Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/e4e696-9d78-414c-af40-cf56c66a0ac0/1/TJMhPYj6h060Rg4sXPG7GpHakHg.mft
File: TJMhPYj6h060Rg4sXPG7GpHakHg.mft (raw, json)
Hash identifier: U2NoleKyx76IFAeBu0szGb63Bq+mXjsJ00dLz18aKRk=
Subject key identifier: 5D:95:67:9A:1B:92:72:D3:5C:F4:0B:59:1C:A9:DF:34:53:10:DA:9C
Authority key identifier: 4C:93:21:3D:88:FA:87:4E:B4:46:0E:2C:5C:F1:BB:1A:91:DA:90:78
Certificate issuer: /CN=4c93213d88fa874eb4460e2c5cf1bb1a91da9078
Certificate serial: 0199FCFD67A1AB64B8DF76AC7D021171ED40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TJMhPYj6h060Rg4sXPG7GpHakHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/e4e696-9d78-414c-af40-cf56c66a0ac0/1/TJMhPYj6h060Rg4sXPG7GpHakHg.mft
Manifest number: 16E1
Signing time: Sun 19 Oct 2025 15:01:29 +0000
Manifest this update: Sun 19 Oct 2025 15:01:29 +0000
Manifest next update: Mon 20 Oct 2025 15:01:29 +0000
Files and hashes: 1: Rg6hH-WpB5JizUzL9_m7Rs15AT8.roa (hash: evDadyMTuwtAOSC/b6PGvpRRvlRN1DP+6W56r0BhqXQ=)
2: TJMhPYj6h060Rg4sXPG7GpHakHg.crl (hash: CVo0SQcFCqEfCS5Zd+jPDecmpaxIugMHg28f5bWPWYk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/e4e696-9d78-414c-af40-cf56c66a0ac0/1/TJMhPYj6h060Rg4sXPG7GpHakHg.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/e4e696-9d78-414c-af40-cf56c66a0ac0/1/TJMhPYj6h060Rg4sXPG7GpHakHg.mft
rsync://rpki.ripe.net/repository/DEFAULT/TJMhPYj6h060Rg4sXPG7GpHakHg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:fd:67:a1:ab:64:b8:df:76:ac:7d:02:11:71:ed:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c93213d88fa874eb4460e2c5cf1bb1a91da9078
Validity
Not Before: Oct 19 15:01:29 2025 GMT
Not After : Oct 20 15:01:29 2025 GMT
Subject: CN=5d95679a1b9272d35cf40b591ca9df345310da9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:58:0d:85:41:d8:1e:ea:2f:c1:42:5d:cb:4e:
1f:c1:b1:3d:dc:02:7d:d0:a2:a3:c3:46:98:5f:3e:
d2:77:77:09:33:1f:ab:cf:2a:2f:10:68:01:71:d3:
9d:01:bd:4d:bd:40:3f:e6:29:ed:8c:b2:2a:81:9a:
5e:7b:54:75:fb:42:d1:2d:ee:00:24:ef:09:d8:e2:
75:07:cd:73:4e:09:ea:12:89:08:2d:c5:6d:db:dd:
97:8a:fe:e8:83:54:f7:8c:fe:61:b6:84:84:ef:2f:
77:84:b8:05:d0:76:67:68:2a:35:a0:46:ac:fd:3f:
6c:7c:ef:00:60:2e:0b:b3:f4:9a:dc:54:7d:82:21:
8b:b4:be:c4:09:b6:5c:9e:74:eb:10:69:7b:6d:d4:
f1:a7:44:26:c6:cb:db:50:4a:72:31:f5:b6:85:dc:
fa:96:50:7f:0d:f1:2c:25:74:01:c4:9e:3b:1d:c8:
df:f4:95:c1:a6:26:a1:3f:a8:19:55:5b:d3:b8:fe:
ff:6b:e1:20:8d:d8:89:72:5f:72:38:a4:4a:a6:e2:
bf:32:3d:78:3e:d7:c7:ef:a8:dc:1e:47:d2:1a:17:
ea:f3:ba:07:82:ce:be:9c:41:80:54:ec:76:02:3d:
7b:26:16:69:8b:c4:ce:d1:44:10:ff:d1:e2:d3:bd:
36:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:95:67:9A:1B:92:72:D3:5C:F4:0B:59:1C:A9:DF:34:53:10:DA:9C
X509v3 Authority Key Identifier:
keyid:4C:93:21:3D:88:FA:87:4E:B4:46:0E:2C:5C:F1:BB:1A:91:DA:90:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TJMhPYj6h060Rg4sXPG7GpHakHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/e4e696-9d78-414c-af40-cf56c66a0ac0/1/TJMhPYj6h060Rg4sXPG7GpHakHg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/e4e696-9d78-414c-af40-cf56c66a0ac0/1/TJMhPYj6h060Rg4sXPG7GpHakHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:75:10:bc:ab:b3:72:5a:56:89:3e:42:87:a1:57:85:d5:fd:
b7:36:75:d7:3f:78:ab:4e:23:88:f1:72:bf:8e:30:a7:47:93:
75:f8:17:fe:76:86:c1:8b:88:7a:98:a4:39:c1:b0:ba:70:4e:
4f:6b:ed:ba:78:e4:2d:46:f9:0a:02:9e:ed:f8:4f:98:e7:7b:
58:03:12:d0:28:2c:db:69:75:ca:76:93:46:34:b4:08:b5:ee:
60:1f:ac:21:cf:7d:0a:a0:28:8b:5f:65:14:5b:bd:db:36:64:
81:ba:b5:d3:a5:f2:58:b5:73:11:af:38:0f:8d:53:46:5a:84:
2c:55:95:77:cd:35:5b:c0:6c:c1:ff:39:62:e7:e0:b5:8e:02:
c9:2d:1f:4c:94:2c:f9:71:5e:1c:66:29:bd:04:85:55:5e:a2:
0b:41:42:d1:89:86:c2:65:6b:4f:51:9a:a4:96:14:91:85:bf:
55:df:9b:fb:42:f4:e2:92:c2:40:b6:54:79:2b:09:c6:57:3f:
48:3e:3d:d5:5c:86:ae:e9:ee:d1:df:e9:fd:5c:ee:f7:98:e9:
90:3a:eb:8a:84:f5:46:dd:1e:65:78:95:85:8f:8b:5d:68:3a:
c6:3d:61:00:b4:96:91:e7:c4:3a:b0:66:22:7a:ef:f2:81:18:
54:ab:a5:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:48:19 2025 by rpki-client