Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/d994dd-de52-4612-b0fe-14987243ac56/1/TSHLmy-MXenaowiJ2eI5RTe6Pjg.mft
File: TSHLmy-MXenaowiJ2eI5RTe6Pjg.mft (raw, json)
Hash identifier: +hGJ4bdmn5ptfRgUrk3eG+hzypQinyIVGDHAUQDXIU0=
Subject key identifier: BF:50:6F:F9:37:C3:8B:0B:2D:E9:72:CC:C2:46:B0:9F:D7:D9:84:17
Authority key identifier: 4D:21:CB:9B:2F:8C:5D:E9:DA:A3:08:89:D9:E2:39:45:37:BA:3E:38
Certificate issuer: /CN=4d21cb9b2f8c5de9daa30889d9e2394537ba3e38
Certificate serial: 0199FD34081297CD0EB967689FE7630B2AF3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TSHLmy-MXenaowiJ2eI5RTe6Pjg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/d994dd-de52-4612-b0fe-14987243ac56/1/TSHLmy-MXenaowiJ2eI5RTe6Pjg.mft
Manifest number: 16E1
Signing time: Sun 19 Oct 2025 16:01:09 +0000
Manifest this update: Sun 19 Oct 2025 16:01:09 +0000
Manifest next update: Mon 20 Oct 2025 16:01:09 +0000
Files and hashes: 1: RV8paaJ3goMy9MfTaatO8nD3vp0.roa (hash: e4c5enruS1aSsE+Y/GCFoVHc8KGnXiS/8gSNbBU+Ybc=)
2: TSHLmy-MXenaowiJ2eI5RTe6Pjg.crl (hash: 2SvQKDFtIWWnwxVfJgaNz57csKR+iiVUanMn5vUugdE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/d994dd-de52-4612-b0fe-14987243ac56/1/TSHLmy-MXenaowiJ2eI5RTe6Pjg.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/d994dd-de52-4612-b0fe-14987243ac56/1/TSHLmy-MXenaowiJ2eI5RTe6Pjg.mft
rsync://rpki.ripe.net/repository/DEFAULT/TSHLmy-MXenaowiJ2eI5RTe6Pjg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:34:08:12:97:cd:0e:b9:67:68:9f:e7:63:0b:2a:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d21cb9b2f8c5de9daa30889d9e2394537ba3e38
Validity
Not Before: Oct 19 16:01:09 2025 GMT
Not After : Oct 20 16:01:09 2025 GMT
Subject: CN=bf506ff937c38b0b2de972ccc246b09fd7d98417
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:7c:d3:6a:76:17:49:df:8d:0e:98:36:24:a6:
37:fc:97:94:e1:25:aa:85:24:72:5b:c8:1c:ff:aa:
ed:d3:67:69:eb:b7:39:9e:27:16:7f:e5:67:0e:aa:
59:40:39:8b:d1:c9:4b:2e:dd:60:3f:e4:96:21:2a:
fc:40:32:e4:0a:d3:4f:02:37:e4:32:9c:38:0f:aa:
a6:75:63:18:01:ef:8c:65:90:1f:ca:0f:0b:f6:16:
a8:c9:03:8d:e3:2c:e6:87:9f:4b:5f:e7:f4:0a:99:
f7:9e:96:51:72:68:68:56:4f:6b:87:d3:bc:79:a8:
b5:3a:28:16:2f:df:66:8d:66:b2:16:18:98:78:e5:
08:b9:20:a2:9b:1a:b9:05:d9:e4:7d:f3:75:d8:a7:
a8:f8:b4:85:80:b9:48:2a:f1:ff:3d:40:c8:9d:76:
2c:3f:91:3f:96:13:d8:38:04:c0:ae:2b:ca:bc:86:
73:a1:40:27:43:90:30:7d:5f:cf:9e:e4:88:87:27:
dd:3b:87:2f:39:98:70:91:a1:1c:e2:a8:2f:4d:e4:
22:eb:28:63:10:cc:fd:54:78:e9:d8:12:1b:71:92:
57:f1:1a:3f:2d:66:2f:ce:c7:d2:fc:a3:94:fc:ad:
56:3d:1b:12:84:23:6c:80:c9:f8:99:78:be:bc:77:
1f:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:50:6F:F9:37:C3:8B:0B:2D:E9:72:CC:C2:46:B0:9F:D7:D9:84:17
X509v3 Authority Key Identifier:
keyid:4D:21:CB:9B:2F:8C:5D:E9:DA:A3:08:89:D9:E2:39:45:37:BA:3E:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TSHLmy-MXenaowiJ2eI5RTe6Pjg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/d994dd-de52-4612-b0fe-14987243ac56/1/TSHLmy-MXenaowiJ2eI5RTe6Pjg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/d994dd-de52-4612-b0fe-14987243ac56/1/TSHLmy-MXenaowiJ2eI5RTe6Pjg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:78:6d:b8:b0:00:70:3a:2a:87:1c:9f:0c:a2:08:73:75:84:
b3:01:3f:bf:9a:8f:51:ca:c9:0c:1f:4b:d9:a9:0e:df:3c:80:
9d:14:5c:87:3c:50:2f:fc:71:b3:b0:2c:f1:c1:fc:39:71:7c:
93:4d:60:46:3d:94:9d:40:72:3c:0b:ee:2a:4f:c9:4c:80:91:
7d:5c:50:9e:93:dc:79:71:6d:b1:e0:b6:53:65:9a:ee:c4:e3:
f8:20:ec:df:a8:54:6c:4a:0a:d6:f8:9e:91:68:79:36:33:2e:
d6:1e:97:12:17:1e:52:da:7d:a7:b1:5f:34:cc:fc:b0:55:99:
97:09:c6:67:21:d9:90:d1:4a:79:1b:9e:7b:95:42:f6:f6:bf:
56:6b:77:00:42:b2:96:6f:81:1d:fa:2d:3d:6d:a6:49:6a:36:
39:ec:03:93:21:32:c7:86:fa:3e:42:4b:f1:62:40:af:73:4b:
34:ea:b8:5c:53:48:c5:fb:32:9a:0f:d1:35:ec:e2:29:1e:b4:
3e:9e:4f:11:c5:25:da:a8:aa:7b:81:a8:4d:2c:eb:f7:83:6f:
41:55:38:ac:57:b2:3e:e6:6a:1e:99:fc:21:2e:9a:9b:a8:b6:
ac:e7:f0:93:17:2f:19:db:1e:15:94:54:ad:78:cb:22:49:85:
fb:c3:4c:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:39:34 2025 by rpki-client