Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/9041b7-f543-4c63-8e2b-366a9761ea20/1/TqWy83Ukw9ONyApx2PAB7SxF6Jw.mft
File: TqWy83Ukw9ONyApx2PAB7SxF6Jw.mft (raw, json)
Hash identifier: HHInXjisaA+R4n1g15cyF1VbbG/pddcCUm3bygpolQY=
Subject key identifier: 58:27:F3:0C:21:65:E6:6B:62:1E:5B:A7:7F:96:A6:4C:84:BF:82:14
Authority key identifier: 4E:A5:B2:F3:75:24:C3:D3:8D:C8:0A:71:D8:F0:01:ED:2C:45:E8:9C
Certificate issuer: /CN=4ea5b2f37524c3d38dc80a71d8f001ed2c45e89c
Certificate serial: 019A006C11083C70D7DEC5456D7428432C48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TqWy83Ukw9ONyApx2PAB7SxF6Jw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/9041b7-f543-4c63-8e2b-366a9761ea20/1/TqWy83Ukw9ONyApx2PAB7SxF6Jw.mft
Manifest number: 14AA
Signing time: Mon 20 Oct 2025 07:01:13 +0000
Manifest this update: Mon 20 Oct 2025 07:01:13 +0000
Manifest next update: Tue 21 Oct 2025 07:01:13 +0000
Files and hashes: 1: HJZuFg-aBDGic40vRoWhakH94Zo.roa (hash: b1vEsVgABbRc+hOZI2FcJP4+qO85CVqkQZmViTsB2bU=)
2: TqWy83Ukw9ONyApx2PAB7SxF6Jw.crl (hash: Kq9tTLMxwlqzQ2/Ke5c56SruiDmkYD8z5L/7S/TWGJ8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/9041b7-f543-4c63-8e2b-366a9761ea20/1/TqWy83Ukw9ONyApx2PAB7SxF6Jw.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/9041b7-f543-4c63-8e2b-366a9761ea20/1/TqWy83Ukw9ONyApx2PAB7SxF6Jw.mft
rsync://rpki.ripe.net/repository/DEFAULT/TqWy83Ukw9ONyApx2PAB7SxF6Jw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 07:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:00:6c:11:08:3c:70:d7:de:c5:45:6d:74:28:43:2c:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ea5b2f37524c3d38dc80a71d8f001ed2c45e89c
Validity
Not Before: Oct 20 07:01:13 2025 GMT
Not After : Oct 21 07:01:13 2025 GMT
Subject: CN=5827f30c2165e66b621e5ba77f96a64c84bf8214
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:6d:e7:27:8b:77:76:d6:ee:67:80:4e:de:57:
29:90:f8:e4:fc:8f:1e:d9:67:6b:fb:bf:a6:5c:39:
70:0d:4f:aa:30:f3:d4:9d:05:dd:96:71:e0:48:d6:
33:cc:6f:12:d3:1f:31:71:11:58:11:5e:52:aa:36:
88:a6:9a:7d:18:e1:3c:56:ab:b5:d0:b4:da:5a:f9:
74:d9:3b:5e:87:e0:e6:c5:1b:1e:63:2e:52:02:49:
27:9b:d8:e1:d6:3a:2f:47:ea:c0:6a:c4:f7:14:12:
b3:b6:ba:0e:b1:ab:4e:60:93:2d:03:9f:42:9c:a3:
34:67:24:f6:6f:45:19:20:3e:1c:8d:c6:e5:f2:c7:
a4:d7:90:a8:9e:d2:c8:c1:d5:30:28:da:3c:c8:08:
38:aa:c5:a8:7f:a4:24:bf:ad:f5:ff:ed:33:b6:01:
eb:df:04:d3:d8:99:0e:41:5d:6d:1d:4b:2f:56:e7:
7c:29:23:21:44:89:9c:e4:f3:7b:9d:e4:32:fb:f1:
03:5d:b3:fc:8f:66:c6:ac:15:86:02:ac:7f:0b:3b:
67:c5:24:48:dd:68:05:6a:82:a9:54:9e:ab:82:58:
1f:f4:a2:1b:c3:e0:ef:64:30:95:00:5c:55:7c:44:
49:38:23:34:00:cd:a5:21:89:32:db:da:b2:78:e3:
5d:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:27:F3:0C:21:65:E6:6B:62:1E:5B:A7:7F:96:A6:4C:84:BF:82:14
X509v3 Authority Key Identifier:
keyid:4E:A5:B2:F3:75:24:C3:D3:8D:C8:0A:71:D8:F0:01:ED:2C:45:E8:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TqWy83Ukw9ONyApx2PAB7SxF6Jw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/9041b7-f543-4c63-8e2b-366a9761ea20/1/TqWy83Ukw9ONyApx2PAB7SxF6Jw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/9041b7-f543-4c63-8e2b-366a9761ea20/1/TqWy83Ukw9ONyApx2PAB7SxF6Jw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cb:4d:db:4b:37:e1:7f:a2:84:8f:19:3d:d8:0b:30:f7:1b:85:
95:d1:6b:03:37:39:ae:cf:9b:a8:f6:68:49:0c:ed:12:ba:64:
1c:f6:1f:c6:f7:de:5a:d4:2f:38:c3:92:d2:7f:47:6b:2a:52:
db:e3:da:8c:f7:c3:50:d0:6d:18:3e:50:de:e6:6e:ef:3d:63:
39:ff:f4:de:9b:d9:c5:2a:38:14:3f:a1:90:fd:50:e3:f2:c0:
d4:98:cf:f1:a0:3b:3c:98:bd:9a:03:61:40:b2:e7:1b:ca:08:
78:61:07:93:61:02:65:58:75:37:15:a3:bc:a1:fe:e2:1c:f0:
85:2a:4a:ba:fc:63:07:9b:6e:cb:b6:0b:00:24:19:a0:77:f4:
7b:bb:7a:fb:b7:7f:8d:d2:4d:80:ba:46:1b:6f:13:58:83:c2:
30:49:ab:52:c5:9b:38:e5:ec:1e:29:f7:69:7d:b9:56:20:f7:
08:a5:9e:55:75:fa:9f:b6:e9:40:89:16:d6:0e:83:9c:a8:fd:
7b:ec:4e:ac:79:5d:ac:70:01:b7:70:56:56:bf:94:8b:c7:75:
4b:fb:0a:7f:2d:56:44:a2:d8:e3:7a:df:74:4e:d8:d1:4c:07:
8e:6e:73:4b:60:60:7a:f9:a3:66:e2:da:a6:c6:22:fa:ea:66:
8e:c1:45:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 14:41:23 2025 by rpki-client