft
Manifest number: 0DD7
Signing time: Sun 19 Oct 2025 12:01:54 +0000
Manifest this update: Sun 19 Oct 2025 12:01:54 +0000
Manifest next update: Mon 20 Oct 2025 12:01:54 +0000
Files and hashes: 1: TNR7i4qp-8zP89UHgU_HRGSiq_A.crl (hash: 7i3A/Dyec9kNgUUVwRpgs75CUTQbbpvA5z2BqhefnI0=)
2: zYBlb8-4iJi2Xsk5poztWDw6ukY.roa (hash: veXHQ0WmE+2KQkfYtO+EXvFrciAIGT+yWdclt50BTQA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/5ca294-897b-4e49-a9c7-bc48b41f498b/1/TNR7i4qp-8zP89UHgU_HRGSiq_A.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/5ca294-897b-4e49-a9c7-bc48b41f498b/1/TNR7i4qp-8zP89UHgU_HRGSiq_A.mft
rsync://rpki.ripe.net/repository/DEFAULT/TNR7i4qp-8zP89UHgU_HRGSiq_A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:fb:ea:bf:92:af:91:b7:13:82:9b:10:9b:f4:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4cd47b8b8aa9fbcccff3d507814fc74464a2abf0
Validity
Not Before: Oct 19 12:01:54 2025 GMT
Not After : Oct 20 12:01:54 2025 GMT
Subject: CN=92c2086b49e1b64029b89c11d7d7d0276c641005
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:fe:ce:5a:d7:2d:67:41:67:1a:c5:7f:c0:ad:
bd:e6:da:e5:ff:4c:c1:4b:2b:87:b2:0c:57:6e:bd:
0e:11:a5:3d:63:ee:36:b7:db:7d:2a:44:5e:0e:68:
2f:fd:c5:33:ce:c1:9e:08:0f:8f:7d:32:ee:17:76:
89:a2:8d:e5:c5:da:2d:b8:e0:1d:69:4c:27:1e:6d:
73:63:72:a9:f0:7b:b7:a7:25:3f:07:29:48:d8:43:
bf:2a:29:00:f1:46:f6:6e:df:be:d4:e8:03:01:4d:
cb:a5:c4:07:c2:a2:c8:80:41:aa:46:bb:48:30:71:
da:67:06:6e:8c:2b:87:ba:c4:e3:75:cb:a1:1b:26:
98:93:5e:3a:f8:0a:6b:c5:3e:91:a0:c8:ff:f6:06:
28:71:50:00:4f:d0:b9:d9:ab:81:fd:cc:b1:d2:2e:
5b:94:e5:a6:d5:2e:be:f2:6b:b9:c7:0d:3a:05:59:
ba:c4:f6:90:5a:5c:2b:1c:e2:4d:bc:9a:ac:c8:11:
27:69:54:72:f0:21:c6:14:b3:90:19:5f:fa:d2:31:
70:27:61:90:0a:b2:8b:06:29:1e:90:c4:4f:a1:34:
c7:bd:23:61:c4:11:1d:75:e9:63:13:91:ea:bd:ee:
7a:2d:95:ef:46:98:66:17:ef:8b:15:c3:b2:ee:bc:
23:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:C2:08:6B:49:E1:B6:40:29:B8:9C:11:D7:D7:D0:27:6C:64:10:05
X509v3 Authority Key Identifier:
keyid:4C:D4:7B:8B:8A:A9:FB:CC:CF:F3:D5:07:81:4F:C7:44:64:A2:AB:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TNR7i4qp-8zP89UHgU_HRGSiq_A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/5ca294-897b-4e49-a9c7-bc48b41f498b/1/TNR7i4qp-8zP89UHgU_HRGSiq_A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/5ca294-897b-4e49-a9c7-bc48b41f498b/1/TNR7i4qp-8zP89UHgU_HRGSiq_A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:7c:5a:e2:c2:5b:47:81:aa:80:ab:01:18:aa:62:07:dc:b1:
cd:10:5f:4b:76:17:3f:5b:df:a0:80:dd:fe:2f:d4:73:05:1f:
87:8d:f8:24:a6:f6:89:80:92:bd:d3:b0:0f:80:fb:35:12:32:
68:07:0c:3f:8d:04:4d:03:49:f4:4c:2a:b0:1f:c1:52:ae:c6:
20:0a:e2:17:91:9b:54:11:c9:8d:34:99:b3:de:32:e6:26:68:
92:30:20:20:4c:6a:63:3f:e6:31:83:04:bd:6a:98:c6:7f:0d:
fd:71:62:95:10:e0:2a:9f:8d:d8:64:f5:22:1e:2b:04:f9:b1:
8b:64:77:f9:7c:3a:f1:ae:47:f2:5f:2f:07:4c:37:e5:a0:fb:
56:cb:c2:d5:11:16:6c:da:cb:16:c5:37:24:63:4d:37:28:2f:
df:d0:7c:24:6f:b7:20:96:21:de:96:dd:06:5a:b4:21:67:18:
3e:57:2b:50:4d:1d:4a:35:ef:f0:07:ba:e8:46:f2:2e:33:9b:
82:7b:82:55:38:38:70:1e:5d:ce:95:3f:a4:c7:54:6f:9d:b0:
4b:68:76:df:41:aa:e3:d7:02:21:71:f8:ec:bf:56:0a:12:d7:
77:34:f1:fb:81:d0:c6:b6:2a:ae:6e:6d:b1:db:83:76:1e:44:
09:5f:24:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:27:18 2025 by rpki-client