Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/544f32-7c38-4a7e-9d7a-860ef33c504f/1/tkGyiLTUE-lV_qRGCzK_LMGCrwM.mft
File: tkGyiLTUE-lV_qRGCzK_LMGCrwM.mft (raw, json)
Hash identifier: xjlZ/e91JLPnWq/BVkA3pFk629upxdqF6FUJOI83g5w=
Subject key identifier: 5E:73:83:8F:E6:8F:46:34:FC:29:AC:77:A4:31:70:ED:39:9A:99:75
Authority key identifier: B6:41:B2:88:B4:D4:13:E9:55:FE:A4:46:0B:32:BF:2C:C1:82:AF:03
Certificate issuer: /CN=b641b288b4d413e955fea4460b32bf2cc182af03
Certificate serial: 019A04ECD0DF01122F1F12CFA159ECE8B306
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tkGyiLTUE-lV_qRGCzK_LMGCrwM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/544f32-7c38-4a7e-9d7a-860ef33c504f/1/tkGyiLTUE-lV_qRGCzK_LMGCrwM.mft
Manifest number: 16E3
Signing time: Tue 21 Oct 2025 04:00:20 +0000
Manifest this update: Tue 21 Oct 2025 04:00:20 +0000
Manifest next update: Wed 22 Oct 2025 04:00:20 +0000
Files and hashes: 1: tkGyiLTUE-lV_qRGCzK_LMGCrwM.crl (hash: maXPslsynFIGko/MNGmC6w5OnsaDa62z8dcrrd6574o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/544f32-7c38-4a7e-9d7a-860ef33c504f/1/tkGyiLTUE-lV_qRGCzK_LMGCrwM.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/544f32-7c38-4a7e-9d7a-860ef33c504f/1/tkGyiLTUE-lV_qRGCzK_LMGCrwM.mft
rsync://rpki.ripe.net/repository/DEFAULT/tkGyiLTUE-lV_qRGCzK_LMGCrwM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Oct 2025 04:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:04:ec:d0:df:01:12:2f:1f:12:cf:a1:59:ec:e8:b3:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b641b288b4d413e955fea4460b32bf2cc182af03
Validity
Not Before: Oct 21 04:00:20 2025 GMT
Not After : Oct 22 04:00:20 2025 GMT
Subject: CN=5e73838fe68f4634fc29ac77a43170ed399a9975
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:df:32:3f:f1:89:7e:38:f2:d8:39:ca:2d:4b:
e9:93:96:12:c3:d5:f3:06:21:52:8e:89:6a:ec:e1:
36:1c:3e:a8:f2:91:fd:43:b8:28:00:4b:b0:eb:c9:
ae:af:33:22:11:fe:dc:24:3e:e0:51:a5:21:15:9f:
f2:c0:50:99:87:ce:58:f3:24:20:1d:a1:c3:9d:c9:
9c:21:e9:e9:5c:29:ce:58:2f:4c:78:9b:11:03:ef:
c9:c3:0f:3c:25:7c:11:10:21:fc:d5:f3:f6:76:da:
c0:34:38:90:33:fb:9b:2d:11:14:92:2f:25:df:19:
40:16:15:3c:a6:9c:2c:97:2a:a3:45:7b:e3:60:1f:
ac:7b:1a:99:46:aa:f8:de:04:5a:83:98:6e:91:23:
66:95:7a:76:51:4f:9c:43:3e:c6:b3:6d:23:72:0c:
36:06:0d:60:77:e3:90:bb:64:c9:14:1a:18:18:18:
bf:43:9f:9d:23:45:ef:4c:ce:5e:7c:a7:2f:b7:2e:
30:e3:32:77:54:6f:9e:a7:8f:14:e7:34:d7:47:d7:
fb:83:f5:75:a7:3c:20:fa:01:0f:a4:86:37:31:01:
e0:ab:5c:f6:61:a4:8a:2c:89:28:86:b8:9e:b8:bf:
5c:67:9d:30:c7:f5:b2:bd:2f:c8:01:f9:1e:29:68:
c6:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:73:83:8F:E6:8F:46:34:FC:29:AC:77:A4:31:70:ED:39:9A:99:75
X509v3 Authority Key Identifier:
keyid:B6:41:B2:88:B4:D4:13:E9:55:FE:A4:46:0B:32:BF:2C:C1:82:AF:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tkGyiLTUE-lV_qRGCzK_LMGCrwM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/544f32-7c38-4a7e-9d7a-860ef33c504f/1/tkGyiLTUE-lV_qRGCzK_LMGCrwM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/544f32-7c38-4a7e-9d7a-860ef33c504f/1/tkGyiLTUE-lV_qRGCzK_LMGCrwM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:e5:04:66:8a:ff:61:1a:ef:13:71:07:9f:75:06:12:13:22:
98:ef:4e:90:96:92:8b:88:39:f1:a1:46:67:2a:e3:c2:8e:b5:
7a:4e:48:2f:4d:28:fd:ca:d4:2c:41:92:85:1c:f3:02:e5:41:
5e:21:9d:f4:ff:69:63:5c:77:0c:26:01:ee:6b:2e:d2:52:fe:
cd:f5:ac:80:54:c4:ae:2c:7f:ca:e1:57:f1:b4:86:ea:e4:c0:
27:2b:59:b1:f1:28:6b:32:9d:2f:f5:50:c1:5a:69:e3:8d:ff:
b9:41:dd:08:54:ea:5c:de:18:95:ea:18:4f:6d:11:2a:7f:d3:
2c:fe:28:5b:fa:5e:04:52:90:b2:21:94:36:8e:3d:5d:f7:7e:
aa:96:73:88:ee:5c:d2:e3:48:91:6c:b2:00:fe:ae:12:22:58:
e2:7a:61:48:de:38:b5:f8:9b:53:b3:53:b4:e9:bd:12:a7:26:
ad:41:77:9c:b7:b1:f6:0b:c9:b3:6d:19:3e:5f:d2:44:dc:c3:
d6:a2:5d:6e:a2:87:2d:8f:48:0f:e9:4c:75:c4:64:d0:3e:4b:
56:48:63:fb:e5:24:7d:df:1e:62:23:75:9b:d5:22:fe:f7:95:
59:bc:e7:42:3a:24:12:45:18:87:dc:37:c1:dd:fb:86:cd:e9:
93:db:64:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 11:02:49 2025 by rpki-client