
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/73beeb-6a05-4cca-86be-acfc3d2c2522/1/tsFn36mIKyqo-EWV9YqXwwXKQ8U.mft
File: tsFn36mIKyqo-EWV9YqXwwXKQ8U.mft (raw, json)
Hash identifier: rB6FihEUGWTUgK3PqcpaLW9YTA/08MYRa0mTIvh7lbs=
Subject key identifier: 69:D3:92:C8:F9:41:26:A4:26:CC:5A:68:25:E8:1A:45:AA:88:0B:E2
Authority key identifier: B6:C1:67:DF:A9:88:2B:2A:A8:F8:45:95:F5:8A:97:C3:05:CA:43:C5
Certificate issuer: /CN=b6c167dfa9882b2aa8f84595f58a97c305ca43c5
Certificate serial: 019A1CF524667004ABC6BFDC0BCF61441F7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tsFn36mIKyqo-EWV9YqXwwXKQ8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/73beeb-6a05-4cca-86be-acfc3d2c2522/1/tsFn36mIKyqo-EWV9YqXwwXKQ8U.mft
Manifest number: 16FD
Signing time: Sat 25 Oct 2025 20:00:18 +0000
Manifest this update: Sat 25 Oct 2025 20:00:18 +0000
Manifest next update: Sun 26 Oct 2025 20:00:18 +0000
Files and hashes: 1: 668BLkySdWDDmr5lSsB-YtLZ80Q.roa (hash: wAlTOv+x5XHci96XsqbLWx0e5eMWTNKBMvsGMhRIW5g=)
2: CaGm-a6CxApZqirxxCCZ9rx1aiM.roa (hash: in3Qvj8lVIdQByC2i0yNl5XLhAZsdDWoJ0Q3xc4mK5w=)
3: G7X7b_-2524mL2utRjqA_p3x1ko.roa (hash: eNBADPehKuBiSWTNdfZV2c/hvceCYObCQ47OijZj/IM=)
4: Ha2aIsE24z_1EZsUwFVaBMCEfdM.roa (hash: xkTrIuXJyp+z7TixxHSY5VnwKcm94LBvzrBz6XRQmHA=)
5: U4BB4H7P7Xc6wcR_Q3KuEg8MoBI.roa (hash: QxEX5rbeLCQiv5QJ1QrJpxAQPPcED/CkB9BmO957WyU=)
6: ZGbxcZi9cS52WoJdVb-r0w_TFVk.roa (hash: UaSAvffUeAya0sIHPIbsIDALMTsblptod9P+M2JwLlw=)
7: _JHDbAZ2ATmmU2h8LNTts0pQdRw.roa (hash: ydLyrnNRvtcOwVHilzuoONY7T6CbRsMdyLBgcqYGqyo=)
8: sCoMzCi05UrDFtmTnulnnY6R09o.roa (hash: ZM5RYx3VNWn9QHDFDvEBjHCFQTlKZaYcsLAypuanz3s=)
9: tPcgE7Dec0le1j4-lCiliZGhMhA.roa (hash: rqY7E+ZB4onuPYp0NQezTIDslFC1HqRDysd/HXAkW7Y=)
10: tsFn36mIKyqo-EWV9YqXwwXKQ8U.crl (hash: /ZUxrtY87yK78cZ4SdS337UXctB2K/UEY/ikcOk3xQc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/73beeb-6a05-4cca-86be-acfc3d2c2522/1/tsFn36mIKyqo-EWV9YqXwwXKQ8U.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/73beeb-6a05-4cca-86be-acfc3d2c2522/1/tsFn36mIKyqo-EWV9YqXwwXKQ8U.mft
rsync://rpki.ripe.net/repository/DEFAULT/tsFn36mIKyqo-EWV9YqXwwXKQ8U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 Oct 2025 19:59:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1c:f5:24:66:70:04:ab:c6:bf:dc:0b:cf:61:44:1f:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b6c167dfa9882b2aa8f84595f58a97c305ca43c5
Validity
Not Before: Oct 25 20:00:18 2025 GMT
Not After : Oct 26 20:00:18 2025 GMT
Subject: CN=69d392c8f94126a426cc5a6825e81a45aa880be2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:c7:af:1e:6e:74:07:c1:b2:71:37:85:60:7f:
5d:50:9d:8a:88:21:3f:5d:9b:c8:29:df:23:f4:fa:
4c:ca:41:c3:06:73:62:31:24:ac:35:1d:26:fe:df:
64:3f:dc:52:d7:92:c7:67:eb:84:0b:eb:ea:85:9a:
9a:e0:d6:c8:fd:1b:16:62:7c:85:d1:13:59:d3:fd:
95:c6:d2:44:13:d7:40:f5:5d:b0:e6:94:94:7e:84:
14:d0:c8:fd:18:5f:a1:29:f1:43:35:e6:ea:ce:8a:
e7:40:b9:6a:25:55:fa:6f:38:42:c0:39:11:df:bd:
ad:b1:cc:9b:e3:21:63:98:0c:39:6a:79:9c:f6:57:
07:90:ac:ba:af:63:b7:03:ea:df:cc:bd:e0:77:7a:
c6:7e:de:31:6a:e0:a1:f8:60:1c:c2:a6:63:cb:86:
ae:d4:e0:54:06:20:7a:74:06:1a:4f:de:b9:7b:09:
26:84:af:f7:e5:4d:c2:8a:92:9e:5b:cd:37:53:52:
d6:d0:2a:c8:6a:03:1c:11:6d:3f:2a:45:88:70:8b:
ea:9d:e1:35:90:db:37:6e:60:42:79:9a:16:b3:8c:
a0:11:c7:5e:bd:a1:bf:dd:61:9e:a9:7d:97:5f:bf:
41:47:3a:15:44:ab:34:d2:19:16:87:28:67:fa:72:
90:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:D3:92:C8:F9:41:26:A4:26:CC:5A:68:25:E8:1A:45:AA:88:0B:E2
X509v3 Authority Key Identifier:
keyid:B6:C1:67:DF:A9:88:2B:2A:A8:F8:45:95:F5:8A:97:C3:05:CA:43:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tsFn36mIKyqo-EWV9YqXwwXKQ8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/73beeb-6a05-4cca-86be-acfc3d2c2522/1/tsFn36mIKyqo-EWV9YqXwwXKQ8U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/73beeb-6a05-4cca-86be-acfc3d2c2522/1/tsFn36mIKyqo-EWV9YqXwwXKQ8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:86:0d:eb:53:92:80:a2:12:6c:c4:be:3c:48:78:d4:82:20:
94:76:0f:4d:26:dd:71:a0:cf:c6:c9:a6:ae:91:91:74:9f:9f:
36:6b:23:97:20:3a:92:6a:e7:a2:24:c5:06:a0:e8:b7:26:bb:
1e:f7:23:2f:ea:e8:30:e9:16:8e:08:d5:22:02:57:3b:78:df:
8b:e9:53:39:59:e0:dd:ca:a7:e7:76:93:bc:d1:59:a5:83:d9:
48:44:f8:d6:f9:97:58:73:3e:b8:39:2f:65:7b:3f:19:1d:d5:
ea:78:34:30:a7:f6:3b:49:07:41:0c:6a:f1:cb:3b:4b:f5:dc:
0e:13:d4:42:e6:9b:19:2c:3e:d7:aa:c0:cc:8b:11:02:bd:00:
eb:a7:b7:f0:6a:d1:a5:5f:64:47:0f:36:bd:7b:5d:4e:25:a2:
86:1f:74:a1:3a:d7:fb:24:f5:73:b8:8c:53:f4:80:4e:84:c8:
af:a3:b3:fd:26:88:13:49:d3:bc:5e:b2:96:6d:ff:d5:71:dc:
56:7f:5b:63:a6:7a:21:87:53:b6:78:6c:b3:dc:46:90:30:2e:
b6:50:27:61:48:da:66:46:bc:e9:9d:83:9a:13:1d:8a:59:2e:
47:95:77:7b:e8:24:76:72:63:99:5a:ca:93:96:ec:9e:d1:92:
67:fc:22:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 03:12:22 2025 by rpki-client