Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/dbc472-6e0a-411c-af8f-0888eb42744c/1/TGr5hrJB2dJ-xySt-r8G1dIxeT8.mft
File: TGr5hrJB2dJ-xySt-r8G1dIxeT8.mft (raw, json)
Hash identifier: IO9EVL1kMiX6kLzRt6EIVTDkTq7D9WR1YW3dkLulCaA=
Subject key identifier: BA:07:17:A5:8C:50:9D:CA:15:13:C6:F8:C6:CC:91:08:24:C6:66:E3
Authority key identifier: 4C:6A:F9:86:B2:41:D9:D2:7E:C7:24:AD:FA:BF:06:D5:D2:31:79:3F
Certificate issuer: /CN=4c6af986b241d9d27ec724adfabf06d5d231793f
Certificate serial: 0199FB46282EB7AB98D83D848A498BC1ADA1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TGr5hrJB2dJ-xySt-r8G1dIxeT8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/dbc472-6e0a-411c-af8f-0888eb42744c/1/TGr5hrJB2dJ-xySt-r8G1dIxeT8.mft
Manifest number: 1395
Signing time: Sun 19 Oct 2025 07:01:42 +0000
Manifest this update: Sun 19 Oct 2025 07:01:42 +0000
Manifest next update: Mon 20 Oct 2025 07:01:42 +0000
Files and hashes: 1: 7mVZwCskyJUQ7gPBL_F_4nbKWrk.roa (hash: Spe2b/mS1SAvEHCJH7XwFJrcW3b1Bvz1bY1SvDC0yz8=)
2: TGr5hrJB2dJ-xySt-r8G1dIxeT8.crl (hash: RUv1EC5XPwDWu3r6Rw9u9GOzV6SUwcBj41B3qBco+XQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/dbc472-6e0a-411c-af8f-0888eb42744c/1/TGr5hrJB2dJ-xySt-r8G1dIxeT8.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/dbc472-6e0a-411c-af8f-0888eb42744c/1/TGr5hrJB2dJ-xySt-r8G1dIxeT8.mft
rsync://rpki.ripe.net/repository/DEFAULT/TGr5hrJB2dJ-xySt-r8G1dIxeT8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:46:28:2e:b7:ab:98:d8:3d:84:8a:49:8b:c1:ad:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c6af986b241d9d27ec724adfabf06d5d231793f
Validity
Not Before: Oct 19 07:01:42 2025 GMT
Not After : Oct 20 07:01:42 2025 GMT
Subject: CN=ba0717a58c509dca1513c6f8c6cc910824c666e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:fc:5c:e1:da:d6:74:7a:97:d4:70:50:d6:d5:
aa:ac:64:04:cd:dc:ba:15:b2:39:fe:98:24:04:49:
00:7e:a5:2c:fb:ee:26:27:39:cf:9e:33:81:de:d2:
0b:e9:50:b8:49:1d:d4:a7:0b:b0:e3:8a:f4:6b:c0:
1d:34:b4:cd:41:a3:61:ae:1f:1e:bc:7c:4f:20:a6:
1e:be:09:03:ac:85:8a:f2:f7:7e:21:4a:26:b0:8c:
d3:a9:04:ed:c6:ff:1b:c0:2f:aa:d2:b9:80:ce:8e:
9c:21:cc:39:07:b9:42:c7:f2:32:2f:2d:84:d5:9c:
d0:4a:01:59:e3:33:b5:a9:93:db:13:07:76:1c:da:
27:b0:83:45:73:c2:9c:cd:23:0f:35:ea:b8:80:9a:
cf:26:a0:d6:18:ab:7c:28:26:97:40:83:dd:29:e3:
bf:19:98:25:81:da:bc:cc:b9:da:b2:dc:80:32:9a:
16:d9:61:09:a4:51:33:ad:a1:63:23:1b:01:fd:a5:
80:1a:3b:f7:bb:2a:5d:13:fa:51:3e:5f:cf:36:c2:
4b:75:c2:1e:8a:eb:03:11:db:37:8e:9a:63:6f:11:
e7:64:c6:34:d4:09:05:db:18:52:b6:22:2f:27:8b:
1d:c2:af:f4:9a:a8:80:82:34:cb:73:72:ff:e7:40:
f0:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:07:17:A5:8C:50:9D:CA:15:13:C6:F8:C6:CC:91:08:24:C6:66:E3
X509v3 Authority Key Identifier:
keyid:4C:6A:F9:86:B2:41:D9:D2:7E:C7:24:AD:FA:BF:06:D5:D2:31:79:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TGr5hrJB2dJ-xySt-r8G1dIxeT8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/dbc472-6e0a-411c-af8f-0888eb42744c/1/TGr5hrJB2dJ-xySt-r8G1dIxeT8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/dbc472-6e0a-411c-af8f-0888eb42744c/1/TGr5hrJB2dJ-xySt-r8G1dIxeT8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:49:64:11:17:9d:03:e0:83:f9:bf:7e:cc:28:55:6a:53:50:
5b:c1:67:6e:e7:fb:64:37:49:32:8d:96:f7:59:35:12:32:37:
d0:3e:53:66:5f:74:3a:d6:8e:28:6c:e3:c5:7e:a1:d6:e8:89:
52:21:21:99:3b:94:28:2d:a4:eb:25:e7:a7:4d:bb:24:75:76:
0b:44:ea:d1:56:85:a9:54:10:8d:de:f8:06:39:3c:c8:f7:d5:
cd:05:7e:f7:b5:17:66:e1:ce:33:83:7f:8e:cc:c3:6d:9c:6a:
fd:f2:60:fc:8d:65:a2:db:d1:b9:7c:e3:26:bc:b7:b8:d8:78:
13:62:4f:9b:45:e6:5e:ef:f5:c8:28:55:03:31:75:b0:fa:34:
57:06:e8:74:16:6c:b2:9c:68:34:af:8f:0f:8d:ba:79:1e:cb:
f5:08:da:6c:44:d7:8d:b0:91:7f:dd:67:84:ed:08:94:63:5e:
5e:de:e5:31:fb:3c:1a:a6:7c:9f:3d:eb:42:a6:20:f0:f9:a1:
5f:c6:f9:7d:f6:68:c8:d5:c5:d0:ba:61:48:50:c7:d3:76:6d:
39:dc:21:00:ca:fe:98:3a:6f:65:c4:61:fa:9d:f1:2a:47:68:
00:aa:db:ca:83:78:f6:bd:40:94:87:4b:76:e1:b1:89:f2:7c:
8f:ea:f8:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:05:26 2025 by rpki-client