Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/185a42-cb7f-4058-86f5-41ae5f4a5055/1/TKvzOws4CIj-HjuA7aSLF4G7dwk.mft
File: TKvzOws4CIj-HjuA7aSLF4G7dwk.mft (raw, json)
Hash identifier: VWOcvt0cD/Vc108MWWCFSrx/gLIMprbF7tTFj6V8Y0w=
Subject key identifier: 56:BC:8C:B8:96:B2:9B:B7:C7:BD:46:2F:1F:F8:88:EB:22:D1:53:6C
Authority key identifier: 4C:AB:F3:3B:0B:38:08:88:FE:1E:3B:80:ED:A4:8B:17:81:BB:77:09
Certificate issuer: /CN=4cabf33b0b380888fe1e3b80eda48b1781bb7709
Certificate serial: 0199FFC79374EED5879625725D1FDEDA1612
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TKvzOws4CIj-HjuA7aSLF4G7dwk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/185a42-cb7f-4058-86f5-41ae5f4a5055/1/TKvzOws4CIj-HjuA7aSLF4G7dwk.mft
Manifest number: 16E2
Signing time: Mon 20 Oct 2025 04:01:33 +0000
Manifest this update: Mon 20 Oct 2025 04:01:33 +0000
Manifest next update: Tue 21 Oct 2025 04:01:33 +0000
Files and hashes: 1: Ej6AGqgrDcCEmdxGQ51_3en2bK0.roa (hash: iJ7FETE7qwjnaLdIl0yVteeRiSysQ9U3gczbrqrkwXU=)
2: TKvzOws4CIj-HjuA7aSLF4G7dwk.crl (hash: d9npeRk9dJ1MzRqvva5FxvUy0S8ABqLj4ghM0lyMxrQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/185a42-cb7f-4058-86f5-41ae5f4a5055/1/TKvzOws4CIj-HjuA7aSLF4G7dwk.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/185a42-cb7f-4058-86f5-41ae5f4a5055/1/TKvzOws4CIj-HjuA7aSLF4G7dwk.mft
rsync://rpki.ripe.net/repository/DEFAULT/TKvzOws4CIj-HjuA7aSLF4G7dwk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:c7:93:74:ee:d5:87:96:25:72:5d:1f:de:da:16:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4cabf33b0b380888fe1e3b80eda48b1781bb7709
Validity
Not Before: Oct 20 04:01:33 2025 GMT
Not After : Oct 21 04:01:33 2025 GMT
Subject: CN=56bc8cb896b29bb7c7bd462f1ff888eb22d1536c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:1e:a4:a9:fa:a3:e1:6d:0a:b8:a4:fe:f0:07:
da:29:1b:43:c1:0b:83:05:37:f5:0f:f1:51:28:ea:
8e:c7:cb:24:dc:32:68:87:0b:7c:6f:6a:08:37:c7:
c5:c6:bc:f7:64:d5:44:bd:80:ca:fc:19:1c:91:89:
06:71:f6:2d:7c:5e:64:32:61:ad:42:21:8c:14:c9:
b9:b5:89:d3:b9:cc:1b:80:41:d8:9d:d6:cf:e2:64:
86:9b:3a:cf:46:f4:ba:fd:fd:4b:78:4c:e4:e5:10:
66:e2:93:84:c3:f5:bd:bf:ee:2d:d6:fb:8d:cb:8d:
4b:4d:70:f0:b9:d2:ea:95:c0:20:4e:74:7b:c4:15:
6a:03:51:16:a9:68:52:57:f2:26:66:16:9d:20:6b:
e8:9a:e1:d2:e1:6b:fe:d0:5b:45:1d:1d:ec:91:a4:
cf:41:94:26:3b:3f:ad:6e:e4:c9:28:ef:3a:b8:f0:
21:98:b4:5a:90:40:18:b2:23:d4:0a:dc:87:6f:91:
73:a5:9c:a7:44:82:7c:05:4f:a5:6d:bc:f8:62:94:
f3:62:8e:c3:3f:52:2e:d8:78:45:76:83:4a:70:97:
e5:d8:db:b0:ad:c2:62:45:54:bf:13:e2:d6:e2:61:
29:8d:31:42:4b:b9:b7:ff:f8:23:c4:70:bc:d8:82:
32:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:BC:8C:B8:96:B2:9B:B7:C7:BD:46:2F:1F:F8:88:EB:22:D1:53:6C
X509v3 Authority Key Identifier:
keyid:4C:AB:F3:3B:0B:38:08:88:FE:1E:3B:80:ED:A4:8B:17:81:BB:77:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TKvzOws4CIj-HjuA7aSLF4G7dwk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/185a42-cb7f-4058-86f5-41ae5f4a5055/1/TKvzOws4CIj-HjuA7aSLF4G7dwk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/185a42-cb7f-4058-86f5-41ae5f4a5055/1/TKvzOws4CIj-HjuA7aSLF4G7dwk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:87:51:68:02:be:af:12:4b:77:ba:12:d0:a4:18:fc:ce:98:
72:1d:d8:e5:04:5f:b6:90:d4:2e:9a:1b:a8:65:f3:ef:86:b5:
a4:50:fa:da:14:c0:45:52:b0:6d:8d:b7:e8:40:a3:5e:d0:1a:
3a:79:a0:47:42:ff:c6:2e:83:70:5e:fd:46:28:1f:aa:4b:05:
da:37:21:04:fc:40:d9:05:d3:7b:a2:d8:13:9f:f2:c8:42:20:
ec:63:b0:c9:f4:d2:e0:00:cf:62:2a:4a:a1:88:06:0f:05:87:
04:68:49:69:35:dc:fe:42:b4:ed:5b:ac:74:2e:75:76:bf:70:
e3:53:b5:3d:0d:cd:cd:9c:25:c7:02:4f:ee:9e:13:f5:10:d3:
e3:d8:20:58:e8:fc:d1:e0:05:ec:60:bf:1e:28:ea:0a:27:7a:
44:46:25:53:8e:90:01:a2:4c:f9:4b:f7:13:51:4a:17:b8:5b:
63:b8:ac:42:34:ac:77:84:55:10:4f:e8:1a:35:e1:cd:b6:56:
97:91:f7:b1:67:ea:ef:6f:99:40:b3:00:9b:99:27:66:c5:d7:
fe:04:c8:00:3e:c9:54:ec:db:26:c9:f5:1c:79:5a:49:08:b1:
d6:21:bd:67:5c:e4:71:65:2a:41:ed:6a:02:15:53:be:ec:0e:
f4:a0:fd:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 08:45:50 2025 by rpki-client