Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/7f9be1-b72b-4585-a2bd-e4da8ac2b3db/1/TnhW0pVYCTaRalU_ub-1nzoXaAQ.mft
File: TnhW0pVYCTaRalU_ub-1nzoXaAQ.mft (raw, json)
Hash identifier: Xnyu02IIXuaSNtU55K01mBoOUEDmmllHJMpwK9RSuO0=
Subject key identifier: DF:77:9E:F3:51:BE:CB:F1:C0:E4:7C:5D:BA:EE:12:52:8A:96:57:76
Authority key identifier: 4E:78:56:D2:95:58:09:36:91:6A:55:3F:B9:BF:B5:9F:3A:17:68:04
Certificate issuer: /CN=4e7856d295580936916a553fb9bfb59f3a176804
Certificate serial: 0199FCC6CA6492CEC1718D4C3B04F5B34B12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TnhW0pVYCTaRalU_ub-1nzoXaAQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/7f9be1-b72b-4585-a2bd-e4da8ac2b3db/1/TnhW0pVYCTaRalU_ub-1nzoXaAQ.mft
Manifest number: 0189
Signing time: Sun 19 Oct 2025 14:01:50 +0000
Manifest this update: Sun 19 Oct 2025 14:01:50 +0000
Manifest next update: Mon 20 Oct 2025 14:01:50 +0000
Files and hashes: 1: TnhW0pVYCTaRalU_ub-1nzoXaAQ.crl (hash: 7+kzQRcMGBZgOES5jEbWrJOmhwABzvlnHckKgr51Ic0=)
2: dysizPNVs8eN-51l5LCD12pruZk.roa (hash: KOVK2fgA1lQXwbuGvYMoYHe9FafK6A5xP11ZFygtSAs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/7f9be1-b72b-4585-a2bd-e4da8ac2b3db/1/TnhW0pVYCTaRalU_ub-1nzoXaAQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/7f9be1-b72b-4585-a2bd-e4da8ac2b3db/1/TnhW0pVYCTaRalU_ub-1nzoXaAQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/TnhW0pVYCTaRalU_ub-1nzoXaAQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:ca:64:92:ce:c1:71:8d:4c:3b:04:f5:b3:4b:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e7856d295580936916a553fb9bfb59f3a176804
Validity
Not Before: Oct 19 14:01:50 2025 GMT
Not After : Oct 20 14:01:50 2025 GMT
Subject: CN=df779ef351becbf1c0e47c5dbaee12528a965776
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:7d:68:c6:2b:1f:e6:4d:b4:af:3d:fb:48:be:
c1:c3:6d:1a:d6:16:0d:91:51:d1:74:1c:33:32:84:
56:27:2f:4d:f1:e0:2c:42:1e:f2:d1:42:3d:53:56:
5d:f0:2c:98:5e:59:2b:3e:fe:3d:e4:16:69:75:60:
6a:24:e7:2a:ec:df:fc:17:47:03:51:d8:cf:44:ed:
8e:63:00:60:22:6b:69:3e:29:83:8a:65:d9:07:30:
4c:26:be:de:1e:04:55:2c:4d:f8:8c:77:64:5e:3c:
f9:a1:e3:53:b1:4d:e9:5b:6d:19:4f:1e:2f:82:32:
24:65:1b:97:e2:6a:73:5b:01:66:f4:0f:fc:c8:30:
de:bb:20:fa:ff:94:3c:d4:a6:98:4b:34:39:f4:2f:
d8:1b:10:2f:99:f8:3c:e3:b6:53:cf:c0:37:de:d1:
28:52:d0:29:2a:38:54:b8:29:f8:94:72:50:72:90:
2c:1c:f4:e0:50:b2:58:9a:57:32:6d:9d:42:f9:e6:
ac:f3:71:91:3f:84:4f:c2:cb:c6:9d:0f:e7:47:98:
62:42:62:58:08:27:90:a6:d0:32:1c:ca:13:86:a1:
eb:39:a0:76:6f:45:97:ea:f3:3c:81:25:55:3f:7f:
62:23:41:1e:e0:d3:79:5e:1f:c9:f7:4a:6e:37:20:
bb:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:77:9E:F3:51:BE:CB:F1:C0:E4:7C:5D:BA:EE:12:52:8A:96:57:76
X509v3 Authority Key Identifier:
keyid:4E:78:56:D2:95:58:09:36:91:6A:55:3F:B9:BF:B5:9F:3A:17:68:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TnhW0pVYCTaRalU_ub-1nzoXaAQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/7f9be1-b72b-4585-a2bd-e4da8ac2b3db/1/TnhW0pVYCTaRalU_ub-1nzoXaAQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/7f9be1-b72b-4585-a2bd-e4da8ac2b3db/1/TnhW0pVYCTaRalU_ub-1nzoXaAQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:98:02:3b:9b:40:e5:b0:ea:bb:d1:e2:f6:a9:7b:5b:fa:59:
38:26:a2:66:88:8e:63:40:52:fe:f2:7e:85:6f:e3:e1:38:ca:
34:09:2a:f6:7a:62:ef:81:c9:76:2a:49:7a:99:b1:7b:a7:e1:
2a:c1:83:3c:2c:b4:9c:f8:59:94:cb:41:ab:30:b3:3d:ec:be:
04:cd:fd:b9:07:bc:e8:1a:d3:d6:92:cd:d6:c0:40:9a:eb:de:
9f:fe:fc:19:6d:03:46:b0:2d:a7:14:ad:f8:64:0b:d2:19:3c:
a9:f2:ef:41:10:1a:c4:40:d9:a2:fc:41:8e:f2:b3:cb:46:6e:
a5:6b:a3:ba:bf:fe:7e:c5:47:48:cb:e3:33:1f:85:a6:a0:f8:
8d:65:cb:05:94:2e:e7:d3:6f:43:06:af:51:0b:76:1f:0c:be:
f7:26:e3:bd:87:8d:52:08:53:8c:8c:76:0b:a0:da:bb:13:12:
3c:a9:96:4e:35:b7:42:4a:64:69:48:87:44:ad:bc:0b:62:31:
7e:4a:f8:3f:b6:49:78:35:c9:86:99:36:d3:d0:dc:a0:1e:e3:
eb:ea:fd:73:6d:ea:67:b3:19:98:da:b2:8c:1d:0a:36:58:c7:
6e:74:35:2f:9b:1b:31:1c:5d:4f:57:43:16:15:96:b7:9b:58:
bf:62:89:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:53:01 2025 by rpki-client