Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/77f99c-35cb-47a6-bac3-caba81c9a152/1/tcr-HjrqL22RHtEHoIqv7peaT1E.mft
File: tcr-HjrqL22RHtEHoIqv7peaT1E.mft (raw, json)
Hash identifier: qYfmsL7wYep30jMvd9En8ROLMMmi3XN2vezUlCHweMI=
Subject key identifier: 27:A9:DD:CC:14:D6:58:B8:20:0F:21:4F:A8:8F:56:36:A2:70:18:98
Authority key identifier: B5:CA:FE:1E:3A:EA:2F:6D:91:1E:D1:07:A0:8A:AF:EE:97:9A:4F:51
Certificate issuer: /CN=b5cafe1e3aea2f6d911ed107a08aafee979a4f51
Certificate serial: 019A72932B70CABC3487792FC8C8F331B75C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tcr-HjrqL22RHtEHoIqv7peaT1E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/77f99c-35cb-47a6-bac3-caba81c9a152/1/tcr-HjrqL22RHtEHoIqv7peaT1E.mft
Manifest number: 0A69
Signing time: Tue 11 Nov 2025 11:00:38 +0000
Manifest this update: Tue 11 Nov 2025 11:00:38 +0000
Manifest next update: Wed 12 Nov 2025 11:00:38 +0000
Files and hashes: 1: Sk4oS4Jwout0TIyWtwTprBvECw8.roa (hash: d9eggJxjronzsMXpOOKPiqelR6UqHbuMYzc02e4+PZo=)
2: tcr-HjrqL22RHtEHoIqv7peaT1E.crl (hash: XDe3OmwhrJCmdXXnb+Wiqnm56ytWOEzJsrFm95rS8Bw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/77f99c-35cb-47a6-bac3-caba81c9a152/1/tcr-HjrqL22RHtEHoIqv7peaT1E.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/77f99c-35cb-47a6-bac3-caba81c9a152/1/tcr-HjrqL22RHtEHoIqv7peaT1E.mft
rsync://rpki.ripe.net/repository/DEFAULT/tcr-HjrqL22RHtEHoIqv7peaT1E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:93:2b:70:ca:bc:34:87:79:2f:c8:c8:f3:31:b7:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5cafe1e3aea2f6d911ed107a08aafee979a4f51
Validity
Not Before: Nov 11 11:00:38 2025 GMT
Not After : Nov 12 11:00:38 2025 GMT
Subject: CN=27a9ddcc14d658b8200f214fa88f5636a2701898
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:7b:a5:9f:72:8d:41:a4:54:ca:db:2b:c4:31:
95:be:e9:69:fd:66:a1:61:76:b0:10:21:9e:44:43:
35:65:4d:66:14:c5:26:9a:07:d2:13:a6:e5:10:7a:
9e:1e:df:cd:93:fd:08:01:88:04:93:44:74:6e:61:
a0:42:42:f5:2f:08:63:78:5d:62:b7:7c:b2:68:5e:
cc:6e:ea:a5:75:af:2b:4c:41:e5:0a:9b:87:77:15:
f7:4d:e1:14:71:47:aa:9b:93:88:5a:6a:c5:3a:2f:
3a:e3:06:34:e5:c8:50:e9:e9:ba:aa:14:51:71:16:
0f:f3:19:24:bb:83:93:29:64:95:cc:66:60:62:15:
5d:ad:cf:5c:ab:ac:1c:59:ed:3d:32:fe:bf:8c:a6:
16:57:75:b7:d6:e8:2a:7b:c0:43:9a:43:01:f3:43:
4f:d3:80:14:0c:33:b1:03:3d:80:51:8f:73:03:36:
0b:c7:95:d0:a6:b2:38:88:f7:9d:6c:78:c0:fb:d2:
d3:c7:cf:64:70:cf:83:8f:51:e3:4f:e0:69:6f:b8:
90:87:19:2a:15:2f:d3:cf:d2:51:59:85:b0:ed:ba:
62:17:94:95:7a:39:90:1e:51:f7:f1:53:02:1b:0f:
15:f6:2b:11:04:0d:8d:57:24:a7:b7:bf:65:19:7b:
ea:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:A9:DD:CC:14:D6:58:B8:20:0F:21:4F:A8:8F:56:36:A2:70:18:98
X509v3 Authority Key Identifier:
keyid:B5:CA:FE:1E:3A:EA:2F:6D:91:1E:D1:07:A0:8A:AF:EE:97:9A:4F:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tcr-HjrqL22RHtEHoIqv7peaT1E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/77f99c-35cb-47a6-bac3-caba81c9a152/1/tcr-HjrqL22RHtEHoIqv7peaT1E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/77f99c-35cb-47a6-bac3-caba81c9a152/1/tcr-HjrqL22RHtEHoIqv7peaT1E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:ac:46:40:a0:5d:45:f6:ae:55:3b:74:6e:ed:47:ec:4c:6a:
72:14:76:51:a7:0e:39:a4:27:1e:dc:41:0b:59:8f:8c:5a:a2:
21:a0:2c:64:d9:99:a3:c5:3d:c3:fb:5a:20:4b:50:15:fd:93:
a5:ce:00:5b:eb:53:f6:7e:a9:b9:9a:2c:4d:56:7c:34:1a:a9:
9d:57:84:a0:fd:49:9c:03:c4:83:d3:d9:47:a0:98:aa:ec:89:
d5:2c:9e:52:25:e1:6a:66:63:73:16:7e:2c:97:4f:9d:83:79:
8e:f2:df:1d:71:02:7f:41:2a:ce:90:37:93:8e:70:59:83:90:
a1:4c:d9:0b:06:ee:08:67:77:07:4f:a7:9a:fb:94:b7:47:19:
fa:59:ed:db:12:25:7a:95:75:4f:4f:38:33:49:16:df:f6:58:
4a:d6:2f:e0:de:10:d8:1b:c6:57:06:15:f3:96:88:ef:49:cd:
07:38:55:b3:a5:47:a6:68:c5:f3:e6:67:2d:e4:69:4e:3c:1e:
f0:52:f2:c8:f6:82:c0:37:ba:ea:e5:0f:59:d1:eb:09:ab:2d:
cf:d1:48:9f:7e:4d:31:60:90:3a:a7:06:60:5e:a0:ae:14:44:
75:94:1c:01:b4:a0:47:03:99:c8:22:56:88:a6:7a:50:db:bd:
33:df:60:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:10:16 2025 by rpki-client