Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/786b51-e2df-4fd6-9c9b-f567c3e9f5ff/1/TsOgYsuW2aPyGostqEj4HG9zv5U.mft
File: TsOgYsuW2aPyGostqEj4HG9zv5U.mft (raw, json)
Hash identifier: vcGPpDxOqkkDKqOislMqE3LJeV/jX/kumszSebgZWU4=
Subject key identifier: 87:4C:B7:93:3E:BE:7F:4B:1F:10:1F:DE:01:1F:89:06:9F:B5:F7:8D
Authority key identifier: 4E:C3:A0:62:CB:96:D9:A3:F2:1A:8B:2D:A8:48:F8:1C:6F:73:BF:95
Certificate issuer: /CN=4ec3a062cb96d9a3f21a8b2da848f81c6f73bf95
Certificate serial: 019A0523A40218AE07F3E61C1BBDFE66EDFC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TsOgYsuW2aPyGostqEj4HG9zv5U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/786b51-e2df-4fd6-9c9b-f567c3e9f5ff/1/TsOgYsuW2aPyGostqEj4HG9zv5U.mft
Manifest number: 1682
Signing time: Tue 21 Oct 2025 05:00:13 +0000
Manifest this update: Tue 21 Oct 2025 05:00:13 +0000
Manifest next update: Wed 22 Oct 2025 05:00:13 +0000
Files and hashes: 1: TsOgYsuW2aPyGostqEj4HG9zv5U.crl (hash: A8lSnZc/76v8iCN45/3D+3zO9y+giDAMFrzEElulqE4=)
2: Zo-iXOH7eoz1wcNDU4gFPp4lbTo.roa (hash: lEXdntgkazPfcD7Ym6WQrguJ42W+/3phyup2XOjaUaA=)
3: w0BgVrxvQVnjW2X3qjBQ3ko9xOc.roa (hash: Ucfa4JRcD7zc33DVXeSZa1Nus1iwZHoQ8xtQZD2xfUQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/786b51-e2df-4fd6-9c9b-f567c3e9f5ff/1/TsOgYsuW2aPyGostqEj4HG9zv5U.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/786b51-e2df-4fd6-9c9b-f567c3e9f5ff/1/TsOgYsuW2aPyGostqEj4HG9zv5U.mft
rsync://rpki.ripe.net/repository/DEFAULT/TsOgYsuW2aPyGostqEj4HG9zv5U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 22:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:05:23:a4:02:18:ae:07:f3:e6:1c:1b:bd:fe:66:ed:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ec3a062cb96d9a3f21a8b2da848f81c6f73bf95
Validity
Not Before: Oct 21 05:00:13 2025 GMT
Not After : Oct 22 05:00:13 2025 GMT
Subject: CN=874cb7933ebe7f4b1f101fde011f89069fb5f78d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:c4:7e:80:95:d4:a1:b2:4e:c3:b6:20:8b:e7:
36:dc:3a:fc:1c:6a:41:48:2f:99:af:a6:c6:c7:79:
20:ff:41:61:3f:62:e8:91:61:f3:78:e4:f6:f9:0c:
ce:83:65:1a:12:cf:a9:d2:17:69:30:41:c3:6e:01:
69:ee:69:cb:46:47:e6:97:f9:71:52:70:05:9c:1f:
3a:8e:18:9a:c5:ac:d0:a0:94:40:cb:23:11:53:1d:
1a:3e:7e:89:b1:ca:e7:db:c8:2b:c0:43:d0:8f:1e:
ef:57:be:ed:23:11:82:6a:a7:80:18:e8:f7:2e:b7:
20:13:d8:36:8c:68:71:6d:52:cc:ab:9a:a6:4d:40:
59:8d:ad:26:e4:28:5e:8d:f9:8e:2c:b0:7c:b5:e0:
67:21:a3:3b:7b:d4:2e:a9:a1:f1:33:f7:be:7d:2f:
74:29:3e:db:1b:a6:2b:31:d4:38:a8:9f:14:8d:46:
67:ae:92:d7:d0:e1:c4:ef:ee:60:e2:8b:47:33:0b:
ff:54:68:2a:5e:cd:05:2c:ea:31:6c:df:14:fd:f0:
58:b9:18:f3:79:bc:61:9e:44:9e:00:d0:72:4e:4f:
f3:01:1c:f2:1a:a9:87:16:22:cd:6a:ea:52:fc:32:
4f:f3:ce:22:20:dd:a1:65:09:6c:cb:d7:0b:4f:e7:
d6:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:4C:B7:93:3E:BE:7F:4B:1F:10:1F:DE:01:1F:89:06:9F:B5:F7:8D
X509v3 Authority Key Identifier:
keyid:4E:C3:A0:62:CB:96:D9:A3:F2:1A:8B:2D:A8:48:F8:1C:6F:73:BF:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TsOgYsuW2aPyGostqEj4HG9zv5U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/786b51-e2df-4fd6-9c9b-f567c3e9f5ff/1/TsOgYsuW2aPyGostqEj4HG9zv5U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/786b51-e2df-4fd6-9c9b-f567c3e9f5ff/1/TsOgYsuW2aPyGostqEj4HG9zv5U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:2b:1f:d3:f5:0c:a8:02:aa:57:6e:6a:95:22:ea:a2:fe:ee:
7d:10:46:5a:c8:36:02:68:97:1a:79:5b:a5:5b:73:a0:ca:b2:
2a:c6:70:62:25:16:5a:d9:72:ce:e5:e4:b4:b9:80:a7:10:6e:
66:db:14:4f:12:78:2c:7f:a8:1a:10:8c:90:62:42:b6:09:6c:
3b:57:64:c2:a7:8c:7f:13:7b:3b:6e:30:c6:ba:a0:71:0b:ba:
a2:0c:20:90:49:a4:9e:29:23:76:d5:b9:af:88:40:af:47:b4:
74:1b:24:5f:1c:b0:1c:d6:de:0e:2e:fe:51:71:a4:7a:b0:86:
a2:6a:8c:12:06:c3:cf:51:45:6e:ed:63:3a:8d:2c:ff:bc:ad:
9c:ff:e3:ea:c6:9d:1a:0b:1a:5c:48:61:41:e1:4c:ab:a9:94:
49:e3:ae:88:50:35:9e:f5:75:14:16:f2:e6:ba:a4:4d:0c:09:
81:e5:ee:51:12:a6:3d:57:a5:e4:3f:33:dd:32:a0:2c:15:d8:
e8:9b:d3:f8:7a:60:93:02:65:21:3e:dd:98:a0:22:ad:0f:23:
bf:15:53:36:63:d0:bc:46:69:41:fe:73:8d:28:be:52:b5:e3:
cc:d9:fc:c9:55:e4:1e:a5:b1:40:af:0a:cf:33:29:e1:3c:0b:
b6:d8:9a:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 07:48:12 2025 by rpki-client