Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/0f3e0b-26c3-4cf9-8056-29af33bc6b98/1/TKRH97Ondvck2LyBQL4xdmYsJNA.mft
File: TKRH97Ondvck2LyBQL4xdmYsJNA.mft (raw, json)
Hash identifier: vkgRWkSMNIVqtSau2wXp2jJb+zQkvXO6RPP7ux6J2Yo=
Subject key identifier: F9:9D:8B:FC:EB:2A:DC:8A:38:9D:88:CC:1E:D6:65:53:38:F8:27:20
Authority key identifier: 4C:A4:47:F7:B3:A7:76:F7:24:D8:BC:81:40:BE:31:76:66:2C:24:D0
Certificate issuer: /CN=4ca447f7b3a776f724d8bc8140be3176662c24d0
Certificate serial: 019A2553C2119FFE3AAF7A3D582BD20920FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TKRH97Ondvck2LyBQL4xdmYsJNA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/0f3e0b-26c3-4cf9-8056-29af33bc6b98/1/TKRH97Ondvck2LyBQL4xdmYsJNA.mft
Manifest number: 0789
Signing time: Mon 27 Oct 2025 11:00:37 +0000
Manifest this update: Mon 27 Oct 2025 11:00:37 +0000
Manifest next update: Tue 28 Oct 2025 11:00:37 +0000
Files and hashes: 1: TKRH97Ondvck2LyBQL4xdmYsJNA.crl (hash: EketFxCpTFIa3Jyb673qFXiFMq5xFddVZwwU+n0PZZ0=)
2: fIoweheWq1JqzVdLBCrrD-x4kK4.roa (hash: yoQba86aaUs4p2P/E/UoxSeIL5NEm/wDobQOVMT4e5A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/0f3e0b-26c3-4cf9-8056-29af33bc6b98/1/TKRH97Ondvck2LyBQL4xdmYsJNA.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/0f3e0b-26c3-4cf9-8056-29af33bc6b98/1/TKRH97Ondvck2LyBQL4xdmYsJNA.mft
rsync://rpki.ripe.net/repository/DEFAULT/TKRH97Ondvck2LyBQL4xdmYsJNA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 08:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:25:53:c2:11:9f:fe:3a:af:7a:3d:58:2b:d2:09:20:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ca447f7b3a776f724d8bc8140be3176662c24d0
Validity
Not Before: Oct 27 11:00:37 2025 GMT
Not After : Oct 28 11:00:37 2025 GMT
Subject: CN=f99d8bfceb2adc8a389d88cc1ed6655338f82720
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fc:d2:7f:46:c5:99:c0:7a:c9:fc:8d:18:8f:b2:
b8:9a:99:5a:76:e1:b9:c1:51:00:2e:82:65:3f:12:
fc:d2:a1:24:cb:65:97:e1:5b:8c:5b:7e:5c:9f:f9:
42:5f:6f:e5:e5:3d:c6:12:70:15:8b:88:7f:37:80:
fa:7a:99:f3:aa:9d:e5:e7:d7:98:22:4e:c2:2d:23:
40:cd:73:18:49:1f:66:c7:e7:18:b4:fe:79:fb:da:
85:80:fd:8f:51:f8:3f:3d:83:48:5d:76:2b:64:e4:
e8:0d:f8:a6:c5:94:b0:81:09:78:07:ba:da:01:b0:
0e:43:50:e9:65:30:04:50:6b:4a:14:ec:fe:4c:65:
55:c6:55:25:42:7b:d6:77:e4:83:9a:0f:cf:e2:59:
39:83:26:3d:88:5b:11:76:3d:42:63:b5:2f:86:c4:
f7:0a:6a:41:ef:08:f4:47:77:d0:35:3f:e0:73:5a:
2c:3e:76:ac:c9:df:06:e5:76:82:19:0a:09:12:7b:
15:17:7a:0f:1f:e4:1c:29:bf:88:25:f2:d5:49:1e:
20:4e:17:40:48:3e:75:df:8b:0f:b7:87:25:84:d6:
6c:89:76:00:e6:1c:da:a1:96:b3:b3:0a:d6:4b:b4:
d5:c2:35:1b:64:56:5d:18:ca:e1:7b:44:78:78:70:
65:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:9D:8B:FC:EB:2A:DC:8A:38:9D:88:CC:1E:D6:65:53:38:F8:27:20
X509v3 Authority Key Identifier:
keyid:4C:A4:47:F7:B3:A7:76:F7:24:D8:BC:81:40:BE:31:76:66:2C:24:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TKRH97Ondvck2LyBQL4xdmYsJNA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/0f3e0b-26c3-4cf9-8056-29af33bc6b98/1/TKRH97Ondvck2LyBQL4xdmYsJNA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/0f3e0b-26c3-4cf9-8056-29af33bc6b98/1/TKRH97Ondvck2LyBQL4xdmYsJNA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:69:42:0a:42:8c:94:c0:ae:d5:f5:1d:bf:01:0f:08:39:cf:
c4:6b:8e:bc:cf:44:2d:15:86:cd:4e:00:fe:94:28:91:89:11:
a1:1c:d5:d1:56:83:11:40:1f:db:91:21:f7:d2:4c:26:69:c4:
45:ea:77:c8:77:9e:c8:20:82:1d:36:2d:f1:4e:69:0d:1c:12:
18:0a:60:de:de:49:84:5a:2b:3d:dc:89:29:95:a7:3f:07:bd:
a0:0e:05:6b:d8:c7:0b:26:cd:39:02:a5:81:76:20:3c:19:c6:
ab:03:0e:c0:e2:5c:2d:39:85:ff:18:06:c6:6b:d2:8b:76:31:
0e:b8:a1:1e:c5:08:f0:7b:dc:5c:3c:18:81:16:84:a5:52:ef:
26:65:3b:7b:96:a6:12:9f:5a:f4:8d:bd:0b:a2:fe:5c:72:d6:
77:cc:0e:3e:e8:6e:58:9a:6b:36:b1:5f:33:0a:b6:d0:07:ca:
3f:63:fa:6c:3c:db:0d:1a:61:96:3d:a1:fe:73:66:a2:6e:82:
08:d1:61:31:d9:dd:f4:aa:27:7e:0f:db:e6:98:82:da:4b:a5:
a3:1d:85:f8:7a:0a:49:e9:77:ac:08:7e:95:34:c9:ed:a3:b1:
23:83:5c:a8:44:6e:bc:dc:06:0a:f9:d5:ec:43:7a:ca:0b:c9:
3e:86:2f:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 12:27:31 2025 by rpki-client