Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/5b788e-f847-4df9-9334-964cca722f73/1/TK0YVBTBauXSKaiqK_oV_vxxoiI.mft
File: TK0YVBTBauXSKaiqK_oV_vxxoiI.mft (raw, json)
Hash identifier: e3eKRzyGb05uy5sZivlsjKUp5Ok1DTAwQLcCIVPLDQM=
Subject key identifier: 89:F6:31:FB:8D:8B:B9:26:38:CB:46:4B:A1:1A:64:9A:31:F7:D0:B9
Authority key identifier: 4C:AD:18:54:14:C1:6A:E5:D2:29:A8:AA:2B:FA:15:FE:FC:71:A2:22
Certificate issuer: /CN=4cad185414c16ae5d229a8aa2bfa15fefc71a222
Certificate serial: 0199FB0F117BF4441FC56630A82DF0D1F72B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TK0YVBTBauXSKaiqK_oV_vxxoiI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/5b788e-f847-4df9-9334-964cca722f73/1/TK0YVBTBauXSKaiqK_oV_vxxoiI.mft
Manifest number: 1675
Signing time: Sun 19 Oct 2025 06:01:32 +0000
Manifest this update: Sun 19 Oct 2025 06:01:32 +0000
Manifest next update: Mon 20 Oct 2025 06:01:32 +0000
Files and hashes: 1: TK0YVBTBauXSKaiqK_oV_vxxoiI.crl (hash: V2BQi3A71iyrqoWqZ3WSP1ms1Gtmhlwz8Xpk1lB5bxs=)
2: dxfaqcbOBYRpYzoiD3a-nfzNgyI.roa (hash: 9S4UtPoorxm2Y5jeo5Ht7EgjOkb+pCS05uOlyENLKPI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/5b788e-f847-4df9-9334-964cca722f73/1/TK0YVBTBauXSKaiqK_oV_vxxoiI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/5b788e-f847-4df9-9334-964cca722f73/1/TK0YVBTBauXSKaiqK_oV_vxxoiI.mft
rsync://rpki.ripe.net/repository/DEFAULT/TK0YVBTBauXSKaiqK_oV_vxxoiI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:0f:11:7b:f4:44:1f:c5:66:30:a8:2d:f0:d1:f7:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4cad185414c16ae5d229a8aa2bfa15fefc71a222
Validity
Not Before: Oct 19 06:01:32 2025 GMT
Not After : Oct 20 06:01:32 2025 GMT
Subject: CN=89f631fb8d8bb92638cb464ba11a649a31f7d0b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:7c:06:d9:bd:a5:1a:b5:3c:2c:93:3c:7f:11:
0f:32:bc:4b:15:cc:ee:a6:97:0b:72:83:bb:79:f1:
36:36:d9:ce:2f:f6:81:24:22:dc:70:b0:23:b6:a6:
be:f9:86:ab:d6:d4:f4:c6:5c:9e:98:19:32:05:78:
c1:84:94:57:75:fa:ec:18:69:00:af:28:22:bc:10:
46:92:a8:b3:93:17:37:45:82:a5:dc:fb:c2:51:87:
25:d5:0e:8b:35:5a:cf:b8:28:cd:36:22:c3:09:a8:
1b:fc:8b:78:44:00:7c:1f:4f:e8:5c:92:12:f1:a3:
e1:10:86:d9:a2:3b:11:97:76:ca:5c:9c:95:5f:31:
c7:85:de:0f:d6:f7:5e:b9:3b:0a:92:99:30:c8:4a:
e2:06:38:d8:27:90:ac:b1:36:2c:3e:50:f7:b2:1d:
33:3b:26:a2:04:b9:74:83:03:7d:cd:37:e9:7d:8f:
eb:d7:cb:9b:09:d7:25:40:71:37:90:ba:fa:e7:e4:
61:3d:1e:3c:35:f7:d7:75:b3:d3:2a:63:aa:8a:56:
a7:6c:07:5b:e6:ff:d1:bf:e1:08:70:b6:4f:0f:c9:
c3:7c:3b:86:8c:9a:cd:e8:0a:b5:72:26:ea:93:f4:
80:e1:8b:82:7a:d2:50:e7:6c:ef:2d:b7:da:c4:3b:
ef:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:F6:31:FB:8D:8B:B9:26:38:CB:46:4B:A1:1A:64:9A:31:F7:D0:B9
X509v3 Authority Key Identifier:
keyid:4C:AD:18:54:14:C1:6A:E5:D2:29:A8:AA:2B:FA:15:FE:FC:71:A2:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TK0YVBTBauXSKaiqK_oV_vxxoiI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/5b788e-f847-4df9-9334-964cca722f73/1/TK0YVBTBauXSKaiqK_oV_vxxoiI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/5b788e-f847-4df9-9334-964cca722f73/1/TK0YVBTBauXSKaiqK_oV_vxxoiI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:56:9d:9b:d7:b7:82:3b:2a:73:f1:41:33:93:60:88:eb:c2:
ed:f0:cc:c8:c3:04:2b:4b:02:fb:f7:54:e9:57:15:f9:8f:2f:
de:0a:f9:19:ce:3c:47:95:76:c2:9d:41:09:f8:ef:5b:7f:50:
47:6b:40:21:b6:6d:bf:a5:99:f2:d2:da:93:ac:bb:d5:8a:39:
0f:db:3f:69:a6:b0:9b:93:f4:85:57:63:35:0b:11:e4:5d:09:
f9:8e:ed:86:ea:6a:e8:92:ed:6a:a4:da:45:90:a3:89:e3:3c:
b4:b9:d6:2e:24:c3:68:4f:7f:a4:87:80:ec:87:9a:b4:23:1a:
d6:f0:5b:72:01:36:69:0e:ba:b4:f7:f8:3b:ec:d9:0b:1a:e7:
9a:3d:de:f5:23:16:25:9a:e1:94:91:85:04:cc:2b:55:4a:1f:
4c:2c:ff:fb:71:48:81:c7:74:e8:51:a5:89:c7:0a:70:31:5f:
be:c4:bf:fc:cf:f4:23:ce:79:bd:02:af:4c:e1:db:d9:e7:40:
9d:13:4e:57:47:bb:32:9e:47:67:47:dd:55:ad:64:39:9d:48:
c8:4b:97:7e:2a:ec:6e:cf:4e:a4:db:3b:09:bf:36:20:68:a3:
c5:67:de:37:44:a9:d2:bf:47:ed:99:9c:4f:e5:10:e2:74:7d:
1f:f0:92:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:10:02 2025 by rpki-client