Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/61109f-2d19-41ce-ba6e-ddbc0def83e1/1/TnRhR3tZt7wJBvbOYGULs60t7lc.mft
File: TnRhR3tZt7wJBvbOYGULs60t7lc.mft (raw, json)
Hash identifier: //JLQfD+6AirlxQURaX1BsaGUQjUsMXm0h7rTKYh/PA=
Subject key identifier: A4:27:FF:55:4D:CB:43:93:47:39:07:B2:1B:E3:A2:93:96:75:6B:C8
Authority key identifier: 4E:74:61:47:7B:59:B7:BC:09:06:F6:CE:60:65:0B:B3:AD:2D:EE:57
Certificate issuer: /CN=4e7461477b59b7bc0906f6ce60650bb3ad2dee57
Certificate serial: 0199FBEBDDD49D799FAFF8B1E17A8E077D22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TnRhR3tZt7wJBvbOYGULs60t7lc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/61109f-2d19-41ce-ba6e-ddbc0def83e1/1/TnRhR3tZt7wJBvbOYGULs60t7lc.mft
Manifest number: 0737
Signing time: Sun 19 Oct 2025 10:02:42 +0000
Manifest this update: Sun 19 Oct 2025 10:02:42 +0000
Manifest next update: Mon 20 Oct 2025 10:02:42 +0000
Files and hashes: 1: 1-deSD0Zx7mZFaKLgvp5MfNNL6B0.roa (hash: 0HLnR/UxvmJgyKOOTOBI/jNtxozr1BfrerbK66hTjvg=)
2: TnRhR3tZt7wJBvbOYGULs60t7lc.crl (hash: CblBZ1zouILhN+pBEoRh+0fCrlM/ouIqf3nVoqEEhhE=)
3: ztG3iRtcx4pgmD82wNPmhKWPj8w.roa (hash: 7wVFIe2H/2PMSyJC9QSggcK+C7T3Sk0wvSIjn0Idsps=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/61109f-2d19-41ce-ba6e-ddbc0def83e1/1/TnRhR3tZt7wJBvbOYGULs60t7lc.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/61109f-2d19-41ce-ba6e-ddbc0def83e1/1/TnRhR3tZt7wJBvbOYGULs60t7lc.mft
rsync://rpki.ripe.net/repository/DEFAULT/TnRhR3tZt7wJBvbOYGULs60t7lc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:dd:d4:9d:79:9f:af:f8:b1:e1:7a:8e:07:7d:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e7461477b59b7bc0906f6ce60650bb3ad2dee57
Validity
Not Before: Oct 19 10:02:42 2025 GMT
Not After : Oct 20 10:02:42 2025 GMT
Subject: CN=a427ff554dcb4393473907b21be3a29396756bc8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:1b:28:59:4d:a4:77:c6:53:23:e8:a3:5f:45:
ca:c1:ac:8d:65:97:4a:4d:04:5d:57:67:61:f6:d7:
c0:26:97:b3:23:9f:26:5a:ae:c8:d3:9c:8e:65:c7:
d7:4a:df:fa:d8:2c:60:1b:8d:22:67:41:e7:5d:6a:
e7:9c:24:3f:76:21:2f:2d:08:b8:84:d2:07:50:b4:
76:a1:b3:69:d6:42:e8:fe:5f:20:4a:c7:bc:2a:e2:
ce:61:af:65:f6:36:8d:f1:38:38:c4:18:25:92:9a:
a2:3e:1b:c2:42:9c:67:80:70:52:d0:a2:4a:99:ef:
7f:a1:60:e5:be:e1:b4:ed:88:17:19:ea:bf:4b:a3:
b5:68:47:4e:8c:b1:40:e8:d7:a0:16:47:62:fb:23:
f9:34:16:25:ff:63:d2:5b:72:07:b8:6f:f0:74:e9:
b4:89:33:fb:4b:42:41:24:ef:1f:8d:0b:29:c7:b5:
20:d7:8c:a5:21:8f:83:f9:bc:80:91:87:66:0b:c8:
c9:81:c1:8b:52:f2:93:27:21:dc:85:d9:60:22:4c:
4f:27:f3:4f:ae:d8:a4:16:36:3b:c1:52:21:01:a9:
4b:eb:e5:5e:06:3b:78:4c:50:ba:2c:9c:4c:4e:02:
7b:10:ce:c9:45:8d:0d:09:8b:d8:a7:6f:2e:36:24:
0a:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:27:FF:55:4D:CB:43:93:47:39:07:B2:1B:E3:A2:93:96:75:6B:C8
X509v3 Authority Key Identifier:
keyid:4E:74:61:47:7B:59:B7:BC:09:06:F6:CE:60:65:0B:B3:AD:2D:EE:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TnRhR3tZt7wJBvbOYGULs60t7lc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/61109f-2d19-41ce-ba6e-ddbc0def83e1/1/TnRhR3tZt7wJBvbOYGULs60t7lc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/61109f-2d19-41ce-ba6e-ddbc0def83e1/1/TnRhR3tZt7wJBvbOYGULs60t7lc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:4b:50:0a:74:3c:c2:f7:36:b7:7d:78:f0:ec:1c:83:f2:02:
d4:5b:fe:8d:8c:a3:ca:79:c5:d6:50:cd:c7:32:e5:90:2c:45:
53:7d:9c:e6:26:f0:79:f0:e1:f4:78:04:93:b8:9d:bf:7e:a4:
e6:bc:9f:2e:71:cb:e0:7c:9e:af:d3:84:9a:5c:71:74:1f:b4:
d7:48:77:6f:c5:5c:81:93:8a:86:51:9a:f9:cd:ed:01:7c:08:
27:15:fb:6c:16:37:19:8a:a1:14:e4:11:7b:11:b5:93:5a:5b:
80:2c:f7:35:16:9d:c2:ab:52:56:9d:e5:8a:8e:80:c8:13:25:
cc:b6:1b:03:d6:28:ef:b8:0a:fc:d8:c1:e5:24:01:ac:b2:08:
9a:05:17:82:83:e2:59:1f:2a:25:6a:5b:10:40:ed:c9:d8:3a:
b5:1e:52:4f:53:8b:7c:92:8e:4a:01:b2:6e:35:03:17:35:2b:
73:39:33:d7:e2:ea:cc:66:19:a7:5a:2a:09:13:a5:5d:07:ab:
89:c6:aa:9c:50:9c:a0:2c:d6:b1:da:22:bb:63:ec:96:38:74:
c8:fe:55:30:37:b6:3b:86:bb:19:17:4a:ad:0b:aa:da:6d:2b:
f5:40:22:dc:bc:f8:67:14:a7:59:58:2e:05:fe:52:4d:c6:60:
50:c0:a8:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 12:54:40 2025 by rpki-client