Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/ea0196-ab79-42cf-ab2b-fc4b03710ae0/1/TK0Dl0h3meIRj_TLz48Vl0fzWJE.mft
File: TK0Dl0h3meIRj_TLz48Vl0fzWJE.mft (raw, json)
Hash identifier: sOkQdf2hJVjPR/YRXHcWBrNhSK7i4YxKoQ+0r2u6YI8=
Subject key identifier: 78:D2:33:88:68:98:9F:68:15:F3:B7:87:C6:39:8A:D9:01:56:80:E6
Authority key identifier: 4C:AD:03:97:48:77:99:E2:11:8F:F4:CB:CF:8F:15:97:47:F3:58:91
Certificate issuer: /CN=4cad0397487799e2118ff4cbcf8f159747f35891
Certificate serial: 0199FB7D0965231C9D22786F1FF1B0414047
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TK0Dl0h3meIRj_TLz48Vl0fzWJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/ea0196-ab79-42cf-ab2b-fc4b03710ae0/1/TK0Dl0h3meIRj_TLz48Vl0fzWJE.mft
Manifest number: 16E6
Signing time: Sun 19 Oct 2025 08:01:39 +0000
Manifest this update: Sun 19 Oct 2025 08:01:39 +0000
Manifest next update: Mon 20 Oct 2025 08:01:39 +0000
Files and hashes: 1: 3hSBBEtakLk1jIWXi3hchM-uTBM.roa (hash: NhWJmyJNB4sc9UZdlJ419SqvZ3IVwqNXUyuWTH42r1U=)
2: TK0Dl0h3meIRj_TLz48Vl0fzWJE.crl (hash: 4OuJDpXwVZBLgz1rN+yz+JHv4heCna51T1FfKFVWKI8=)
3: fziBQYI5VQChSmnvHhKXUMLYNKw.roa (hash: NEQyAGhhDS5WgZXodzUc9okNLj3B3fbMtY+K4TNZzLs=)
4: n7v5YOrSFGoXqVJ0PeytCrFgOLg.roa (hash: +oN44CijE7GRp64D6SkmoV+lAs+Tba+IrPKezC+0CLo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/ea0196-ab79-42cf-ab2b-fc4b03710ae0/1/TK0Dl0h3meIRj_TLz48Vl0fzWJE.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/ea0196-ab79-42cf-ab2b-fc4b03710ae0/1/TK0Dl0h3meIRj_TLz48Vl0fzWJE.mft
rsync://rpki.ripe.net/repository/DEFAULT/TK0Dl0h3meIRj_TLz48Vl0fzWJE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 08:01:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:7d:09:65:23:1c:9d:22:78:6f:1f:f1:b0:41:40:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4cad0397487799e2118ff4cbcf8f159747f35891
Validity
Not Before: Oct 19 08:01:39 2025 GMT
Not After : Oct 20 08:01:39 2025 GMT
Subject: CN=78d2338868989f6815f3b787c6398ad9015680e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:01:d1:7e:b2:45:42:9b:c3:0a:ae:88:5d:74:
8c:18:b6:e8:30:85:fe:c0:38:0b:85:83:2b:b8:3f:
30:5a:fb:4e:75:37:d3:0a:bf:df:b9:33:a0:ef:ea:
be:ce:af:11:d8:fc:fe:91:de:f5:03:ea:e4:0f:41:
a2:be:be:52:50:7b:7f:ad:96:6a:ac:07:28:91:24:
ae:1b:b7:af:4e:1a:1e:c3:d6:5b:89:9d:c2:14:a2:
98:5d:44:c7:36:82:7b:9c:8e:18:6e:13:60:b9:4e:
4a:45:f6:ee:6c:84:9e:26:56:18:89:17:ea:3c:e1:
b7:29:e0:20:fc:32:c6:cf:ba:79:37:e7:9c:e8:5b:
08:e3:12:df:b8:b0:f6:fc:cf:4f:9a:29:72:e7:e7:
ba:db:ef:0c:c2:e4:f1:ac:f8:76:b8:bc:03:36:d1:
9c:f1:7b:4b:bd:72:3e:29:96:0f:0f:54:9c:55:6f:
a5:ff:4f:f1:b7:2c:57:16:a2:fc:fa:65:ab:f9:9e:
4e:50:6c:76:a9:24:fe:72:a1:a1:b1:d8:03:98:59:
b7:24:ba:68:59:5b:7a:fa:a9:ce:94:29:fe:34:11:
49:9d:98:59:ce:60:fd:8b:31:b2:90:9a:80:e8:1c:
a5:f9:68:b9:b0:ca:6e:24:d9:30:c2:a5:5e:63:e5:
35:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:D2:33:88:68:98:9F:68:15:F3:B7:87:C6:39:8A:D9:01:56:80:E6
X509v3 Authority Key Identifier:
keyid:4C:AD:03:97:48:77:99:E2:11:8F:F4:CB:CF:8F:15:97:47:F3:58:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TK0Dl0h3meIRj_TLz48Vl0fzWJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/ea0196-ab79-42cf-ab2b-fc4b03710ae0/1/TK0Dl0h3meIRj_TLz48Vl0fzWJE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/ea0196-ab79-42cf-ab2b-fc4b03710ae0/1/TK0Dl0h3meIRj_TLz48Vl0fzWJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:79:56:ee:ac:35:6d:64:47:2a:66:eb:38:16:17:8c:64:ad:
04:0f:90:a2:80:7b:6c:36:1d:aa:4f:1d:ea:78:ae:a0:d3:f2:
60:e5:23:14:53:e3:03:17:08:e5:32:9e:6a:52:d7:a0:77:4f:
f3:25:be:11:4b:73:c4:b2:ad:88:bb:b6:7e:4e:ae:b6:db:97:
09:23:50:1d:ae:e7:1f:30:b5:7a:8d:bd:29:4c:d7:a3:f9:96:
fb:8d:2d:f6:81:9d:13:ba:93:37:da:66:01:b4:d9:18:6d:31:
98:da:29:66:e4:a4:28:03:2d:51:bf:bb:58:89:fe:2e:6d:7d:
40:c0:0c:1b:e9:21:e1:a6:c1:07:06:a0:54:ee:39:67:11:d3:
f4:84:58:fb:c2:55:a0:54:f3:08:a4:c9:33:f0:75:93:8d:07:
50:05:dc:00:01:64:d5:88:11:4a:e3:a8:93:d3:92:0c:1f:7e:
49:4b:a0:18:28:2e:13:04:0e:fb:19:54:4f:3c:83:8f:d2:14:
74:61:fa:34:1d:ae:f3:69:d8:8e:5a:e7:6f:66:ec:7f:44:ba:
30:f9:d0:f2:27:2d:e4:0c:63:f0:4f:eb:06:02:25:da:f6:7f:
43:e7:0b:32:12:d6:3c:ee:fc:bd:eb:c4:2b:44:da:f4:e2:8b:
7b:b0:39:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:06:30 2025 by rpki-client