Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/a58197-eb09-4415-a61d-abd61aa82426/1/TkifZhWfd7tY0rvH5Pwd_Z3csDQ.mft
File: TkifZhWfd7tY0rvH5Pwd_Z3csDQ.mft (raw, json)
Hash identifier: 5UrvOsGvk8z49wzLic8sLUtXTPDfwNs9inonK1vtNX8=
Subject key identifier: B5:EB:72:49:C9:2A:97:C0:BA:B6:77:EE:C0:20:62:3E:E0:B6:AF:79
Authority key identifier: 4E:48:9F:66:15:9F:77:BB:58:D2:BB:C7:E4:FC:1D:FD:9D:DC:B0:34
Certificate issuer: /CN=4e489f66159f77bb58d2bbc7e4fc1dfd9ddcb034
Certificate serial: 019A0034EDB6CE8577C1F31271B7D09E7567
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TkifZhWfd7tY0rvH5Pwd_Z3csDQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/a58197-eb09-4415-a61d-abd61aa82426/1/TkifZhWfd7tY0rvH5Pwd_Z3csDQ.mft
Manifest number: 16E0
Signing time: Mon 20 Oct 2025 06:00:59 +0000
Manifest this update: Mon 20 Oct 2025 06:00:59 +0000
Manifest next update: Tue 21 Oct 2025 06:00:59 +0000
Files and hashes: 1: TkifZhWfd7tY0rvH5Pwd_Z3csDQ.crl (hash: rIj5JnIlNBjKGhYZxNyFkJc35ZUi5WgpHcvmejTg+28=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/a58197-eb09-4415-a61d-abd61aa82426/1/TkifZhWfd7tY0rvH5Pwd_Z3csDQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/a58197-eb09-4415-a61d-abd61aa82426/1/TkifZhWfd7tY0rvH5Pwd_Z3csDQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/TkifZhWfd7tY0rvH5Pwd_Z3csDQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 06:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:00:34:ed:b6:ce:85:77:c1:f3:12:71:b7:d0:9e:75:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e489f66159f77bb58d2bbc7e4fc1dfd9ddcb034
Validity
Not Before: Oct 20 06:00:59 2025 GMT
Not After : Oct 21 06:00:59 2025 GMT
Subject: CN=b5eb7249c92a97c0bab677eec020623ee0b6af79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:4c:94:f9:0a:1e:c4:7a:02:c5:f1:5e:aa:f5:
28:62:b0:54:9d:bc:cf:80:e5:9e:61:6d:5e:b1:d5:
89:9a:0b:e6:62:0e:7a:66:88:a5:c3:50:0c:05:a8:
75:c4:0d:3a:65:8e:20:59:87:1d:7d:ad:d6:b1:b2:
4f:f6:f4:42:6e:a0:79:d7:0c:ee:72:87:47:7b:da:
9d:09:3d:60:5f:4f:5d:23:34:80:50:3a:13:f5:8a:
90:a2:48:8c:63:d9:ee:51:6f:fb:2b:bd:55:02:a0:
66:4b:79:c4:7b:40:b0:19:ba:3b:66:21:d7:4f:2a:
66:de:2d:4d:b6:7a:9e:db:5c:08:9a:19:1f:7f:69:
82:fb:f8:6a:10:cd:90:7a:14:47:0c:c8:ba:35:46:
02:bc:ff:8e:b0:8b:b7:bb:d7:94:4f:8f:d1:d9:14:
92:27:7b:74:ce:21:d9:fe:c5:6e:74:e1:1d:37:7f:
1e:bc:c9:20:2b:f8:ff:21:60:ac:64:7e:46:ae:ec:
77:82:fe:c0:b4:f1:5e:59:ac:b0:39:24:a7:9d:5d:
90:62:4b:74:65:84:a1:c5:7c:5c:dd:13:e9:6b:9a:
7d:05:c6:9f:a4:ed:e5:84:9a:7f:96:3d:e2:56:a4:
70:27:2c:67:82:c3:91:0b:3c:ad:70:3b:6a:a8:55:
e1:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:EB:72:49:C9:2A:97:C0:BA:B6:77:EE:C0:20:62:3E:E0:B6:AF:79
X509v3 Authority Key Identifier:
keyid:4E:48:9F:66:15:9F:77:BB:58:D2:BB:C7:E4:FC:1D:FD:9D:DC:B0:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TkifZhWfd7tY0rvH5Pwd_Z3csDQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/a58197-eb09-4415-a61d-abd61aa82426/1/TkifZhWfd7tY0rvH5Pwd_Z3csDQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/a58197-eb09-4415-a61d-abd61aa82426/1/TkifZhWfd7tY0rvH5Pwd_Z3csDQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:ec:f7:c1:16:4a:7c:3d:d5:e5:9c:b5:4a:36:ed:79:be:0f:
e7:84:68:0c:1c:93:92:ed:94:64:59:79:4d:30:03:1b:b6:84:
10:e6:1b:c0:c7:98:ca:a9:80:f0:45:25:21:d4:b5:2c:30:18:
77:c1:c8:e7:ae:4d:af:d1:f5:88:c7:99:cc:ab:f0:03:18:e8:
3c:29:72:b3:82:2a:7b:35:59:b2:2a:7e:cc:aa:ec:65:d2:f4:
7c:d5:dd:8e:b7:7b:e8:a6:3f:b4:74:0c:db:e2:88:b1:40:09:
a9:80:1b:71:0c:64:c1:b6:04:e9:1d:a5:f9:f2:36:30:e0:b9:
4a:8d:3b:93:a2:cb:e6:52:14:b5:1d:0a:1d:fa:86:cf:03:90:
30:77:2e:41:19:f7:e7:73:4d:4c:3a:b8:85:98:0e:71:3b:d1:
91:9c:84:12:4c:43:91:85:50:e5:6c:eb:5f:ce:3e:c0:7d:d4:
3d:f3:cd:50:96:57:33:d2:02:d1:b2:f2:da:3f:d6:03:b0:e7:
02:d5:72:55:f6:92:1b:3f:ea:63:80:7e:61:0b:7e:a6:ed:11:
b5:40:61:03:3f:e2:f9:8c:f8:2d:55:0a:f5:d7:a5:25:63:cb:
0a:a0:73:b4:ae:d6:32:fa:5f:b5:eb:14:03:94:85:cb:6b:35:
bf:ac:55:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 14:33:22 2025 by rpki-client