Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/ee29a6-691d-4b0c-ad63-94c8254bd3b7/1/TBsMQJaQgJV_zO4fuKP7S7OL9dw.mft
File: TBsMQJaQgJV_zO4fuKP7S7OL9dw.mft (raw, json)
Hash identifier: 3oV8bk2x+smHjN6jTgUTGeIP8L3L0o0VqzmWrgDZiA4=
Subject key identifier: 8C:39:21:6E:D1:B4:CE:88:7F:3E:84:ED:68:F1:C1:E2:2C:9F:68:59
Authority key identifier: 4C:1B:0C:40:96:90:80:95:7F:CC:EE:1F:B8:A3:FB:4B:B3:8B:F5:DC
Certificate issuer: /CN=4c1b0c40969080957fccee1fb8a3fb4bb38bf5dc
Certificate serial: 0199FDD950CB696408D57D08D4ED849EB598
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TBsMQJaQgJV_zO4fuKP7S7OL9dw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/ee29a6-691d-4b0c-ad63-94c8254bd3b7/1/TBsMQJaQgJV_zO4fuKP7S7OL9dw.mft
Manifest number: 13D1
Signing time: Sun 19 Oct 2025 19:01:41 +0000
Manifest this update: Sun 19 Oct 2025 19:01:41 +0000
Manifest next update: Mon 20 Oct 2025 19:01:41 +0000
Files and hashes: 1: H36xXwuB9FJ3ESjpo_XmH_KZ2R4.roa (hash: CUtTMRPtfP9rNsMoQeZ2J44Z+jwTnsWRsKW5k/0LKug=)
2: TBsMQJaQgJV_zO4fuKP7S7OL9dw.crl (hash: JV8AQhVTSBRMTjpPd8i0FbbuxMOhvcCBw48dHhwiu9c=)
3: tpqvdlW8wuSttlFQd80uk4F5YQY.roa (hash: yDvp+gGPiyhARcManoLZEVb02KcZ7k4JkC3clhGu75w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/ee29a6-691d-4b0c-ad63-94c8254bd3b7/1/TBsMQJaQgJV_zO4fuKP7S7OL9dw.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/ee29a6-691d-4b0c-ad63-94c8254bd3b7/1/TBsMQJaQgJV_zO4fuKP7S7OL9dw.mft
rsync://rpki.ripe.net/repository/DEFAULT/TBsMQJaQgJV_zO4fuKP7S7OL9dw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d9:50:cb:69:64:08:d5:7d:08:d4:ed:84:9e:b5:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c1b0c40969080957fccee1fb8a3fb4bb38bf5dc
Validity
Not Before: Oct 19 19:01:41 2025 GMT
Not After : Oct 20 19:01:41 2025 GMT
Subject: CN=8c39216ed1b4ce887f3e84ed68f1c1e22c9f6859
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:1a:fd:23:8a:1c:7d:29:01:02:6a:1b:8b:93:
11:fd:14:37:6a:48:4a:e3:d8:0d:b8:b6:e6:d6:0a:
75:88:e2:82:5f:65:e1:62:fa:bd:1a:97:9a:e1:64:
5d:16:1f:b5:5d:b8:0a:58:f0:f8:76:ae:13:a7:03:
a4:9a:b0:9f:53:00:ba:ab:da:22:e4:78:f2:ee:2f:
b7:3a:af:c8:a6:e4:d0:c8:a0:8a:e5:ef:ad:f7:df:
a0:c6:fb:9a:a1:8c:89:4d:b3:2d:55:88:4a:1b:3f:
19:df:53:86:99:ea:97:4b:3d:a5:04:7f:b3:8d:d8:
ee:58:55:e2:82:d9:2f:80:24:01:a5:e0:b1:76:1a:
57:7a:5e:34:0a:c9:91:c9:a3:bc:7a:88:ee:79:5e:
12:d3:21:c7:dc:86:f4:7c:2f:28:52:b2:53:66:73:
57:b8:de:33:2b:a7:0d:a3:dd:d9:21:51:76:0e:e9:
33:3f:57:c6:d8:5f:ca:27:9d:4d:4f:fb:2f:00:85:
ff:ed:d8:80:68:0d:02:89:26:e6:ac:c9:3f:4a:bd:
eb:ee:d9:9f:ae:ca:fc:b0:84:1b:6b:9f:74:b7:f7:
6f:9a:27:ea:8f:40:1d:12:b2:64:63:36:84:ac:d3:
06:3f:a5:fe:6c:e4:f5:6e:5c:c3:36:6f:7f:52:16:
f2:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:39:21:6E:D1:B4:CE:88:7F:3E:84:ED:68:F1:C1:E2:2C:9F:68:59
X509v3 Authority Key Identifier:
keyid:4C:1B:0C:40:96:90:80:95:7F:CC:EE:1F:B8:A3:FB:4B:B3:8B:F5:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TBsMQJaQgJV_zO4fuKP7S7OL9dw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/ee29a6-691d-4b0c-ad63-94c8254bd3b7/1/TBsMQJaQgJV_zO4fuKP7S7OL9dw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/ee29a6-691d-4b0c-ad63-94c8254bd3b7/1/TBsMQJaQgJV_zO4fuKP7S7OL9dw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:e5:2e:2d:7c:9c:53:c0:a3:b5:58:5e:51:7a:ae:dd:8f:dd:
62:0f:52:6e:b7:00:5b:16:14:4c:22:d2:63:9d:e7:a4:42:1e:
22:89:2a:9c:8c:c7:5e:d2:46:4e:22:c3:5c:69:6d:60:9b:9e:
52:8d:42:43:34:1a:70:bb:7a:31:cb:e1:12:97:08:95:85:5d:
01:24:4e:67:df:59:d0:54:ba:50:9a:e8:05:0b:c1:0a:50:01:
ad:21:2a:8a:44:94:af:fe:ce:27:d3:dd:0d:99:89:78:ab:ea:
24:66:3d:5d:0d:8c:cb:3a:5d:98:b2:e6:c5:eb:92:a3:14:74:
d5:98:e8:af:a4:47:4d:1c:98:3b:da:b3:fb:c7:26:51:2a:ba:
c5:4f:ae:9a:3b:58:81:39:5c:76:28:ce:e9:a5:07:38:fb:bb:
4b:29:a5:8e:ca:7b:61:e3:83:cd:49:61:81:f4:82:df:8e:68:
2e:fb:fd:bb:8a:52:fd:ba:29:ec:2d:22:b3:7c:ac:bf:d1:59:
eb:3a:60:37:6f:13:ff:c6:71:b8:9e:dd:e7:91:0b:02:06:b7:
a5:de:c4:75:ca:44:17:e0:f5:bf:d6:9a:d9:01:a0:0a:ea:c2:
6f:09:04:4c:16:85:d9:da:50:99:b2:04:7f:73:e7:fc:48:ac:
ed:9d:56:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:02:41 2025 by rpki-client