
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/790099-2f90-43bc-bf0d-6d5496cb1a42/1/TYwMqcIfoZ3AWTK-_ZBgsWDtxcE.mft
File: TYwMqcIfoZ3AWTK-_ZBgsWDtxcE.mft (raw, json)
Hash identifier: TrmeoVHn+fwgfDsDsmNc2vtebnZX05PhjoBCAIW1i/k=
Subject key identifier: 97:2C:41:60:FE:8A:44:8F:DA:86:FE:0E:9D:99:F0:C4:6B:AF:50:A4
Authority key identifier: 4D:8C:0C:A9:C2:1F:A1:9D:C0:59:32:BE:FD:90:60:B1:60:ED:C5:C1
Certificate issuer: /CN=4d8c0ca9c21fa19dc05932befd9060b160edc5c1
Certificate serial: 0199FC8F5F93E0D28979956A4978F566C7C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TYwMqcIfoZ3AWTK-_ZBgsWDtxcE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/790099-2f90-43bc-bf0d-6d5496cb1a42/1/TYwMqcIfoZ3AWTK-_ZBgsWDtxcE.mft
Manifest number: 16DF
Signing time: Sun 19 Oct 2025 13:01:18 +0000
Manifest this update: Sun 19 Oct 2025 13:01:18 +0000
Manifest next update: Mon 20 Oct 2025 13:01:18 +0000
Files and hashes: 1: TYwMqcIfoZ3AWTK-_ZBgsWDtxcE.crl (hash: xJoEWK7X+32ghAGsCJNfEYhMxpXr1Nb4nRRBJchVhko=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/790099-2f90-43bc-bf0d-6d5496cb1a42/1/TYwMqcIfoZ3AWTK-_ZBgsWDtxcE.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/790099-2f90-43bc-bf0d-6d5496cb1a42/1/TYwMqcIfoZ3AWTK-_ZBgsWDtxcE.mft
rsync://rpki.ripe.net/repository/DEFAULT/TYwMqcIfoZ3AWTK-_ZBgsWDtxcE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:5f:93:e0:d2:89:79:95:6a:49:78:f5:66:c7:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d8c0ca9c21fa19dc05932befd9060b160edc5c1
Validity
Not Before: Oct 19 13:01:18 2025 GMT
Not After : Oct 20 13:01:18 2025 GMT
Subject: CN=972c4160fe8a448fda86fe0e9d99f0c46baf50a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:c5:9b:6d:a6:4e:ac:03:bf:5f:21:44:ca:df:
23:75:ca:54:96:76:0a:50:7a:3a:bf:e7:8b:79:b3:
91:7d:7c:b8:4e:55:39:5f:c0:c6:36:09:53:29:66:
94:69:78:4c:b2:98:12:81:79:46:0b:d9:dc:76:23:
fe:d3:04:4f:91:de:7d:55:b3:81:2a:50:ca:82:6d:
91:5a:9f:7b:a4:d9:30:cd:cc:db:4e:2b:dc:3f:74:
71:ca:e4:f2:a4:00:13:d6:b3:5f:eb:fc:72:0d:26:
03:fa:49:e4:7c:0b:ad:4f:7a:f5:ca:ff:ef:59:31:
97:1b:a9:00:3a:53:71:6d:68:a4:a8:b2:f9:f2:22:
28:a9:87:8b:ad:90:68:b2:c9:e3:7b:17:fb:9f:54:
c8:15:71:95:b2:c0:32:1a:48:be:d8:a9:b1:55:6a:
63:90:ee:1b:4f:68:6c:e4:d9:dd:40:de:64:d9:b8:
eb:55:bf:e3:94:96:c7:be:5b:c2:4e:d4:6e:84:e7:
55:89:14:1d:8a:41:06:86:8e:9b:38:a4:64:14:6a:
89:8f:b5:05:23:2b:da:19:fc:d3:7d:de:59:ab:9a:
76:a8:b0:44:3c:e2:73:1a:ee:cd:eb:19:e8:b9:c5:
59:a4:1d:e6:a6:89:2e:fc:8e:5f:1f:30:73:b8:8f:
fd:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:2C:41:60:FE:8A:44:8F:DA:86:FE:0E:9D:99:F0:C4:6B:AF:50:A4
X509v3 Authority Key Identifier:
keyid:4D:8C:0C:A9:C2:1F:A1:9D:C0:59:32:BE:FD:90:60:B1:60:ED:C5:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TYwMqcIfoZ3AWTK-_ZBgsWDtxcE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/790099-2f90-43bc-bf0d-6d5496cb1a42/1/TYwMqcIfoZ3AWTK-_ZBgsWDtxcE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/790099-2f90-43bc-bf0d-6d5496cb1a42/1/TYwMqcIfoZ3AWTK-_ZBgsWDtxcE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:9b:ad:cf:5b:ec:a9:95:4f:6b:6a:98:74:97:01:be:61:40:
09:eb:a0:37:85:00:6a:28:1e:3e:4b:8b:42:6a:9a:78:52:c1:
c1:0b:d0:d0:58:22:31:a3:79:e3:a8:36:f3:c4:a8:f8:af:64:
3c:ac:f2:7e:96:14:68:25:d5:b6:72:5b:de:0c:3d:d6:15:c2:
c0:d7:39:5f:d8:1d:1a:64:73:11:51:28:5a:a5:34:0f:72:db:
98:86:64:fe:a4:75:91:99:73:99:5d:cc:52:30:be:23:5b:a1:
f6:0f:4c:1d:7f:a2:d0:bc:b4:c4:0e:46:d0:b1:f3:64:3f:45:
7a:db:b6:9f:ec:49:89:34:6f:2c:0b:0d:b2:58:80:30:b0:f6:
81:6e:61:ee:ce:13:34:e3:de:a5:a4:22:ad:77:9b:48:fe:e6:
47:29:aa:6b:2a:f9:70:a0:3c:ed:d9:1f:1a:8d:52:c1:4d:fb:
f9:b7:b3:51:4d:97:7f:c5:e5:dd:c2:e3:8c:5c:79:47:63:38:
97:7c:ba:0e:e1:8d:8c:a5:e9:b9:6d:1c:f2:f2:09:77:ff:f6:
fa:ce:f2:1b:a8:a9:52:d8:75:5c:4b:69:20:2f:ee:f5:9d:21:
c3:fe:92:d1:2c:f2:01:e3:28:07:b1:1d:11:d2:9d:76:8a:26:
77:f3:1e:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:14:05 2025 by rpki-client