Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/93841b-a526-40e3-8a4f-bc1d9a034593/1/TAcbrZKeNisGK4nIf6QbXe2k_8A.mft
File: TAcbrZKeNisGK4nIf6QbXe2k_8A.mft (raw, json)
Hash identifier: vI4eMYlcsDYrOpYoVfMrm23K+jNakKPT2e/rjZPxHKM=
Subject key identifier: 7A:C1:5B:77:A9:62:7E:22:41:0B:42:B8:5D:9B:BE:28:AE:E7:EC:BB
Authority key identifier: 4C:07:1B:AD:92:9E:36:2B:06:2B:89:C8:7F:A4:1B:5D:ED:A4:FF:C0
Certificate issuer: /CN=4c071bad929e362b062b89c87fa41b5deda4ffc0
Certificate serial: 0199FC58BBBF97E7B8A9F01C6550C991C030
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TAcbrZKeNisGK4nIf6QbXe2k_8A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/93841b-a526-40e3-8a4f-bc1d9a034593/1/TAcbrZKeNisGK4nIf6QbXe2k_8A.mft
Manifest number: 1425
Signing time: Sun 19 Oct 2025 12:01:37 +0000
Manifest this update: Sun 19 Oct 2025 12:01:37 +0000
Manifest next update: Mon 20 Oct 2025 12:01:37 +0000
Files and hashes: 1: Q7AhmlPF0P4he1DdnyBzxO1UbNg.roa (hash: taA8dfVnJrloOBeiFJz3Gf4qdbtYPfCeh6aOOG2s/PY=)
2: TAcbrZKeNisGK4nIf6QbXe2k_8A.crl (hash: 2ebR8IfEOWLPkhwiGWzXPmUWZfehtgaZ16rHCbfLkqY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/93841b-a526-40e3-8a4f-bc1d9a034593/1/TAcbrZKeNisGK4nIf6QbXe2k_8A.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/93841b-a526-40e3-8a4f-bc1d9a034593/1/TAcbrZKeNisGK4nIf6QbXe2k_8A.mft
rsync://rpki.ripe.net/repository/DEFAULT/TAcbrZKeNisGK4nIf6QbXe2k_8A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:bb:bf:97:e7:b8:a9:f0:1c:65:50:c9:91:c0:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c071bad929e362b062b89c87fa41b5deda4ffc0
Validity
Not Before: Oct 19 12:01:37 2025 GMT
Not After : Oct 20 12:01:37 2025 GMT
Subject: CN=7ac15b77a9627e22410b42b85d9bbe28aee7ecbb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:67:ad:b9:a9:ef:b1:0d:9e:7d:99:44:ea:6c:
ff:d9:e2:8d:2c:f7:4f:f0:31:7e:c6:65:f4:1f:6c:
12:8a:8e:52:19:cf:a1:d0:8d:93:05:4b:96:9e:31:
6c:ac:f4:ec:98:6c:aa:28:5c:0c:e4:2c:b4:43:52:
8c:ea:d0:09:3f:b0:91:9f:85:25:fe:9d:b8:13:8e:
35:00:d6:de:d2:5e:3a:a2:fb:18:85:70:71:65:86:
d2:14:24:9a:fe:04:98:56:60:4f:3f:4a:74:69:30:
9c:69:c6:32:54:3d:07:c6:ed:2a:25:4f:bf:6e:c7:
81:64:dc:4b:43:e4:84:93:cb:68:1b:6d:bd:13:9e:
43:72:55:cc:f8:0a:5a:d5:ee:2c:90:46:ad:e4:48:
b4:9a:d1:b6:01:74:47:fc:5c:89:cc:46:1a:bc:cd:
46:14:ee:83:76:fc:29:c0:78:43:b4:00:10:44:ff:
fb:c3:42:ff:cf:54:dd:ae:b3:d1:91:00:25:76:53:
8a:40:c1:25:b5:7d:e5:b9:fa:87:99:6c:60:14:6e:
e4:fc:ee:38:8f:33:cd:12:f8:f6:f9:a1:51:06:5d:
e8:f4:e4:4e:05:44:1b:53:e0:ee:27:d9:17:1a:45:
99:19:31:72:e3:ae:ca:87:b1:6e:4d:80:ca:fd:91:
9e:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:C1:5B:77:A9:62:7E:22:41:0B:42:B8:5D:9B:BE:28:AE:E7:EC:BB
X509v3 Authority Key Identifier:
keyid:4C:07:1B:AD:92:9E:36:2B:06:2B:89:C8:7F:A4:1B:5D:ED:A4:FF:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TAcbrZKeNisGK4nIf6QbXe2k_8A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/93841b-a526-40e3-8a4f-bc1d9a034593/1/TAcbrZKeNisGK4nIf6QbXe2k_8A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/93841b-a526-40e3-8a4f-bc1d9a034593/1/TAcbrZKeNisGK4nIf6QbXe2k_8A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:94:e8:f3:21:28:7e:85:0d:fe:07:c9:56:b0:bd:d6:a4:82:
07:48:ac:2d:d7:e6:9d:79:b8:80:e0:91:71:7a:e0:9b:34:5e:
de:59:79:b9:8f:42:20:5f:2e:64:5d:93:b5:82:bd:ba:14:ab:
41:2c:0f:f7:bb:4e:1f:27:fe:52:56:23:58:20:1f:f7:8d:f2:
2e:13:35:04:08:fc:12:77:37:d5:23:f5:e7:52:17:d6:94:7c:
b7:35:c9:20:92:c4:19:57:9d:e9:75:7e:49:b4:47:7c:c8:c7:
2b:1a:b0:00:20:f9:b1:74:b1:59:f1:be:62:28:23:93:a0:5b:
15:b8:e5:54:8d:c7:a2:19:9f:e0:c0:e5:9d:0d:e0:4f:b7:64:
9c:a8:d3:eb:2a:85:e5:20:06:e2:15:80:64:1b:42:20:05:3a:
11:ed:8f:85:73:62:34:cc:e8:03:08:9a:89:be:d3:9d:17:48:
d8:92:aa:0b:38:9a:77:5c:f1:27:5c:b3:90:c7:d4:80:fd:e7:
eb:53:d0:35:98:db:8b:f7:34:ea:77:9e:66:04:95:9e:bc:6e:
f6:a9:c1:48:4e:75:90:66:8f:18:10:b0:7e:59:74:2b:e6:b8:
cd:35:ab:68:65:6c:ed:b3:1b:df:56:10:2b:37:0f:37:44:c3:
a8:a9:c9:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:28:49 2025 by rpki-client