Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/1d0c39-2555-468f-be66-ff9bab90af18/1/tmxJhc1gZDIg4GSi4RTXj1sDnCs.mft
File: tmxJhc1gZDIg4GSi4RTXj1sDnCs.mft (raw, json)
Hash identifier: 7FP8vCYDlXmmleyqn5dQYXajVEGiJP5DIJoZ9VRSdOM=
Subject key identifier: 69:DD:E9:D5:C5:EF:A0:DB:F3:52:BF:80:FD:83:EC:6C:1D:CE:32:5E
Authority key identifier: B6:6C:49:85:CD:60:64:32:20:E0:64:A2:E1:14:D7:8F:5B:03:9C:2B
Certificate issuer: /CN=b66c4985cd60643220e064a2e114d78f5b039c2b
Certificate serial: 019A1EACC7DF5C0A66E1A16C5BE6EBE6C0A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tmxJhc1gZDIg4GSi4RTXj1sDnCs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/1d0c39-2555-468f-be66-ff9bab90af18/1/tmxJhc1gZDIg4GSi4RTXj1sDnCs.mft
Manifest number: 0941
Signing time: Sun 26 Oct 2025 04:00:31 +0000
Manifest this update: Sun 26 Oct 2025 04:00:31 +0000
Manifest next update: Mon 27 Oct 2025 04:00:31 +0000
Files and hashes: 1: tmxJhc1gZDIg4GSi4RTXj1sDnCs.crl (hash: KMb+h+OIwqIHF3cZNKPibW7rD6Lgj+dRr7xZP1q2+y8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/1d0c39-2555-468f-be66-ff9bab90af18/1/tmxJhc1gZDIg4GSi4RTXj1sDnCs.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/1d0c39-2555-468f-be66-ff9bab90af18/1/tmxJhc1gZDIg4GSi4RTXj1sDnCs.mft
rsync://rpki.ripe.net/repository/DEFAULT/tmxJhc1gZDIg4GSi4RTXj1sDnCs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 03:42:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1e:ac:c7:df:5c:0a:66:e1:a1:6c:5b:e6:eb:e6:c0:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b66c4985cd60643220e064a2e114d78f5b039c2b
Validity
Not Before: Oct 26 04:00:31 2025 GMT
Not After : Oct 27 04:00:31 2025 GMT
Subject: CN=69dde9d5c5efa0dbf352bf80fd83ec6c1dce325e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:fc:dd:10:6f:e6:b3:d8:c1:1a:64:26:90:9c:
b3:83:4d:7a:46:f5:dd:0e:72:c3:cd:58:c7:53:c6:
3a:6a:bc:f3:95:04:01:ce:bc:a4:2c:21:f8:af:96:
b5:53:a8:34:38:37:34:be:18:08:0a:df:7c:63:56:
f9:05:80:6a:13:60:50:62:40:d8:ea:87:55:41:48:
0f:18:47:02:d1:06:3d:1d:8b:66:aa:78:f6:b9:12:
e1:ff:1e:89:9a:03:5d:58:6b:2c:86:c8:66:6d:5b:
0f:e1:43:4f:31:cc:33:c1:31:9c:5f:34:a8:0e:b6:
7f:2e:1e:e9:3a:d3:06:6a:04:06:60:4d:0a:e0:b9:
66:77:84:6f:31:1b:09:38:8e:31:bc:19:3d:fd:64:
87:4f:fe:19:26:a9:c2:e4:39:23:b2:6a:55:e4:4f:
83:ff:14:92:f3:a0:44:66:b9:01:ff:88:b5:60:4c:
61:d0:e1:c0:87:1e:a1:89:51:30:0e:ea:09:d5:e0:
59:d7:73:a0:56:92:55:b8:2d:43:af:c6:52:79:29:
47:ea:e0:57:24:63:a4:1b:36:40:ab:e4:c0:d6:42:
20:7f:28:79:25:94:93:5e:87:ba:99:38:1b:1e:1f:
78:e6:10:70:5a:f9:d1:07:2e:f0:ca:b3:9c:e3:6c:
cd:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:DD:E9:D5:C5:EF:A0:DB:F3:52:BF:80:FD:83:EC:6C:1D:CE:32:5E
X509v3 Authority Key Identifier:
keyid:B6:6C:49:85:CD:60:64:32:20:E0:64:A2:E1:14:D7:8F:5B:03:9C:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tmxJhc1gZDIg4GSi4RTXj1sDnCs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/1d0c39-2555-468f-be66-ff9bab90af18/1/tmxJhc1gZDIg4GSi4RTXj1sDnCs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/1d0c39-2555-468f-be66-ff9bab90af18/1/tmxJhc1gZDIg4GSi4RTXj1sDnCs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:88:1e:56:9e:e5:8e:6c:4d:76:33:b1:ea:4a:4c:f6:f1:dd:
11:09:02:a9:1b:17:65:93:c4:d1:7c:3b:1e:60:f4:53:30:b8:
0b:40:37:87:03:90:2d:64:42:60:7e:30:a6:ed:71:5a:db:ed:
b0:ab:4c:bb:f8:7d:b8:59:06:ee:19:09:4e:dd:f3:08:9d:cd:
bc:e2:f8:e1:d4:e0:7d:1f:6d:c7:fa:ce:79:3e:ed:8c:0d:83:
c1:23:86:fd:7e:08:02:a5:91:7b:c0:87:38:5b:0d:db:27:d3:
27:df:ed:7d:ea:fa:74:d8:a4:84:4b:3b:b2:87:47:96:b9:bc:
65:51:c5:c7:43:5a:20:8c:c1:e1:fb:84:1d:cf:28:e9:b5:57:
6a:23:f2:da:90:af:9d:bb:ba:17:31:90:c1:4b:15:54:0c:11:
cf:ee:bf:7d:33:24:d0:90:3b:d0:02:12:f4:25:6b:40:c1:63:
11:0a:84:c5:de:f0:6e:a2:6e:a3:43:c2:2d:f6:62:21:d9:44:
01:4e:1b:8b:52:a0:2b:81:1f:6b:4e:84:4a:57:59:66:47:71:
a9:9c:a7:ff:b7:fb:ef:d3:71:41:a8:f8:47:68:b4:2c:ad:4f:
fe:e8:bd:d5:7f:7a:3f:d1:18:d0:fd:14:c6:6d:3d:ea:e7:3f:
22:a2:82:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 11:13:49 2025 by rpki-client