Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/a9e57e-2479-4576-b275-87433157a25b/1/TfkmWGAQlO1kmFxkxpUr40FjAc4.mft
File: TfkmWGAQlO1kmFxkxpUr40FjAc4.mft (raw, json)
Hash identifier: oEk/93TZndslur67ymUvEOqZHBr2wVfDvO8dVPAlEC8=
Subject key identifier: 4C:F2:15:5D:A8:BD:29:CF:58:CF:7E:EB:13:21:64:95:6C:2C:EF:49
Authority key identifier: 4D:F9:26:58:60:10:94:ED:64:98:5C:64:C6:95:2B:E3:41:63:01:CE
Certificate issuer: /CN=4df92658601094ed64985c64c6952be3416301ce
Certificate serial: 0199FBEA7AD0E8A819DC548A6375D4854A72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TfkmWGAQlO1kmFxkxpUr40FjAc4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/a9e57e-2479-4576-b275-87433157a25b/1/TfkmWGAQlO1kmFxkxpUr40FjAc4.mft
Manifest number: 094D
Signing time: Sun 19 Oct 2025 10:01:11 +0000
Manifest this update: Sun 19 Oct 2025 10:01:11 +0000
Manifest next update: Mon 20 Oct 2025 10:01:11 +0000
Files and hashes: 1: 42VDtF9LMj3RUZlBTr5Tpxb7XhY.roa (hash: 06Fp4iuAbTOsazThfCr6hEmyN81BPyfi3nXeyKKT6d0=)
2: TfkmWGAQlO1kmFxkxpUr40FjAc4.crl (hash: 5x8EBlMdadbkspi71UY2+hkgi5FM0W/332gQU1wWVhE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/a9e57e-2479-4576-b275-87433157a25b/1/TfkmWGAQlO1kmFxkxpUr40FjAc4.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/a9e57e-2479-4576-b275-87433157a25b/1/TfkmWGAQlO1kmFxkxpUr40FjAc4.mft
rsync://rpki.ripe.net/repository/DEFAULT/TfkmWGAQlO1kmFxkxpUr40FjAc4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ea:7a:d0:e8:a8:19:dc:54:8a:63:75:d4:85:4a:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4df92658601094ed64985c64c6952be3416301ce
Validity
Not Before: Oct 19 10:01:11 2025 GMT
Not After : Oct 20 10:01:11 2025 GMT
Subject: CN=4cf2155da8bd29cf58cf7eeb132164956c2cef49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:0a:58:45:23:2b:73:57:be:8f:3a:7b:5a:fc:
50:17:eb:de:6f:37:dc:b6:b7:20:c6:a4:06:9d:a3:
36:ea:a8:47:a1:7d:86:56:70:42:e5:b7:ba:1e:49:
66:62:50:b3:9d:cd:d8:66:ad:c7:d0:c6:55:27:37:
9c:aa:0d:59:38:76:f2:04:cf:65:b3:3c:79:38:e2:
84:e3:94:9a:17:0c:50:5b:f3:58:57:32:af:bf:26:
6c:25:f0:f3:1d:c1:33:7a:ae:b3:c3:3e:18:3e:40:
36:98:a5:17:7c:a3:4b:63:0b:a7:2c:09:2c:9f:28:
d6:ac:39:2a:cd:2e:d5:e0:63:47:ee:b0:61:b4:da:
bb:45:6f:65:45:c1:fd:85:3b:c8:b3:2f:00:79:fd:
74:fb:f2:f3:7a:cd:c9:db:ec:35:c0:4a:69:1e:49:
7a:fc:76:21:15:f6:73:bf:65:37:df:13:09:11:6d:
10:ba:24:5c:55:62:84:23:6f:39:b3:76:4f:63:01:
c4:b5:f1:89:4b:cf:32:df:e3:dd:46:4b:b4:a2:bd:
03:7e:14:fa:80:86:bc:5c:77:cf:a2:09:43:f2:b9:
b1:d1:97:d6:99:78:91:2e:6b:35:1b:0d:84:1a:6a:
1f:20:64:9e:09:85:b6:0c:ec:88:e3:51:9e:e6:f4:
90:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:F2:15:5D:A8:BD:29:CF:58:CF:7E:EB:13:21:64:95:6C:2C:EF:49
X509v3 Authority Key Identifier:
keyid:4D:F9:26:58:60:10:94:ED:64:98:5C:64:C6:95:2B:E3:41:63:01:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TfkmWGAQlO1kmFxkxpUr40FjAc4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/a9e57e-2479-4576-b275-87433157a25b/1/TfkmWGAQlO1kmFxkxpUr40FjAc4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/a9e57e-2479-4576-b275-87433157a25b/1/TfkmWGAQlO1kmFxkxpUr40FjAc4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:b4:32:df:f5:e3:23:b6:4e:30:c7:3f:e9:3d:2a:73:6e:12:
df:5d:4e:14:a4:eb:88:f8:43:03:c7:1b:f8:3e:9f:89:63:22:
81:45:b9:57:b0:bc:d5:c3:eb:2f:13:c2:45:2c:95:c4:c0:82:
8c:b3:ee:67:09:76:32:31:f8:11:f4:0f:22:75:2c:6e:ed:59:
25:72:7a:34:67:1c:26:93:98:24:4d:1c:dc:eb:f1:ca:d6:2f:
07:d6:53:1e:ad:19:6d:53:4c:1f:34:30:1e:7a:4e:49:92:3b:
95:cf:dd:cb:a2:58:21:22:a9:89:d7:b8:d1:e1:28:84:9e:81:
5f:95:50:a5:53:74:6b:4f:b5:02:3f:51:59:49:7c:f5:01:47:
f3:64:4b:3d:41:3a:a7:42:fc:69:be:11:d5:11:a7:74:63:06:
cc:87:2b:b4:79:d0:d7:72:4b:97:f9:1f:5c:e6:4c:b1:14:6b:
ea:d4:01:d1:2a:ac:fa:7d:cf:05:e4:12:bb:9a:60:87:19:b0:
9f:ff:92:8c:c1:95:ce:e3:f7:f2:c9:43:d9:3f:f3:48:70:f9:
dc:ec:8d:13:67:bf:7a:20:7c:47:50:43:56:12:c6:1b:44:9a:
98:95:a4:d6:3b:cb:cd:f7:e0:73:99:e1:91:8f:fd:8f:e1:57:
be:b8:d9:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:32:05 2025 by rpki-client