Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/220b38-77ca-4de4-8b86-9f845c546470/1/TjbM4hQsoYtQWJcVjSblg50rQX8.mft
File: TjbM4hQsoYtQWJcVjSblg50rQX8.mft (raw, json)
Hash identifier: BEaAgWXo5jLhNPHz/B5ypOtOLdHn2ipjbsCZCbAgB0Q=
Subject key identifier: FC:76:90:8B:E6:A0:1B:D1:F6:19:FD:88:99:0C:22:2C:74:C1:9B:84
Authority key identifier: 4E:36:CC:E2:14:2C:A1:8B:50:58:97:15:8D:26:E5:83:9D:2B:41:7F
Certificate issuer: /CN=4e36cce2142ca18b505897158d26e5839d2b417f
Certificate serial: 019A1AD171BC44595335C1AADF32185F937C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TjbM4hQsoYtQWJcVjSblg50rQX8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/220b38-77ca-4de4-8b86-9f845c546470/1/TjbM4hQsoYtQWJcVjSblg50rQX8.mft
Manifest number: 16F2
Signing time: Sat 25 Oct 2025 10:02:04 +0000
Manifest this update: Sat 25 Oct 2025 10:02:04 +0000
Manifest next update: Sun 26 Oct 2025 10:02:04 +0000
Files and hashes: 1: TjbM4hQsoYtQWJcVjSblg50rQX8.crl (hash: vUzuoUSg/7yRtN7BgMegzdKmbqS9yTFcySoA6P21sL4=)
2: XbP44H3vmNpq_6C_0jvpv9umOf0.roa (hash: DcrY51YDFwazT333yz0LqnUGv8gSeHfRdQ2uMNMEV+M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/220b38-77ca-4de4-8b86-9f845c546470/1/TjbM4hQsoYtQWJcVjSblg50rQX8.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/220b38-77ca-4de4-8b86-9f845c546470/1/TjbM4hQsoYtQWJcVjSblg50rQX8.mft
rsync://rpki.ripe.net/repository/DEFAULT/TjbM4hQsoYtQWJcVjSblg50rQX8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 Oct 2025 10:02:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1a:d1:71:bc:44:59:53:35:c1:aa:df:32:18:5f:93:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e36cce2142ca18b505897158d26e5839d2b417f
Validity
Not Before: Oct 25 10:02:04 2025 GMT
Not After : Oct 26 10:02:04 2025 GMT
Subject: CN=fc76908be6a01bd1f619fd88990c222c74c19b84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:6e:62:83:8f:e3:37:2c:42:4c:3a:31:c7:80:
e5:8e:49:67:1f:b2:14:60:f4:d2:82:9e:ed:80:12:
9f:95:bb:5d:4a:7e:d4:d2:3a:30:0e:0c:93:33:c8:
27:49:a9:8e:cb:d9:39:bb:51:46:ce:f7:dc:7a:ae:
38:fa:43:44:09:46:14:47:db:4f:be:84:5c:2e:59:
ec:4f:0a:a4:21:d1:9d:bd:f9:d7:09:6d:06:f4:66:
4b:06:5c:fc:bd:85:15:14:a9:bf:5e:91:dc:93:7e:
eb:70:cd:c7:3b:94:34:9c:bb:23:f0:f5:d7:1c:35:
3b:a3:eb:3d:63:75:2c:e0:7e:e5:a4:59:8e:1b:b8:
c6:91:37:84:cc:f3:9c:92:39:e4:07:65:d9:93:b0:
56:0e:07:af:af:67:db:40:98:63:77:bc:1f:69:aa:
62:3c:fb:64:5f:91:db:2b:85:58:c8:bc:b7:46:78:
13:59:86:95:1c:ce:9a:fd:4a:b3:2b:af:fc:bf:64:
ea:c4:4c:47:60:39:b5:21:51:fc:50:00:23:99:9a:
c1:e2:f9:29:2f:83:b7:f0:4f:2b:73:bd:f7:3e:41:
f0:9d:b2:c6:30:86:76:dc:e7:f9:05:6e:be:60:02:
ff:bf:fe:a7:ea:0f:19:45:e3:9d:22:82:dc:7f:d7:
95:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:76:90:8B:E6:A0:1B:D1:F6:19:FD:88:99:0C:22:2C:74:C1:9B:84
X509v3 Authority Key Identifier:
keyid:4E:36:CC:E2:14:2C:A1:8B:50:58:97:15:8D:26:E5:83:9D:2B:41:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TjbM4hQsoYtQWJcVjSblg50rQX8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/220b38-77ca-4de4-8b86-9f845c546470/1/TjbM4hQsoYtQWJcVjSblg50rQX8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/220b38-77ca-4de4-8b86-9f845c546470/1/TjbM4hQsoYtQWJcVjSblg50rQX8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:a2:4f:17:ab:43:7c:0b:ac:41:ef:de:34:fc:fa:00:89:f0:
77:e7:26:4c:36:ae:fe:22:2e:d6:ae:f1:a1:35:e0:ed:01:88:
2d:83:05:5a:60:1d:6b:6a:5d:b8:42:34:72:b2:60:dc:40:e3:
50:a5:d1:db:8d:b1:a2:5b:5d:28:94:a9:03:f8:5e:9a:d2:61:
c3:dc:12:39:1f:ba:1f:43:0f:e8:97:23:12:fc:25:25:9b:f3:
9e:45:54:de:cd:d8:eb:c3:d7:5a:54:cb:98:ec:31:bc:39:3b:
ba:b7:98:af:8c:fa:61:74:03:ec:bf:13:df:1e:53:4a:ca:1c:
8f:ab:a6:fc:8f:1b:23:ab:c5:4c:3c:c7:a4:ba:a4:9f:ee:26:
64:75:d0:2b:bd:5e:14:78:ad:e6:32:9f:f4:3d:96:ca:07:57:
61:10:66:54:a1:9b:f9:64:79:3b:5e:5d:46:3f:91:8b:a3:72:
05:ee:68:da:b5:10:21:af:b6:58:38:9f:0e:9a:a0:44:19:e0:
cf:46:a0:5e:4c:d8:7f:7f:6e:47:e8:9a:08:a9:94:28:2c:bd:
46:31:c8:c5:ad:21:4f:3f:b2:72:f7:24:b9:21:0b:9b:99:9d:
67:c9:37:e1:86:a3:6e:b0:e7:5d:4d:5e:b6:d6:fc:bc:47:2c:
79:68:fe:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 25 20:04:25 2025 by rpki-client