Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/c62d13-7f03-4d19-8b46-fc91433d367d/1/TKE73qVPdrioVxKv22FRhrM4OME.mft
File: TKE73qVPdrioVxKv22FRhrM4OME.mft (raw, json)
Hash identifier: Oox9+uneHHqF7+HoX2EJvNaw99etokEljM4h/7nh0/I=
Subject key identifier: 9E:F2:25:D3:44:27:50:67:35:03:FC:3D:6D:AB:46:21:AE:1F:3C:D3
Authority key identifier: 4C:A1:3B:DE:A5:4F:76:B8:A8:57:12:AF:DB:61:51:86:B3:38:38:C1
Certificate issuer: /CN=4ca13bdea54f76b8a85712afdb615186b33838c1
Certificate serial: 019848C0C04285E3902FA7617F178007E52D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TKE73qVPdrioVxKv22FRhrM4OME.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/c62d13-7f03-4d19-8b46-fc91433d367d/1/TKE73qVPdrioVxKv22FRhrM4OME.mft
Manifest number: 1602
Signing time: Sat 26 Jul 2025 22:00:48 +0000
Manifest this update: Sat 26 Jul 2025 22:00:48 +0000
Manifest next update: Sun 27 Jul 2025 22:00:48 +0000
Files and hashes: 1: 8axKv1QeNdYLl5PRbdXwvujzyH4.roa (hash: P16odh3n69wKkHb8t7qySEeaYC3/LuUW9W8sAY8jUTo=)
2: TKE73qVPdrioVxKv22FRhrM4OME.crl (hash: SDW4d89n6KcyK7ObVcaibU5IlioFJvEJvrS8JZyqYQA=)
3: WNroR83uzcjISqXHww42f1zYgLY.roa (hash: ZAQula8xqSNg9/XEOBi+pmskOiJ5Nh7rkmicK30wwYU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/c62d13-7f03-4d19-8b46-fc91433d367d/1/TKE73qVPdrioVxKv22FRhrM4OME.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/c62d13-7f03-4d19-8b46-fc91433d367d/1/TKE73qVPdrioVxKv22FRhrM4OME.mft
rsync://rpki.ripe.net/repository/DEFAULT/TKE73qVPdrioVxKv22FRhrM4OME.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 22:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:c0:c0:42:85:e3:90:2f:a7:61:7f:17:80:07:e5:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ca13bdea54f76b8a85712afdb615186b33838c1
Validity
Not Before: Jul 26 22:00:48 2025 GMT
Not After : Jul 27 22:00:48 2025 GMT
Subject: CN=9ef225d3442750673503fc3d6dab4621ae1f3cd3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:33:2c:20:11:b0:86:01:b1:c7:81:69:6f:a7:
c8:0c:3b:06:06:53:1b:8a:d5:8a:29:b9:73:a8:dc:
b0:04:e3:15:8b:a1:59:3b:a1:b0:bb:33:f5:6f:63:
6d:be:0d:d9:fb:da:2f:8e:96:63:3a:19:a0:3e:1c:
da:31:59:65:e4:c1:dd:72:98:58:24:f1:b8:e1:47:
56:94:ff:a2:4a:08:ec:7a:9b:d2:44:bd:20:99:2c:
80:5e:31:9b:e6:fc:32:ab:74:c9:fe:ee:67:36:c6:
2e:c2:87:91:3d:ef:ae:e2:80:f5:38:37:9d:96:18:
06:20:5c:6e:e4:0e:2e:57:7f:92:d8:51:2b:0c:79:
34:7f:75:14:12:80:23:2f:4b:3e:cf:3a:cc:94:57:
ee:0c:b0:84:50:71:e2:05:0b:2d:d6:2c:ce:3e:fc:
c1:d5:7f:1f:b6:91:e8:20:6f:b2:54:93:cd:bc:c6:
0a:2b:95:fe:02:c4:f0:2b:7b:1b:37:04:69:72:d6:
6d:f2:07:f7:ea:6e:ed:56:57:59:aa:3b:f0:9a:e4:
17:f0:70:84:08:b6:ce:41:c7:a4:ee:a3:0e:74:5e:
e7:4a:07:f7:05:e5:eb:da:f3:b1:09:a1:f5:aa:af:
e7:e9:85:34:23:a2:59:8a:cd:3a:d6:97:95:c4:eb:
75:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:F2:25:D3:44:27:50:67:35:03:FC:3D:6D:AB:46:21:AE:1F:3C:D3
X509v3 Authority Key Identifier:
keyid:4C:A1:3B:DE:A5:4F:76:B8:A8:57:12:AF:DB:61:51:86:B3:38:38:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TKE73qVPdrioVxKv22FRhrM4OME.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/c62d13-7f03-4d19-8b46-fc91433d367d/1/TKE73qVPdrioVxKv22FRhrM4OME.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/c62d13-7f03-4d19-8b46-fc91433d367d/1/TKE73qVPdrioVxKv22FRhrM4OME.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:70:fb:88:71:e0:a5:f2:06:87:6f:c4:13:2c:36:7c:07:0a:
6e:d5:f7:96:22:33:9d:ff:47:e6:1e:54:f6:2b:db:2a:14:be:
31:25:29:07:34:96:a2:89:e2:49:b6:73:a7:c0:94:a4:2b:19:
6e:9b:f1:79:fc:8d:7a:3c:9d:31:01:4b:fc:ba:23:ee:50:a1:
4a:55:1c:8a:4c:0e:8d:42:69:fc:b1:92:44:d8:c2:81:a3:83:
d5:59:32:b5:3c:d4:dd:01:64:76:dc:6f:ee:0f:7e:dd:a8:8c:
47:92:a6:14:7f:c3:6a:d9:0f:02:f9:bd:43:f4:8c:92:03:bc:
b9:99:c8:5f:93:d7:2d:fa:40:aa:cf:b5:37:f7:40:da:d8:b1:
6c:6e:bb:e2:f9:16:61:00:d9:59:e0:31:7b:1b:22:f1:33:da:
eb:b3:f1:45:27:e9:e7:fa:e5:0f:7c:69:bd:8c:31:c1:62:8d:
68:da:13:1e:f7:2a:8e:b6:20:2b:e4:b0:b3:8c:12:0e:b7:fc:
87:40:bf:b9:3d:99:d1:e8:4c:bc:ae:33:e6:01:f5:9d:84:5d:
e6:8c:f0:c8:88:34:7e:5d:59:3f:8f:ec:80:95:19:43:93:83:
c2:ab:34:55:3d:83:9e:85:60:a3:5f:27:c3:2e:06:7a:42:ab:
9f:b3:77:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 07:48:45 2025 by rpki-client