Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/8efd8b-e516-4c49-92cb-89296ccb35f5/1/TQreVMJ-b83aziYsT995DzIP7Zw.mft
File: TQreVMJ-b83aziYsT995DzIP7Zw.mft (raw, json)
Hash identifier: rDNSBgfB0OXaZrGYV6HgAS0pYFHmYLbkvFJUz+UkWwE=
Subject key identifier: B8:20:B3:3F:B6:2C:C7:74:71:D9:32:CA:15:27:FF:15:27:6D:CA:8D
Authority key identifier: 4D:0A:DE:54:C2:7E:6F:CD:DA:CE:26:2C:4F:DF:79:0F:32:0F:ED:9C
Certificate issuer: /CN=4d0ade54c27e6fcddace262c4fdf790f320fed9c
Certificate serial: 0199FE473E97E5321506AC540B1C18BD0ECD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TQreVMJ-b83aziYsT995DzIP7Zw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/8efd8b-e516-4c49-92cb-89296ccb35f5/1/TQreVMJ-b83aziYsT995DzIP7Zw.mft
Manifest number: 16EA
Signing time: Sun 19 Oct 2025 21:01:45 +0000
Manifest this update: Sun 19 Oct 2025 21:01:45 +0000
Manifest next update: Mon 20 Oct 2025 21:01:45 +0000
Files and hashes: 1: 93DmKZhPP6C3A8rfNYLNAOSD7nY.roa (hash: dt3s4SYU1dR+fLajxJTR3/3GKKVmv0f+WTIVOmO+2as=)
2: A1lFiDlkwzd2kuuHtwLxrVifjIM.roa (hash: bheq6y6BKOc+FBTnE7aA9p7E54SloHCzl+8cgE33f9o=)
3: TQreVMJ-b83aziYsT995DzIP7Zw.crl (hash: kCIwQZbDw5kE9wZcGAOspRvS1B1T2T3Bvn6luT8XcOA=)
4: UD9G2KurtNeaAxJdizQiQcSD0uc.roa (hash: Es9ToT28+rspmgTLqxqTlnHgsgNlKjrlO13bAnzcF2g=)
5: XDIQZzxZW5-uUuoXNVfYPGALZY8.roa (hash: xZyhu94HluR+zrM/qfXRNVxIfS3klNJwNP/Gh4p7kNE=)
6: cYs_upIMBFM1qTzwqySxwaPDCLc.roa (hash: xI0Q9MYkvDP8hv/SnI33zJTsy3M/0ZO4tON1nbaFCD4=)
7: jk-_IfFTaD-MzFizpWx0AA1TkH4.roa (hash: wezPiSGoo0rul4hPDHDdcRTaZb8xQPAVvKZ9GBZZNU8=)
8: luOuJQnFXQhNggwM6MUJDK19PDQ.roa (hash: yd7LbwhPMHWjUutNzr3ySSl/LTeLlprMji5U1R9GXsM=)
9: mmpsKeeO5JUD0kNNB4aUsbfsoEs.roa (hash: mRAg2xOUvTrNMtJyTqYFatxVEZidyGOVjXZ4XpUtMSU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/8efd8b-e516-4c49-92cb-89296ccb35f5/1/TQreVMJ-b83aziYsT995DzIP7Zw.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/8efd8b-e516-4c49-92cb-89296ccb35f5/1/TQreVMJ-b83aziYsT995DzIP7Zw.mft
rsync://rpki.ripe.net/repository/DEFAULT/TQreVMJ-b83aziYsT995DzIP7Zw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:47:3e:97:e5:32:15:06:ac:54:0b:1c:18:bd:0e:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d0ade54c27e6fcddace262c4fdf790f320fed9c
Validity
Not Before: Oct 19 21:01:45 2025 GMT
Not After : Oct 20 21:01:45 2025 GMT
Subject: CN=b820b33fb62cc77471d932ca1527ff15276dca8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:ed:68:54:db:98:c8:fa:1e:e5:97:85:90:af:
84:1d:5b:56:a5:45:b1:b0:3a:21:d9:1a:32:70:29:
97:41:cf:2b:1c:6e:f8:74:53:f2:21:6e:a8:a9:a0:
aa:d2:5d:41:65:91:cd:88:3c:9d:e8:25:da:ed:d3:
a8:4c:25:4a:ef:ed:3e:a7:a3:28:e6:5e:ee:b0:c1:
4b:1a:d4:86:d8:04:d0:98:a6:21:61:db:f4:4a:b8:
9f:e0:18:47:fe:26:f5:c5:8c:78:8e:33:f8:a0:60:
f9:26:98:5b:59:ac:9b:8e:e9:58:cd:99:0a:c9:38:
bb:31:e1:3d:56:65:ba:82:27:13:3d:0d:5f:08:71:
a2:45:44:e3:d2:10:6b:52:5a:db:04:f5:9b:68:40:
b3:9b:13:d6:4f:04:9f:d4:b1:d6:c6:a2:8a:f1:5a:
0d:5d:a3:c5:a4:c8:d1:70:7d:ac:9f:1c:09:b4:1c:
f3:f4:46:0e:55:0c:79:ee:89:71:0c:87:c1:83:6d:
ac:57:dc:af:53:ca:f3:01:3f:04:82:a0:5a:e3:42:
22:2c:91:6e:d3:80:ca:f2:83:a4:2a:23:63:50:41:
a1:8c:3e:9f:5a:7f:48:80:fe:84:1f:5a:7b:e0:e8:
81:56:8e:f9:65:1c:78:e9:67:c2:a5:8b:9d:03:2d:
c7:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:20:B3:3F:B6:2C:C7:74:71:D9:32:CA:15:27:FF:15:27:6D:CA:8D
X509v3 Authority Key Identifier:
keyid:4D:0A:DE:54:C2:7E:6F:CD:DA:CE:26:2C:4F:DF:79:0F:32:0F:ED:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TQreVMJ-b83aziYsT995DzIP7Zw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/8efd8b-e516-4c49-92cb-89296ccb35f5/1/TQreVMJ-b83aziYsT995DzIP7Zw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/8efd8b-e516-4c49-92cb-89296ccb35f5/1/TQreVMJ-b83aziYsT995DzIP7Zw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:42:ba:39:99:1f:ca:9d:24:da:83:ce:e8:43:3c:b8:a3:3e:
0f:e5:61:f1:6a:f1:4a:d6:b1:bb:15:64:f1:8a:11:9c:99:6f:
ed:83:d9:94:b6:4a:e1:14:15:5e:2d:c0:df:8f:db:8b:17:23:
73:7b:8d:7d:fb:7b:9e:8a:6d:4e:b6:72:bf:9a:9f:01:2e:f3:
7f:70:1c:57:77:21:22:6f:47:3c:95:2f:1b:13:05:38:37:bf:
a4:f3:cb:67:42:70:19:4b:3a:38:0b:15:03:a5:e1:65:55:18:
b1:a2:19:d2:19:0d:63:8a:38:c6:a6:9c:ba:77:75:22:00:20:
89:23:00:e0:47:90:f4:b9:2e:26:ce:11:cd:78:d0:8d:32:4f:
6f:11:2f:f7:b0:2e:b3:be:56:26:f5:8c:ca:dd:e9:04:ec:ce:
90:69:f7:c2:a5:6a:7b:23:1c:fd:be:d4:77:83:6f:53:67:c8:
0e:bd:22:42:eb:0d:39:57:74:16:49:2f:67:69:32:aa:27:73:
1a:d7:a7:d3:23:7b:47:05:67:7e:c6:a1:62:3a:75:f9:ea:44:
67:f4:a6:05:91:02:08:48:97:9c:35:34:72:9a:b6:4e:90:89:
df:fc:d7:f8:ad:22:ef:d8:dc:45:c4:b6:d0:1d:4d:84:ec:e1:
ad:0b:51:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:33:11 2025 by rpki-client