Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/6b66b4-064c-42ee-a5ee-1a65b91bee58/1/TDxmXlHMTLXK8FuClIQ-JzOhPe4.mft
File: TDxmXlHMTLXK8FuClIQ-JzOhPe4.mft (raw, json)
Hash identifier: gBbQUUuU6LxOUvxJooYVRiRwB7pKRjug8XLUS9SLzZE=
Subject key identifier: 71:49:66:B8:60:54:6D:2D:0A:1C:F6:A5:AB:79:F3:F7:75:47:48:F8
Authority key identifier: 4C:3C:66:5E:51:CC:4C:B5:CA:F0:5B:82:94:84:3E:27:33:A1:3D:EE
Certificate issuer: /CN=4c3c665e51cc4cb5caf05b8294843e2733a13dee
Certificate serial: 019A1873F29211086E108B1836C84983CE16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TDxmXlHMTLXK8FuClIQ-JzOhPe4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/6b66b4-064c-42ee-a5ee-1a65b91bee58/1/TDxmXlHMTLXK8FuClIQ-JzOhPe4.mft
Manifest number: 0137
Signing time: Fri 24 Oct 2025 23:00:43 +0000
Manifest this update: Fri 24 Oct 2025 23:00:43 +0000
Manifest next update: Sat 25 Oct 2025 23:00:43 +0000
Files and hashes: 1: QQ_XASovNo3q1eWLyoB1-wbVIbw.roa (hash: +nHnAk51WEvv/rAlJaGO2P/ZVC3It8+Q00l0lZIdxpE=)
2: TDxmXlHMTLXK8FuClIQ-JzOhPe4.crl (hash: 8LJd8J1ai9NIZTlr09tqnoXIeG7QX/+GJjNKuv8b/0o=)
3: nD6BDJDA_dWwFQl4pf7gAHlOGhg.roa (hash: 1WAvivFyuRPy1SS+2soFEsbLPwjNLXdysbcvAmnfq4I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/6b66b4-064c-42ee-a5ee-1a65b91bee58/1/TDxmXlHMTLXK8FuClIQ-JzOhPe4.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/6b66b4-064c-42ee-a5ee-1a65b91bee58/1/TDxmXlHMTLXK8FuClIQ-JzOhPe4.mft
rsync://rpki.ripe.net/repository/DEFAULT/TDxmXlHMTLXK8FuClIQ-JzOhPe4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Oct 2025 23:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:18:73:f2:92:11:08:6e:10:8b:18:36:c8:49:83:ce:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c3c665e51cc4cb5caf05b8294843e2733a13dee
Validity
Not Before: Oct 24 23:00:43 2025 GMT
Not After : Oct 25 23:00:43 2025 GMT
Subject: CN=714966b860546d2d0a1cf6a5ab79f3f7754748f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:82:82:7d:c4:43:8c:ff:98:28:72:64:29:0a:
a4:a9:9f:49:e7:7a:18:1f:eb:f8:0c:54:95:bf:bd:
99:dc:ee:08:7d:d6:6b:ec:2c:f9:1e:22:da:5d:89:
7c:d9:f9:b2:f7:24:f3:24:29:ed:6a:4b:f1:12:77:
51:1e:7e:93:1f:e3:32:39:5e:e7:12:23:64:c1:4d:
2c:63:5f:67:e8:73:8a:cf:d7:18:2a:f7:2a:fe:7a:
2a:bd:7f:9e:ac:d8:57:79:ce:c9:b0:71:51:c9:a4:
80:ad:b7:58:21:47:ec:46:f8:88:63:a7:11:06:ce:
72:4f:27:aa:2e:a3:83:d1:35:26:2d:6a:e8:d3:4a:
3f:dc:e6:2a:2a:3d:f3:1e:29:05:3b:1f:96:b2:e1:
67:98:57:fb:a9:92:66:7e:ee:06:cb:3d:6e:cf:74:
3a:48:e0:6c:6a:b1:a8:14:2d:79:1f:94:4a:d7:b8:
5e:7b:49:5c:ae:24:a2:52:fc:96:ac:6b:77:16:37:
df:c5:be:8f:58:74:aa:be:5a:2b:0e:a1:c4:88:aa:
76:24:41:a8:23:1b:eb:b4:f5:95:3e:95:30:89:48:
e1:55:e1:6a:4f:26:2b:45:e3:1e:97:70:84:dd:57:
42:70:26:02:9f:b1:86:b6:08:ac:a5:dd:ee:5e:8b:
d4:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:49:66:B8:60:54:6D:2D:0A:1C:F6:A5:AB:79:F3:F7:75:47:48:F8
X509v3 Authority Key Identifier:
keyid:4C:3C:66:5E:51:CC:4C:B5:CA:F0:5B:82:94:84:3E:27:33:A1:3D:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TDxmXlHMTLXK8FuClIQ-JzOhPe4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/6b66b4-064c-42ee-a5ee-1a65b91bee58/1/TDxmXlHMTLXK8FuClIQ-JzOhPe4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/6b66b4-064c-42ee-a5ee-1a65b91bee58/1/TDxmXlHMTLXK8FuClIQ-JzOhPe4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:85:a8:66:a4:0a:b2:59:61:cf:9a:63:15:2c:41:f6:30:c9:
9e:6c:28:73:96:8b:de:57:8f:70:d9:77:c1:4f:cc:93:6e:30:
65:ec:bf:15:08:7d:ee:7c:89:19:e4:6b:da:9d:d3:74:a0:ec:
b5:55:af:c5:b3:32:00:8f:e0:92:53:59:90:4d:8d:80:a8:90:
a6:0e:d4:d0:aa:c5:d5:3c:42:aa:3f:82:7a:6e:7b:f8:f5:ef:
b1:b6:19:df:f4:14:6e:59:53:98:51:84:2d:40:94:13:71:4c:
0b:3a:c4:47:02:da:4b:aa:4a:ab:c9:4c:a1:49:f7:ad:86:27:
a2:11:35:a3:ae:a5:82:8b:c8:50:db:d5:1a:29:4f:72:1c:ab:
73:12:7f:76:4b:bb:a6:40:b5:58:9b:aa:cf:56:ff:35:26:64:
d1:53:99:2a:f1:3b:81:65:51:f9:22:12:ff:45:d1:75:c6:89:
87:0e:8e:4f:44:72:73:e3:3d:14:9c:75:08:e2:5a:25:8e:1a:
d3:4c:31:94:b7:f0:5b:7c:1e:19:5b:a9:eb:31:6e:af:d3:08:
59:10:bc:25:bd:50:fc:2b:6e:dd:27:b0:b8:17:18:56:3f:c1:
b5:cb:18:a8:f0:2a:cf:4e:b3:1a:57:3a:0d:62:4e:3d:85:c2:
a7:7a:15:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 25 07:07:33 2025 by rpki-client