Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/a07523-8392-47f5-82b3-30c430a398e6/1/TnKscetFB6wKZSpUWY2uRR_jP0c.mft
File: TnKscetFB6wKZSpUWY2uRR_jP0c.mft (raw, json)
Hash identifier: GLE4/Aw4K4fgN4UJZzBIUQ3u19z5GwdUVhYb7J5DG5U=
Subject key identifier: 29:19:44:18:58:93:86:33:BF:ED:0F:3F:42:97:48:F5:2D:B0:EB:4E
Authority key identifier: 4E:72:AC:71:EB:45:07:AC:0A:65:2A:54:59:8D:AE:45:1F:E3:3F:47
Certificate issuer: /CN=4e72ac71eb4507ac0a652a54598dae451fe33f47
Certificate serial: 0199FC21C0C2C96D431AA2A58CC51F898846
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TnKscetFB6wKZSpUWY2uRR_jP0c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/a07523-8392-47f5-82b3-30c430a398e6/1/TnKscetFB6wKZSpUWY2uRR_jP0c.mft
Manifest number: 140D
Signing time: Sun 19 Oct 2025 11:01:34 +0000
Manifest this update: Sun 19 Oct 2025 11:01:34 +0000
Manifest next update: Mon 20 Oct 2025 11:01:34 +0000
Files and hashes: 1: 4zuoqc0Glu6ApY4rQHmNAlxxavo.roa (hash: qDD4JCBpI34S2Q624/ndlMxJa6qHAv5moxaFgFJvL3I=)
2: TnKscetFB6wKZSpUWY2uRR_jP0c.crl (hash: SYsWhMzbqOA754TBJfjYrEYzRgHeLryQ+AkG4/ccnyM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/a07523-8392-47f5-82b3-30c430a398e6/1/TnKscetFB6wKZSpUWY2uRR_jP0c.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/a07523-8392-47f5-82b3-30c430a398e6/1/TnKscetFB6wKZSpUWY2uRR_jP0c.mft
rsync://rpki.ripe.net/repository/DEFAULT/TnKscetFB6wKZSpUWY2uRR_jP0c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:c0:c2:c9:6d:43:1a:a2:a5:8c:c5:1f:89:88:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e72ac71eb4507ac0a652a54598dae451fe33f47
Validity
Not Before: Oct 19 11:01:34 2025 GMT
Not After : Oct 20 11:01:34 2025 GMT
Subject: CN=2919441858938633bfed0f3f429748f52db0eb4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:52:40:98:17:16:ef:47:07:78:e1:cf:7c:2c:
93:a5:30:7d:33:3a:de:0b:82:86:8c:f0:8f:83:cc:
5d:0d:24:e8:7a:26:00:29:67:c8:93:e1:84:85:98:
e3:50:27:14:6a:a7:c0:a8:58:2b:d9:e5:1e:9f:be:
bb:97:26:e5:a4:b9:37:7e:ed:08:7a:c4:13:89:2b:
ae:cb:ad:68:80:02:f0:80:c7:94:d2:31:95:7f:99:
d4:52:17:24:fd:10:25:8b:26:7f:52:99:50:5c:cc:
74:28:f9:b5:16:1d:51:d5:8a:4b:cc:95:a1:68:c7:
77:45:ad:f4:50:1d:95:66:18:99:f7:0d:05:e3:3e:
74:ad:83:91:c3:55:98:5c:d5:39:cc:11:bd:e2:70:
79:70:38:25:6d:ba:cf:cc:67:37:bd:3d:76:91:45:
27:ec:9c:78:99:a4:d6:a9:a7:88:51:a8:9e:6d:0c:
67:1e:ca:da:bc:85:ec:2e:7a:95:ee:cc:a6:67:5a:
72:11:2e:3b:e9:73:ee:29:06:38:e0:12:94:ca:38:
81:86:75:af:ab:99:11:da:a7:12:82:c7:7c:e2:01:
c6:b9:57:98:ed:d2:42:3d:6a:96:14:4b:ed:be:15:
ab:b6:cb:79:8b:ca:df:bc:9f:ef:1c:79:70:77:a5:
db:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:19:44:18:58:93:86:33:BF:ED:0F:3F:42:97:48:F5:2D:B0:EB:4E
X509v3 Authority Key Identifier:
keyid:4E:72:AC:71:EB:45:07:AC:0A:65:2A:54:59:8D:AE:45:1F:E3:3F:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TnKscetFB6wKZSpUWY2uRR_jP0c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/a07523-8392-47f5-82b3-30c430a398e6/1/TnKscetFB6wKZSpUWY2uRR_jP0c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/a07523-8392-47f5-82b3-30c430a398e6/1/TnKscetFB6wKZSpUWY2uRR_jP0c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:e4:fe:a6:3b:17:31:9f:dc:69:19:21:d8:33:79:40:42:33:
87:05:6b:e9:80:fb:4b:8f:00:5e:bd:a9:87:e5:6b:e1:50:1d:
1d:4b:fd:d9:15:7d:e3:c5:c9:b0:98:dd:0e:7b:4c:35:49:ef:
04:be:7e:84:db:34:57:a3:49:ed:2f:cb:7e:55:86:72:da:67:
ca:2a:4c:3a:99:b8:79:a2:27:7f:48:f6:69:a7:2d:54:44:90:
91:e8:09:1e:87:db:75:22:19:2f:de:3a:b0:ed:4f:87:bd:a2:
22:7b:1b:47:34:02:77:21:71:6c:4e:68:14:e4:f1:52:4a:43:
d1:42:b7:1a:61:bf:6b:6a:02:a1:7f:f5:c9:ca:93:5f:85:2e:
c5:01:7e:01:6e:17:87:e1:0a:3a:f0:1d:12:27:43:17:4e:70:
fa:d5:ee:9d:92:f9:8a:41:7b:92:08:e2:cb:e8:11:05:12:1f:
9b:e3:ad:91:3d:57:9d:d2:ce:36:6e:7e:72:b3:cb:a9:8c:dc:
b0:bc:87:78:76:ac:99:1a:2f:40:4c:48:69:c0:84:6a:9a:3d:
f2:97:e9:aa:75:85:b5:43:52:e6:a9:2c:3b:36:6c:7a:c2:c4:
5f:49:a2:14:83:ff:74:8b:8c:92:45:31:f5:9c:60:26:8d:aa:
be:0a:b3:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:33:26 2025 by rpki-client