Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/ca4c34-2704-4f82-bff8-a7ccd0098477/1/TmIrxVBoe20O9geIzq2w_IIKOB8.mft
File: TmIrxVBoe20O9geIzq2w_IIKOB8.mft (raw, json)
Hash identifier: FVTN7vu4Jf7Tx/uzLh4XQ5CldNwDSZewyU+zs5j55wY=
Subject key identifier: 56:FD:34:38:2E:AF:44:04:4C:EE:36:3A:C8:15:C9:FB:5C:68:C3:2B
Authority key identifier: 4E:62:2B:C5:50:68:7B:6D:0E:F6:07:88:CE:AD:B0:FC:82:0A:38:1F
Certificate issuer: /CN=4e622bc550687b6d0ef60788ceadb0fc820a381f
Certificate serial: 0199FCC6D574B4624FEC8FF62C839ADFFDEC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TmIrxVBoe20O9geIzq2w_IIKOB8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/ca4c34-2704-4f82-bff8-a7ccd0098477/1/TmIrxVBoe20O9geIzq2w_IIKOB8.mft
Manifest number: 0A28
Signing time: Sun 19 Oct 2025 14:01:53 +0000
Manifest this update: Sun 19 Oct 2025 14:01:53 +0000
Manifest next update: Mon 20 Oct 2025 14:01:53 +0000
Files and hashes: 1: TmIrxVBoe20O9geIzq2w_IIKOB8.crl (hash: XFPoO+KCgLXqjqOql6YgG8yr4MS/WQxuAqP5lnVMz3Y=)
2: t4aglK9u5BBs2nCD-lvEdZGnyNE.roa (hash: poJOpqUdh9mquobj4xZre8xkqBntoXYzhaUhNLYqXsg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/ca4c34-2704-4f82-bff8-a7ccd0098477/1/TmIrxVBoe20O9geIzq2w_IIKOB8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/ca4c34-2704-4f82-bff8-a7ccd0098477/1/TmIrxVBoe20O9geIzq2w_IIKOB8.mft
rsync://rpki.ripe.net/repository/DEFAULT/TmIrxVBoe20O9geIzq2w_IIKOB8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:d5:74:b4:62:4f:ec:8f:f6:2c:83:9a:df:fd:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e622bc550687b6d0ef60788ceadb0fc820a381f
Validity
Not Before: Oct 19 14:01:53 2025 GMT
Not After : Oct 20 14:01:53 2025 GMT
Subject: CN=56fd34382eaf44044cee363ac815c9fb5c68c32b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:0c:a5:9f:cf:11:76:c5:35:b9:6d:b1:5e:d1:
aa:26:8d:7f:90:eb:49:63:3a:d5:37:c0:eb:e4:ba:
b5:7a:e3:af:02:12:e6:37:71:ee:99:b2:ee:15:54:
62:f8:b7:cc:f8:71:17:e7:30:fd:af:27:1a:ec:cd:
bf:06:43:77:5e:7c:fe:1a:61:81:56:f2:a0:3e:66:
11:9d:fb:87:5b:64:0c:08:33:d7:fb:3c:3e:c5:d0:
58:1c:94:61:45:4d:7e:f6:dd:e6:6e:89:b2:0f:8c:
0b:ce:92:27:58:b1:2e:fd:b3:3b:88:04:2e:33:27:
c0:ef:42:8e:d9:4c:51:0d:59:8a:ef:eb:2d:17:7f:
4e:ea:a7:43:c0:62:c5:dd:c0:0d:db:a8:a7:11:09:
0d:1b:3b:30:a3:94:8a:56:83:59:8e:d1:4f:58:0b:
fc:6d:05:2d:32:6a:2e:89:d9:78:35:a9:d5:03:03:
26:43:17:45:80:b6:e4:a3:13:e6:fb:3e:6c:9f:8f:
8e:3d:59:d9:42:1b:52:e9:b6:62:ac:b9:3b:2c:41:
b3:b9:9e:78:ad:00:9e:41:bd:9c:cc:46:5f:0c:b9:
7d:bf:6c:68:a8:e3:2e:36:2d:e3:e5:a9:80:c2:2a:
97:88:d8:f5:54:5c:4f:4a:84:9f:de:bf:51:6e:98:
b8:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:FD:34:38:2E:AF:44:04:4C:EE:36:3A:C8:15:C9:FB:5C:68:C3:2B
X509v3 Authority Key Identifier:
keyid:4E:62:2B:C5:50:68:7B:6D:0E:F6:07:88:CE:AD:B0:FC:82:0A:38:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TmIrxVBoe20O9geIzq2w_IIKOB8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/ca4c34-2704-4f82-bff8-a7ccd0098477/1/TmIrxVBoe20O9geIzq2w_IIKOB8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/ca4c34-2704-4f82-bff8-a7ccd0098477/1/TmIrxVBoe20O9geIzq2w_IIKOB8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:b0:91:4f:83:bb:d8:5f:17:5b:d3:8e:61:56:c5:49:32:c3:
a3:92:c4:3b:e7:0d:64:77:50:2f:18:b5:1a:e4:1f:07:79:d7:
25:68:2d:e2:d2:90:8d:2a:87:98:7e:a9:12:d3:5e:0a:2d:07:
97:28:b9:c2:dc:9b:eb:fd:95:0f:bd:cd:de:09:fc:f5:35:d8:
02:70:55:2d:9d:c9:a3:49:f3:c7:6b:35:4b:1c:6f:9b:5f:33:
df:9e:bf:a6:16:c9:2c:73:ba:08:47:77:64:17:e5:aa:46:4c:
fa:36:d9:a0:fb:5f:5d:33:d4:fd:dd:c9:c0:d6:58:1c:86:61:
e7:2e:26:47:b0:ce:35:e1:22:53:ad:56:ba:bc:ee:69:79:22:
19:2e:95:46:99:75:5f:2c:5c:dd:34:61:ee:d2:a1:f2:cc:9c:
90:ca:61:93:71:53:16:2d:95:11:78:c9:79:d6:2b:d6:a3:89:
49:b9:bd:f1:1d:ce:78:0b:a5:e2:d6:4a:b3:85:7d:2a:af:fc:
2b:ff:dc:e0:03:0d:12:ec:08:e7:9e:bb:c2:a6:85:a4:18:de:
5c:33:b8:ad:ea:da:78:0a:37:9a:64:6b:14:5c:aa:c9:19:5e:
43:4f:08:74:9e:05:21:4c:6d:fd:71:a5:43:0d:ce:38:1d:0f:
20:7c:e8:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:39:34 2025 by rpki-client