Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/4448a7-1ac1-46ad-a727-d96393af2f20/1/TGtjcblFo16d8wj_Q4A-JheFEGk.mft
File: TGtjcblFo16d8wj_Q4A-JheFEGk.mft (raw, json)
Hash identifier: R1LlbDZZSgWLm2iEW8V2QZc4CtMNNwY43w/Kgf1ovhc=
Subject key identifier: 41:DA:C4:D0:1B:A3:B7:59:2D:50:A5:9B:FF:7F:E6:8E:5F:6F:56:0F
Authority key identifier: 4C:6B:63:71:B9:45:A3:5E:9D:F3:08:FF:43:80:3E:26:17:85:10:69
Certificate issuer: /CN=4c6b6371b945a35e9df308ff43803e2617851069
Certificate serial: 019A251CAE6BFB23C38492F9768009F73D67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TGtjcblFo16d8wj_Q4A-JheFEGk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/4448a7-1ac1-46ad-a727-d96393af2f20/1/TGtjcblFo16d8wj_Q4A-JheFEGk.mft
Manifest number: 11AD
Signing time: Mon 27 Oct 2025 10:00:27 +0000
Manifest this update: Mon 27 Oct 2025 10:00:27 +0000
Manifest next update: Tue 28 Oct 2025 10:00:27 +0000
Files and hashes: 1: NETt5LyS--lV9_ycDBmp9TmpxP4.roa (hash: rz60bepxWIT7kbaafyZ48rHU8Vmg6Vvtzt7Ebp5hgDU=)
2: TGtjcblFo16d8wj_Q4A-JheFEGk.crl (hash: QQpwEhaf7do0Rx6nmCWAZIeK1+BvvG9mLKd/YMZgrkY=)
3: YU0ymXaczDxniPQtB_xa4RTEU2Q.roa (hash: +3YrNwFP0+tuTgevzTw2FGRwOLOaLfupz3GSxL5OXLE=)
4: e99v7pEfrFm4Dg1SnIaNO39I8Ws.roa (hash: GWy1k4OaIi0pC/Ap0hgLnIy0Gp664zirmOTGWdfBTaE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/4448a7-1ac1-46ad-a727-d96393af2f20/1/TGtjcblFo16d8wj_Q4A-JheFEGk.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/4448a7-1ac1-46ad-a727-d96393af2f20/1/TGtjcblFo16d8wj_Q4A-JheFEGk.mft
rsync://rpki.ripe.net/repository/DEFAULT/TGtjcblFo16d8wj_Q4A-JheFEGk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 10:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:25:1c:ae:6b:fb:23:c3:84:92:f9:76:80:09:f7:3d:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c6b6371b945a35e9df308ff43803e2617851069
Validity
Not Before: Oct 27 10:00:27 2025 GMT
Not After : Oct 28 10:00:27 2025 GMT
Subject: CN=41dac4d01ba3b7592d50a59bff7fe68e5f6f560f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:95:3d:25:3c:61:cb:77:37:5c:6d:ff:de:a6:
d7:de:36:e2:a2:4b:46:89:d1:92:70:b0:8a:e8:90:
9b:cd:ba:83:73:23:40:3f:f2:b2:76:5a:a3:c5:39:
42:4a:e4:37:94:05:66:2b:d0:5a:25:26:d9:2c:95:
13:07:85:c5:bc:53:ce:8e:5f:d7:4f:fb:6b:80:72:
09:18:2d:03:b7:15:79:f9:9d:56:e2:ac:ed:21:84:
f3:af:83:d7:a8:f4:10:40:21:71:54:ad:24:85:8d:
74:2e:b3:49:f8:3b:74:bf:c7:3c:2c:74:8a:26:07:
bd:60:00:be:f1:e9:84:9b:a7:58:a8:9d:e1:cb:4a:
74:5e:d4:82:52:bb:61:ca:01:46:84:72:32:42:eb:
38:70:b3:25:08:ea:ab:fd:e2:8f:85:ea:0a:4d:db:
f9:95:47:2d:7a:09:37:8b:ba:70:9d:fc:02:64:56:
dd:ec:02:a5:17:e7:b6:3c:35:02:58:7f:74:e4:24:
30:69:96:ef:41:5b:8b:81:ee:9c:c0:9e:3f:d7:4c:
a4:9b:0e:58:10:d2:1c:59:23:df:46:b4:00:cf:f4:
71:79:ed:e5:72:82:70:82:46:3b:a7:3c:da:8c:f6:
71:f0:82:22:d2:35:13:9e:0e:8e:9c:1f:f7:b3:19:
c6:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:DA:C4:D0:1B:A3:B7:59:2D:50:A5:9B:FF:7F:E6:8E:5F:6F:56:0F
X509v3 Authority Key Identifier:
keyid:4C:6B:63:71:B9:45:A3:5E:9D:F3:08:FF:43:80:3E:26:17:85:10:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TGtjcblFo16d8wj_Q4A-JheFEGk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/4448a7-1ac1-46ad-a727-d96393af2f20/1/TGtjcblFo16d8wj_Q4A-JheFEGk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/4448a7-1ac1-46ad-a727-d96393af2f20/1/TGtjcblFo16d8wj_Q4A-JheFEGk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:6d:18:24:f1:5e:d2:eb:b0:85:b3:01:8e:2f:dc:a8:65:90:
97:bc:52:11:84:95:79:dd:4c:ee:84:47:31:19:c5:5f:d2:8f:
c0:73:f5:fd:de:de:7e:f4:1b:ba:d0:de:62:9f:b7:e7:7f:e8:
2f:40:06:23:fb:11:11:bf:2c:91:c5:97:04:e4:5a:32:58:cb:
51:65:4a:b6:64:18:bd:9e:e4:20:2a:ab:47:3b:31:4c:bf:c5:
f1:1f:ca:e9:41:88:0f:e0:ea:a9:a8:ec:ab:4c:e0:ae:17:33:
10:6b:cd:5b:43:6b:d8:8e:0c:36:89:bb:72:b5:63:94:25:b9:
11:1e:65:0f:8e:b9:a7:7b:7f:00:ba:43:1f:c9:61:29:18:5b:
b2:15:c3:af:c7:d6:2c:65:15:9e:b6:1f:4c:d5:3a:ac:43:d4:
db:ea:04:dc:33:c1:2f:40:1c:02:b3:2c:46:e9:13:9e:b2:34:
a8:f1:eb:bf:bd:7f:39:da:89:2b:87:5d:77:78:9c:7d:37:63:
17:55:29:74:83:ae:34:40:95:25:c9:f0:97:06:ce:30:66:f0:
30:f2:ac:29:6d:95:4d:30:6e:fe:fc:c2:15:e2:7a:84:1f:a5:
6f:70:d3:43:a0:85:aa:f8:61:86:06:6e:0c:b4:3d:81:5d:d4:
0c:d2:07:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 18:21:27 2025 by rpki-client