Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/2c8482-5331-4e57-9974-40837d48473d/1/TaTWGZrsgo9pieLoTOwXdlusXNU.mft
File: TaTWGZrsgo9pieLoTOwXdlusXNU.mft (raw, json)
Hash identifier: pszuWs1lCqDoRuNijlns+/HTxzWbt2ZIm7tiN4mBVVA=
Subject key identifier: 32:92:C4:16:C2:09:D3:E5:D1:65:53:6C:2B:C6:80:5F:F9:DD:6A:73
Authority key identifier: 4D:A4:D6:19:9A:EC:82:8F:69:89:E2:E8:4C:EC:17:76:5B:AC:5C:D5
Certificate issuer: /CN=4da4d6199aec828f6989e2e84cec17765bac5cd5
Certificate serial: 019A1BE2C52F17FDFD3CADF5B4A41F047CF1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TaTWGZrsgo9pieLoTOwXdlusXNU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/2c8482-5331-4e57-9974-40837d48473d/1/TaTWGZrsgo9pieLoTOwXdlusXNU.mft
Manifest number: 16F9
Signing time: Sat 25 Oct 2025 15:00:37 +0000
Manifest this update: Sat 25 Oct 2025 15:00:37 +0000
Manifest next update: Sun 26 Oct 2025 15:00:37 +0000
Files and hashes: 1: BhaT-M-zQEVQbEPTvK_whwRLo3g.roa (hash: yoydrscKhHCdRvyWQAObyBBT0xMyfOzTOU389MtWZv4=)
2: TaTWGZrsgo9pieLoTOwXdlusXNU.crl (hash: VRxS/u9GZeVjoYLlg4ca/InJAM13jqaBEn1sAqYhJDE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/2c8482-5331-4e57-9974-40837d48473d/1/TaTWGZrsgo9pieLoTOwXdlusXNU.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/2c8482-5331-4e57-9974-40837d48473d/1/TaTWGZrsgo9pieLoTOwXdlusXNU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TaTWGZrsgo9pieLoTOwXdlusXNU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 Oct 2025 15:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1b:e2:c5:2f:17:fd:fd:3c:ad:f5:b4:a4:1f:04:7c:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4da4d6199aec828f6989e2e84cec17765bac5cd5
Validity
Not Before: Oct 25 15:00:37 2025 GMT
Not After : Oct 26 15:00:37 2025 GMT
Subject: CN=3292c416c209d3e5d165536c2bc6805ff9dd6a73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:39:5d:c7:11:bd:82:62:a1:ee:00:9f:e3:df:
9a:b2:70:02:22:76:17:9e:ca:99:e0:d9:42:af:70:
d3:c6:b9:48:80:19:47:a4:dc:6d:63:1d:22:c1:bf:
ad:06:d4:52:d8:f8:07:48:e9:10:64:40:a4:9f:2d:
a7:d3:d0:34:28:a6:a4:64:4f:11:8f:bf:58:d4:54:
1f:a4:61:5c:dd:78:ee:88:c3:ec:86:ef:34:ea:2e:
92:e4:4a:9a:2a:09:90:d5:fd:8a:59:d8:06:ca:d8:
3b:64:17:06:e5:6b:31:15:50:f2:0a:0c:bc:41:30:
c6:25:48:34:61:2d:4e:2a:43:7d:86:d5:e4:fe:98:
3b:5c:6d:f3:76:97:c7:da:36:b8:f8:af:29:07:fb:
b4:f3:18:c6:5e:a7:5b:59:39:69:ff:37:1b:cd:4d:
b6:17:a3:61:ce:ea:de:80:71:00:24:92:0c:fa:b4:
7a:5b:4a:9c:fe:32:7e:03:5b:55:78:a0:15:02:e6:
8b:e1:a5:b7:7f:d7:11:14:b3:f1:87:cb:6f:13:21:
f6:3b:4a:12:22:59:17:48:00:5b:45:32:12:fc:c5:
ee:e4:6c:23:37:b4:cc:48:57:a0:7a:75:cf:cb:71:
35:d9:5c:ed:2e:61:30:64:f3:35:ca:43:38:21:50:
09:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:92:C4:16:C2:09:D3:E5:D1:65:53:6C:2B:C6:80:5F:F9:DD:6A:73
X509v3 Authority Key Identifier:
keyid:4D:A4:D6:19:9A:EC:82:8F:69:89:E2:E8:4C:EC:17:76:5B:AC:5C:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TaTWGZrsgo9pieLoTOwXdlusXNU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/2c8482-5331-4e57-9974-40837d48473d/1/TaTWGZrsgo9pieLoTOwXdlusXNU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/2c8482-5331-4e57-9974-40837d48473d/1/TaTWGZrsgo9pieLoTOwXdlusXNU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:22:3d:10:d1:f7:fb:30:ad:7e:96:ea:b3:9f:9f:bb:20:98:
34:c5:a3:8a:96:08:da:cd:cd:9a:6a:ce:7b:52:98:d1:28:8d:
b2:3e:8a:08:ef:d2:c9:43:34:ed:ac:9b:af:bc:29:b1:d1:47:
15:56:e3:ab:ec:70:8d:dc:99:27:28:cb:64:6b:ec:20:8e:36:
9e:d4:51:97:e8:00:30:80:2b:ed:1c:9d:08:6b:61:78:87:52:
a4:e8:bc:fd:2a:67:c7:1f:46:bc:97:68:85:c4:16:f4:58:8c:
33:d0:3d:a4:03:87:75:11:e9:cf:63:ab:1d:5d:09:fb:25:6b:
7a:95:a0:61:ae:56:23:4b:c5:66:38:28:0c:3e:18:35:70:45:
b3:0b:ff:c7:25:20:fe:07:52:de:51:e6:be:fe:c2:c7:a1:31:
a2:95:c3:65:1d:1d:b5:e2:fb:25:df:86:27:68:b5:86:2b:82:
eb:89:71:4b:80:ba:c8:42:17:3f:0e:3d:89:6c:5e:b5:12:1a:
0b:fe:d4:ef:37:18:16:0c:64:d9:25:60:75:9b:19:1e:bf:3c:
fc:1c:75:a3:29:17:4e:98:6a:c3:97:49:4a:e8:b1:f0:aa:92:
a1:df:06:9f:e8:19:01:e1:0f:32:a0:e9:e5:70:fe:da:7d:b8:
ee:70:dd:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 25 23:30:49 2025 by rpki-client