Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/cb3e6b-a444-49dd-9f64-17c12273c54a/1/TgoZ1Iw1R8Ktufjv_erGrZ5PnRk.mft
File: TgoZ1Iw1R8Ktufjv_erGrZ5PnRk.mft (raw, json)
Hash identifier: AyDVIJFUDxyhTTUheiyy92h9SOEMN4YPdWkP9iC0AX8=
Subject key identifier: EE:B6:81:57:BA:37:45:CD:5F:B2:8A:45:89:03:74:09:50:AC:0A:5F
Authority key identifier: 4E:0A:19:D4:8C:35:47:C2:AD:B9:F8:EF:FD:EA:C6:AD:9E:4F:9D:19
Certificate issuer: /CN=4e0a19d48c3547c2adb9f8effdeac6ad9e4f9d19
Certificate serial: 019A15062D40A60EE527D2BCDF57D0D66324
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TgoZ1Iw1R8Ktufjv_erGrZ5PnRk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/cb3e6b-a444-49dd-9f64-17c12273c54a/1/TgoZ1Iw1R8Ktufjv_erGrZ5PnRk.mft
Manifest number: 0D7C
Signing time: Fri 24 Oct 2025 07:01:57 +0000
Manifest this update: Fri 24 Oct 2025 07:01:57 +0000
Manifest next update: Sat 25 Oct 2025 07:01:57 +0000
Files and hashes: 1: E7on5Vfvg98I2xAlaMeiutbcdZQ.roa (hash: 52cCubbGQVWlaOLXukS3Zd4+5KnclvBfBahudlSwT/s=)
2: TgoZ1Iw1R8Ktufjv_erGrZ5PnRk.crl (hash: Cg0/uR55Q4uoA9cILH9OOxrTJOlXGiTWobyryutuT5M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/cb3e6b-a444-49dd-9f64-17c12273c54a/1/TgoZ1Iw1R8Ktufjv_erGrZ5PnRk.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/cb3e6b-a444-49dd-9f64-17c12273c54a/1/TgoZ1Iw1R8Ktufjv_erGrZ5PnRk.mft
rsync://rpki.ripe.net/repository/DEFAULT/TgoZ1Iw1R8Ktufjv_erGrZ5PnRk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Oct 2025 07:01:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:15:06:2d:40:a6:0e:e5:27:d2:bc:df:57:d0:d6:63:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e0a19d48c3547c2adb9f8effdeac6ad9e4f9d19
Validity
Not Before: Oct 24 07:01:57 2025 GMT
Not After : Oct 25 07:01:57 2025 GMT
Subject: CN=eeb68157ba3745cd5fb28a458903740950ac0a5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:eb:fe:52:e4:d6:a8:a7:0f:e3:b3:4a:b0:7c:
1b:0d:86:76:17:da:ad:2a:1d:22:07:59:68:52:87:
43:d9:91:5d:44:2b:4b:1d:b6:60:0d:a0:a1:98:34:
07:97:36:f9:fc:f4:06:83:d9:cd:06:1f:81:37:a4:
2d:e7:e0:24:5d:d3:d7:3a:33:25:ca:94:24:35:25:
9c:70:a8:f5:34:fc:01:44:a5:bb:ca:81:3d:57:fc:
c1:60:60:37:9d:e4:3e:2b:2e:b4:28:a1:6c:0d:a0:
88:1b:47:b4:89:28:39:fb:32:5f:c9:40:6f:e8:eb:
51:12:38:39:08:8b:ed:d6:c5:0f:05:55:47:d1:40:
4b:33:2b:06:73:ac:0c:c0:3f:5a:5e:ba:dc:4a:8a:
d4:3c:26:56:a8:51:e6:a4:5f:0e:fb:8d:39:08:b1:
9f:11:43:c6:56:83:21:38:2a:04:7e:08:48:38:e6:
14:6f:8d:e0:e5:bd:d6:14:2c:91:63:bc:29:2a:a7:
7b:fb:22:c9:59:4f:97:19:27:6c:33:c1:a7:bf:47:
ef:b1:d0:74:41:39:5b:64:ae:38:3b:63:19:3a:cb:
bb:7d:9b:72:a0:c7:f5:7c:6a:9a:e3:b1:82:83:44:
61:2d:ec:f1:72:e3:e8:c5:f8:0a:d7:83:41:76:fb:
2f:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:B6:81:57:BA:37:45:CD:5F:B2:8A:45:89:03:74:09:50:AC:0A:5F
X509v3 Authority Key Identifier:
keyid:4E:0A:19:D4:8C:35:47:C2:AD:B9:F8:EF:FD:EA:C6:AD:9E:4F:9D:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TgoZ1Iw1R8Ktufjv_erGrZ5PnRk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/cb3e6b-a444-49dd-9f64-17c12273c54a/1/TgoZ1Iw1R8Ktufjv_erGrZ5PnRk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/cb3e6b-a444-49dd-9f64-17c12273c54a/1/TgoZ1Iw1R8Ktufjv_erGrZ5PnRk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:b2:d6:89:61:53:f2:f8:36:1f:59:d1:e9:ee:25:ab:c8:fa:
88:d5:62:a8:df:6e:85:74:24:21:c0:d4:13:c2:38:b6:4b:1c:
ce:76:ef:38:db:52:8e:14:6b:22:93:d6:f2:60:03:bc:8b:d3:
62:99:92:41:9f:c0:40:3a:52:31:90:13:89:57:85:a9:4d:fa:
2c:26:7d:63:cc:ae:81:0b:db:62:05:6d:b4:5e:08:e2:c1:18:
cc:56:8b:61:b7:cd:aa:04:2f:b8:a3:7b:ed:00:74:b8:6b:ad:
f1:3f:cf:31:06:cc:9a:83:ba:b3:36:72:2f:b8:8f:71:b7:1c:
43:11:24:62:85:24:37:6f:d2:30:c6:1d:46:09:d4:62:65:1c:
4b:26:6b:f3:bf:7d:5f:9d:ec:03:be:f8:42:3d:d5:19:14:61:
33:79:c3:a6:33:36:72:1b:f6:a4:02:ff:e7:cb:95:09:71:c1:
ce:99:1d:57:a0:78:d1:3f:a6:89:c1:95:f9:b0:32:3f:de:56:
d1:87:14:41:a2:78:3e:71:86:89:f5:37:6c:c4:46:72:4f:91:
c3:be:e5:d4:a0:47:bf:9d:ed:14:a3:c9:44:5c:c0:35:ed:8e:
75:c6:2a:bd:eb:12:3c:cc:d8:c5:d5:ae:9d:e8:84:8f:37:9d:
36:0b:82:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 24 12:16:30 2025 by rpki-client