Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/343892-780c-432a-882f-1e0d7c42da76/1/TLkyvGDp_RGG-Ppr1xPCBymuc-4.mft
File: TLkyvGDp_RGG-Ppr1xPCBymuc-4.mft (raw, json)
Hash identifier: Boba3lQ9QsCxGlQmr1nqPq/FpFz4T9xvSbLTpZfQN/0=
Subject key identifier: AD:6D:29:57:74:61:D0:58:51:2D:D6:A7:23:73:3B:5B:28:EF:D7:DC
Authority key identifier: 4C:B9:32:BC:60:E9:FD:11:86:F8:FA:6B:D7:13:C2:07:29:AE:73:EE
Certificate issuer: /CN=4cb932bc60e9fd1186f8fa6bd713c20729ae73ee
Certificate serial: 0199FCC6BA63742D45047400222CC1AB3A20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TLkyvGDp_RGG-Ppr1xPCBymuc-4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/343892-780c-432a-882f-1e0d7c42da76/1/TLkyvGDp_RGG-Ppr1xPCBymuc-4.mft
Manifest number: 1297
Signing time: Sun 19 Oct 2025 14:01:46 +0000
Manifest this update: Sun 19 Oct 2025 14:01:46 +0000
Manifest next update: Mon 20 Oct 2025 14:01:46 +0000
Files and hashes: 1: TLkyvGDp_RGG-Ppr1xPCBymuc-4.crl (hash: G41dScsk9BJ0yWDPvSXqSWPQcdSkm/YWkmg4sMu4mKU=)
2: j-betU5F3fuYYNREFl5I-_t74ng.roa (hash: ThVTYZ7pBXxFoxAK1y8K2Bay/CDdSEmxPkT01D83Maw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/343892-780c-432a-882f-1e0d7c42da76/1/TLkyvGDp_RGG-Ppr1xPCBymuc-4.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/343892-780c-432a-882f-1e0d7c42da76/1/TLkyvGDp_RGG-Ppr1xPCBymuc-4.mft
rsync://rpki.ripe.net/repository/DEFAULT/TLkyvGDp_RGG-Ppr1xPCBymuc-4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 14:01:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:ba:63:74:2d:45:04:74:00:22:2c:c1:ab:3a:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4cb932bc60e9fd1186f8fa6bd713c20729ae73ee
Validity
Not Before: Oct 19 14:01:46 2025 GMT
Not After : Oct 20 14:01:46 2025 GMT
Subject: CN=ad6d29577461d058512dd6a723733b5b28efd7dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:55:d7:4f:17:9e:17:68:5e:2b:ae:a3:e6:67:
ec:19:78:99:c8:cf:5a:c7:53:65:4c:65:88:55:22:
18:68:ed:76:12:ee:21:42:d8:06:c9:2a:ea:a9:2e:
32:c4:ae:69:47:3d:ba:d9:2a:3f:1c:b3:30:5c:ba:
3f:b8:8a:f9:11:04:7f:a2:17:5b:4a:31:98:78:8b:
fe:aa:99:87:e9:83:e0:ce:4b:40:54:82:0f:28:7d:
f8:a6:79:6d:90:5d:66:b3:8f:9f:f5:71:44:d4:1a:
6a:fe:4a:42:dd:2f:8f:d3:94:fb:da:1a:1b:5b:c2:
5f:e3:00:8c:47:dd:65:d1:df:1e:52:d3:14:03:d8:
c3:a5:08:56:f9:0a:a0:5f:cd:da:fb:a9:29:e4:db:
a1:50:06:9b:15:eb:7d:ec:f9:a2:f8:5e:ff:80:ad:
2d:ad:77:97:48:a7:fa:93:2b:1e:71:9e:b1:8a:b1:
5c:79:bc:45:c7:f2:49:e9:74:51:ea:48:44:c0:5b:
7b:72:14:2a:4e:4f:09:ba:8e:34:f3:d4:41:f1:ba:
5b:a7:14:46:19:54:26:8f:13:cb:d2:f8:01:86:95:
be:b7:ef:35:32:2b:1e:49:67:b9:5d:6c:ae:00:9a:
bc:25:54:d9:ab:5a:05:d3:a9:5c:a0:c5:0d:d0:67:
07:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:6D:29:57:74:61:D0:58:51:2D:D6:A7:23:73:3B:5B:28:EF:D7:DC
X509v3 Authority Key Identifier:
keyid:4C:B9:32:BC:60:E9:FD:11:86:F8:FA:6B:D7:13:C2:07:29:AE:73:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TLkyvGDp_RGG-Ppr1xPCBymuc-4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/343892-780c-432a-882f-1e0d7c42da76/1/TLkyvGDp_RGG-Ppr1xPCBymuc-4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/343892-780c-432a-882f-1e0d7c42da76/1/TLkyvGDp_RGG-Ppr1xPCBymuc-4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:14:0f:87:dc:55:ab:e0:26:97:02:b9:74:a5:51:29:18:65:
86:31:9f:17:9f:6c:ae:d3:84:64:c4:7f:1d:2f:86:61:0c:82:
ff:4e:62:1f:09:3b:b1:c3:4d:50:44:a3:b3:07:9f:db:1e:6e:
95:32:86:5c:5a:00:70:db:d8:4d:38:89:1d:52:63:78:f5:c7:
2d:b5:11:a9:90:0b:f2:3d:22:4c:fb:69:b9:8a:ca:58:fc:05:
6e:3d:bc:9a:e4:cb:e4:40:3e:2e:40:8c:02:dc:cb:5e:12:ba:
78:ac:ac:a5:1e:d9:ba:dd:23:8b:5a:08:33:f3:78:bb:6e:13:
34:ab:ef:46:0f:aa:89:39:7c:5f:6b:72:7a:23:31:02:b6:0e:
84:ce:92:29:31:00:f3:a1:cf:e2:cb:7f:d3:84:48:0a:fd:be:
5b:35:08:ac:12:1c:c7:14:da:84:d1:18:9d:85:ad:b5:61:7d:
be:5f:b1:a4:f4:d2:b4:29:66:6f:99:00:f9:db:7a:3e:d5:b2:
22:83:df:dc:c4:c0:c9:51:d8:06:fb:8b:36:51:70:62:68:c3:
df:79:14:6d:3b:81:ed:f8:9a:91:fb:b1:c6:e2:03:92:1f:37:
78:54:bd:ba:e5:05:a7:57:8d:76:a1:02:fb:5b:10:00:3c:0c:
66:23:09:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 22:26:51 2025 by rpki-client