Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/795ed9-8fad-4c44-8583-06ca709a3c59/1/tcsrXq88wV3Us7I62LlHKlJAwDs.mft
File: tcsrXq88wV3Us7I62LlHKlJAwDs.mft (raw, json)
Hash identifier: EIGP5lS9rickI8uacjydzgADB4MDBKIT9Z9cS9jo538=
Subject key identifier: A9:71:08:20:1D:AC:81:08:B2:84:FC:50:2A:04:09:F6:40:63:38:55
Authority key identifier: B5:CB:2B:5E:AF:3C:C1:5D:D4:B3:B2:3A:D8:B9:47:2A:52:40:C0:3B
Certificate issuer: /CN=b5cb2b5eaf3cc15dd4b3b23ad8b9472a5240c03b
Certificate serial: 0199FB45DB81150F122CCC05D9625E1A1C61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tcsrXq88wV3Us7I62LlHKlJAwDs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/795ed9-8fad-4c44-8583-06ca709a3c59/1/tcsrXq88wV3Us7I62LlHKlJAwDs.mft
Manifest number: C4
Signing time: Sun 19 Oct 2025 07:01:23 +0000
Manifest this update: Sun 19 Oct 2025 07:01:23 +0000
Manifest next update: Mon 20 Oct 2025 07:01:23 +0000
Files and hashes: 1: 4I0Ig-sZsSlS-ISQfhvyI-hIXNs.roa (hash: JlPqPVzZ1fRapenzkzSS/av8yhZnv6+RiIsubYAxBXc=)
2: Ay7JoslT6EAyHRaULsBRtIZWwog.roa (hash: gTv3k9NPlg2vVpHAiGMl3DtLPA9ZFxKifPWXSsGIZk8=)
3: a9i8eCPzOCR2a7g49i_eP0oTcMg.roa (hash: CLgIXtXHGLkSKlPAdABLQyRziV9nANmmCJ4xG0uixD8=)
4: tcsrXq88wV3Us7I62LlHKlJAwDs.crl (hash: BUr+PqdbyUhzz9LLPwUDppfP5MBwso+JD+PDAMDFDpU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/795ed9-8fad-4c44-8583-06ca709a3c59/1/tcsrXq88wV3Us7I62LlHKlJAwDs.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/795ed9-8fad-4c44-8583-06ca709a3c59/1/tcsrXq88wV3Us7I62LlHKlJAwDs.mft
rsync://rpki.ripe.net/repository/DEFAULT/tcsrXq88wV3Us7I62LlHKlJAwDs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:45:db:81:15:0f:12:2c:cc:05:d9:62:5e:1a:1c:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5cb2b5eaf3cc15dd4b3b23ad8b9472a5240c03b
Validity
Not Before: Oct 19 07:01:23 2025 GMT
Not After : Oct 20 07:01:23 2025 GMT
Subject: CN=a97108201dac8108b284fc502a0409f640633855
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:99:f8:b1:72:5b:32:42:32:2a:7f:54:5d:5d:
2e:5a:8d:79:3a:c8:f8:b2:1f:93:8c:2f:c3:54:a2:
1a:91:a4:cd:6d:55:0f:5d:cc:66:72:1b:63:7e:e9:
79:0d:a5:81:91:51:ae:1e:b5:1a:a3:8d:65:6f:71:
eb:0a:fa:d2:bc:bc:71:74:04:5b:c4:10:e4:6d:74:
c7:5e:28:b3:6a:16:4a:f0:81:f2:59:b3:ad:36:93:
7a:f9:5e:86:3c:af:3c:26:a9:9c:ac:03:4f:04:b5:
c1:1c:e8:ee:5a:84:63:67:48:15:6c:b0:b2:9d:e6:
8d:ec:03:6f:15:93:98:f4:04:25:a9:5e:72:b2:46:
32:0a:eb:24:aa:71:09:1f:27:6f:90:87:e4:70:59:
c3:3b:b4:3e:70:a4:1b:ba:85:ea:81:0b:e0:33:ee:
2a:82:48:dc:34:27:2e:b9:9d:a9:09:25:90:dc:c1:
87:60:f8:ab:45:38:4a:fc:eb:51:ef:28:7c:bc:ed:
40:84:c5:1b:a1:a5:d5:83:ae:36:34:3c:9b:21:2f:
09:4d:9c:3c:c4:f1:d3:0e:eb:e0:75:0d:26:09:18:
69:39:bb:81:69:55:50:fc:13:c8:ca:04:97:a9:67:
f9:73:8e:1a:34:42:2f:c8:f1:c1:bb:3a:4f:cf:aa:
26:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:71:08:20:1D:AC:81:08:B2:84:FC:50:2A:04:09:F6:40:63:38:55
X509v3 Authority Key Identifier:
keyid:B5:CB:2B:5E:AF:3C:C1:5D:D4:B3:B2:3A:D8:B9:47:2A:52:40:C0:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tcsrXq88wV3Us7I62LlHKlJAwDs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/795ed9-8fad-4c44-8583-06ca709a3c59/1/tcsrXq88wV3Us7I62LlHKlJAwDs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/795ed9-8fad-4c44-8583-06ca709a3c59/1/tcsrXq88wV3Us7I62LlHKlJAwDs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:da:a5:43:07:26:21:a2:2a:25:3f:42:83:a9:11:6b:f0:bb:
af:77:38:ee:1b:72:4b:95:fa:fe:93:bd:b6:11:c3:59:bd:6b:
41:0a:1c:fa:3e:2c:4a:ac:ed:06:91:79:d3:d8:8a:e5:de:c8:
d9:db:bf:aa:45:aa:19:a4:e1:b8:09:dc:21:95:0d:3b:6e:97:
b5:b6:d4:73:98:bd:c6:f9:3d:a2:a6:68:4b:8f:29:61:b8:7d:
ab:24:17:ab:e4:d9:43:c6:46:aa:2e:54:2c:5d:ab:57:0b:47:
5d:55:71:42:24:14:2a:77:eb:b4:d3:28:1b:87:66:4d:10:a4:
3f:ba:c6:95:7e:61:14:77:92:0e:53:ef:50:fc:92:14:26:1c:
a7:88:a7:56:8c:50:d1:71:1f:23:cc:3d:e6:c1:9f:39:01:da:
43:ab:90:a1:b9:ee:b5:a3:45:30:7b:48:3d:d4:31:c4:fc:b8:
c6:49:82:5b:35:5b:8a:c9:46:25:86:a1:12:00:4d:35:0d:84:
33:c8:f2:32:0c:26:dd:05:a1:30:f6:9a:f0:ae:63:b1:fb:a0:
aa:4e:b1:78:01:fd:b9:64:4f:18:9a:bf:1e:5f:68:f6:99:a5:
93:0e:e1:65:b3:88:e5:5c:4a:a6:16:9f:3a:1f:38:8c:ff:db:
45:84:dd:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:34:34 2025 by rpki-client