Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/8e1198-e50f-416f-9d6b-1e9bff5e4021/1/TfCXBITrJrxZ_Y-o1b98PHIS0BE.mft
File: TfCXBITrJrxZ_Y-o1b98PHIS0BE.mft (raw, json)
Hash identifier: Hr9Gp57WcxFyXwRBfSa86aXV/fhgxCiFDYBopTMgECI=
Subject key identifier: B2:8F:F5:C7:1B:D2:D0:AA:51:33:2E:39:72:17:7F:F1:6A:A8:25:C1
Authority key identifier: 4D:F0:97:04:84:EB:26:BC:59:FD:8F:A8:D5:BF:7C:3C:72:12:D0:11
Certificate issuer: /CN=4df0970484eb26bc59fd8fa8d5bf7c3c7212d011
Certificate serial: 019A1AD1217A20FBE2FBB6635AB3CDEF6552
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TfCXBITrJrxZ_Y-o1b98PHIS0BE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/8e1198-e50f-416f-9d6b-1e9bff5e4021/1/TfCXBITrJrxZ_Y-o1b98PHIS0BE.mft
Manifest number: 0C93
Signing time: Sat 25 Oct 2025 10:01:44 +0000
Manifest this update: Sat 25 Oct 2025 10:01:44 +0000
Manifest next update: Sun 26 Oct 2025 10:01:44 +0000
Files and hashes: 1: 2uYjtWwrEGy8RjTZ7XkVPtKNY1o.roa (hash: Q+J34jzVVf5yX7UskA0nUE436owKoCvouyp2C9nIn84=)
2: 8bYh9KTQNyhUoZK5Xa3Zu-_BqQk.roa (hash: Ckdj62IcP39fMv9cL87VgjiYlT1GoMjuC5C5dI+N2jA=)
3: TfCXBITrJrxZ_Y-o1b98PHIS0BE.crl (hash: 7CSVvIlDeiJByijWiO/fl/lMX5hsFfGBIvcGiyv3By0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/8e1198-e50f-416f-9d6b-1e9bff5e4021/1/TfCXBITrJrxZ_Y-o1b98PHIS0BE.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/8e1198-e50f-416f-9d6b-1e9bff5e4021/1/TfCXBITrJrxZ_Y-o1b98PHIS0BE.mft
rsync://rpki.ripe.net/repository/DEFAULT/TfCXBITrJrxZ_Y-o1b98PHIS0BE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 Oct 2025 08:33:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1a:d1:21:7a:20:fb:e2:fb:b6:63:5a:b3:cd:ef:65:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4df0970484eb26bc59fd8fa8d5bf7c3c7212d011
Validity
Not Before: Oct 25 10:01:44 2025 GMT
Not After : Oct 26 10:01:44 2025 GMT
Subject: CN=b28ff5c71bd2d0aa51332e3972177ff16aa825c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:99:23:c8:cd:88:ec:6b:eb:fa:0a:e8:a4:d5:
07:83:97:41:6f:f2:2f:ae:26:bd:c2:97:c7:9e:1d:
37:20:d2:38:26:50:f1:de:d4:0d:ca:9b:93:b2:f2:
1f:59:a1:63:68:c5:f9:20:dc:1e:3d:97:65:f0:3e:
70:a7:02:4d:41:f8:9b:0b:1a:b7:5a:6f:d4:9c:53:
ad:51:78:49:27:ee:9e:68:ec:9d:bd:5e:1a:9d:49:
4b:e4:05:cc:0e:07:fb:9c:91:e3:5d:5e:65:b4:35:
b4:c3:7b:02:6c:e8:3c:9b:b5:0e:73:85:c6:86:05:
cf:bf:bf:69:c5:a8:fe:c2:ed:76:19:e5:e4:ed:2f:
75:7f:63:39:88:c3:15:34:cc:f5:ff:83:2e:71:85:
e5:89:7c:83:81:05:67:d5:dd:00:34:ed:72:4d:4b:
2b:0c:d3:77:28:12:e6:79:1a:a2:43:b3:46:a0:88:
1e:ee:e0:45:2b:ce:b4:d5:03:fa:5a:6a:c2:4a:c9:
b1:e2:0e:8d:32:19:37:0d:d3:f2:40:15:ca:7c:7e:
b7:1a:ba:52:40:e4:42:c0:db:a1:2b:1c:60:b6:da:
9e:a4:eb:30:86:33:d9:5a:06:77:27:f4:78:c4:04:
65:76:c4:a3:84:4e:e7:d6:c9:7b:15:b7:34:cd:7a:
3c:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:8F:F5:C7:1B:D2:D0:AA:51:33:2E:39:72:17:7F:F1:6A:A8:25:C1
X509v3 Authority Key Identifier:
keyid:4D:F0:97:04:84:EB:26:BC:59:FD:8F:A8:D5:BF:7C:3C:72:12:D0:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TfCXBITrJrxZ_Y-o1b98PHIS0BE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/8e1198-e50f-416f-9d6b-1e9bff5e4021/1/TfCXBITrJrxZ_Y-o1b98PHIS0BE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/8e1198-e50f-416f-9d6b-1e9bff5e4021/1/TfCXBITrJrxZ_Y-o1b98PHIS0BE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:10:9f:7f:f1:2d:14:6d:3c:fd:8c:05:5f:67:40:42:e6:00:
e9:47:c7:21:fa:0d:d0:78:c3:40:11:fa:d4:b8:a0:f2:30:ad:
f3:f7:2a:8b:eb:a6:e9:c8:0e:96:c8:63:bb:26:81:74:ee:db:
b8:c1:65:70:64:5c:7a:2d:ab:98:32:34:69:5d:a7:89:52:ec:
d4:e2:47:5e:be:31:a1:5e:f3:f2:1d:ef:c0:cd:a7:b5:2f:f7:
12:16:60:3f:9e:e5:6a:5c:fc:b5:16:9d:f5:27:d9:a7:b1:02:
b2:7e:a4:3f:7f:90:b2:4c:0c:90:d7:c7:4d:3a:f1:4f:37:0c:
d0:1a:a3:fe:97:87:04:91:9c:d3:28:3b:dd:59:c9:8d:eb:35:
32:65:b8:78:6d:6c:5c:94:7e:2d:45:bf:c5:79:65:15:0b:10:
14:51:bd:4c:6a:dd:66:56:5a:b7:03:25:19:e1:ff:6a:8d:73:
93:f2:89:6e:4a:c5:83:ab:a6:75:2e:0a:6c:15:4a:4d:49:35:
98:4c:13:9d:e5:b0:39:47:e5:1c:8d:1d:a1:d7:da:8a:dc:af:
f0:18:ed:c4:15:24:69:ec:b6:db:96:35:2d:6c:a5:fb:52:aa:
4e:4a:61:09:9f:80:4c:7a:4c:97:91:0f:1f:56:9a:b1:c0:58:
d5:5c:02:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 25 12:26:41 2025 by rpki-client